Clicked a Scam Link? What to Do Next, Step by Step

The text looked so real. “Your package could not be delivered. Tap here to reschedule.” You were expecting a delivery, so you tapped. A page opened asking for your address and a small redelivery fee. You started typing, then something felt off.

Now your heart is pounding. Did you just make a big mistake?

Many careful, intelligent people tap a scam link at some point. Scammers design these messages to look real and to catch us at a busy moment. You may wonder:

I clicked a scam link. What should I do now?

First, take a breath. Clicking a link does not always mean harm was done. What matters most is what happened next, and acting calmly and quickly.

This guide walks you through what to do, step by step, based on guidance from the Federal Trade Commission (FTC): close the page, figure out what you shared, protect your accounts, call your bank if needed, check your device, and report it.

What to Do at a Glance

Step 1: Stop and Close the Page

The first move is the simplest one:

• Close the page or app. On a phone, swipe it away or close the browser tab.
• Do not enter anything else. No passwords, no card numbers, no codes.
• Do not call any phone number shown on the page. It may connect you to the scammer.
• Do not reply to the message. A reply tells scammers your number is active.
• Take a deep breath. Acting calmly is better than acting in a panic.

If a pop-up says your phone or computer is “infected” and tells you to call a number, that is a common trick. Real security warnings do not ask you to call a stranger.

Step 2: Think About What You Shared

Next, take a moment to remember exactly what happened. It helps to jot it down on paper.

Write down the date and time, what the message said, and the website address if you remember it. This will help when you contact your bank or file a report.

Step 3: Change Your Password and Turn On 2-Step Verification

If you typed a username and password into the scam page, the FTC suggests changing that password right away. If you used the same password on other accounts, change those too.

1. Go to the real website or app yourself. Do not use the link from the message.
2. Sign in and change your password to a new, strong one you have not used before.
3. Turn on 2-step verification (also called two-factor authentication).
4. Look for a setting to sign out of other devices, which the FTC suggests for hacked accounts.
5. Check that your recovery phone number and email are still yours.

If you think an email or social media account was taken over, the FTC’s guide to recovering a hacked account also suggests checking your email settings for forwarding rules you did not set up, and letting your contacts know in case they get strange messages from you.

Google offers steps to secure a hacked Google Account, and Apple explains how to keep your Apple Account secure. Apple notes that it will never ask for your password or verification codes.

New to two-step protection? Our guide on what two-factor authentication is explains it in plain language. And remember: never share a verification code with anyone who asks. See why scammers ask for your verification code.

Step 4: Call Your Bank If You Shared Money or Card Details

If you entered a card number, bank details, or sent a payment, the FTC advises acting fast. In its guide on what to do if you were scammed, the FTC says to report it right away to the company you used to pay and ask them to reverse the payment or refund your money. The FTC is honest that the money may already be gone, but says it is always worth asking.

Use the phone number on the back of your card or on the company’s official website, not a number from the scam message.

Then keep an eye on your statements for charges you do not recognize.

Step 5: Check Your Device If You Downloaded Something

If you downloaded a file or app from the link, or if someone convinced you to let them access your computer, the FTC suggests:

1. Update your computer’s or phone’s security software.
2. Run a security scan, and delete anything it flags as a problem.
3. Change your passwords and turn on two-factor authentication to protect your accounts.

On a phone, it also helps to delete any app you installed because of the message, and to keep your phone’s software up to date. If you need help, the FTC suggests getting tech support from the device maker or a company you know and trust, or from a knowledgeable friend or family member. Be cautious of anyone who contacts you offering to fix it.

Step 6: Report It

Reporting may feel like a small thing, but it helps protect others. The FTC says reports help it build cases against scammers, spot trends, and educate the public.

• Scam texts: forward them to 7726 (which spells SPAM), as the FTC suggests in its guide to recognizing and avoiding phishing scams.
• Scam emails: the FTC suggests forwarding phishing emails to reportphishing@apwg.org.
• Your bank: tell them if you shared any financial information.
• The FTC: report the scam at ReportFraud.ftc.gov.

On your phone, you can also report and block the sender. Our guide on how to block spam calls and texts explains how.

If You Shared Your Social Security Number

Your Social Security number is one of the most important pieces of information to protect. The FTC explains two paths:

If a scammer used your number: go to IdentityTheft.gov to report it, get a customized recovery plan, and follow the recovery steps. If the scammer did not use it, or you are not sure: the FTC suggests going to IdentityTheft.gov/databreach and following the steps to help protect yourself from identity theft.

IdentityTheft.gov is the federal government’s official site for reporting identity theft and getting a recovery plan.

