1. Safety Center: Security

Help! I Think I've Been Phished!

If you think you've given confidential personal information to a phishing site, then follow these guidelines to help prevent your information from being used illegally by fraudsters. Do not delay — fraudsters can move quickly to take over your account and do substantial damage.

I think my Yahoo ID was phished!

If you think you entered your Yahoo ID and password at a phishing site, then follow these steps:

  • Change your Yahoo password immediately by doing the following:
  • Type profiles.yahoo.com in your browser's URL bar.
  • Sign in to Yahoo.
  • Click the tools icon and click the Account Info link.
  • On the Account Info page under the security section, click the Change Password link, and follow the instructions.
  • If your password no longer works, tell us so that we can start the account recovery process.
  • On the Account Info page, verify the rest of your account information; be sure any contact phone numbers or secondary email addresses are correct.
  • On the Account Info page, go to "Update password-reset info" and change your questions and answers.
  • Report the phishing email or website that tricked you.

I think I gave my bank account or credit card information to a phisher!

If you suspect you might have entered any financial information at a phishing site, contact your financial institution immediately!

You may also want to follow the advice of the Federal Trade Commission (FTC) for identity theft victims.