I clicked a scam link: what now?

Don't panic: act fast and step by step.

The answer in 2 lines. Don't panic: it depends on what you did after the click. Typed nothing: close the page. Typed a password: change it now, everywhere you use it, and turn on two-step verification. Typed card details: call your bank to block the card. Gave your Social Security number: go to IdentityTheft.gov and consider a credit freeze. Downloaded something: disconnect the device from the internet and run a security scan.

The first 3 steps

Close the page and don't type anything else.
Work out what you gave: nothing, a password, card details, a one-time code, your Social Security number or ID, or a downloaded file or app.
Follow the matching line below, right away.

What to do, depending on what you did

Only opened the page: close it. The risk is low if you typed and downloaded nothing. Keep your phone and computer updated.
Typed a password: change it now, and on every account that uses the same one. Turn on two-step (multi-factor) verification.
Typed card or bank details: call your bank or card issuer at the number on its website and block the card. Watch your transactions.
Gave a one-time code: call the company concerned (bank, email provider) immediately. That code can let a scammer into your account.
Gave your Social Security number or ID: go to IdentityTheft.gov for a recovery plan, and consider freezing your credit at the three credit bureaus (free).
Downloaded a file or app: disconnect from Wi-Fi and data, run your security software or ask a trusted repair service, and change passwords from another device.

What not to do

Waiting until money disappears before reacting.
Changing passwords on a device where you just installed a suspicious app: use another device.
Answering a follow-up call from a "fraud department": scammers often call right after stealing data. Hang up and call the official number.

Report it

Scam text: forward it to 7726 (SPAM), then report it to the FTC at ReportFraud.ftc.gov.
Phishing email: use your email's "report phishing" or "report spam" button, and report it to the FTC.
Money lost online: you can also file a complaint with the FBI's Internet Crime Complaint Center (IC3).
Identity theft: IdentityTheft.gov.

Good to know

Real companies and government agencies don't ask you to confirm your password, card number or Social Security number through a link in a surprise text or email.
If money was taken by card or electronic transfer you didn't authorize, federal law gives you dispute rights: report it to your bank quickly.

In Dallas, Karen taps a text saying her toll bill is overdue and enters her card number before she gets suspicious. She calls her bank at the number on its website to block the card, forwards the text to 7726 and reports it at ReportFraud.ftc.gov. Two days later a "bank agent" calls asking for a code: she hangs up.

A made-up story, for illustration.

The numbers (latest published)

People reported losing about $15.9 billion to fraud in 2025, according to the FTC; that's the latest full year published (2026 figures are not yet available).
Imposter scams alone accounted for about $3.5 billion in reported losses in 2025 (FTC, June 2026).

Bobby

Sources, verification, confidence

Verified on October 18, 2026, for the United States. Confidence: high for the steps and reporting channels (FTC, FBI IC3); high for the 2025 totals, from FTC testimony to Congress (March 2026) and FTC data (June 2026); high for free credit freezes (federal law since 2018). This guide describes common cases, not a diagnosis or legal advice.