Clicked a Phishing Link? Account Recovery Steps for Malaysia

Start with what happened, not the message's claim

Phishing can use texts, emails or calls to send people to a deceptive page that seeks information or distributes malware. NCSC guidance treats these as attempts to trick the recipient; a professional-looking message is not a reliable identity check.

• Only opened a page: close it, avoid further interaction and check whether anything downloaded or any permission prompt was accepted.
• Entered a password: treat that credential as exposed, including other accounts where you reused it.
• Approved a code, sign-in or account connection: tell the provider exactly what you approved and review its account-access controls.
• Installed an app or extension: include device cleanup in your response. Changing a password on a compromised device may leave the new credential exposed.

Sources: NCSC: Phishing scams · Google: Remove malware on Android

Recover access through a route you open yourself

For a Google account, Google's recovery guidance directs people who cannot sign in to its own recovery process. If you can sign in, review recent security events and recognised devices, then follow the prompts for activity that was not yours. Change exposed passwords and correct unfamiliar recovery contact details.

Prioritise the email account used to reset other passwords, while handling urgent banking exposure separately. Do not share recovery codes with someone in a chat claiming to be an employee. Keep a private list of affected services so that securing one account does not make you overlook another.

Sources: Google: Secure a compromised account

Look beyond the password

In Gmail, check forwarding rules, filters and delegated access that you did not create. Review connected apps and devices, and strengthen sign-in protection using the provider's supported options. These checks matter because account misuse can involve settings and access permissions as well as a stolen password.

Other services use different controls and recovery steps. Open their official help centre rather than assuming that a Google menu path applies everywhere. If a work account is involved, inform your IT or security team through a known contact channel.

Sources: Google: Secure a compromised account

If payment details or money were involved

Use the bank's contact information from its official app, website or your card. Explain whether you entered banking credentials, revealed an approval code, authorised a transfer or noticed an unfamiliar transaction. These details help the bank understand the event.

For financial scams in Malaysia, BNM directs victims to contact their bank or NSRC 997 promptly and lodge a police report. Ask the bank for a case reference and the next step. Account recovery does not automatically reverse a transfer.

Sources: Bank Negara Malaysia: Financial scam response

Make the follow-up manageable

An unexpected person offering to restore everything for a fee may be attempting another scam. Keep recovery discussions within the official provider channels you have verified. You can preserve a screenshot of the offer and stop replying.

• Write down the message's arrival time, the link's address and what you entered or approved.
• Record each provider contacted, its case reference and any action it asks you to take.
• Check for later alerts through the genuine app or account page, rather than links in new messages.
• If your account sent suspicious messages, warn affected contacts through a separate trusted channel without forwarding the malicious link.