SEE THE SITUATION

You clicked. The next action matters.

You opened a shared-file link, and now the page seems wrong. Stop interacting and close it. Do not enter more information, approve prompts or revisit it to gather proof. A click alone does not establish a compromise. Report through your trusted company contact so the team can decide what needs checking.

YOUR GOAL

Make a prompt, useful report and get the right help for the action you already took.

Right after an unexpected click

StopNo more clicks, downloads or approvals.

Close the pageDo not reopen it to investigate.

Report nowTell IT what you did and whether anything downloaded or ran.

You do not need to diagnose the incident before reporting it.

Training example · fictional details

Keep these essentials

After a click, stop interacting and report what happened. After a password or access approval, contact IT immediately and secure the account through a known-safe route.

For files that ran, stop sensitive work and follow containment instructions. Preserve evidence. Operational equipment requires the site safety and incident procedure.

For money or data already sent, contact the responsible response team promptly. Never include actual passwords or codes in your report.

Download the response field guide ↓