Browser Notification Spam: The 'Click Allow to Continue' Trap by SMS

How it looks by SMS, the red flags and what to do.

SMS scams lean on short, urgent lines and a shortened link. The message looks official because the sender name (header) is shaped to resemble a real organisation. Browser Notification Spam: The 'Click Allow to Continue' Trap is one of the ways this shows up: A website says 'tap Allow to prove you are not a robot' and then floods your phone with scam alerts. Learn how to stop and remove them.

What browser notification spam: the 'click allow to continue' trap looks like by SMS

• A sender name that resembles a bank, courier, tax or utility, or an ordinary mobile number.
• A very short message with a deadline such as "today" or "within 24 hours".
• A shortened or oddly spelled link that does not match the real website.

The set-up is a web page that triggers the browser's permission prompt, usually after a fake captcha or a countdown. The text near the prompt is misleading, for example 'Click Allow to continue' or 'Confirm you are over 18'. Many people tap quickly because it seems part of normal page loading. The permission is stored by the browser, and the website can then send alerts at any time, using the browser's own notification system.

Red flags to check on the text message

• A page asks you to press Allow to prove you are human or to continue.
• Notifications appear from the browser though you did not install an app.
• Alerts claim viruses, damage or prizes and use countdowns.
• Tapping an alert opens advertising or a download page.
• The link domain is not the one you type yourself for that organisation.
• The message asks for an OTP, PIN, card number or password.

What to do

1. Press and hold a spam notification, tap the settings icon and turn off notifications for that site.
2. Open your browser's site settings and remove notification permission for unknown sites.
3. Do not tap alerts that claim viruses, prizes or low battery.
4. Open the official app or type the official website yourself to see if there is any real notice.
5. Paste the text into a scam checker (Safeavio Sentinel can check it) before you do anything else.
6. Report the sender on the Sanchar Saathi portal (Chakshu facility) and block the number.

You can report suspicious SMS and calls on the Sanchar Saathi portal (Chakshu facility) of the Department of Telecommunications.

If money or a code is already gone

1. If you paid or shared card details, call 1930 and report at cybercrime.gov.in.
2. Call your bank on the number on your card and ask them to block the card if needed.
3. Check your mobile bill or subscriptions for unwanted charges and ask your operator through its official app to stop them.
4. Remove any app you installed after tapping a notification.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Link check in Safeavio Sentinel can test a link from a spam notification before you open it, and Scam check can explain why a prize or virus message looks risky. Phone scan reviews installed apps and permissions if you installed a cleaner after a warning. Safeavio does not manage browser notification settings for you, so use the browser's site settings to remove permission.

Full guide: Browser Notification Spam: The 'Click Allow to Continue' Trap: how it works, signs and what to do. Other channels: fake app, social media, WhatsApp.

Questions