Watch Out for the “Second Scam”

After someone falls for a scam, they sometimes get a follow-up call or message from a person claiming they can help get the money back, often for a fee. This is usually another scam.

A few reminders:

• The FTC says it will never threaten you, say you must transfer your money to “protect it,” or tell you to withdraw cash or buy gold and give it to someone.
• The FTC explains that scammers ask you to pay in ways that are hard to track, such as gift cards, wire transfers, and cryptocurrency.
• Be cautious of anyone who contacts you out of the blue offering to “recover” lost funds.

To spot the next one before you tap, see how to spot an online scam before you click and how to tell if an email is real or suspicious. If you wonder why the message knew your name, see why scam messages know your name.

Be Kind to Yourself

Feeling embarrassed is normal, but it is not deserved. Scam messages are built by people who do this full time, and they target everyone, of every age.

Talking about it helps. Telling a family member or friend can help you think clearly, and it may protect them from the same trick. Many families now agree on a simple rule: “If a message rushes you, call one of us first.”

A Simple Plan If You Clicked a Scam Link

Like a Good Neighbor Watching the Street

Many of us grew up in neighborhoods where people looked out for each other. If a stranger was knocking on doors, word got around fast. Someone would call the neighbors, and everyone would lock up and keep an eye out.

Reporting a scam today is the same instinct. Forwarding a text, calling your bank, and telling a friend all help the whole neighborhood, even if that neighborhood is now online.

A scam link is a stranger at the door. You closed it. Now you are the neighbor who spreads the word.

Stay in the know. Continue to grow.

Important Note

This article is for general education and awareness. It is not legal, financial, or professional security advice, and Modern Boomer Guides is not affiliated with the FTC, Apple, Google, or any bank.

Steps to recover money, reporting options, and account settings vary by bank, card issuer, payment service, device, and country. If you have lost money or think your identity has been stolen, contact your bank and the appropriate authorities promptly. For the most current guidance, see the FTC’s consumer advice website.

Frequently Asked Questions

I clicked a scam link but did not enter anything. Am I okay?

The risk may be lower if you entered nothing. Close the page, do not reply, and stay alert for unusual activity. If you downloaded anything, check your device.

What should I do first after clicking a scam link?

Close the page and do not enter any more information. Then think about what, if anything, you shared.

I typed my password into a scam page. What now?

Change that password right away on the real website, change it anywhere else you used it, and turn on 2-step verification.

I entered my credit card number. What should I do?

Call your card company using the number on the back of your card. Tell them about the fraud and ask about reversing any charges.

I paid with a gift card. Can I get my money back?

The FTC suggests contacting the gift card issuer right away using the number on the back of the card and asking for a refund. It is not guaranteed, so act quickly, and keep the card and receipt.

Where do I forward a scam text?

The FTC suggests forwarding scam texts to 7726, which spells SPAM.

Where do I report a scam?

You can report it to the FTC at ReportFraud.ftc.gov.

What if I gave my Social Security number?

If it was used, the FTC says to report it at IdentityTheft.gov and follow the recovery plan. If you are not sure, visit IdentityTheft.gov/databreach.

I downloaded something from the link. What should I do?

The FTC suggests updating your security software, running a scan, and deleting anything it flags. Then change important passwords.

Someone called offering to get my money back. Is that real?

Be very cautious. Offers to recover lost money, especially for a fee, are often another scam.

Should I call the number in the scam message?

No. Use the number on your card, your statement, or the company’s official website instead.

How can I avoid scam links in the future?

Slow down when a message rushes you, do not tap links in unexpected messages, and check with the company directly using a number or website you trust.

Sources and Further Reading

The following resources provide additional guidance about what to do after clicking a scam link. External links open in a new tab.

• FTC Consumer Advice: What to do if you were scammed
• FTC Consumer Advice: How to recover your hacked email or social media account
• FTC Consumer Advice: How to recognize and avoid phishing scams
• FTC: ReportFraud.ftc.gov
• FTC: IdentityTheft.gov
• Google Account Help: Secure a hacked or compromised Google Account
• Apple Support: Keep your Apple Account secure on iPhone

Want a Clearer Way to Spot Scams and Stay Safer Online?

A Modern Boomer Guide to Spotting Scams & Staying Safe Online is a 52-page full-color visual PDF guide created for older adults, families, and anyone who wants a calmer, more practical way to recognize suspicious messages and protect personal information.

It explains common scam tactics, suspicious links, fake urgency, impersonation, payment demands, account warnings, verification codes, safer responses, and everyday online-safety habits in clear, respectful language.