Security starts in everyday life.
Something happened?
The next step matters.
Clicked a link, entered login details or lost control of an account? Find clear first steps for your situation.
What happened?
Choose the relevant situation. If more than one applies, follow all relevant steps. For a work account or device, inform your IT team early.
This guidance is free and available immediately. No message is sent to us and no support request is created. Personal support is arranged separately and is paid.
I opened a suspicious link.
If you did not enter data or install anything:
- Close the page. Do not enter any more data or allow notifications or downloads.
- Check your download history. Do not open a downloaded file; if you already ran it, use the relevant help below.
- Update your browser and operating system. Use the built-in protection to run a scan where your device supports it.
- Watch for unusual sign-ins or changes. A click alone does not prove an infection, but this guide cannot rule one out either.
I entered a password or verification code.
Secure the real account as soon as possible.
- Open the real provider through its known address or app on a trusted, updated device. If banking details are involved, contact your bank first through a known channel.
- Change the affected password. If you reuse it elsewhere, change it there too. Start with your email account if it can be used to reset other accounts.
- End unfamiliar or all other sessions. Check devices, connected apps, recovery details and, for email, forwarding rules. Changing a password alone does not always end every access.
- Set up a passkey or two-factor protection. If you shared a code or approved a sign-in, also report this to the provider.
Money, banking details or a payment are involved.
Contact your bank or payment provider now.
- Use your known banking app or the contact details in your bank documents. Do not use phone numbers or links from the suspicious message.
- Explain exactly what happened. Ask whether access or cards should be blocked and payments can be stopped or recalled. This does not guarantee a refund.
- Keep messages, payment receipts, times and screenshots. Follow your bank’s further instructions and report suspected fraud to the police.
- If you also shared login details, secure the affected accounts from a trusted device. Do not send more money to supposed recovery or support services mentioned in the message.
I ran a suspicious file or allowed remote access.
Limit further access.
- Disconnect the affected device from the network: switch off Wi-Fi and unplug the network cable. End contact with the supposed support service.
- For a work or school device, contact your IT team immediately. Do not reset it yourself or delete possible evidence.
- Secure important accounts from another trusted device. Also inform your bank if payment access may be affected.
- Have the device examined by a qualified specialist. A clean malware scan alone does not confirm a complete cleanup after this kind of incident.
My account was changed or I can no longer sign in.
Use the official account recovery process.
- Open the provider’s known website or app on a trusted device and start account recovery there. Contact official support if needed.
- If you still have access, change the password, end other sessions and check recovery details. Pay particular attention to forwarding and filter rules in email accounts.
- Check important linked accounts. Warn contacts through another channel if messages were sent in your name.
- Document unfamiliar changes, sign-ins and orders. If damage or misuse has occurred, contact the provider and, where appropriate, your bank and the police.
Further help and sources
These steps provide initial guidance. They do not replace a device examination or confirm that an incident is resolved. Editorial review: 29 October 2026.
PERSONAL SUPPORT.
Would you like
a clear assessment?
Do the results raise questions, or would you like help implementing changes? Talk to Jürgen Mol about your needs. Personal advice and support are available for a fee by individual agreement.
Talk to Jürgen Mol