Google has announced new security features for its Chrome browser to help users recognise suspicious websites and protect themselves against phishing, malware and online scams. The changes introduce a clearer warning system that distinguishes websites considered suspicious from those identified as dangerous.
Announced on October 20, 2026, the update is part of Google's continuing efforts to strengthen Chrome Safe Browsing and improve protection against increasingly sophisticated online threats. The new suspicious-site warnings are available to users who have enabled Enhanced Protection in Chrome.
The updated system is intended to give users more information about potential risks before they interact with a website. Rather than treating every potentially harmful page in the same way, Chrome now uses different warning styles depending on the level of confidence in its assessment.
Two Levels of Website Warnings
Chrome's updated system classifies potentially harmful websites into two broad categories: suspicious and dangerous.
A suspicious website receives a lower-confidence warning. This means Chrome has identified patterns associated with possible harm, but the available signals may not be strong enough to classify the page as definitely dangerous. The warning is designed to encourage users to stop and assess the risk before continuing.
A dangerous website receives a stronger warning when Chrome has a high level of confidence that the page poses a significant threat. These warnings continue to appear as a prominent red, full-page alert that recommends avoiding the website.
The distinction helps users understand that not all warnings carry the same level of risk. However, a suspicious-site warning should not be ignored simply because the browser has not classified the website as definitively dangerous.
How the New Suspicious-Site Warning Works
When Chrome detects a page that displays deceptive patterns associated with known malicious websites, it can show a new warning interface. The alert is visually different from the existing full-page warning for dangerous sites.
The warning allows users to return to safety or mark the website as safe if they believe it has been incorrectly flagged. Users should be cautious about overriding a warning, particularly when they have reached a page through an unexpected message, advertisement or unfamiliar link.
The system is designed to broaden Chrome's ability to warn about potentially harmful websites while maintaining a stronger, more prominent warning for sites that present a higher level of risk.
These protections are especially relevant to phishing websites that imitate banks, shopping platforms, government services and other trusted organisations to trick people into sharing passwords, payment details or personal information.
Gemini AI Expands Scam Detection
Google is also expanding the use of its Gemini artificial intelligence technology to identify online scams. The updated system uses a more powerful server-side Gemini model to analyse indicators that may suggest a page is fraudulent.
These indicators can include the brand a website claims to represent, the apparent purpose of the page and signals associated with scam activity. Chrome Safe Browsing combines this analysis with other security information, including domain reputation, before deciding whether to issue a warning.
The expanded detection is designed to identify a broader range of threats, including fake antivirus websites and fraudulent browser update pages. Such scams often use urgent messages to convince users that their computers are infected or that their software needs immediate attention.
Google says that page text is analysed when a website exhibits strong indicators of scam activity. The company also states that information sent off the device for this analysis is processed temporarily and is not logged, retained or used to train its AI models.
Because this feature relies on server-side processing, users should understand that Enhanced Protection may share additional browsing-related information with Google compared with Standard Protection.
New Protection Against ClickFix Scams
Another part of the update targets a technique known as ClickFix. These scams attempt to persuade users to fix a fake computer problem by copying a command from a webpage and running it themselves.
The instructions may appear to come from a legitimate troubleshooting guide, software update or security alert. In reality, the copied command can trigger malicious activity, including downloading harmful software or executing unauthorised operations.
ClickFix attacks can be difficult to stop using conventional browser download protections because users may be tricked into running commands directly through system tools rather than downloading a file in the usual way.
Chrome now detects certain suspicious commands associated with this technique for users who have enabled Enhanced Protection. When a potential ClickFix command is identified, Chrome removes personally identifiable information from the clipboard content before sending it to Safe Browsing for analysis. If the analysis identifies a dangerous command, the browser displays a warning.
Google says the system is designed to identify malicious activity while reducing unnecessary interruptions for legitimate users, including software developers who routinely work with commands.
Users should remember that Chrome will not ask them to repair the browser by copying and executing suspicious commands from an unfamiliar webpage.
How to Enable Enhanced Protection in Chrome
Users can review their Safe Browsing settings to check whether Enhanced Protection is enabled. The setting can be found in Chrome's privacy and security menu.
Open Google Chrome and select the three-dot menu in the upper-right corner. Go to Settings, select Privacy and security, and then open Security. Under Safe Browsing, choose Enhanced protection.
Enhanced Protection provides more proactive security checks than Standard Protection, including additional checks for potentially risky websites, downloads and extensions. It can also use more browsing-related information to help detect threats in real time.
The new suspicious-site warning system is tied to this enhanced setting, so users who want the additional protection should check their configuration.
The exact availability of individual features may depend on rollout status, device and Chrome version.
What Users Should Do When Chrome Shows a Warning
Users should avoid entering passwords, payment information or other sensitive details on a website that Chrome identifies as dangerous. If a suspicious warning appears, the safest choice is generally to return to the previous page unless the website can be independently verified.
People should also be cautious about unexpected messages claiming that their device is infected or that an urgent browser update is required. They should download software and updates through official websites or trusted application stores rather than links in unsolicited messages.
Keeping Chrome and the operating system updated can provide additional protection against known vulnerabilities. Users should also avoid running commands supplied by unfamiliar websites, especially when those commands require administrator privileges.
No browser security feature can eliminate every online threat. Careful browsing habits remain important even when enhanced protection is enabled.
Google's Wider Effort to Improve Online Safety
The latest Chrome changes reflect Google's broader effort to use a combination of threat intelligence, browser security tools and AI-based analysis to identify emerging online scams.
The distinction between suspicious and dangerous websites is intended to make warnings more informative, while expanded scam detection aims to identify deceptive pages that may not yet be widely recognised as malicious.
For users, the update offers an additional layer of protection against phishing, fake software alerts and social engineering attacks. However, its effectiveness depends partly on whether Enhanced Protection is enabled and whether Chrome can identify the relevant threat.
Google recommends enabling Enhanced Protection for users who want the strongest Safe Browsing security available in Chrome. Users should also remain alert to suspicious links, unexpected downloads and requests to execute commands on their devices.
The new features are designed to help users make safer decisions online, but they should be treated as one part of a wider approach to cybersecurity rather than a guarantee that every scam will be blocked.
