Microsoft Edge shuts off notifications from scam sites

Microsoft Edge now automatically disables website notifications from a site when Microsoft Defender SmartScreen or Scareware blocker detects that the site pushed a scam. It also adds a “Block and report” option to notification permission prompts. The goal is to stop scammers from turning a useful browser feature into a persistent channel for fake virus warnings and security alerts. Microsoft says Edge has been fighting notification spam for years, with multiple workstreams detecting and blocking it by the billions.

The problem: one “Allow” can become a persistent channel

Website notifications were designed to alert you to a new message, remind you of an upcoming event, or share an important update from a service you trust. Scammers take advantage of our busy lives to persuade people to allow notifications from malicious sites. Selecting “Allow” can give a malicious site repeated opportunities to send fake virus warnings and deceptive security alerts. Even after you close the original page, notifications can lead back to the scam again and again.

How Scareware reports uncovered the pattern

Scareware blocker has been enabled by default on qualifying PCs for just over a year. Microsoft says it directly protects tens of thousands of users per day against new scams. It also enables protection for millions more users per day, because Microsoft can then protect other users with Microsoft Defender SmartScreen. In Microsoft's preview, each report could help protect 50 more users.

While reviewing user-submitted reports from Scareware blocker, Microsoft noticed that many scams started with a website notification. These notifications did more than interrupt users. They kept drawing users back to scam pages that SmartScreen or Scareware blocker could detect. That pointed to another way to protect users: stop the notification sites that send users to a scam.

Automatic blocking and easier reporting

As of last month's rollout of Edge 156, when SmartScreen or Scareware blocker detects a scam that was pushed through a notification, Edge automatically disables notifications from the site that sent it. The next time Edge starts, an information bar explains what happened. If you believe a site was blocked incorrectly, you can review sites with blocked notifications and unblock them from Edge Settings.

Edge also now includes a “Block and report” option for notification permission requests. Notification abuse often starts with a misleading page, for example one asking you to prove you are not a robot, that steers you to select “Allow.” From the notification permission prompt, you can open the menu next to “Block” and select “Block and report.” The report can include the requesting URL and a screenshot of the page that tried to persuade you to enable notifications. This can give SmartScreen additional evidence before the first abusive notification is delivered.

Even if Edge does not detect an unwanted notification, you can still block the site yourself. From any website notification, select the “…” menu and disable future notifications from that site. Microsoft warns that, since fake alerts are designed to be confusing, clicking other buttons on the alert may simply open more popup windows.

Key Features at a Glance

• Automatic notification blocking: Edge disables notifications from a site when SmartScreen or Scareware blocker detects a scam pushed through them. This cuts off the channel that keeps drawing users back to scam pages.
• Information bar: After the next Edge start, a banner reads “Microsoft Edge blocked notifications from a suspicious site in your last session.” It explains what happened and offers a “Learn more” link and a “Got it” button.
• Review and unblock in Settings: Edge Settings lists sites with blocked notifications. You can unblock any you believe were blocked incorrectly, so you stay in control.
• Block and report: The menu next to “Block” on notification permission prompts lets you report the lure, with the requesting URL and a page screenshot. This gives SmartScreen evidence before the first abusive notification arrives.
• Disable from the notification itself: The “…” menu on any website notification lets you turn off future notifications from that site, even when Edge has not detected the abuse.
• Layered protection: On-device detection, user-submitted reports, and cloud reputation combine so Edge can turn an individual threat signal into broader protection for users.

Availability

Automatic notification blocking arrived with last month's rollout of Edge 156. “Block and report” is now included in Edge's notification permission prompts. Scareware blocker has been enabled by default on qualifying PCs for just over a year. No pricing is mentioned. Microsoft invites users to keep submitting reports to strengthen these protections.