Precautionary Credential Reset After a Possible Bank Scam

If you can't rule phishing out within an hour, treat it as confirmed and rotate credentials anyway.

What to do

• Change the bank password and your primary email password from a clean device
• Sign out of all sessions on email, bank app and any account that shares the bank password
• Cancel and reissue the card if you ever entered details on a suspicious page
• Run a malware scan on the device you bank from before logging back in