TalkScams Team · Educational guide · Reviewed 2026-11-07

Entered your password on a fake bank website? Immediate steps

If a bank login was entered into a suspected phishing site, act quickly through official banking channels. Password changes and account monitoring are more urgent than buying an optional product.

What to do now

  1. Do not sign in through the suspicious link again. Open your bank app yourself or type the bank address you independently know.
  2. Contact the bank fraud department using a trusted phone number and explain which information was entered. Follow its account-lock or card-replacement guidance.
  3. If you can safely sign in, change the affected password and any reused passwords. Turn on multifactor authentication and review recent transactions.

Follow-up checks and reporting

  1. Preserve the phishing message and website address without forwarding personal credentials to other people.
  2. Watch for unauthorized transfers and new payees; report anything unexpected to the bank promptly and ask about its dispute process.
  3. Report the attempt to your official national fraud reporting service. If account access was lost, use the bank’s official account recovery pathway.

Watch for a follow-up scam

  • Someone asks you to move money to a so-called safe account.
  • A follow-up caller asks for one-time security codes or remote access.

Original source: FTC — What To Do if You Were Scammed

Educational information only. No guarantee of recovery.

Official reporting channels