Opened a phishing email on your iPhone? What to do next
Quick answer
Opening a phishing email on your phone is usually not the danger. Clicking a link, opening an attachment or typing in details is. If you only opened it, delete it and report it. If you clicked or replied, update your phone's software and follow the steps below.
- Last updated
How it works
Phishing emails and texts tell a story so you'll click a link or open an attachment. The FTC says the message often looks like it's from a company you know, such as a bank, a credit card or utility company, or a payment app.
The story is usually one of these:
- Suspicious activity or log-in attempts on your account (there weren't any).
- A problem with your account or payment information (there isn't one).
- A request to confirm personal or financial details (a real company won't ask this way).
- An invoice you don't recognize, a refund you're "eligible" for, or a coupon for free stuff.
The goal is to get your passwords, account numbers or Social Security number, or to put malware on your device. If they get that information they can reach your email, bank or other accounts, or sell it to other scammers.
Red flags
- A generic greeting instead of your name
- A claim that your account is on hold or there's a billing problem
- A link to update payment details: real companies don't ask this way by email or text
- An invoice, refund or coupon you didn't expect
- An attachment you weren't expecting
- Pressure to act right now
Example message
Your account has been placed on hold because of a billing problem. To avoid losing access, update your payment details here: [link]
What to do
- 1
Only opened it? Delete it and report it
Don't click anything inside. Forward a phishing email to reportphishing@apwg.org (the Anti-Phishing Working Group), then delete it. Report it to the FTC too.
- 2
Ask: do I have an account with this company?
If not, it's likely phishing. If you do, contact the company using a phone number or website you already know is real, not the details in the message.
- 3
If you clicked a link or opened an attachment
Update your phone's and computer's software and security software, then run a scan and remove anything it flags. The FTC warns that links and attachments can install harmful software.
- 4
If you typed in a password or card number
Change that password right away, and anywhere you reused it. Turn on multi-factor authentication. Call your bank or card issuer using the number on your card.
- 5
If you gave your Social Security number or other identity details
Go to IdentityTheft.gov for the steps that fit what you shared. Our guide on what to do after a data breach covers passwords and credit freezes.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Phishing emails reach you because scammers have your email address, often from a data breach or a people-search site. Messages that use your real name or mention a company you actually use come from the same places.
Serus finds where your email, phone number and address are exposed and removes them where it can, and alerts you when your details turn up in a breach, so fewer scammers can write to you with a convincing story.
Frequently asked
Can I get hacked just by opening a phishing email?
The FTC's advice centers on links and attachments: they can install harmful software. Don't click anything in a message you weren't expecting, and keep your phone's software set to update automatically.
I clicked a link but didn't enter anything. Now what?
Update your security software, run a scan and remove anything it finds. Then watch your accounts. If you later see something odd, go to IdentityTheft.gov.
How do I report a phishing text?
Forward it to SPAM (7726), then report it at ReportFraud.ftc.gov.
How can I make my accounts harder to take over?
Turn on multi-factor authentication where it's offered. It makes it harder for a scammer to log in even if they have your password.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
