Browser Notification Spam: The 'Click Allow to Continue' Trap
A website says 'tap Allow to prove you are not a robot' and then floods your phone with scam alerts. Learn how to stop and remove them.
A page tells you to press 'Allow' to watch a video, prove you are human or get a download. After you tap, your phone begins to show alerts: 'Virus found', 'You won a prize', 'Your phone battery is damaged', even when the browser is closed. You did not install an app. You gave a website permission to send notifications, and the sender uses it to push scam messages straight to your screen.
How the scam works
The set-up is a web page that triggers the browser's permission prompt, usually after a fake captcha or a countdown. The text near the prompt is misleading, for example 'Click Allow to continue' or 'Confirm you are over 18'. Many people tap quickly because it seems part of normal page loading. The permission is stored by the browser, and the website can then send alerts at any time, using the browser's own notification system.
The pressure comes from alerts that look like system warnings. A message might say 'Your phone has 7 viruses, tap to clean' or 'Congratulations, claim your reward'. Each tap opens an advertising page, a fake scan, an app download or a call-now screen. The volume of messages rises over time and may include adult content or scary claims, which makes people feel their phone is infected and more willing to follow an instruction.
The payoff is advertising revenue for the site, plus any money from victims who follow the links into fake support, prize or subscription traps. Some pages sign you up for a paid service through a mobile bill. The alerts continue until you remove the permission, which many people do not know how to do. Others install a cleaner app, which can add more ads or bring new risks.
An example of what you may see
Example page and alerts (invented): A page shows 'I am not a robot' with an arrow pointing to a prompt that says 'Click Allow to continue'. You tap Allow. Later, while you watch a video, a notification pops up: 'Warning! Your phone is infected with 7 viruses. Tap to remove now.' Another says, 'Congratulations! You won a Rs 10,000 voucher. Claim in 10 minutes.' The alerts keep arriving every few minutes, even when the browser is closed.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A page asks you to press Allow to prove you are human or to continue.
- Notifications appear from the browser though you did not install an app.
- Alerts claim viruses, damage or prizes and use countdowns.
- Tapping an alert opens advertising or a download page.
- Alerts keep coming even after you close the browser.
- Your phone shows a site name next to the notification, often unfamiliar.
What to do right now
- Press and hold a spam notification, tap the settings icon and turn off notifications for that site.
- Open your browser's site settings and remove notification permission for unknown sites.
- Do not tap alerts that claim viruses, prizes or low battery.
- Clear browser data if the alerts continue.
- Install no cleaner apps on the strength of a notification.
If you already paid or shared a code
- If you paid or shared card details, call 1930 and report at cybercrime.gov.in.
- Call your bank on the number on your card and ask them to block the card if needed.
- Check your mobile bill or subscriptions for unwanted charges and ask your operator through its official app to stop them.
- Remove any app you installed after tapping a notification.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Link check in Safeavio Sentinel can test a link from a spam notification before you open it, and Scam check can explain why a prize or virus message looks risky. Phone scan reviews installed apps and permissions if you installed a cleaner after a warning. Safeavio does not manage browser notification settings for you, so use the browser's site settings to remove permission.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
How do I stop notifications from a website?
Open your browser's settings, find Site settings or Notifications and remove the permission for any site you do not know. You can also press and hold a spam alert and turn it off for that site.
Is the virus warning real?
No. Websites cannot scan your phone. These alerts are advertisements designed to scare you into tapping, installing something or calling a number. Ignore them and remove the permission. Closing the page and removing the permission ends the problem.
Why did the browser let a site do this?
You gave permission when you tapped Allow, even if the page worded it misleadingly. Browsers let sites ask, and the decision is yours. Choose Block unless you want alerts from a site you trust. Block is the safe choice for sites you do not know.