What to do if you’ve responded to a phishing scam