We’ve all done it.
You’re busy, your phone is buzzing, your inbox is overflowing, and an email arrives claiming there’s an urgent problem with your Microsoft 365 account, a missed parcel delivery, or an invoice that needs reviewing. Before you know it, you’ve clicked the link.
The moment you realise it might have been a mistake, don’t panic.
A single click doesn’t automatically mean your device has been hacked or your business has been compromised. However, what you do in the next few minutes can make a huge difference.
At Bury St Edmunds IT, we regularly help businesses deal with phishing emails, scam messages, and suspicious links. The good news is that acting quickly can often prevent a small mistake from becoming a serious security incident. Here’s what you should do
1. Stop and Assess What Happened
As soon as you realise the link may have been suspicious, take a moment to think about exactly what happened.
Ask yourself:
- Did the link simply open a webpage?
- Did anything download automatically?
- Did you enter your email address or password?
- Did you provide payment information?
- Did the website ask you to install software?
- Did you approve an authentication request?
The more information you can provide, the easier it will be for your IT provider to assess the risk and advise on the next steps.
2. Close the Website Immediately
If the webpage is still open, close it straight away.
Avoid clicking around the site to investigate further. Fake websites are designed to encourage users to provide information, download files, or take actions they wouldn’t normally take.
If something doesn’t feel right, trust your instincts and close the page.
3. Contact Your IT Provider Immediately
If you’ve clicked a suspicious link on a work device or entered company credentials, this should be your next step.
Many people hesitate to report incidents because they feel embarrassed or worry they’ve done something wrong. The reality is that modern phishing attacks are incredibly convincing and are designed to catch people out.
The sooner your IT provider knows about the incident, the sooner they can help.
They may be able to:
- Check whether your account has been compromised
- Monitor for suspicious login attempts
- Reset passwords if required
- Scan your device for threats
- Review security logs
- Prevent malicious activity from spreading to other users
In cybersecurity, speed matters. We’d always rather investigate a false alarm than deal with the fallout from a security incident that wasn’t reported quickly enough.
4. Change Your Password Immediately
If you entered your username and password on the website, assume those credentials have been compromised.
Change the password immediately and avoid reusing any old passwords.
We also recommend changing passwords on any other accounts that use the same credentials.
When creating a new password:
- Make it strong and unique
- Avoid using personal information
- Don’t reuse passwords across multiple accounts
- Consider using a password manager
A compromised password is often the first step cybercriminals use to gain access to emails, cloud services, and business systems.
5. Enable or Confirm Multi-Factor Authentication (MFA)
Multi-Factor Authentication remains one of the most effective ways of protecting your accounts.
Even if someone obtains your password, MFA creates an additional security barrier that makes account compromise significantly more difficult.
If you’re already using MFA, make sure it’s still active and that no changes have been made to your authentication methods.
If you haven’t enabled it yet, now is the perfect time.
6. Disconnect from the Internet (If Malware Is Suspected)
Not every suspicious link leads to malware, but some are designed to download malicious software in the background.
If:
- A file downloaded unexpectedly
- Your device starts behaving unusually
- New pop-ups appear
- Applications begin opening on their own
Disconnect your device from the internet immediately.
Unplug the network cable, disconnect from Wi-Fi, or switch your device into airplane mode while you wait for guidance from your IT provider.
This can help prevent malicious software from communicating with attackers or spreading further across the network.
7. Run a Security Scan
Once you’ve spoken with your IT provider, run a full security scan on the affected device.
Ensure your antivirus or endpoint protection software is fully up to date before starting the scan.
Look for:
- Malware
- Spyware
- Ransomware
- Trojans
- Potentially unwanted applications
Even if the device appears to be functioning normally, malicious software isn’t always visible to the user.
8. Check for Unusual Activity
Cybercriminals often act quickly once they’ve gained access to credentials.
Keep an eye out for:
- Password reset emails you didn’t request
- New login notifications
- Unrecognised devices
- Changes to account settings
- Missing emails
- Unexpected inbox rules
- Unusual Microsoft 365 activity
Identifying suspicious behaviour early can prevent further damage.
9. Monitor Financial Accounts
If you entered card details, banking information, or payment information, contact your bank immediately.
Don’t wait to see whether anything happens.
Most financial institutions can:
- Freeze cards
- Replace compromised cards
- Add fraud monitoring
- Investigate suspicious transactions
- Secure online banking access
The sooner you act, the better protected you’ll be.
10. Learn from the Experience
Cybercriminals don’t rely on technology alone. They rely on human behaviour.
Most phishing attacks create a sense of urgency, fear, curiosity, or excitement to encourage quick reactions.
Common examples include:
- “Your account will be suspended.”
- “Payment required immediately.”
- “Missed parcel delivery.”
- “Urgent security alert.”
- “Unusual sign-in detected.”
The next time you receive an unexpected email, text, or message asking you to take action, pause for a moment and verify it first.
A few seconds of caution can save hours of disruption.
The Bottom Line
Clicking a suspicious link doesn’t automatically mean you’ve been hacked, but it should always be taken seriously.
The key is to act quickly.
Stop interacting with the site, contact your IT provider, secure your accounts, and investigate the situation before it has a chance to develop into something more serious.
At Bury St Edmunds IT, we help businesses across Suffolk stay protected from phishing attacks, cyber threats, and account compromises every day.
How to spot & report phishing scams | National Cyber Security Centre
