I clicked — what now? – Practice makes safe

First: it happens to careful, clever people too. Scammers are professionals and work with pressure and surprise. What matters now is acting calmly, quickly and in the right order.

In danger right now? Call 999

If someone is threatening you, wants to collect money or valuables from you, or is at your door, call 999. If you get an unexpected call about your money, hang up and call 159: it connects you safely to your own bank (for more than 99% of UK personal current accounts). Scammers can fake the number your phone displays — 159 itself can't be faked.

The steps

Only clicked, but entered nothing? A click alone can do harm if the page hides malicious software. Have your antivirus check the whole computer — on Windows that's the built-in Windows Security: open it yourself (Start menu, type “Windows Security”), then Virus & threat protection → Scan options → Full scan. This can take a few hours. On a Mac, the built-in protection checks by itself; on a phone, install the latest update. Also check that your antivirus, browser and operating system update automatically.
Entered bank details, a card number or a one-time code — or approved a payment in your banking app? Call your bank straight away, using the number on your card or in your banking app, or call 159, and have your card or online banking blocked.
Entered a password? Change it straight away — and everywhere you use the same password. Change security questions too. Where offered, switch to passkeys — signing in with your fingerprint or face instead of a password. Otherwise turn on two-step verification where you can: besides your password, you then need a second proof, such as a code sent to your phone.
Allowed remote access or installed something? Disconnect the device from the internet at once (Wi-Fi off, cable out) and switch it off. Change your important passwords — above all for online banking and email — from a different device you trust. Tell your bank. Have the device checked by an expert or someone you trust, and the remote-access program removed, before you use it for online banking again.
Sent money? Contact your bank immediately — sometimes a payment can still be recalled. Keep statements and all messages.
Report it. In England, Wales and Northern Ireland to Report Fraud: online at reportfraud.police.uk or on 0300 123 2040. In Scotland, call Police Scotland on 101. Keep the message you fell for — it's evidence.
Keep an eye on your accounts. Check statements more often over the next weeks, and see whether other accounts are affected.

Spotted it in time?

If you haven't clicked or entered anything, you don't need to keep the message. Forward scam emails to report@phishing.gov.uk and scam texts to 7726 — free of charge on most networks. Then delete them.

Outside the UK

United States: report fraud and scams at ReportFraud.ftc.gov, and cyber crime to the FBI at ic3.gov. If someone is in immediate danger, call 911.
Germany: the blocking hotline 116 116 (from abroad +49 116 116 or +49 30 4050 4050) blocks cards and online banking for all issuers that have joined it; it never calls you itself. Police emergency number 110; reports also online via the online police stations of the federal states.
Anywhere else: call your bank on the number on your card, and contact your local police.

Don't be ashamed — tell someone

Many people keep quiet out of embarrassment. That helps the scammers. Tell family or friends — it protects them, too.

Sources (checked 27 September 2026): Report Fraud, FAQs · NCSC, what to do if you've responded, report a scam email and report a scam text · Stop Scams UK, 159 · FTC · IC3 · German Federal Office for Information Security (BSI), “Passkeys – anmelden ohne Passwort” · sperr-notruf.de, FAQ · Verbraucherzentrale NRW, “Phishing-Mails: Woran Sie sie erkennen und worauf Sie achten müssen” (as of 25 March 2026) · German police crime prevention (ProPK), “Tech Support Scam: Falsche Software-Mitarbeiter am Telefon” (19 May 2025) and “Falsche Microsoft-Mitarbeiter” · Antivirus (checked 29 September 2026): Microsoft, “Virus and threat protection in the Windows Security app” · Apple, “Protecting against malware in macOS”.