How to Recognize a Malicious Browser Notification

Websites can send notifications only if you allowed them. Scam sites trick people into clicking Allow, then send fake virus warnings, prizes and adult content that look like system alerts. The fix takes a minute.

How the trick works

A page shows a message such as "Click Allow to prove you're not a robot", "Click Allow to watch the video" or "Click Allow to continue". Clicking it gives the site permission to send notifications, which keep arriving even when the site is closed.

Signs a notification is malicious

• Virus warnings. Websites can't scan your computer. Any web notification saying you're infected is a scam.
• Prizes and giveaways, such as a free phone or gift card.
• Urgent account warnings that link to a login page.
• Adult or dating content you never signed up for.
• A site name you don't recognize, shown in small text on the notification.

Remove them in Chrome on a computer

1. Go to Settings → Privacy and security → Site settings → Notifications.
2. Under Allowed to send notifications, click the three dots next to any site you don't trust → Remove or Block.
3. Choose Don't allow sites to send notifications, or keep the option to ask, but use quieter messaging.

Remove them on Android

1. Open Chrome → Settings → Site settings → Notifications.
2. Tap each unfamiliar site and block it.
3. Or long-press a notification, open its settings and turn notifications off for that site.

If you clicked a notification

• Close the page. Don't download anything or enter details.
• If you entered a password, change it now from a trusted page, and turn on two-step verification.
• If you downloaded and ran a file, run a full antivirus scan.
• If you paid for anything, contact your bank.

Prevent it

• Never click Allow on a page that says it's needed to continue, watch or verify. Real CAPTCHAs never ask for notifications.
• Run Chrome's Safety Check occasionally. It can flag sites that send lots of notifications.
• Turn on Enhanced protection in Settings → Privacy and security → Security.

For a calmer setup, see managing notifications for focus, and for a related scam, fake Chrome update popups. To stop sites from quietly reading your clipboard, Clipboard Guard blocks clipboard reads.