Did you click on a suspicious link? Step-by-step emergency guide

Feeling panic after clicking on a strange link is completely natural. Your heart races and you think cybercriminals already have total control of your digital life. But take a deep breath: clicking doesn't mean all is lost. The difference between a brief scare and a financial catastrophe depends on you acting quickly in the next few minutes. Follow this containment protocol.

1. Immediate Containment: Cut the connection (Vital Triage)

Many malicious links initiate malware downloads in the background ("drive-by downloads") or attempt to communicate with a Command and Control (C2) server to extract information. Your absolute priority is to stop that data transfer dead in its tracks.

• On mobile: Turn on Airplane Mode immediately. This turns off both Wi-Fi and mobile data (4G/5G).
• On a computer: Physically disconnect the Ethernet cable or turn off the Wi-Fi receiver from the taskbar's quick settings.

2. Assessment Matrix: What exactly happened?

Once disconnected, close the tab or app where the link opened and try to remember what happened in the last 15 seconds. Locate your situation in the following table to determine your actual risk level:

3. Change credentials from a "Clean Device"

If you filled out a fake form with your passwords, assume your account is already exposed on the attacker's servers. It is vital that you change the affected password, but do not use the device that received the attack (in case spyware or a keylogger was installed that records everything you type).

Grab another trusted phone or computer, connect to a secure network, and change the password. Take the opportunity to enable Two-Factor Authentication (2FA) if you haven't already; this will block attackers even if they have your new password. If you recycle that same password on other sites, change it on all of them.

4. Quick Financial Block

If you handed over credit card, debit card, or mobile banking credentials, changing passwords won't be enough.

• Open your bank's official app from another device and use the option to "Turn off" or "Freeze" the card.
• Call your bank's official number immediately (the one on the back of the plastic card) and report that you've been a victim of phishing so they can cancel the current card and monitor for unrecognized charges.

5. Deep Cleaning: Malware Eradication

Before reconnecting the affected device to the Internet, you need to make sure it's truly clean. Many modern trojans are designed to evade free antiviruses or those pre-installed on the operating system.

You need to run a full scan (not a quick scan) with a security tool that has "heuristic engines"—meaning it detects the behavior of the virus even if it's a new threat. Allow the program to quarantine or remove any suspicious temporary files.

6. Warning signs: How to know if I'm still infected?

Even after the scan, stay alert for the next few days. The following are classic signs that the malicious link left a "gift" on your system:

• Your phone or laptop battery drains unusually fast or the device overheats without being used (possible hidden crypto mining).
• Pop-up windows appear on your screen, even when you're not browsing the internet.
• You find installed apps that you didn't download.
• Your contacts warn you that they are receiving strange emails or messages from your accounts.