I clicked a phishing link — what should I do now

Symptoms

• You clicked a link in a suspicious email or message
• A website asked you to log in or download something
• You may have entered your username and password

Fix it yourself

1. Disconnect from the network if you downloaded or ran anything (turn off Wi-Fi or unplug the network cable).
2. If you entered your password anywhere, change your company password immediately from a known-good device via the company portal.
3. Do not enter any further information on the site and close the browser tab.
4. Run a full scan with your company antivirus program.
5. Report the incident to the service desk right away — speed matters.

If that did not help

Open a ticket (or call the service desk) immediately, stating what you clicked, whether you entered credentials, and the exact time it happened.

Note: Reporting quickly is never punished — waiting is what causes damage.