Chrome adds ClickFix alerts as Gemini scam checks expand

Google is strengthening Chrome's scam defenses with Gemini-powered website analysis, new security warnings and protection against malicious commands.

Key takeaways

• Chrome now distinguishes suspicious websites from confirmed dangerous ones
• Gemini-powered scam detection expands to fake antivirus and browser update scams
• New ClickFix protections warn users who copy potentially malicious commands
• The additional safeguards require Chrome's optional Enhanced Protection mode

Chrome introduces earlier warnings for suspicious websites

Google's Oct. 20 announcement introduces another warning level in Chrome's Safe Browsing Enhanced Protection. Pages showing deceptive patterns can now trigger a less severe "suspicious site" alert, even when Google lacks the confidence to label them dangerous. Websites assessed as high risk still receive Chrome's familiar full-page red warning.

Gemini-powered checks are expanding, too. Moving on from its earlier on-device model focused on tech-support scams, Chrome now uses a server-side model to assess fake antivirus prompts, counterfeit browser updates and other deceptive pages. Safe Browsing weighs those findings alongside domain reputation and other signals, rather than relying on the model alone. Google says page text is sent for analysis only when strong scam indicators appear, then processed without retention or use in AI training.

ClickFix warnings target both links and commands

The other addition addresses ClickFix, a trick that persuades people to "repair" an invented problem by running commands themselves. Fraudulent verification prompts or system alerts can lead victims to paste instructions into PowerShell or Command Prompt. Those commands may install malware without ever downloading a suspicious file through Chrome.

Enhanced Protection now checks when users copy a potentially malicious command. Chrome strips personally identifiable information from the clipboard content before sending it to Safe Browsing for analysis, displaying an alert if the verdict is dangerous. Although an important checkpoint, Chrome’s new features isn’t a guarantee against every malicious command or deceptive page.

Why browser protection cannot stop every scam

Browser safeguards also have a practical limit: scammers reach people through private messages, phone calls and social platforms, sometimes without directing them to a website. Google's recent expansion of Android scam protection for messages and calls reflects the same problem: threats don't stay inside one app or on one device.

To enable these Chrome features, open Settings > Privacy and security > Security and select Enhanced protection. And never execute a command supplied by an unfamiliar webpage, even if it claims your computer needs urgent repair. Last but not least, independently verify unexpected requests instead of assuming that the absence of a warning means a request is safe.

For protection beyond the browser, Bitdefender Scamio lets you check suspicious links, messages and screenshots, including those received through messaging apps. It's accessible through the web, WhatsApp, Messenger and Discord, including on smartphones. Meanwhile, Bitdefender Ultimate Security complements browser safeguards with real-time threat detection, malware protection and AI-powered scam protection across supported devices.