Google Chrome's Fight Against Unwanted Notifications
Google says Chrome's anti-abuse systems have reduced unwanted notifications on Android by more than 7 billion per day during the first quarter of 2026. This significant reduction is part of Google's effort to combat notification abuse, which has increasingly been used to distribute scams, malware, phishing attempts, and fraudulent payment requests.
The Swiss Cheese Defense Model
Google developed a 'Swiss cheese' defense model, where several overlapping systems try to stop abuse at different stages. According to Google, 'Our goal is to ensure that if abuse slips through one layer, another is there to catch it.' This approach allows Google to halt abuse at the source, preventing deceptive content from reaching users while maintaining a healthy balance between utility and security.
Chrome can automatically revoke notification permissions from inactive websites, as well as sites that repeatedly trigger suspicious-notification warnings. When Chrome revokes the permission, it can automatically unsubscribe users from a site's notifications. Users can still review these automatically revoked permissions in the Safety Hub and grant access again if they want to.
Behavior Analysis and Restrictions
Google is analyzing behavior across networks of related websites, including coordinated service-worker activity, to identify groups distributing malicious or deceptive notifications. This enables Google to proactively revoke permissions from these persistent bad actors, protecting users from deceptive notifications even when the site content might not seem inherently malicious.
Google looks at factors such as notification volume, time users spend on a site, permission-prompt frequency, and engagement. For example, sites classified as disruptive can be limited to 1,000 messages per minute, with excess requests returning an HTTP 429 error. These restrictions can become more aggressive for repeat offenders and are only reset after a period of non-disruptive behavior.
Changes to Notification Permission Prompts
Chrome has also changed how notification permission prompts work on Android, with a less disruptive interface designed to let users decide whether they want notifications without interrupting their browsing. This strategy has substantially decreased unnecessary background activity, reduced user device battery consumption, and transformed the notification lifecycle so users receive only the content they find truly valuable.
Users can review notification permissions under Settings > Privacy and security > Site Settings > Notifications on desktop, or Settings > Notifications on Android. By taking these steps, Google aims to provide a safer and more user-friendly experience for Chrome users.
Overall Prevention and Defense
Once attackers have valid credentials, only 37% of their actions are blocked, highlighting the importance of robust defense mechanisms. The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments, providing valuable insights into the effectiveness of different defense strategies.
Google's efforts to combat unwanted notifications and improve user safety are part of its ongoing commitment to protecting users from scams, malware, and other online threats. By combining advanced technologies and user-centric design, Google aims to create a safer and more secure online environment for everyone.
- Read more about Google's efforts to combat unwanted notifications
- Learn more about The Blue Report 2026 and its findings on defense mechanisms
Google's anti-abuse systems and Swiss cheese defense model are critical components in the fight against unwanted notifications and online threats. By staying informed and taking proactive steps, users can help protect themselves and contribute to a safer online community.
Source: BleepingComputer