Browser Notification Spam: The 'Click Allow to Continue' Trap on social media

How it looks on social media, the red flags and what to do.

Social platforms make it easy to look trustworthy: a profile photo, followers and a few posts are enough for a first impression. Browser Notification Spam: The 'Click Allow to Continue' Trap is one of the ways this shows up: A website says 'tap Allow to prove you are not a robot' and then floods your phone with scam alerts. Learn how to stop and remove them.

What browser notification spam: the 'click allow to continue' trap looks like on social media

• A comment thread full of identical "thank you" replies.
• A direct message from a stranger, a "brand" or a "recruiter".
• A giveaway that asks you to pay a small fee or share a code.

The set-up is a web page that triggers the browser's permission prompt, usually after a fake captcha or a countdown. The text near the prompt is misleading, for example 'Click Allow to continue' or 'Confirm you are over 18'. Many people tap quickly because it seems part of normal page loading. The permission is stored by the browser, and the website can then send alerts at any time, using the browser's own notification system.

Red flags to check on the social media message

• A page asks you to press Allow to prove you are human or to continue.
• Notifications appear from the browser though you did not install an app.
• Alerts claim viruses, damage or prizes and use countdowns.
• Tapping an alert opens advertising or a download page.
• The offer is far better than any normal shop or job.
• The account asks you for money after a short friendly chat.

What to do

1. Press and hold a spam notification, tap the settings icon and turn off notifications for that site.
2. Open your browser's site settings and remove notification permission for unknown sites.
3. Do not tap alerts that claim viruses, prizes or low battery.
4. Check the account: when it was created, who follows it, and whether the real brand links to it from its own website.
5. Report the account or ad inside the app and block it.
6. Make your own profile private and review who can message you.

Use Report on the profile, post or ad. If money was lost, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. If you paid or shared card details, call 1930 and report at cybercrime.gov.in.
2. Call your bank on the number on your card and ask them to block the card if needed.
3. Check your mobile bill or subscriptions for unwanted charges and ask your operator through its official app to stop them.
4. Remove any app you installed after tapping a notification.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Link check in Safeavio Sentinel can test a link from a spam notification before you open it, and Scam check can explain why a prize or virus message looks risky. Phone scan reviews installed apps and permissions if you installed a cleaner after a warning. Safeavio does not manage browser notification settings for you, so use the browser's site settings to remove permission.

Full guide: Browser Notification Spam: The 'Click Allow to Continue' Trap: how it works, signs and what to do. Other channels: fake app, SMS, WhatsApp.

Questions