Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteStop interacting with the page, do not enter anything else, and work out what was exposed. Clicking a link by itself does not prove that your phone or computer is infected. Your response depends on whether you submitted a password, payment or identity information, downloaded or ran anything, or now see unusual device behavior.
Use the steps below in order. Open legitimate services from a bookmark, their official app, or an address you type yourself—not from the suspicious message or page.
As an Amazon Associate I earn from qualifying purchases.
What to do in the first 10 minutes
- Stop using the suspicious page. Close the tab or app. Do not type a password, payment number, one-time code, recovery code, or other personal information. Do not install an app, browser extension, “security tool,” or remote-access program offered by the page. Ignore phone numbers displayed in a pop-up or message.
- Do not call the sender. A scammer may pose as support and use the call to obtain codes, payment, or remote access. Contact the real organization later through a trusted route.
- Preserve the evidence. Save the original email or text if possible. Record the sender, complete URL, date and time, what you clicked, and every field you entered. Microsoft recommends documenting attack details while they are fresh; this record helps your bank, employer, or investigators.
- Decide what was exposed. The urgent actions differ for an accidental click, a submitted password, financial details, identity information, or a downloaded file. Use the table below rather than guessing.
- Use a known-good device if necessary. If the affected device is behaving strangely or you suspect malware, perform account changes from a different trusted device while the original is disconnected and assessed.
- Tell the right organization. Your bank handles card and account exposure, IdentityTheft.gov handles identity-theft recovery, and your employer’s security team handles a work device or account.
Match the response to what happened
| What happened | What it means | Do this now |
|---|---|---|
| You opened the link but entered nothing, downloaded nothing, and see no symptoms | Exposure is uncertain; a click alone does not establish infection. | Close the page, record the evidence, update legitimate security software, and run a scan if the link was unexpected. |
| You entered a username, password, or one-time code | Assume the credentials or code were exposed. | Open the real service independently, change the password to a unique one, sign out other sessions where available, and enable multifactor authentication. |
| You entered a card number, bank login, or payment details | Someone may attempt unauthorized charges or account access. | Call the issuer or bank using the number on your card or statement. Ask whether to block or replace the card and monitor activity. |
| You entered a Social Security number or other identity data | Your identity information may be used for fraud. | Report it at IdentityTheft.gov and follow its recovery plan. |
| A file downloaded, an extension installed, or a program ran | The device could contain unwanted or malicious software. | Disconnect a networked computer, update legitimate security software, run a full scan, remove what it identifies, and obtain trusted technical help. |
| The device is owned or managed by an employer | Corporate accounts and other users may be at risk. | Disconnect only as your workplace procedure permits, then contact your IT or security team immediately. Do not hide the incident or keep testing the link. |
If you entered a password or one-time code
Treat a password entered into a suspicious page as exposed even if nothing unusual has happened yet. A polished page can capture the value immediately, and a one-time code can be useful to an attacker during the short period in which it is valid.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11- On a trusted device, open the service through a bookmark, its official mobile application, or an address you type manually. Never use the link you received.
- Change the password. Make it unique to that service; do not reuse a password from email, banking, shopping, or work.
- Use the service’s account or security page to sign out other sessions, revoke unfamiliar devices, and remove unknown recovery email addresses or phone numbers.
- Turn on multifactor authentication. An authenticator app or a hardware security key provides a second factor; the Federal Trade Commission describes a security key as a possession factor in MFA.
- If you reused the exposed password anywhere else, change those accounts too, beginning with your primary email account. An attacker who controls email can often reset other accounts.
- Review recent sign-ins, sent messages, forwarding rules, and profile changes. Remove anything you did not create and notify contacts if your account sent the scam onward.
Do not “test” the old password on the suspicious site, and do not share a replacement password with anyone who contacts you unexpectedly.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
If you entered card or bank information
Contact the card issuer or bank using the telephone number printed on the physical card, a statement, or the institution’s official app. Do not use a number in the message, pop-up, or search advertisement.
- Explain exactly what you submitted and when. Ask whether the card or account should be blocked, replaced, or placed under additional monitoring.
- Ask about disputed transactions and the institution’s deadline for reporting unauthorized activity.
- Change the online-banking password from the genuine site and enable MFA if it is available.
- Check transactions and alerts frequently. Keep screenshots, the original message, and the incident timeline for the bank’s case.
A scammer may use a small “verification” charge before attempting a larger one. Report even a transaction you recognize if it appeared after the disclosure and you did not authorize it.
If you entered Social Security or other identity information
Use IdentityTheft.gov to report the exposure and obtain a personalized recovery plan. The Federal Trade Commission specifically directs people who gave someone a Social Security, credit-card, or bank-account number to that service.
Recommended Free Tools
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Follow the plan’s instructions for the type of information disclosed. Keep the confirmation and any case numbers. If a government agency, lender, insurer, or employer contacts you during recovery, reach it through a number or website you already trust rather than replying to the original message.
