Fallen for a fake email or text: what to do now

You only opened the link

1. Close the page and enter nothing there.
2. Update your antivirus and have the device checked.

You opened a file or app

1. Disconnect the device from the internet.
2. Update your antivirus and have the whole device checked.
3. Change passwords only from another, clean device.

You entered a password or bank details

1. Change the password right away, first for your email account and for bank and payment accounts. Turn on two-factor sign-in where you can.
2. Call your bank right away. In Germany, cards and online banking can be blocked through the emergency number 116 116. Take the bank’s number from your own papers, never from the message.
3. Check your statements for a while and dispute wrong debits with the bank.

Reporting it

1. If there is damage, report it to the police, online too, through the online police station of Schleswig-Holstein. Keep the message and take screenshots.
2. Tell the real provider the criminals pretended to be.

Sources and further help

• BSI: how to protect yourself against phishing (German) (opens in a new tab)
• Police: phishing (German) (opens in a new tab)
• Consumer advice centre: spotting phishing emails (German) (opens in a new tab)
• Online police station of Schleswig-Holstein (German) (opens in a new tab)

Last updated: 4 November 2026