How does Edge now stop scam notifications that keep coming back?

The notification trap scammers built

Website notifications were designed to help people stay informed. They alert you to a new message, remind you of an upcoming event, or share an update from a service you trust. Scammers have turned this feature into a persistent channel for fake virus warnings and deceptive security alerts. They take advantage of busy lives to persuade users to allow notifications from malicious sites. Selecting "Allow" gives a malicious site repeated opportunities to send fake warnings. Even after you close the original page, notifications can lead back to the scam again and again.

For years, the browser has been fighting notification spam. Multiple workstreams actively detect and block them by the billions. The scale of the problem required something beyond filtering.

How Scareware blocker revealed the pattern

Enabled by default on qualifying PCs for just over a year, Scareware blocker in Edge directly protects tens of thousands of users per day against new scams. Each report helps protect 50 more users through Microsoft Defender SmartScreen. The impact keeps growing. As the team reviewed user-submitted reports, a pattern emerged. Many scams started with a website notification. These notifications did more than interrupt users. They kept drawing users back to scam pages that SmartScreen or Scareware blocker could already detect. That pattern pointed to another way to protect users: stop the notification sites that send users to a scam.

Automatic blocking in Edge 156

As of last month's rollout of Edge 156, when Microsoft Defender SmartScreen or Scareware blocker detect a scam pushed through a notification, Edge automatically disables notifications from the site that sent it. The next time Edge starts, an information bar explains what happened. If you believe a site was blocked incorrectly, you can review sites with blocked notifications and unblock them from Edge Settings. The settings page lists the blocked site and lets you unblock to restore its notifications. You stay in control.

Reporting before the first fake alert arrives

A new "Block and report" option appears in notification permission requests. Notification abuse starts with a page that asks permission to show notifications. The page is misleading, asking you to prove you are not a robot or complete another deceptive step by selecting "Allow". From the notification permission prompt, you can open the menu next to "Block" and select "Block and report". In your report, you can include the requesting URL and a screenshot of the page that tried to persuade you to enable notifications. This gives SmartScreen additional evidence before the first abusive notification is delivered. Reporting abusive sites helps protect other users.

Manual control remains in your hands

Even if Edge does not detect an unwanted notification, you still have the power to block notifications from that site. From any website notification, you can select the "..." menu on the notification and disable future notifications from that site. Fake alerts are designed to be confusing. Clicking other buttons on the alert simply opens more popup windows. Use the "..." menu to turn off notifications for an annoying site. The browser sits at the point where many attacks become visible. By connecting on-device detection, user-submitted reports, and cloud reputation, Edge turns an individual threat signal into broader protection. How many of the blocked sites were already abandoned by their operators, the announcement does not say.