IPHONE · PHISHING LINK · RECOVERY

What to Do After Clicking a Phishing Link on iPhone

Do not panic and do not keep testing the link. What you should do next depends on whether you only opened the page or also typed information, downloaded a file, approved a prompt, or installed a profile.

Reviewed July 31, 2026 · Based on current official safety guidance

THE SHORT ANSWER

Close the page, do not enter anything else, and update iOS. If you typed a password, change it on the real service and review its signed-in devices. If you shared payment details, call the card issuer now. If you installed a profile, app, or file, remove it and seek support. Merely opening a page is not the same as giving away a password—but outdated iPhones can be exposed to malicious web content.

A person closes a suspicious page and pauses before taking the next step
Close the page first. Then respond to any information or access you actually gave it.
01

Do these five things now

  1. Close the tab. Do not revisit the link to investigate it.
  2. Open Settings → General → Software Update and install the latest iOS available for your iPhone.
  3. Delete any file or app the page told you to download. Do not open it.
  4. Check Settings → General → VPN & Device Management. Remove an unknown profile you installed, unless the iPhone is managed by your employer or school.
  5. Report the message as junk, block the sender, and keep a screenshot if money or identity theft may be involved.
02

Match the response to what happened

  • You only opened the page: Close it and update iOS. Watch for unexpected account alerts.
  • You entered a password: Go to the real service directly, change the password, sign out unknown sessions, and enable two-factor authentication.
  • You entered card or bank details: Contact the issuer using the number on the card or its official app and ask about blocking the card and disputed activity.
  • You shared a one-time code: Tell the affected service or bank immediately; a code can complete a login or payment.
  • You approved an app, profile, calendar, or notification: Remove the unfamiliar item and review its permissions.
03

Do not install a random “cleaner”

A phishing page may claim your iPhone is infected and push a security app, configuration profile, phone number, or subscription. Treat that warning as part of the scam. Use Apple's settings and official support channels, and never give a stranger remote access to the phone.

04

Check the message before you act

isReal checks a screenshot of a suspicious text, email, DM, listing, or payment request and explains the warning signs and a safer next step in plain language. It is a second opinion—not a guarantee that a message is safe.

Get isReal for iPhone
05

Quick questions

Can an iPhone be hacked just by clicking a link?

A click does not automatically mean the phone was compromised, but malicious web content can exploit security flaws—especially on outdated software. Close the page and install the latest iOS update available.

Should I reset my iPhone?

Usually not if you only opened a page and installed nothing. If you installed an unknown profile or app, see persistent device changes, or believe the phone is targeted, contact Apple Support before erasing it.

06

Official sources