If you click a suspicious link, report it quickly.
Do not wait to see whether something bad happens.
Tell your IT team what you clicked, when you clicked it, and whether you entered a password, downloaded a file, or approved an MFA request.
If you entered your password on a suspicious site, the password may need to be changed immediately. IT may also review sign-in activity, revoke active sessions, and check for mailbox changes.
If a file was downloaded or opened, the computer may need to be scanned or isolated from the network.
The most important thing is speed.
Employees should never feel that hiding a mistake is safer than reporting it. Many security incidents become much worse because the first warning was delayed.
Fast reporting gives the business more options to contain the problem while it is still small.