2026 Pub. 20 Issue 2

What to Do If You Click on a Phishing Link Even experienced employees can accidentally click on a phishing email, but what matters most is how you respond. Whether it’s a test or a real attack, here’s what to do if you click on a phishing link. If you’ve clicked on a phishing test, take a breath — it’s a learning opportunity, not a failure. • Don’t panic. These tests exist to help you recognize patterns and improve. • Take a moment to review what made the email convincing. • Report your click if your company tracks test results. Transparency helps improve training. • Apply what you learned so you’re ready if a real phishing attempt lands in your inbox. If you’ve clicked on a real phishing email, speed matters. • Disconnect from the network if possible. • Alert your IT or security team immediately so they can contain potential risks. • Change any passwords you entered, or that might have been exposed. • Keep an eye on your accounts for unusual activity or login attempts. • Follow any additional steps your IT team recommends for incident response. By responding quickly — and honestly — you help protect your organization and turn a stressful moment into a valuable lesson. What I Learned After the embarrassment wore off, I shared my experience with the team. If I can fall for it, anyone can. The point of phishing tests is to train, not shame. Now, every email gets my attention. I slow down, hover, verify, ask questions and remind myself that even the best of us need reminders. Cybersecurity isn’t just about firewalls and filters — it’s about people. This article was originally published on sbscyber.com. SBS helps business leaders identify and understand cybersecurity risks to make more informed and proactive business decisions. For more information, contact Julia Miller at julia.miller@sbscyber.com. 16 NEBRASKA BANKER

RkJQdWJsaXNoZXIy MTg3NDExNQ==