If you fall for a phishing scam at work, you should tell your IT department right away.

Don’t feel bad if this happens. Phishing scams evolve all the time, and anyone who thinks they can’t be scammed is sadly mistaken. 

If you think you’ve given a password to a scammer (for instance, by entering it into a fake login page) you should also change it urgently.