Browser Protections Against Phishing
Modern browsers warn you about known phishing sites and dangerous downloads. How those warnings work, which settings to keep on, and what to do when you see a red warning page.
Every major browser checks the pages you visit against lists of known phishing and malware sites. When there is a match, you see a full-screen warning, usually red, telling you the site ahead is deceptive or dangerous. It is one of the quietest and most effective protections you have.
Settings to keep on
- Safe or secure browsing protection: on by default in most browsers. Some offer an enhanced level that checks more pages in real time.
- Download protection: warns about known harmful files.
- Automatic updates: keeps both the browser and its lists current.
- Password leak warnings: many browsers tell you when a saved password appears in a known breach. See browser saved passwords.
When you see a warning
- Go back or close the tab. Do not choose "continue anyway".
- Think about how you got there: an email, a text, an ad? That message is the real threat. See search ad phishing.
- If you entered anything before the warning appeared, follow entered a password on a phishing page.
The limits
Phishing pages are often live for only hours. A brand new page may not be on any list yet, so no warning does not mean safe. Read the address yourself; our guide on how to read a URL shows how.
Beware fake warnings too. A page that pops up a "virus detected, call this number" message is a scam, not your browser. See browser notification scams.
Got a link you are unsure about? Paste it into CyberWatch AI Scan for a free check.
For the full picture, see how to protect yourself from phishing.
Frequently asked questions
What should I do if my browser says a site is deceptive?
Go back. Do not click through the warning. If you believe the site is genuine, reach it another way, such as a bookmark or typing the address.
Does no warning mean a site is safe?
No. Warnings only appear for sites already identified as harmful. New phishing pages may not be listed yet.
Do I need a separate anti-phishing extension?
Usually not. Built-in protection plus updates is enough for most people. Be careful installing extensions, as some are harmful themselves.
Sources
- Google Safe Browsing, Google
- Top tips for staying secure online, UK National Cyber Security Centre
- Recognize and Report Phishing, US Cybersecurity and Infrastructure Security Agency
