Oops… You Fell for a Phish. Now what?🛑

Author: Guadalupe Cisneros Ortega

A phishing scam illustration. A fish wearing a fedora and sunglasses holds a fishing rod cast toward a computer screen.  On the screen, a figure points to a suspicious email marked with a red prohibited dollar sign. The text above reads, "Oops... You Fell for a Phish. Now what?"

It happens, don't panic. But do act fast. Falling for a phish isn’t a failure. It’s a reminder that cyber scams are tricky, but you’re in control now.

Here’s what to do if you clicked a sketchy link or shared info you shouldn’t have.

  1. 🔐Change Your Passwords - Right Away

    1. Start with your university account (email, okta, etc.). Then change any other accounts that use the same or similar password.

    2. Use strong, unique passwords and turn on two-factor authentication (2FA) wherever you can.

    3. Need help creating and managing strong passwords? Check out 1Password, a secure and easy to use tool provided at no cost to Notre Dame faculty, staff and students to keep your accounts safe.

  2. 📨Report It - Help Protect Others

    1. Forward the suspicious email to phishing@nd.edu.

    2. Not sure it was phishing? Send it anyways. It's better to be safe, and your report helps stop phishing attacks from spreading.

  3. 🖥️If You Clicked or Downloaded Something…

    1. Disconnect from Wi-Fi.

    2. Contact the Infosec team immediately at infosec@nd.edu so we can help scan and secure your device.

    3. Don’t log in to anything sensitive until your device is clean.

  4. 👀Keep an Eye on Your Accounts

    Watch for:

    1. Password reset emails you didn’t request

    2. Unexpected 2FA authentication requests

    3. Unusual activity in your email apps

    4. Suspicious charges or notifications

  1. 🚨Gave Away Info? Take Action Now

    If you entered personal details (like your bank login, payment information or student ID):

    1. Contact that provider right away

    2. Lock or reset your account

    3. Consider fraud alerts or credit monitoring

    4. If you suspect identity theft or fraud, contact campus police or local law enforcement

  1. 💭Need help?

    Reach out to the Infosec team infosec@nd.edu. We’ve seen it all, and we’re here to help you through it.

If you fall for a phish, remember: Act quickly. Report it. And stay alert. 💪

For more information on phishing please refer to the following knowledge based articles: