The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Act quickly, but do not panic. Stop interacting with the suspicious message or page, verify the situation through a trusted channel, and match your response to what actually happened: opening a link, entering a password, sharing payment or identity details, downloading software, or granting device access. These events create different risks and require different recovery steps.
Do these three things first
- End contact with the scammer. Close the page, stop replying, and do not provide additional information. Do not call a number, scan a code, or use a link supplied by the suspicious message.
- Verify independently. If the message claims to be from a bank, employer, delivery company, government agency, or online service, open that organization’s official app or type its known website address yourself. Use a phone number already printed on a card, statement, or official website—not the number in the message.
- Identify exactly what happened. The correct response depends on whether you only clicked, entered credentials, disclosed financial or identity data, downloaded a file, or allowed remote access.
An unexpected link can lead to a fake login page, request sensitive information, or deliver malware. A click alone does not prove that your device is infected, and there is no reliable universal percentage for the chance of compromise from clicking.
Choose the response branch that matches your situation
| What happened | Main risk | Priority action |
|---|---|---|
| Opened a link but entered nothing | Phishing, tracking, or malware delivery | Update security software and run a scan; watch for downloads or unusual device behavior. |
| Entered a username or password | Account takeover, especially where the password was reused | Change the password through the real service, change every reused copy, and enable two-factor authentication. |
| Shared a card, bank-account, or payment number | Unauthorized charges or transfers | Contact the institution through a trusted channel and follow its account or payment-security instructions. |
| Shared a Social Security number or other identity data | Identity theft or fraudulent applications | Use IdentityTheft.gov for a recovery plan; use IdentityTheft.gov/databreach when exposure is known but misuse is not. |
| Downloaded software or granted remote access | Malware, surveillance, or continuing unauthorized control | Stop entering sensitive information on that device, disconnect an active remote session, scan it, and secure accounts from a clean device if possible. |
If you only clicked the link
Close the tab or message and do not return to it. Check whether a file downloaded, a browser extension appeared, or the device began showing pop-ups, redirects, unfamiliar applications, disabled security tools, or unusual slowness. Those signs make the incident more than a simple click.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Update the operating system, browser, and security software using their normal settings or official websites.
- Run a full security scan. The Federal Trade Commission’s guidance is: “Then run a scan and remove anything it identifies as a problem.”
- Review the browser’s downloads and extensions and remove anything you did not intentionally install.
- If the scan finds a problem, follow the security software’s removal instructions and restart when requested.
Until a potentially infected device has been checked, do not use it to log in to banking, email, password-manager, or other sensitive accounts. A clean phone or computer is safer for password changes and account recovery.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If you entered a password or account login
Change the affected account first
Use the service’s official app or website—not the suspicious link—to change the password. Create a new password that is unique to that account. If the device might contain malware, make this change from a device you trust.
Eliminate reused-password exposure
Change the same password anywhere else you used it, including old accounts you rarely visit. Attackers routinely try stolen credentials on multiple services.
Turn on stronger sign-in protection
Enable two-factor authentication in the account’s security settings. Prefer an authenticator app, passkey, or other method the provider supports over relying solely on a password. A FIDO-compatible security key is an optional physical MFA credential, but use the provider’s available MFA option immediately rather than waiting to obtain extra hardware.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteRank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Recover an account you can no longer access
Use only the service’s official account-recovery page. Follow its identity checks, review recovery email addresses and phone numbers, and remove unfamiliar sessions, devices, apps, or forwarding rules after regaining access.
If you shared financial details or sent money
Contact the bank, card issuer, payment provider, or merchant immediately through a trusted phone number or website. Explain what information was disclosed, when it happened, and whether you see an unauthorized transaction. Ask what the institution wants you to do to secure the account or payment method; procedures differ by issuer and payment rail.
- Review recent and pending transactions for charges or transfers you do not recognize.
- Follow the institution’s instructions for replacing a card, changing online-banking credentials, or placing restrictions on the account.
- Keep confirmation numbers, messages, transaction records, and a timeline of your communications.
