🚨 What to Do If You Gave Personal Info to a Phishing Email

If you've accidentally shared personal information in response to a phishing message, immediate action is critical to minimize damage and prevent identity theft or financial loss. Here's a step-by-step response plan.

🔐 Step 1: Change Your Passwords Immediately

Start with the compromised account first.
If the same password was used elsewhere, change it everywhere it's reused.
Use strong, unique passwords created by a password manager.
Enable Multi-Factor Authentication (MFA) for all important accounts.

📞 Step 2: Contact the Impersonated Organization

If the phishing email claimed to be from your bank, credit card provider, PayPal, IRS, etc.:

Visit the official website directly or call the number on the back of your card.
DO NOT use contact info from the phishing email.
Inform them about the phishing attempt and follow their advice.

🧾 Step 3: Secure and Monitor Your Accounts

✅ Email and Online Accounts

Check for unauthorized changes:

Recovery emails or phone numbers
Forwarding rules
New devices or logins
Remove unfamiliar entries and sign out from all sessions.

💳 Financial Accounts

Monitor bank/credit card statements for unauthorized activity.
Contact institutions about fraud alerts or temporary freezes.
Set up transaction alerts if supported.

📈 Credit Reports

Place a fraud alert or security freeze with the major bureaus:

- Equifax
- Experian
- TransUnion
- Innovis

🦠 Step 4: Scan Your Device for Malware

Run a full scan using trusted antivirus or anti-malware software.
Ensure your OS, browser, and software are fully updated.

If malware is suspected:

- Disconnect from the internet
- Avoid accessing sensitive accounts until device is clean

📤 Step 5: Report the Incident

Target	Where to Report
General phishing	reportphishing@apwg.org
Spam & scams	spam@uce.gov
Financial/investment scams	https://reportfraud.ftc.gov
Your email provider	Use “Report Phishing” in Gmail, Outlook, etc.
Work-related breaches	Notify your IT/security team immediately
Money transferred	Contact your bank and local law enforcement
SSN exposed	https://www.ssa.gov/fraud/

🧠 Bonus: Checklist for Fast Action

Changed passwords and enabled MFA
Contacted impersonated org (bank, retailer, etc.)
Verified account settings (email, social media, financial)
Scanned device for malware
Checked credit reports
Reported phishing email
Alerted IT or police (if applicable)

The faster you act, the more control you retain. Don't wait — contain the damage and take back your security.