What to do after visiting a scam website
Visiting a bad site is not the end of the world. What you did there decides what you need to do next.
If you only opened the page
Close the tab. Modern browsers isolate pages, so just looking rarely causes harm. Do not click pop-ups. Keep your browser and system updated.
If you typed a password
Change it on the real site now, and on any other site where you used it. Turn on two-factor sign-in, and sign out other sessions.
If you entered card or bank details
Call your bank or card issuer, tell them, and ask them to block or replace the card. Review recent transactions. Ask about disputing any charge.
If you downloaded or installed something
Disconnect from the internet, run a scan with a trusted security tool, remove anything you do not recognize, and change passwords from a clean device. If it asked for remote access, treat the machine as compromised.
If you gave out ID or personal data
Consider a credit freeze or fraud alert where your country offers them, and watch for follow-up scams that use the details you gave.
Report it
Report to your national fraud or consumer agency, and to your bank if money moved. You can also leave a report on CheckMySource so others see what happened.
Check the site you are about to use
Type a website and see what people reported about logging in, paying, uploading files and writing notes. No account needed.
Common questions
Can I get a virus just by visiting a website?
What if I already sent money?
Should I report the scam website?
More guides
General information, not legal or financial advice. Ratings on CheckMySource report what people said; they are not audits. How ratings work.