Don’t panic. In many cases, a single click doesn’t cause damage — the harm usually happens after you enter details, install something, or approve access. Follow the steps below to reduce risk fast.
If you typed in a password, banking login, card details, or a code — treat this as urgent. Jump to Urgent actions below.
Choose the closest match — then follow the steps for that scenario.
You didn’t enter details or download anything.
Password, bank login, card details, or a code.
A file, app, or “security update”.
These steps reduce risk even if you only clicked once.
Close the website completely. Don’t re-open it “to check”. Don’t call numbers shown on the page.
Paste the original message and the link (if visible) into KiwiScan. It will classify the risk and tell you the safest next step.
If anything downloaded, or your phone/browser behaved strangely, run a security scan and remove anything suspicious.
Do the items below that match your situation:
If you typed anything sensitive, treat this as time-critical.
Payment scams require bank action straight away. Even if you’re not sure, treat it as urgent.
Common questions after clicking a suspicious link.
Usually, the bigger risk starts when you enter details, install an app, or approve permissions. That said, some malicious sites can exploit old browsers. If your device is outdated, treat it more seriously.
Deny it. If you allowed notifications, remove permission in your browser settings straight away. Scam notifications can keep pushing fake warnings and “support” numbers.
Uninstall it immediately. Then check app permissions and security settings. If it asked for Accessibility or Device Admin access, remove those permissions before uninstalling if possible.
No. Replying confirms your number/email is active. Block and report instead.