Hello [Recipient Name],
Thank you for reaching out about responding after clicking on a suspicious email related to benefits or payroll. We know these situations can be confusing or time-sensitive, so we want to walk you through the process as clearly as possible.
Below is a detailed walkthrough designed to give you clarity about why this issue may be occurring, what you should expect at each stage, and how to resolve it even if something doesn’t behave exactly as described. Please work through the steps in order and pause anytime you need more help.
- Immediately stop interacting with the email—do not reply or open additional attachments or links.
- If you entered any usernames or passwords, change those passwords right away using the official corporate password tools.
- Disconnect from the network if instructed to do so by your security team.
- Report the incident to your IT security or cybersecurity contact following your organization’s procedure.
- Forward the suspicious email to the designated security mailbox, if allowed, or provide screenshots.
- Follow any additional steps provided by IT, such as running antivirus scans or allowing remote support.
- Stay alert for follow-up phishing attempts or unusual account activity and report anything suspicious immediately.
In many cases, completing these steps resolves the issue without any further action. If something on your screen looks different from what is described here, make a note of what you see so you can share those details if you contact support.
If these steps do not resolve the problem, please include the details you gathered (error messages, times, screenshots, and what you already tried) when you contact IT. This information helps the support team diagnose and fix the issue faster.
We hope this was helpful and closes your issue, if not please reply to this issue or open a new one within the application. Thank you.
Click here to give us feedback on our response to your issue