If something downloaded, installed, or began acting strangely
A download or new extension raises the risk beyond a simple click. Warning signs include unexplained pop-ups, browser redirects, disabled security settings, unknown extensions, new applications, unusual account activity, or a device that becomes unusually slow. These symptoms do not identify a specific infection, but they justify immediate containment.
- Disconnect the affected computer from the network. Turn off Wi-Fi or unplug Ethernet. This is especially important for a computer connected to a home, school, or business network. The FTC’s small-business guidance recommends disconnecting an affected networked computer while it is assessed.
- Do not open the downloaded file again. Do not grant an extension extra permissions or follow its “cleanup” instructions.
- Update legitimate security software from its normal application or official website, then run a full scan. The FTC advises updating security software and running a scan after clicking an unexpected phishing link.
- Remove what the scan identifies. If the software cannot clean the device, stop using it for sensitive accounts and seek trusted technical help. Do not install a second tool recommended by the pop-up itself.
- Change credentials from a clean device. Start with email, financial accounts, and work accounts. If you typed passwords after the download, treat those as exposed too.
On a managed work computer, contact IT before deleting files or resetting the device; security staff may need the evidence and may have an approved isolation process.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How to report the message
Reporting helps providers block related campaigns and gives you a record of the incident, but reporting does not replace password, bank, or malware response.
Free tools Windows power users keep installed
One-click scans. No signup required.
- Suspicious text messages: forward the message to 7726 (SPAM), when your carrier supports that reporting short code.
- Phishing email: send it to [email protected]. Preserve the original message when the reporting channel requests it; forwarding as an attachment may retain useful headers.
- Fraud or financial loss: submit a report at ReportFraud.ftc.gov.
- Identity information: use IdentityTheft.gov for the recovery plan, in addition to notifying the affected bank or issuer.
- Work accounts or devices: use your employer’s security or help-desk channel immediately, even if you believe you only clicked.
What AI changes—and what it does not
AI can produce fluent copy, realistic logos, and convincing translations at scale. Grammar is therefore a weaker signal than it used to be. CISA notes: “A common sign used to be poor grammar or misspellings although in the era of artificial intelligence (AI) some emails will now have perfect grammar and spelling.” A message can read perfectly and still be fraudulent.
Give more weight to the request and the route than to the prose:
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Unexpected urgency, threats of closure, or a demand to act within minutes.
- A request for a password, one-time code, gift card, wire transfer, or remote access.
- A link whose visible name does not match the actual domain, uses a look-alike spelling, or redirects through an unfamiliar service.
- An invoice, delivery notice, payroll change, or account alert you did not initiate.
- A request to bypass normal approval or secrecy instructions such as “do not tell your administrator.”
Verify independently. Visit the organization through a bookmark or manually typed address, or call a number from a card, statement, or prior trusted correspondence. Do not use contact details supplied by the suspicious message.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Questions to ask before trusting a message
Was I expecting this action?
Compare the request with your own recent activity. A password reset you did not request, an invoice for an unknown purchase, or a sudden payment-change request deserves independent verification.
Does the destination belong to the real organization?
Read the domain from right to left. A familiar word in a subdomain or the first part of a long address does not prove ownership. Close the message and navigate from a saved bookmark instead of trying to inspect the link by clicking it again.
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Is the sender identity independently confirmed?
Email display names and caller ID can be spoofed. Confirm a payment or account request through a colleague, vendor contact, or support number already in your records.
Is the request asking for a secret?
Legitimate support should not need your password or a one-time code read aloud to an unexpected caller. If a message asks you to move money or disclose a code urgently, pause and verify through a separate channel.
Common mistakes after a click
- Logging in again through the same link: this gives the attacker another credential or code. Use a known route.
- Calling the pop-up number: fake support agents may request remote access or payment. Use the number on your card, statement, or official app.
- Deleting the evidence immediately: the URL, headers, and timeline can help your bank, employer, carrier, or investigators.
- Assuming “nothing happened” means “nothing was exposed”: attackers may wait before using stolen credentials. Change passwords and monitor accounts based on what you entered.
- Running an untrusted cleanup tool: a second pop-up can be part of the same scam. Update and scan with security software you already trust.
- Ignoring a work device: one compromised session can expose shared files or colleagues. Report promptly so the organization can contain it.
After the incident: harden your accounts
Once the immediate response is complete, keep MFA enabled, retain unique passwords, and review account-recovery methods. A hardware security key can provide a strong possession factor for important accounts; it is preventive protection, not a substitute for scanning a device that may have downloaded malware.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Keep your operating system, browser, and legitimate security software updated through their normal update mechanisms. Save important account and bank contact details outside your email so a compromised mailbox does not become your only source of help.
When to escalate for professional help
Seek qualified technical assistance when a scan cannot remove a threat, the device repeatedly reconnects or behaves abnormally, an unknown administrator account appears, or sensitive work systems may have been accessed. Contact your bank’s fraud department immediately for unauthorized transactions, and use the recovery instructions from IdentityTheft.gov for identity information. Prompt, accurate reporting gives each organization the facts it needs to contain the right part of the incident.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
