I clicked. What do I do now?
Answer a few questions and get the steps in order, the ones that match what you actually typed in, not a generic list.
Everything runs in your browser. Nothing is sent, nothing is stored, nothing is logged.
I only clicked
You opened a suspicious link without entering a login or approving anything. The risk is lower, but a few moves are worth making as a precaution.
- 1Send nothing more and close the page
Do not go any further in the form and do not send back any "confirmation" code received by SMS. Close the fake site's tab.
- 2Have the device scanned at the slightest doubt
If you downloaded an attachment or installed something, run an up-to-date antivirus scan; if doubt persists, get help.
- 3Watch your accounts and statements
The data collected is often resold and reused later. Stay vigilant for several weeks and turn on login and payment alerts wherever they exist.
- 4Report the fraudulent message and site
Email: Signal Spam. Text: forward it to 33700. Fraudulent site: Pharos (internet-signalement.gouv.fr). For support: cybermalveillance.gouv.fr and the 17Cyber service.
Get your anti-phishing plan by email
Keep the steps handy. One-time send, no strings attached.