Clicked a bad link? Do this now

Just clicked, didn't type anything?

Close the page, run a quick virus scan, and keep an eye out. The risk is low.

You typed a password

1. Change that password now on the real website (type the address yourself).
2. Change it anywhere else you used the same password.
3. Turn on two-factor authentication.
4. Check for changes: email forwarding rules, new recovery phone numbers, or sign-ins you don't recognize.

You downloaded or opened a file

1. Disconnect from the internet.
2. Run a full scan: Windows Security → Virus & threat protection → Scan options → Full scan.
3. If anything odd happens (pop-ups, new programs, renamed files), stop using the device and get it checked.

You gave card or banking details

Call your bank or card company now, using the number on the back of your card. Watch your statements for the next few months.

Report it

Canadian Anti-Fraud Centre: 1-888-495-8501.