Browser Notification Spam: The 'Click Allow to Continue' Trap on WhatsApp

How it looks on WhatsApp, the red flags and what to do.

WhatsApp scams arrive from numbers you do not know, from a friend whose account was taken over, or from a group you were added to without asking. Browser Notification Spam: The 'Click Allow to Continue' Trap is one of the ways this shows up: A website says 'tap Allow to prove you are not a robot' and then floods your phone with scam alerts. Learn how to stop and remove them.

What browser notification spam: the 'click allow to continue' trap looks like on WhatsApp

• A message from an unknown number, often with a stock photo of a smiling person.
• A friend or relative asking for urgent money from a new number or a hacked account.
• A group invite promising returns, jobs or prizes.

The set-up is a web page that triggers the browser's permission prompt, usually after a fake captcha or a countdown. The text near the prompt is misleading, for example 'Click Allow to continue' or 'Confirm you are over 18'. Many people tap quickly because it seems part of normal page loading. The permission is stored by the browser, and the website can then send alerts at any time, using the browser's own notification system.

Red flags to check on the WhatsApp message

• A page asks you to press Allow to prove you are human or to continue.
• Notifications appear from the browser though you did not install an app.
• Alerts claim viruses, damage or prizes and use countdowns.
• Tapping an alert opens advertising or a download page.
• A new number says it is someone you know and asks for money; call the real person on the old number first.
• You are added to a group full of people praising profits.

What to do

1. Press and hold a spam notification, tap the settings icon and turn off notifications for that site.
2. Open your browser's site settings and remove notification permission for unknown sites.
3. Do not tap alerts that claim viruses, prizes or low battery.
4. If it was a "friend", call them on the number you already have and ask.
5. Turn on two-step verification in WhatsApp settings so a stolen SMS code is not enough.
6. Warn the group or family, and report the number on Sanchar Saathi if it is a scam call or message.

Inside WhatsApp use Block and report; for numbers that call or text you, the Sanchar Saathi portal (Chakshu facility) also takes complaints.

If money or a code is already gone

1. If you paid or shared card details, call 1930 and report at cybercrime.gov.in.
2. Call your bank on the number on your card and ask them to block the card if needed.
3. Check your mobile bill or subscriptions for unwanted charges and ask your operator through its official app to stop them.
4. Remove any app you installed after tapping a notification.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Link check in Safeavio Sentinel can test a link from a spam notification before you open it, and Scam check can explain why a prize or virus message looks risky. Phone scan reviews installed apps and permissions if you installed a cleaner after a warning. Safeavio does not manage browser notification settings for you, so use the browser's site settings to remove permission.

Full guide: Browser Notification Spam: The 'Click Allow to Continue' Trap: how it works, signs and what to do. Other channels: fake app, SMS, social media.

Questions