Stop interacting with the page. If you entered information, approved a prompt, downloaded a file, or installed anything, contact your IT team immediately. Fast reporting can prevent a small mistake from becoming a larger incident.
If you entered a password
- Use a clean device to change it through the real website.
- Tell IT which account was involved.
- Review MFA methods, active sessions, forwarding rules, and recovery details.
- Change reused passwords elsewhere.
If you downloaded or installed something
Disconnect the device from the network and do not delete evidence or keep experimenting. Call a trusted technician so the device and related accounts can be checked properly.
This page provides general security guidance, not a guarantee that any individual message is safe. When money, passwords, remote access, or sensitive records are involved, verify through a separate trusted channel.