Short answer: What you entered or downloaded matters more than the click alone.
Try these steps
- Close the page and do not approve downloads, sign-in prompts or remote access.
- If you entered credentials, use the real service on a trusted device to change the password, review recent activity and signed-in devices, remove unfamiliar sessions, check recovery details and enable two-factor authentication.
- If software ran, stop using the device for sensitive activity and contact your IT provider.
When to ask for help
For a business device, report the incident quickly and preserve the message and timeline for investigation.
Learn more
Learn more: read this article — Google: Secure a compromised account. Menu names and available features can vary by device, software version and account type.
Browse the Technology Help Center · Ask Basin Tech about this issue