Google Chrome Uses Gemini AI to Flag Suspicious Sites and Block ClickFix Scams

Google has updated Chrome with new scam protections that utilize Gemini AI to identify suspicious websites. The browser now flashes distinct warnings for sites deemed dangerous versus those considered merely suspicious. This change applies to Chrome on both computers and mobile devices, according to a blog post published by Google.

The update allows Chrome to differentiate warning levels based on threat severity. Dangerous sites trigger a red screen alert that strongly recommends leaving the page immediately. Suspicious sites receive a more subtle notification, which informs users that the page resembles known phishing or malware sites. Users can choose to close the page, return to safety, or mark the site as safe if they are certain it is legitimate.

How Gemini AI Determines Scam Likelihood

Google rates websites as suspicious by comparing them against a database of deceptive or misleading sites. Gemini plays a central role in this assessment by analyzing multiple factors to derive a scam likelihood score. These factors include the site’s content, the brand it represents, the site’s intent, and the domain’s reputation.

This AI-driven analysis enables Chrome to expand its protective coverage. By tailoring the warning interface through specific format, iconography, color, and text, the browser aims to help users make confident choices. Google stated that these tailored warnings allow for a higher volume of protective alerts to be displayed safely.

Targeting Specific Social Engineering Tactics

Beyond general suspicious site warnings, the update introduces protections against specific attack vectors. Chrome now includes defenses against fake antivirus updates, which are common social engineering tricks. The browser also features new capabilities to thwart ClickFix attacks, where scammers trick users into clicking a button to disable security features.

These measures complement existing safety features in Chrome. As Threat Times reported on October 21, 2026, Google Chrome uploads copied text to servers to screen for malicious content. The latest update builds on this proactive stance by adding real-time visual warnings and specific protections against known scam methodologies on desktop and mobile platforms.

What should you do?

Users should review their Chrome settings to ensure these new scam protections are enabled. The browser automatically applies these measures to desktop and mobile devices. Users can interact with the new warning banners by clicking the Learn More link for additional details. If a user encounters a warning, they should follow the browser’s advice to close the page or return to safety unless they verify the site’s legitimacy.

Background: Fake antivirus software

Fake antivirus software mimics legitimate security interfaces to display false threats. Look for urgent pop-ups, pressure to buy, and missing digital signatures. Immediate isolation prevents data theft. Use offline scanners to remove the rogue agent, as it will block standard uninstallation methods. Verify system integrity afterward.

Read the full guide: Fake Antivirus Warning Signs: How to Spot and Remove Rogue Security Software

What to do and how to stay safe: Google Chrome

• Verify that Chrome is updated to the latest version to receive the new Gemini-powered scam protections automatically.
• Pay attention to the visual cues in Chrome warnings, noting the difference between red dangerous alerts and subtle suspicious site notices.
• Avoid marking sites as safe unless you have independently verified the domain’s legitimacy through trusted sources.
• Monitor for new alerts regarding fake antivirus updates or ClickFix attempts, and close such pages immediately.

Step-by-step guide: Social Engineering Warning Signs and How to Respond

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How does Chrome determine if a website is suspicious?

Chrome compares the site against known deceptive sites and uses Gemini AI to analyze content, brand, intent, and domain reputation.

Can users override the suspicious site warning in Chrome?

Yes, users can mark a site as safe if they are certain it is legitimate, allowing them to visit and use the site normally.

Do these new protections apply to mobile devices?

Yes, the new measures against suspicious sites, fake antivirus updates, and ClickFix attacks apply to Chrome on both computers and mobile devices.