Choose what happened. If more than one applies, follow each relevant step.
Opened the page
Close the tab. If you entered information, paid, or downloaded anything, follow the matching steps below.
Entered a password
Open the real service independently and change the password immediately. Sign out other sessions, turn on multi-factor authentication, and change the password anywhere else you reused it.
Paid money or shared card details
Call your bank or payment provider using the number in its official app or on your card. Ask what can be blocked or disputed and keep copies of the messages.
Downloaded a file
Leave it unopened. If you ran it, disconnect the affected device from the network and contact your IT team or a trusted support provider using another device.