How to Recognize a Fake Chrome Update Popup

Chrome updates itself in the background. It never asks you to download an update from a website, and it never asks you to copy and paste a command. Any page that does is a scam, usually trying to install malware.

What real Chrome updates look like

• Chrome downloads updates on its own and applies them when you restart it.
• When one is waiting, the button at the top right says Update or changes color.
• You can check any time at Menu → Help → About Google Chrome, or chrome://settings/help.
• Real update messages appear in Chrome's own menus, never inside the page you're viewing.

Signs of a fake update popup

• It appears inside a web page, often a news site or blog that has been hacked.
• It says your browser is "out of date" or "critically vulnerable" and pushes you to act now.
• It downloads a file, often ending in .exe, .msi, .zip or .js.
• It asks you to press Win + R, or open Terminal, and paste something. This trick is known as ClickFix.
• It uses Chrome's logo but slightly wrong wording, colors or browser name.

What these fake updates install

Usually malware that steals passwords, browser cookies and saved data, or gives criminals remote access to your computer. Fake update pages have been one of the most common ways to spread it.

What to do when you see one

1. Don't click anything on the popup, including its close button.
2. Close the tab with Ctrl + W. If the page won't let you, close Chrome from Task Manager.
3. Check for real updates at chrome://settings/help.
4. Delete any file it downloaded without opening it.

If you already ran it

1. Disconnect from the internet.
2. Run a full scan with Microsoft Defender or another reputable antivirus.
3. From a different, clean device, change your important passwords and sign out of other sessions.
4. Turn on two-step verification, and watch your bank and email accounts.

Protect yourself

• Turn on Enhanced protection in Settings → Privacy and security → Security.
• Never paste commands a website gives you into Run, PowerShell or Terminal.
• Keep Windows or macOS updated too.

Clipboard Guard stops sites from reading your clipboard. It doesn't stop a page from putting a command on it, so the rule above still matters. See also how to download files safely and spotting malicious notifications.