FIRST STEP Stop interacting with the page immediately. Do not enter passwords, payment details, verification codes, or personal information. IF YOU ENTERED INFORMATION Write down what you entered, such as username, password, MFA code, payment details, or personal data. Report the incident right away. IF A FILE DOWNLOADED Do not open it. Leave it in place unless your support or security team instructs you otherwise. IF YOU USED A PASSWORD Change that password from a trusted device or browser. If you reuse the same password anywhere else, change it there too. WHAT TO INCLUDE IN A TICKET Include the email subject, sender, approximate time clicked, link destination if visible, what you entered, and screenshots if available. WHY SPEED MATTERS Fast reporting helps contain account compromise, malicious forwarding rules, payment fraud, and malware.