First: stop interacting with the page.
Close it. Do not download anything, accept notifications or continue entering information.
If you did not enter information or install anything
- Close the browser tab or app.
- Check the device for any download you did not expect. Do not open it.
- Install pending updates for the device, browser and security software.
- Report the suspicious email to report@phishing.gov.uk or forward a suspicious text to 7726.
If you entered a password
Change that password using the genuine app or a website address you know. Change it anywhere else you reused it. Start with your email account, then turn on an extra sign-in check.
If you entered card or bank information
Contact your bank immediately using its official app or the number on your card or statement. Explain exactly what you entered and follow its instructions.
If you installed software
Disconnect the device from the internet if you believe somebody has remote control. Use a different trusted device to change important passwords and contact your bank. Seek reputable technical support to inspect the affected device.