What to Do if You Clicked a Suspicious Link

• December 21, 2025

• Comment
• Facebook
• Twitter
• Bluesky
• Reddit
• LinkedIn

It happens to the best of us. You’re scanning through your emails or scrolling through a text thread, and before you realize it, you’ve tapped a link that feels… off. Maybe the website looks slightly wrong, or your browser starts acting strange. That instant “oh no” feeling is your intuition telling you something might be wrong.

The good news is that clicking a link isn’t an automatic game-over for your digital life. While it’s a moment to take seriously, there are clear, calm steps you can take right now to secure your information and your device. Let’s walk through exactly what to do to get back on solid ground.

Don’t Panic, Just Act

The most important thing to remember is that most modern browsers and operating systems have built-in protections designed to catch the worst-case scenarios. Just because you landed on a weird page doesn’t mean your computer is immediately compromised. However, you should still move quickly through these steps to be safe.

1. Close the Tab and Disconnect

If you’re still on the page, close the browser tab or the entire app immediately. If you suspect the site was trying to download something or if you’re seeing unusual pop-ups, the fastest way to stop the communication is to turn off your device’s internet.

Toggle on Airplane Mode or turn off your Wi-Fi. This cuts off the connection between your device and the potentially malicious server, preventing further data from being sent or received.

2. Check for Downloads

Take a quick look at your “Downloads” folder. Sometimes, clicking a link triggers an automatic file download. If you see anything new that you didn’t intentionally download—especially files ending in .exe, .dmg, .zip, or .js—do not open them. Drag them straight to the trash and empty it.

3. Scan for Malware

Once you’ve cleared out any suspicious files, it’s a good idea to run a quick scan. If you’re on Windows, Windows Security (formerly Windows Defender) is excellent and built-in. Mac users can use tools like Malwarebytes to check for anything that might have slipped through.

Most of the time, these scans will come back clean, but it’s worth the five minutes for the peace of mind.

4. Change Your Passwords (If Needed)

Did you enter any information on the page? This is the big one. If the link took you to a fake login page for Netflix, your bank, or your email, and you actually typed in your credentials, you need to change those passwords immediately.

If you use the same password for other accounts (which we’ve all done, though a password manager can help you move away from that), change those too. This is also a perfect time to ensure you have two-factor authentication (2FA) turned on. It acts as a second lock on your door, even if someone has your key.

Looking Ahead

Once you’ve secured things, take a second to look at the message that led you there. Was it an email with a slight typo in the sender’s address? A text message about a “package delivery” you weren’t expecting?

Phishing attempts are getting more sophisticated, but they often rely on creating a sense of urgency—making you feel like you have to click right now. Taking an extra three seconds to hover over a link or check the “From” field can save you a lot of headache later.

If you’re ever unsure about a link in the future, you can use a site like VirusTotal to scan the URL before you click it. It’s a great way to let someone else’s computer do the risky work for you.

You’ve done the right thing by taking action. Your devices are likely just fine, and you’re now a bit more prepared for the next time something suspicious crosses your screen.

• security
• phishing
• privacy
• safety

Comments