Google Chrome Adds Two-Tier Warning System for Suspicious and Dangerous Websites
Chrome’s Enhanced Protection now distinguishes lower-confidence “suspicious” sites from pages carrying a high-confidence, high-risk “dangerous” verdict. Users can select “Mark as safe” for suspicious sites, while dangerous pages replace the webpage with a solid red warning.
Google announced in October 2026 that Chrome will display warnings before users visit websites flagged as suspicious or dangerous, adding a new layer of protection to its browser safety features.
The new warnings are available to users who have Chrome’s Enhanced Protection mode enabled. When active, the feature flags a website as suspicious if it detects qualities similar to sites associated with phishing, malware, or scams. Google describes this as a “lower confidence verdict” with possible risk of user harm, meaning sites could occasionally be flagged incorrectly. Users who are fully confident a flagged site is safe can choose to proceed by selecting “Mark as safe.”
Warnings for sites classified as dangerous carry a higher confidence verdict and indicate a “high risk of user harm.” Google advises these sites be avoided entirely. The visual distinction between the two warning types is significant: suspicious site warnings appear as a pop-up window over a darkened version of the webpage, while dangerous site warnings replace the page almost entirely with a solid red background — a format already familiar to many Chrome users.
The two-tier approach mirrors a similar system Google introduced for Chrome file downloads in 2024, which used visually distinct notifications to differentiate between suspicious and dangerous files.
Alongside the warning redesign, Google also updated its Gemini-powered scam detection for Enhanced Protection users, though specific details about those improvements were not disclosed.
The update could offer users a more nuanced understanding of potential online threats, distinguishing between sites that warrant caution and those that pose a more definitive risk — rather than treating all flagged sites the same way.