Learn to Identify and Eliminate Phishing Notifications

ByEmily Dolloff

Email may be the most common form of phishing, but it’s not the only one. Modern Web browsers support a technology that enables websites to display system-level notifications just like regular apps. These push notifications have good uses, such as letting frequently updated websites inform users of new headlines, changed discussion threads, and more.

Unfortunately, push notifications can be subverted for malicious purposes, notably phishing. Here’s what happens. You visit a website that asks you if you’d like to receive notifications.

That request may be introduced with language that implies you must agree in order to get desired content, or it may be a bald-faced request to show notifications. If you agree, the website will be able to display alarming or deceptive phishing notifications even when it’s not open.

The goal is to trick you into clicking the notification, which will load a fake site that attempts to get you to enter login credentials or credit card information to facilitate identity theft.

The danger of phishing notifications is that they come from the system, so they may seem more legitimate than email messages trying to sucker you into revealing personal information. Nevertheless, as you can see in the examples above, they may still look sketchy in ways reminiscent of phishing emails:

  • No legitimate website would use emoji or symbols in a notification, much less multiple ones.
  • Although there are no glaring spelling or grammar mistakes, the use of all caps in the top notification is a giveaway. Similarly, standard notifications wouldn’t use exclamation points.
  • The use of “Click here” is poor information design that’s unlikely to come from a professional programmer or Web designer.

Phishing notifications, although problematic, aren’t a malware infection, and anti-malware packages won’t detect or remove them. Luckily, they’re easy to control and block in Safari and other Web browsers.

Prevent Phishing Notifications

The easy way to ensure you don’t see phishing notifications is to allow only trusted websites to send notifications. In general, we recommend keeping that list small so you’re not frequently interrupted by unnecessary notifications.

If you’re unsure that you’ll be able to identify malicious websites, you can enable a browser setting that prohibits all websites from asking for permission to send notifications. In Safari, choose Safari > Settings > Websites > Notifications, and deselect “Allow websites to ask for permission to send notifications” at the bottom.

Other browsers have similar options, and most will look like Google Chrome, as shown below:

  • Arc: Choose Arc > Settings > General > Notifications and select “Don’t allow sites to send notifications.”
  • Brave: Navigate to Brave > Settings > Privacy and Security > Site and Shield Settings > Notifications and select “Don’t allow sites to send notifications.”
  • Firefox: Go to Firefox > Settings > Privacy & Security > Notifications and select “Block new requests asking to allow notifications.”
  • Google Chrome: Navigate to Chrome > Settings > Privacy and Security > Site Settings > Notifications and select “Don’t allow sites to send notifications.”
  • Microsoft Edge: Choose Microsoft Edge > Settings > Cookies and Site Permissions > Notifications and turn off “Ask before sending.”

Browsers based on Chrome (everything except Firefox in the list above) offer a “Use quieter messaging” option that replaces the permission dialog with a bell icon next to the site name in the address bar—click it to allow notifications from that site.

Eliminating Phishing Notifications

Now you know how to prevent new sites from requesting permission to display notifications. What about sites that already have permission? It’s easy to block them in Safari’s Notifications settings screen. If you have any undesirable sites with Allow in the pop-up menu to the right of their name in the Notifications screen, choose Deny from that menu. You could remove the site instead, but that would allow it to ask for permission again.

Firefox’s interface is similar to Safari’s, but Chrome-based browsers have a different interface that separates the blocked and allowed sites. To block a website whose notifications you no longer want to receive, click the button to the right and choose Block. Again, you could remove undesirable sites if you prefer, but remember that if your notification settings ever change, doing so could allow the site to ask for permission once more.

Ultimately, it’s easy to avoid phishing notifications by paying attention as you browse the Web. Steer clear of websites that make an unexpected request to display notifications. Notifications aren’t necessary on hardly any websites, so there’s no harm in denying such requests unless you’re sure they’re legitimate.

