You’ve seen it a hundred times. You land on some random site and immediately a little box pops up asking if you want to allow notifications. Most of the time it’s harmless. But on sketchy sites? That’s a trap door.
When you click ‘Allow,’ you’re giving that website permission to send messages straight to your desktop — not inside your browser, but as actual system-level pop-ups on your screen. And here’s the part that catches people off guard: phishers and spammers use these notifications to flood you with fake virus warnings and scam ads — even after you’ve closed the tab, or in many cases the browser entirely (as long as the browser process is still running in the background).
The goal is to scare you into clicking. The fake pop-up says something like ‘YOUR COMPUTER IS INFECTED — ACT NOW’ and looks just real enough to panic you. You click it, and now you’re either on a scam site, downloading something you shouldn’t, or handing over personal info. That’s the whole game.
The fix is pretty simple once you know where to look.
In Chrome, go to your browser settings, find ‘Privacy and Security,’ then ‘Site Settings,’ then ‘Notifications.’ You’ll see a list of every site you’ve ever allowed. Remove anything you don’t recognize or trust.
In Edge, go to edge://settings/content/notifications and either toggle off ‘Ask before sending’ entirely or go through the allowed list and delete the bad ones.
In Firefox, same idea — dig into your settings and review what’s been given permission.
While you’re in there, it’s smart to turn off the permission prompt entirely for sites you don’t know. That way no random site can even ask. You can still manually allow notifications for sites you actually want them from.
And if you’ve already been seeing weird pop-ups? Run a full scan with a reputable antivirus program. Some of these notification scams are designed to get you to install actual malware, so it’s worth making sure nothing snuck through before you caught on.
Bottom line: ‘Allow Notifications’ sounds like a small, boring checkbox. But on the wrong site, it’s basically handing a stranger a key to your front door. Default to ‘Block’ unless you genuinely know and trust the site.