What to Do After You Clicked

If you clicked, do not panic. Panic wastes time.

What matters now is sequence.

If you only opened the page

• close it,
• do not enter anything,
• scan your device if something downloaded,
• avoid reopening the link out of curiosity.

If you entered credentials

1. Change the Instagram password immediately.
2. Check active sessions and log out unknown devices.
3. Enable or reset 2FA.
4. Verify recovery email and phone number.

If you shared a 2FA code

Treat it as urgent compromise. Review linked email security too, because email is often the next target.

Why email matters so much

Attackers often use Instagram as the first compromise, not the last.

If they can access your email, they may:

• reset more accounts,
• suppress warning emails,
• change recovery settings elsewhere.

That is why post-phishing recovery often extends beyond Instagram.

Final step

Warn close contacts if the attacker may have used your account to message them.

This does two things:

• it protects others,
• it stops your compromised account from becoming the next phishing tool.

Recovery priority list

Flashcards