Private incident response

Phishing First Aid

Choose what happened and get an immediate, local action plan for accounts, devices, payments, work systems, evidence, and reporting.

Tool guidance

How to use this tool

All selections and the generated plan remain in this browser tab. No email address or incident report is collected.

Select every interaction that happened.

Create the plan without entering personal details.

Start with the highest-priority trusted-channel actions.

Preserve evidence and follow workplace or financial procedures.

The checklist is general guidance, not remediation.

Urgency depends on the action—not on demographic data.

The tool never contacts another organization for you.

Navigate independently to the official account or bank.

Contact workplace security for managed accounts or devices.

Preserve evidence before deleting a message or file.

Research-informed, not a guarantee

Manipulation cues are evidence, not proof. One urgent, authoritative, emotional, or personalized phrase cannot establish phishing.

Technically experienced users can still be deceived. Self-reported knowledge is not treated as proof of resilience.

Age, gender, nationality, education, profession, and other demographic attributes are not collected or used in results.

No score here is claimed to be scientifically validated. Independently verify sensitive requests through an official channel.