Що робити одразу після потрапляння на шкідливе посилання: інструкції після фішингового нападу

A suspicious message doesn’t always mean data loss, provided you act correctly within the first hour.

Fraudulent messages in messengers can disguise themselves as requests from acquaintances, bank notifications, payments, giveaways, or urgent warnings. After receiving them, do not click on any links or enter any information, even if the text appears convincing.

The cyber police warn that phishing campaigns can lead to fake pages designed to collect personal and banking information. The department advises verifying organizational accounts and obtaining important information only from official sources.

Signs that a message may be fraudulent

Demands for immediate action, promises of easy money, unusual link addresses, errors in the text, and requests to disclose SMS codes should raise suspicion. Even if the message comes from a friend, their account might have been compromised – it’s better to verify the request through another channel.

A phishing site may be designed to look like the page of a bank, government agency, or popular service. Access official websites through search engines or apps, not through links in chats. We previously discussed a scheme involving fake bank rewards.

What to do if you have only received a message

If you haven’t clicked the link, do not reply to the sender and do not send any information. Take a screenshot of the message, including the account name, time of receipt, and the link, then block the sender and report the message within the messenger itself.

Do not delete the chat immediately if you plan to contact law enforcement. Saved screenshots, URLs, phone numbers, or usernames will help describe the incident.

What changes if you clicked the link

If you opened the page but did not download anything or enter any information, close it and do not leave any data on it. Do not enter your phone number, password, card details, or confirmation code.

If you downloaded a file or app, do not run it. If the file has already been opened or the app installed, disconnect the device from the network and scan it for malware.

If you entered a password, change it on the official website of the service, as well as on other platforms where you used the same password. For messenger accounts, enable two-factor authentication and check the list of active sessions. Additional steps for a compromised Telegram are described in this guide.

If you provided card details or a code

If you have shared your card details, CVV code, banking password, or a one-time code, immediately call your bank using the number from the official website or banking app. Request to block the card, account, or online banking access and to flag the fraudulent transaction. Do not call numbers provided in the suspicious message.

Check your account transactions and report any unfamiliar charges to the bank. If money has already been transferred, ask the bank to register a claim and clarify what documents are needed for further review. Simultaneously, save correspondence and do not continue the dialogue with the fraudsters.

Where to send a complaint and what evidence to save

You can report fraud to the police by calling 102 or by sending a message to the Cyber Police. To file a report, prepare:

• screenshots of messages and the sender’s profile;

• links to the chat, website, or file;

• the fraudster’s phone number, email address, or username;

• the time of the incident and a brief description of your actions;

• payment details – without sharing full card numbers or codes with third parties.

Comments Sort: New Old Popular Send