We’ve all done it.
You land on a website, it pops up: “This site wants to send you notifications.” You click “Allow” just to get it out of the way. No harm done, right? Well, here’s the sting — that single click can turn your browser into a scam megaphone.
The hidden problem:
Dodgy sites abuse push notifications to flood you with fake alerts, phishing links, or scam offers. Once you’ve granted permission, they don’t need you to visit again — the spam comes straight to your desktop or phone.
How Push Notification Abuse Works
• Malicious prompts — shady sites trick you into allowing notifications.
• Endless pop-ups — fake “system alerts” or “virus warnings” appear even when you’re not browsing.
• Phishing links — scammers use the channel to deliver convincing clickbait.
• Advertising overload — your browser becomes a direct ad-stream, often leading to more malware.
Real Example
In 2022, security researchers found over 100 million users were hit by malicious push notifications worldwide. Victims thought they were clicking on system updates or security alerts, but they were actually being lured into phishing sites and malware downloads.
Do This Today
- Check your browser settings
Chrome/Edge: Settings → Privacy & Security → Site Settings → Notifications.
Firefox: Preferences → Privacy & Security → Permissions → Notifications. - Block by default
Disable “Ask before sending” so sites can’t even request notification permission. - Audit current permissions
Remove any sites you don’t recognise or trust. - Use built-in protection
Some browsers have “quieter notification” features — turn them on. - Stay sceptical
No legitimate site needs to spam you via browser pop-ups to stay in touch.
Key Takeaway
That tiny “Allow” button is more powerful than it looks. Treat notifications like giving someone your phone number — only share if you really trust them.
At The Cyber Workshop, we teach everyday habits like this in our Habit & Hygiene Workshop — because small tweaks in your browser settings can stop big headaches later.
Till next time,
Don’t let scammers turn your browser into their personal loudspeaker.
