After a Suspicious Click

What Should You Do If You Clicked a Scam Link? A Simple Step-by-Step Guide for Seniors

A calm step-by-step guide for seniors on what to do after clicking a suspicious link, including passwords, banking and device checks.

Clicking a suspicious link can feel alarming, but it does not always mean the worst has happened. What matters most is acting calmly and in the right order. A simple response can reduce the chance of account theft, banking fraud or ongoing access to your device.

1. Stop and disconnect from the suspicious page

  • Close the webpage straight away and do not enter any more information.
  • If you downloaded a file, do not open it unless you have already done so.
  • If something on the page asks you to call a number, install software or log in again, stop there.

2. Work out what information you may have entered

  • Think about whether you only clicked the link or whether you also entered a password, card number or personal details.
  • If you typed your email password into a fake page, treat that account as compromised and change it immediately.
  • If you entered banking or payment information, contact your bank as soon as possible.

3. Change important passwords in the right order

  • Start with your email password, because email is often the recovery path for other accounts.
  • Then change passwords for any account that may have been involved, such as banking, shopping or myGov.
  • If available, turn on two-factor authentication while you are there.

4. Call your bank if money or card details might be at risk

  • Banks would rather hear from you early than after fraudulent payments appear.
  • Ask the bank to watch for unusual activity, block a card if needed or guide you through the next steps.
  • If the scam involved BSB, account, credit card or debit card details, do not wait to see what happens.

5. Check your device and recent account activity

  • Run a trusted security scan if you downloaded anything or if the page tried to install something.
  • Review recent sign-ins, password reset emails and transaction notifications.
  • Watch carefully over the next few days for unfamiliar logins, new payees or password reset requests.

6. Learn from it without blaming yourself

  • Scam websites are designed to look convincing and to rush people into acting quickly.
  • The useful question is not “How could I click that?” but “What steps will protect me now?”
  • A little training and practice can make suspicious links much easier to spot next time.

Need extra support?

Cyber safety is easier when the advice is practical, patient and easy to follow. Live training can help seniors build confidence without feeling overwhelmed.

View cyber safety training

Frequently asked questions

What if I only clicked the link but did not type anything?

That is often less serious than entering details, but you should still close the page, watch for unusual activity and run a security check if a file downloaded or a pop-up asked you to install something.

Should I report the scam?

Yes, especially if money, identity details or an impersonation of an Australian service was involved. Your bank, provider or relevant reporting channel may help limit the damage.

Related articles