So I got a message claiming that they are the ‘ATO’. and mentioned that there was an immediate action required. They provided a hyperlink to their ‘website’. I pressed on the link and provided my email and password. But my password wasn’t my actual password for ato, but it still went through. Then proceeded to show sms code but I didn’t get a code.
I already changed my email and password but I am unsure if my account or banking details is compromised. What should I do next?