Stop fake security alerts sent as website notifications
Identify the sending website, revoke its notification permission and distinguish a browser push from a real security finding.
In brief
An alarming notification can be a message from a website you once allowed, not a scan by your antivirus. Inspect the sending site instead of clicking its “clean now” button.
Revoking one unwanted permission can stop recurring alerts without reinstalling Windows or the browser.
Identify the source
Look for the website origin displayed with the notification. A browser permission lets the site send messages that look urgent; it does not give the site authority to diagnose your device. Avoid the alert’s phone number, payment link and download button.
Remove the permission
Use the browser’s Notifications settings and inspect the allowed list. Block an unwanted origin or remove its grant as appropriate. On mobile, browser and OS notification settings can both affect display; use the site-level control when you want to stop a specific sender.
Check what happened beyond the message
If you downloaded or ran the promoted software, treat that as a separate exposure and use trusted security help. If you only received messages, do not assume files were infected. Review unfamiliar extensions and downloads, keeping legitimate notifications you still want.
Before you act
Not every alert is a website notification. If a genuine security application reports a detection, open that application independently and inspect its own record.
What to do next
- Inspect the notification’s source without opening its promoted page.
- In Chrome Settings → Privacy and security → Site settings → Notifications, find the allowed sender.
- Block or remove that site’s notification permission, then review suspicious downloads or extensions separately.
