<prompt> Human: Its rather early and I guess her email didnt filter it automatically, but she logged into a fake paypal and it said she needed to update her info.Long story short she put in her CC info, I told her to call the bank when they open, as well as change her paypal info. Is there anything she should do right now to protect herself?Edit: Shes worried about her debit information as well, she said she put her debit card number and her password for her bank account, but I called her before she submitted and she didnt submit it. She changed her bank password just to be safe thoughAssistant: Did the site ask for her SSN? If so, she should freeze her credit.Human: It did but she said she didnt submit it with hers, that it didnt fit and she just erased it. I told her to call the number on the back of her CC like dswpro suggested. I may have to go over internet safety with her when Im back  <response>: Web developer here, A fake website could easily track individual keystrokes, so even though it didnt fit, it could definitely have been sent to the bad guys. Take that into consideration before moving forward. Its possible they designed it like that on purpose to fool you into thinking youre safe for not sending it over. 