Google is strengthening Chrome’s security with new warnings designed to help users identify suspicious websites and avoid online scams. The update introduces additional protection against deceptive webpages, fake security alerts, and scams that trick people into running harmful commands on their computers. The new Google Chrome scam warnings are part of Google Safe Browsing’s Enhanced Protection mode. They are designed to help users recognise potential threats earlier, particularly as scammers increasingly imitate trusted brands and create convincing fake websites.
Three New Security Protections
Google has introduced three key improvements to Chrome’s scam protection. These include warnings for suspicious websites, expanded Gemini-powered scam detection, and protection against ClickFix attacks. The changes aim to identify potentially harmful activity more effectively and give users clearer warnings before they take risky actions online.
Two Levels of Website Warnings
Chrome now distinguishes between suspicious websites and sites considered dangerous. Suspicious-site warnings appear when a webpage displays deceptive patterns commonly associated with malicious websites, even when there is not enough evidence to confirm that the page is harmful. These warnings use a different design to help users assess the risk. Websites identified as highly dangerous continue to trigger Chrome’s familiar full-page red warning, which indicates a high-confidence assessment of potential harm. This distinction helps users understand that a suspicious website may pose a risk without necessarily being confirmed as malicious.
Smarter Scam Detection With Gemini
Google is also expanding Chrome’s Gemini-powered scam detection by moving from an on-device model to a more powerful server-side model. The change extends protection to users who enable Enhanced Protection and broadens detection to include scams involving fake antivirus alerts and fraudulent browser update messages. The system analyses signals such as the brand represented by a webpage, its purpose, and the likelihood that it is a scam. Chrome’s Safe Browsing system combines this analysis with domain reputation and other security signals before determining whether a warning is necessary.
Google says webpage text is sent for analysis only when strong indicators of a scam are detected. Any content sent for server-side analysis is processed temporarily and is not logged, retained, or used to train its models.
Protection Against ClickFix Scams
ClickFix scams deceive users into believing their computers have a problem that needs fixing. Fraudulent webpages may instruct visitors to copy and run commands, often through tools such as Windows Command Prompt or PowerShell, to supposedly resolve an error or complete a verification process. In reality, these commands can install malware or carry out other harmful actions. Chrome can now detect suspicious commands copied by users with Enhanced Protection enabled. If its security checks determine that a command is dangerous, the browser displays a warning.
How Users Can Enable the Protection
Users can access Chrome’s security options by opening Settings, selecting Privacy and security, and then choosing Security. From there, they can enable Enhanced Protection under Safe Browsing. Google Chrome scam warnings provide an additional layer of defence, but they cannot guarantee that every threat will be detected. Users should still check website addresses carefully, avoid unexpected security alerts, and never copy or run commands from unfamiliar webpages. These precautions remain important even when browser security features are enabled.
