If the authenticity of an email has fooled you, you should change your account password immediately. If you've accidentally provided online banking details to an attacker, you should contact your bank asap to avoid money being stolen. For social media phishing, the attacker may have sent messages to your contacts, so it's worth letting them know your account has been hacked and to get in touch via another channel (phone, text, WhatsApp).