What to Do If You Tapped a Suspicious Link on Your Galaxy

Frank is 74. One morning he got a text message. It said a parcel could not be delivered, and he should tap a link to fix the address. Frank was expecting a parcel for his grandson. He tapped the link without thinking. A strange web page opened. It asked him to type in details. At that moment, Frank felt a cold worry in his chest. Had he done something dangerous?

Many kind, careful people tap a link like this. Scam messages are made to look urgent and real. They use the names of parcel firms, banks, and phone firms. They try to rush you. Tapping a link does not mean you are foolish. It means the message worked as the sender planned. What matters now is what you do next, calmly and in the right order.

This guide tells you what to do, step by step. Do the steps in order. Do not panic. Do not type in any more details. Do not send money. If you already typed in a password, a bank detail, or a code from a text message, the steps below still help, but you must also contact your bank and Samsung support directly. No guide on the internet can promise that your phone is safe after a suspicious link. Only your bank and the phone maker can advise on your own account and device.

Stop and breathe for a moment. Close the page first. Then work through the rest. If you feel very worried, ask a family member or a trusted friend to sit with you while you do these steps. Two pairs of eyes help. You do not have to fix everything alone, and you do not have to feel ashamed for asking for help.

Step by step: what to do right now

  1. Close the web page at once. Tap the small square button at the bottom of your screen to see open apps, or swipe up from the bottom and hold, depending on your phone. Find the web browser picture. Swipe it away to close it. If the page shows a pop-up that will not close, do not tap the pop-up. Close the whole browser app instead. Do not tap any button on the strange page itself.
  2. Do not type anything else. Do not type your name, your address, a password, a bank card number, or a code from a text message into that page. Do not tap a button that says Download, Install, or Update on that page. If the page asks you to call a number, do not call it from the page. Close the page first.
  3. Do not tap the link again, and do not forward the message. Leave the original message alone for now. Do not tap the link a second time to check it. Do not send the message to friends to ask if it is real. You can show the message to a trusted person on your own phone, but do not forward the link onward.
  4. Clear the browser history for that visit. Open your web browser again, but only after the strange page is closed. Look for the three dots, usually at the top or bottom corner of the browser. Tap the dots. Look for words like History. Tap History. Look for words like Clear browsing data or Delete browsing data. Choose the option to clear recent history. The exact words may differ by browser. If you cannot find it, leave this step and move on. It is helpful, but it is not the most important step.
  5. Check your bank in the safe way, not through the link. If the message pretended to be from a bank, or if you typed any bank detail, do not use the link or a number from the message. Open your bank app in the normal way you always open it, or type your bank web address yourself, or call your bank on the number on the back of your bank card or on a paper statement. Tell the bank what happened, in your own words. Ask them to check your account. Follow what they tell you.
  6. Change passwords from a trusted device, if you typed one in. If you typed a password into the strange page, change that password. Do it on a device you trust, if you can, such as a family computer you know is safe, or on your phone after you have closed the page and cleared the browser. Go to the real site or app in the normal way, not through the link. Use a new password you have not used before. Do not reuse the old password. If the same password is used for email and for other accounts, change those too, one by one.
  7. Turn on extra checks where you can. Many banks and email services offer a second check when you sign in, such as a code sent to your phone. This is often called two-step verification. If your bank or email offers it, turn it on, with help from the bank or from a trusted person if needed. Keep a note of any backup codes in a safe paper notebook, not in a text message.
  8. Watch for strange messages in the next few days. Look out for new texts, emails, or calls that ask for codes, passwords, or money. A real bank will not ask you to read out a full password or a code from a text message. If a new message feels urgent or threatening, stop. Do not reply. Show it to a trusted person or to your bank first.
  9. Block the number if it came as a text or a call. Open the Phone app. Tap More options, the three dots. Tap Settings. Tap Block numbers. Look for the switch for Block unknown or private numbers, and read what it does on your phone. You can also add the single number that sent the message, if your phone shows that choice. Blocking stops that number from calling you again. It does not remove the risk from a link you already tapped, so still do the bank steps above.
  10. Contact Samsung support directly if you are worried about the phone itself. If the page tried to install something, if your phone now acts strangely, if pop-ups keep appearing, or if you shared a code, contact Samsung support through the support details on the official Samsung website or through the Samsung Members app on your phone. Tell them what happened. Do not download a cleaner app or a security app from a link in a message. Only use help from Samsung itself or from a person you trust in real life.

A small practice: Frank and the parcel text

Frank closed the page at once. He did not type his address. He did not type a card number. The page had asked for details, but he stopped before he typed them. That one pause helped a great deal. He then called his daughter. She sat with him while he cleared the browser history. Together they checked his bank app in the normal way. No money had left his account.

Frank also learned a slow check for next time. When a parcel message arrives, he now waits. He asks himself three questions. Was I expecting this parcel? Does the message use my name? Does it rush me with words like now, today, or at once? If the answers feel unclear, he does not tap. He opens the parcel firm app himself, or he asks his daughter to check. Waiting ten minutes has never lost a real parcel. Tapping in a hurry has caused real trouble for many people.

You can practise the same pause. Next time a message feels urgent, put the phone down. Make a cup of tea. Come back after ten minutes. Read the message again slowly. Real firms will wait. Scam messages want you to act before you think. A pause is not rude. It is a good habit, and it protects your money and your details.

Common mistakes

Frequently asked questions

I only tapped the link. I did not type anything. Am I safe?

No one can promise that from a guide alone. Tapping only, with no details typed and nothing installed, is lower risk than typing details, but you should still close the page, clear the browser, and watch for strange messages. If you feel worried, or if the page tried to install something, contact Samsung support directly and ask them to advise on your phone.

I typed my password into the page. What do I do?

Change that password at once, from a trusted device and through the real site or app, not through the link. If you use the same password anywhere else, change it there too. Tell your bank if the password was for banking or email. Turn on a second sign-in check if the service offers one.

Should I turn my phone off?

Turning the phone off will not fix a shared password or a shared bank detail. Closing the page is the first step. If your phone is showing constant pop-ups or acting very strangely, turn it off, then contact Samsung support before you use it for banking again. Follow their advice for your own phone.

Will clearing my browser history remove a virus?

Clearing history removes the record of the visit. It does not, by itself, remove anything that may have been installed. If the page asked you to install something and you tapped it, do not try to fix it with extra apps from the internet. Contact Samsung support directly and describe what you tapped.

What if money has already left my account?

Contact your bank at once, on the number on your bank card or on a paper statement. Tell them the time, the message, and what you tapped or typed. Ask them what they can do. Do not wait until tomorrow. Banks can act fastest when they are told early. Keep the message and any notes about what happened.

If the words on your screen look different

Your browser may not use the same words as this guide. One browser may say Clear browsing data. Another may say Delete browsing data. The three dots may be at the top of the screen on one phone and at the bottom on another. The Phone app menu may show Block numbers in a slightly different place. These differences are normal.

Look for the meaning of the words, not the exact spelling. History means a list of pages you visited. Block numbers means stop a number from calling you. If you cannot find a menu item, open Settings and type a word into the search box at the top, such as Block numbers or History. The search box can help you find the right place even when the words, the order, or the layout differ because of your model, your region, your carrier, or your One UI version, which may be One UI 8, One UI 8.5, or One UI 9. If you are still unsure, ask a trusted person to sit with you, or contact Samsung support directly.