It happens, don't panic. But do act fast. Falling for a phish isn’t a failure. It’s a reminder that cyber scams are tricky, but you’re in control now.
Here’s what to do if you clicked a sketchy link or shared info you shouldn’t have.
-
🔐Change Your Passwords - Right Away
-
Start with your university account (email, okta, etc.). Then change any other accounts that use the same or similar password.
-
Use strong, unique passwords and turn on two-factor authentication (2FA) wherever you can.
-
Need help creating and managing strong passwords? Check out 1Password, a secure and easy to use tool provided at no cost to Notre Dame faculty, staff and students to keep your accounts safe.
-
📨Report It - Help Protect Others
-
Forward the suspicious email to phishing@nd.edu.
-
Not sure it was phishing? Send it anyways. It's better to be safe, and your report helps stop phishing attacks from spreading.
-
🖥️If You Clicked or Downloaded Something…
-
Disconnect from Wi-Fi.
-
Contact the Infosec team immediately at infosec@nd.edu so we can help scan and secure your device.
-
Don’t log in to anything sensitive until your device is clean.
-
👀Keep an Eye on Your Accounts
Watch for:
-
-
Password reset emails you didn’t request
-
Unexpected 2FA authentication requests
-
Unusual activity in your email apps
-
Suspicious charges or notifications
-
-
🚨Gave Away Info? Take Action Now
If you entered personal details (like your bank login, payment information or student ID):
-
-
Contact that provider right away
-
Lock or reset your account
-
Consider fraud alerts or credit monitoring
-
If you suspect identity theft or fraud, contact campus police or local law enforcement
-
-
💭Need help?
Reach out to the Infosec team infosec@nd.edu. We’ve seen it all, and we’re here to help you through it.
If you fall for a phish, remember: Act quickly. Report it. And stay alert. 💪
For more information on phishing please refer to the following knowledge based articles:
- What is phishing? How to recognize a phish or scam?
- What to do if I get a phishing scam?
- What’s the big deal if I give phishing scams my username (NetID) and password?
- How did phishing scams get my email address?
- How do I report spam or phishing email?
- What happens if I provided my personal information to phishing scammers?