Google is adding a new layer to Chrome’s built-in safety net. The browser will now show a dedicated warning before you load a website it considers “suspicious,” giving you a chance to back out before landing on a page that might be running a phishing scam or malware scheme. The new Chrome suspicious site warning sits between Chrome doing nothing and Chrome blocking a page outright, and it only appears when Chrome’s Enhanced Protection setting is turned on.
How the new warning works
According to Google, a site gets flagged as suspicious when it shares traits with other known phishing, malware, or scam pages. The company describes this as a “lower confidence verdict” with a possible risk of harm, meaning Chrome isn’t certain the site is bad, just that it looks like trouble. You’ll see a pop-up window on both desktop and mobile, with the actual webpage still visible underneath but darkened out. If you’re confident the flag is wrong, there’s a “Mark as safe” option to dismiss it and continue.
That’s a very different experience from Chrome’s existing warning for sites it’s highly confident are dangerous. Those pages get a much harder stop: a nearly full-screen alert that replaces the site entirely with a solid red background. Google calls dangerous-site warnings a “high confidence verdict” with a “high risk of user harm,” and the advice there is simple — don’t proceed.
Why Chrome needed a middle option
Before this update, Chrome’s warning system was closer to a binary switch: a site was either fine or flagged as dangerous. The problem is that plenty of shady-looking pages don’t meet the bar for an outright block, yet they’re still risky enough that an average user should think twice. By splitting the warnings into two tiers, Google is giving people more context instead of just a yes-or-no answer, similar to how it already handles suspicious versus dangerous file downloads, a system it introduced back in 2024.
Enhanced Protection is the key requirement
It’s worth repeating that suspicious site warnings only show up if you have Chrome’s Enhanced Protection mode switched on, a step up from the browser’s default Standard Protection. Enhanced Protection already does more proactive scanning of pages and downloads, including sharing more data with Google’s Safe Browsing systems in real time, so this new warning tier builds directly on that existing trade-off between privacy and extra protection. If you’re running Standard Protection, you won’t see these new suspicious-site pop-ups at all.
Alongside the new warning tiers, Google says it has also improved Gemini-powered scam detection for Enhanced Protection users, which should help Chrome catch a wider range of scam pages beyond the traditional phishing and malware patterns it already watches for.
What this means for you
If you’re the kind of person who clicks through security warnings without reading them, the two-tier system is a genuine improvement: a red, near-full-screen block is much harder to ignore than a small notification, and now Chrome reserves that treatment for the sites it’s most confident are actually dangerous. For everyone else, the softer suspicious-site pop-up is a useful nudge rather than a hard wall, and the “Mark as safe” option means it shouldn’t get in the way if you land on a legitimate site that happens to trip the filter. As with any browser security feature, treat it as an added layer rather than a replacement for basic caution with links in emails, texts, or search results.
The bottom line
Chrome’s new suspicious site warning doesn’t change how the browser handles clearly dangerous pages, but it fills a gap for the much larger number of sites that look questionable without being confirmed threats. If you want the extra heads-up, make sure Enhanced Protection is turned on in Chrome’s privacy and security settings; if you’re already running it, you should start seeing these new pop-ups automatically as Google rolls the feature out.
Source: The Verge
