I clicked on a spam email last night I evidently shouldn't have clicked on and my bank stopped my debit card after an attempted $500+ expedia charge. My account is fine, that was the only charge attempted, and I'm getting a new card in about a week.

My problem is, I ran antivirus + malware scans and nothing turned up. I don't have any recently installed programs either. But I don't know what, if anything, else I can do to make sure that my new card information will be safe when I log in and update my information. I haven't changed any passwords or anything because, a) multiple scans didn't turn anything up and b) nothing seems to have been messed with besides the attempted charge that I never even saw in my banking information.

What happened when you clicked on the email? Did you get redirected to a site that asked for your login info? If so, clearing your computer's cookies and changing your password should help. What probably happened is they set up a fake site that looked legitimate in order to steal your information.

Also, if any of your other accounts have the same password, you shouuld change those as well.

Nope, nothing happened. I opened the email, realized it was not actually from the site it said it was from, went back into my spam folder and deleted it. But, I know that I did that around the same time as the charge was attempted (I got out of the shower just after 10pm, and went to bed by 11. I was told that the expedia charge was attempted around 10pm last night).

But I haven't put my information into any sketchy sites or anything; the only out of the ordinary thing I did allowed me to pay through amazon and iirc was over a week ago (and I also ordered form kmart but I doubt they tried to charge a flight to my account lmao) [edit] I did just clear my cache and cookies though. Would it be safe to change my important passwords now then? The scans didn't turn anything up from before my cookies were cleared but I'd like to change them just in case, at least anywhere that I save my card information, before I put my new card in.

Your antivirus is not 100% safe and can't prevent everything. Peharps the tracker is already gone too and it had the time to do some damage. I'd change my passwords, just to be sure.

I know it can't prevent everything, but I would have expected it to find something in a scan, you know? I've never had this happen but I've had viruses before and thought I would be able to find something, whether it was antivirus or antimalware or just a weird program in my list (and this is a brand new computer so I'm currently on a free trial of the premium version of both).

But, if it's safe to change my passwords now then I'll do it; that's not a problem, I just didn't want to end up giving the new information to whatever it was that got my old information

I wouldn't worry about it too much but I would change important passwords just to be certain and monitor your bank account for about a week. If nothing happens after that point, you're in the clear.

Thanks c: I do tend to check my account pretty often, because I try not to spend too much on random shit. And then all of a sudden I tried to buy CSC yesterday and it got declined (though the bank also called me later in the day to let me know anyway). But my account looked fine, so hey at least the bank caught it right away c: