🚨What to Do If You Clicked a Suspicious Link

Immediate steps to take if you clicked a phishing link, opened a suspicious attachment, or responded to a scam email.

Everyone makes mistakes — even the most security-aware people can accidentally click a bad link or respond to a convincing scam email. What matters most is how quickly you act afterward. Follow these steps immediately.

---

Step 1: Don't Panic, But Act Fast

The sooner you take action, the less damage can be done. Most attacks require additional steps after the initial click, so quick response makes a big difference.

---

Step 2: Disconnect If Something Looks Wrong

If after clicking a link your computer starts behaving strangely (pop-ups, slowness, unfamiliar programs opening):

• Disconnect from Wi-Fi or unplug your Ethernet cable to stop any potential data transfer.

• Do not turn off your computer — IT may need to investigate what happened.

---

Step 3: Change Your Password Immediately

If you entered your password on a suspicious page:

1. On a different, trusted device (like your phone), go to https://mysignins.microsoft.com/security-info.

2. Change your password right away.

3. If you use the same password anywhere else (you shouldn't, but if you do), change it on those sites too.

---

Step 4: Contact eTop Immediately

This is the most important step. Contact us so we can:

• Check your account for unauthorized access

• Review sign-in logs for suspicious activity

• Revoke any active sessions if needed

• Scan your device for malware

📧 Email: [email protected] ☎️ Phone: [phone]

When you contact us, let us know:

• What you clicked (forward the email to us if possible)

• Whether you entered any credentials (username, password, MFA code)

• What device you were using (work computer, personal phone, etc.)

• Approximately when it happened

---

Step 5: Do NOT Delete the Email

Keep the suspicious email in your inbox. Our team may need to:

• Analyze the link or attachment

• Check if other users received the same email

• Block the sender across the organization

You can also report the email directly in Outlook by selecting the message and clicking Report → Report phishing in the toolbar.

---

Common Scenarios and What They Mean

What Happened	Risk Level	What to Do
Clicked a link but didn't enter anything	Low	Report it, monitor your account
Clicked a link and entered your password	High	Change password immediately + contact eTop
Entered password AND MFA code	Critical	Contact eTop immediately — attacker may have access
Opened an attachment	Medium-High	Disconnect and contact eTop for malware scan
Replied with personal or financial info	High	Contact eTop + notify your manager

---

How to Recognize Scams Going Forward

For tips on identifying phishing emails before you click, see our guide: How to Spot a Phish

For reporting suspicious messages through Outlook, see: Report Messages to Microsoft

---

Category: Education → Self Help Guides Author: eTop Technology Last Updated: March 2026