I clicked a suspicious link, what to do now

Clicked a suspicious link or opened a dodgy attachment? Here is what to do in the first few minutes, and what to tell us so we can help.

Last updated 10 November 2026

If you’ve clicked a link or opened a file you now think was dodgy, don’t panic and don’t hide it. What matters most is acting quickly and telling us. Most of the time nothing bad happens, and when it does, a fast report limits the damage.

Do these straight away

  1. Stop. Don’t click anything else on the page, and don’t type anything into it.
  2. Close the page or the file. If the computer is acting strangely, disconnect it from the internet: turn off Wi-Fi, or unplug the network cable. Don’t switch the computer off unless we tell you to.
  3. Tell us now. Call 087 147 9243, or email [email protected]. Please don’t wait until the end of the day.
  4. Change your password, if you typed one into the page. Do it from a different device, such as your phone, not the computer you clicked on. See “Reset your own Microsoft 365 password“.

What to tell us

  • what you clicked, and roughly when
  • whether you typed a password, a code or any other details
  • whether a file downloaded or opened
  • what the page looked like, with a screenshot if you took one
  • anything odd that happened since, such as pop-ups, a slow computer or programs you don’t recognise

What we’ll do

We’ll check your account for anything unusual, such as sign-ins from places you’ve never been or mail rules you didn’t make. We’ll check the computer for anything that shouldn’t be there, and reset your sign-in if needed. We’ll tell you what we found and write it on the ticket.

If you typed your password or a code

Treat the account as unsafe until we’ve checked it. Tell us even if you’re not sure it was a real page. The sooner we know, the less time anyone has to use it.

If you opened an attachment

Disconnect from the internet as described above, and call us. Don’t open the file again.

Afterwards

  • Look out for emails or messages that you didn’t send. Tell the people you work with if something went out from your account.
  • Keep an eye on your bank and card statements if you typed any payment details. Call your bank straight away.
  • Read “How to spot a phishing email” so you know what to look for next time.

If it doesn’t work

  • You can’t reach us. Email us with what you know and keep the computer off the internet until we reply.
  • You can’t change your password. Email us and we’ll reset it for you.
  • You’re worried you’ll be in trouble. You won’t. Fast reporting is the best thing you can do.

Still stuck?

Log a support request and we'll help. Everything stays in one place.

Related help articles

Security

How to spot a phishing email

Learn the warning signs of a phishing email, how to check a suspicious message safely, and what to do with one before you click anything.