(Featured image based on an original by iStock.com/tadamichi)

Social Media: Did you know that a phishing website can send you a notification right on your Mac? Learn how this could happen and how to prevent it in your favorite Web browser.

Similar Posts

  • Security Precautions to Take While Traveling

    When we think about digital and device security, we mostly think about the fixed locations where people spend most of their time—home, school,…

  • Clean Your iPhone’s Camera Lens

    Serious photographers take care of their lenses. The rest of us just stuff our iPhones into our pockets or purses and pay no…

  • Emily's Favorite Mac Accessories

    I am the kind of gal that admittedly likes gadgets and accessories just because they are cool, I don’t even need to have a use for them to make me want one! If there is a new iPad case, a new speaker, a new product announcement from Apple, I want it. This has resulted in a vast collection over the years of all kinds of gadgets, gizmos and some stuff that I just hang onto for no good reason other than I might need it one day. Some things have been a bit of a fad, others have stood the test of time. Over the years I have found that I few items in my collection of gadgets that have either become invaluable or the kind of item that really stands the test of time.

    p{text-align: center;}. !http://blog.smalldog.com/images/4651.jpg!

    My first must have and favorite gadgets are portable bluetooth speakers, and I have had several over the years. The battery powered speakers from Skullcandy I had were one of my most favorite pocket sized speakers! It took up little room in my bag and I could have my music wherever I wanted. You never realize how much you miss having music wherever you go until you start to use these kinds of speakers and then suddenly don’t have them! I eventually outgrew my little Skullcandy speakers and upgraded to a larger but still portable Altec system. This speaker system went everywhere with us. In fact, it still travels with us in our camper even though it features a 30 pin connection for our phones. What I loved most about this set up was that it had a rechargeable battery, so unlike my little Skullcandy speakers I didn’t need to worry about carrying around spare AA batteries. It also allows me to use a 3.5mm headphone cable and an FM radio. I recently started to use the “**Outdoortech Turtle Shell**”:http://www.smalldog.com/product/85338/outdoor-tech-turtle-shell-2-0-rugged-wireless-boombox-electric-blue speakers to replace the old Skullcandy speakers for immediate portable sound, and as a huge bonus this speaker is bluetooth, something none of my previous portable units had. I will admit, I still haven’t found a better replacement for my aging Altec portable speaker as far as sound quality goes, but I will also admit finding a newer solution would require my having to let go!

    My second must-have gadget is an airport express base station. You might be surprised that it is not the Airport Extreme. Why do I love the “**airport express**”:http://www.smalldog.com/product/80932/apple-airport-express-base-station-802-11n-wi-fi so much? Well part of it might be a bit nostaglic. It was my first introduction into wireless speakers. How cool was it to plug in my Harmon Kardon speakers, simply tap my iPhone while sitting on the couch, and my speakers came to life like magic? But the great features don’t stop there. It’s a really powerful and inexpensive wireless router. For many, we don’t have huge areas we need to cover with wireless. Maybe it’s just a small apartment, or perhaps your house just isn’t that big. When I first started to use the airport express the one draw back was that the only ethernet port had to be designed (in most cases) for your internet modem, but in recent years Apple has added a second ethernet port allowing for more flexibility and versatility with this little gem.

    p{text-align: center;}. !http://blog.smalldog.com/images/4650.jpg!

    iPad and iPhone cases are another huge weakness of mine. I probably have no less then five cases for my phone and for my iPad. You could say I collected cases like some girls collect shoes! But on a serious note, this is a very important accessory for your iPhone or your iPad. Some folks prefer form fitting and minimal, others prefer a more rugged case. I have come to prefer several cases. However, I think cases that combine both slim form factor and serious protection are the “**Lifeproof**”:http://www.smalldog.com/wag900002119 cases. I have one for my phone and one for my iPad. What I love most of them is that they come off easily! I don’t always want a heavy duty case on my devices, but have found that many cases that offer greater levels of protection end up being very difficult to take off your device.