ELENXOS SECURITY CENTER

What should I do after clicking a suspicious link?

Clicked a suspicious link? What should you do first?

Stop interacting with the page. Do not complete forms, approve notifications or install suggested applications. Consider what actually happened: did you only open the page, enter information or download a file? Your next steps depend on the action you took.

If you only opened the website

Opening a link does not automatically mean your device was compromised. Close the suspicious page, do not allow downloads or notifications, and ensure your browser and operating system are updated. If you notice unusual behavior or unexpected downloads, perform a security check.

If you entered a password

Change the password immediately through the service's official website or app, not through the suspicious link. If you reused that password elsewhere, change it on those accounts too. Enable multi-factor authentication, review active sessions and sign out unknown devices where supported.

If you disclosed bank account or card details

Contact your bank or card issuer immediately using an official phone number. Explain what information you disclosed and ask how to protect your account or card. Review recent transactions and enable transaction alerts if available. Do not wait for an unauthorized charge before contacting your bank.

If you shared a one-time password (OTP)

A one-time code may authorize a sign-in or transaction. If you shared it with someone or entered it on a suspicious page, promptly contact the relevant service or bank through an official channel. Check for unrecognized sign-ins and transactions. Do not approve verification requests that you did not initiate.

If you downloaded or installed a file

If you downloaded a suspicious file but have not opened it, do not run it. If you installed an application or opened a suspicious file, disconnect the device from the network when there are signs of active compromise and seek technical assistance. Do not grant remote access to strangers. Use another trusted device to change critical passwords if needed.

Check your device

Update your operating system and applications and run a scan with reputable security software. Look for unfamiliar apps, browser extensions or notification permissions. A clean scan does not rule out every threat. If there are serious signs of compromise, seek qualified technical support.

Protect your other accounts

If you reused the same password across services, change it everywhere, starting with your email and most important accounts. Review recovery details, connected devices and recent activity. Use unique passwords and multi-factor authentication wherever available.

How can Elenxos help?

You can use the Elenxos URL Scanner to assess available risk indicators for a link without first visiting the suspicious page. Do not submit links containing personal information, secret tokens or password-reset codes. The result is advisory: even CLEAN does not guarantee safety or replace immediate protective actions.

Reporting fraud and preserving evidence

Keep the suspicious message, date, time and relevant transaction details without spreading sensitive information. If a bank or service is involved, report the incident through its official channel. You can also contact the appropriate authorities to report online fraud. Do not revisit a suspicious website solely to collect more evidence.

Elenxos evaluates risk indicators. CLEAN does not mean guaranteed safe.

Try an Elenxos checker →