Clicked a fake shopping link? Do this

• Disconnect devices from the internet to contain potential malware
• Run security scans and change passwords for all critical accounts
• Call 1930 or report via cybercrime.gov.in to report financial fraud

It’s a moment of pure panic: you clicked on a shopping link that seemed legitimate, but now your gut tells you something is wrong. Take a deep breath. Acting quickly and calmly can make all the difference in protecting your information.

Step 1: Disconnect Your Device Immediately

The very first thing you should do is cut off the potential threat. Disconnect your device from the internet by turning off your Wi-Fi and mobile data. If your device is connected via an Ethernet cable, unplug it. This helps prevent any malware that might have been downloaded from communicating with the scammer's servers or spreading to other devices on your home network. It's a simple but crucial step to contain the situation.

Step 2: Do Not Enter Any Information

This may seem obvious, but it's the most critical rule. If the suspicious link has taken you to a webpage that looks like a login page, a payment gateway, or a personal information form, do not type anything. Close the browser tab immediately. Scammers create fake websites that look identical to real ones to trick you into giving away passwords, credit card numbers, and other sensitive data. Clicking the link is one thing; providing your details is where the real damage is done.

Step 3: Run a Full Security Scan

Once disconnected, use a reputable antivirus or anti-malware program to run a complete scan of your device. This will help detect and remove any malicious software that might have been installed without your knowledge when you clicked the link. If you don't have security software installed, you may need to use another 'clean' device to download it onto a USB drive and then install it on the potentially affected machine.

Step 4: Change Your Passwords

If you entered a password on the suspicious site, or even if you're just being cautious, it's time to change your credentials. Start with your most critical accounts: email, banking, and any social media accounts linked to payment methods. When you do this, make sure you are on the official website, not the one from the suspicious link. If you reuse passwords across multiple sites—a common but risky habit—you must change them everywhere, as attackers will try the stolen password on various platforms.

Step 5: Monitor Financial Accounts and Alert Your Bank

Keep a close eye on your bank and credit card statements for any transactions you don't recognise, no matter how small. If you entered any financial details, contact your bank or credit card provider immediately. Explain that your information may have been compromised and ask them to freeze your card or account. In India, you can call the national cybercrime helpline at 1930 to report financial fraud, which can help in getting fraudulent transactions frozen quickly.

Step 6: Report the Incident

Reporting the scam helps authorities track down criminals and prevents others from falling victim. In India, you should file a formal complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. This government portal is the official channel for reporting all types of cybercrime, including online shopping fraud and phishing. You can also call the National Consumer Helpline at 1915 for disputes related to e-commerce. Be prepared to provide details like the suspicious link, screenshots, and any transaction IDs if applicable.