If you believe a scammer obtained a credit-card or bank-account number, the FTC directs U.S. consumers to IdentityTheft.gov for tailored recovery steps. That guidance is U.S.-oriented; elsewhere, use your country’s official consumer-protection and financial-regulator channels.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
If you shared identity information
Social Security number or similar government identifier
For U.S. cases involving a Social Security number or suspected identity misuse, go to IdentityTheft.gov and follow the individualized recovery plan. It can direct you through account, credit, and identity-theft actions based on what was exposed.
Recommended Free Tools
Exposure is known, but misuse is not
When a Social Security number was exposed but you have no evidence of fraudulent use, the FTC points to IdentityTheft.gov/databreach for protective steps. Do not assume that a paid monitoring service replaces the official recovery actions.
Other personal information
Record exactly what you disclosed—such as date of birth, address, tax information, medical details, or an identity document number. Contact the organization responsible for the document or account through a verified channel and ask what safeguards it recommends. The appropriate response depends on the type of identifier and your jurisdiction.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If you downloaded software or granted device access
Treat this as a possible device compromise, especially if you installed an application at the scammer’s direction or allowed remote-control software to run.
- End the remote session and disconnect the device from the internet if someone may still be controlling it. If you need help preserving evidence, avoid deleting files before getting qualified assistance.
- Stop entering passwords, payment details, or identity information on that device.
- Update its security software and operating system, then run a full scan.
- Remove applications, extensions, or files that the scan identifies as malicious or that you did not intentionally install.
- From a known-clean device, change important passwords and enable two-factor authentication. Prioritize email, financial, cloud-storage, and password-manager accounts because they can unlock other services.
For assistance, the FTC suggests contacting the device manufacturer, a company you know and trust, or a technically knowledgeable friend or family member. If the device remains unstable or unauthorized access continues, professional incident-response help may be necessary.
Check for continuing account or device warning signs
- Password-reset or sign-in alerts you did not request.
- New recovery addresses, phone numbers, payment methods, or trusted devices.
- Messages sent from your account that you did not write.
- Unknown browser extensions, applications, remote-access tools, or security settings.
- Unrecognized charges, transfers, loan applications, or account notifications.
Save screenshots and notification details before deleting messages. They can help a bank, service provider, or investigator understand the sequence of events.
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
Report the scam in the United States
Reporting does not guarantee that money or information will be recovered, but it helps authorities identify campaigns and connect reports.
- Forward phishing text messages to 7726 (SPAM).
- Forward phishing emails to reportphishing@apwg.org.
- Submit a scam report at ReportFraud.ftc.gov.
These channels are U.S.-oriented. If you are elsewhere, report through your national cybercrime, consumer-protection, telecommunications, or financial-regulator service. Use independently verified government contact details rather than links in the scam.
What not to do after a scam interaction
- Do not continue chatting to “prove” the scammer wrong or negotiate a refund.
- Do not install a second program because a pop-up claims it will clean the first one.
- Do not give a supposed support agent a verification code, password, or recovery key.
- Do not use the suspicious message’s contact details to “cancel” a payment or secure an account.
- Do not delay contacting a bank or issuer while waiting to determine whether a charge will appear.
Why speed matters, and what the evidence does not show
Email was the leading method scammers used to contact people in 2024, according to FTC consumer guidance published in April 2025. That describes how scammers reach people; it does not establish the likelihood that any particular click installs malware. The available guidance also does not support a single recovery procedure for every payment type, device, or country, so follow the instructions of the affected institution and local authorities.
Quick Recap
A practical recovery checklist
- Stop contact and verify through a trusted channel.
- Write down what you clicked, entered, downloaded, or authorized and the approximate time.
- Scan a device that may have been exposed before using it for sensitive logins.
- Change compromised and reused passwords from a clean device.
- Enable two-factor authentication and review active sessions and recovery settings.
- Call financial institutions using known contact details.
- Use IdentityTheft.gov for U.S. identity-theft recovery guidance.
- Report the incident through the appropriate national channels.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
