436/69 Thursday, August 13, 2026
Google disclosed in a report for the first quarter of 2026 that Chrome’s abuse protection system blocks more than 7 billion unwanted notifications per day on Android. This development is important for cybersecurity because threat actors increasingly abuse browser notifications as a channel to distribute malware, conduct phishing scams, and send fake payment alerts, directly affecting the security of mobile users’ data at scale.
To address the issue, Google has implemented a multi-layered protection approach. Chrome can automatically revoke notification permissions from websites that are inactive or repeatedly send suspicious content. The browser also proactively analyzes network behavior. If a website shows abusive behavior, the system limits message delivery to a maximum of 1,000 messages per minute and responds with an HTTP 429 error. In addition, users can immediately unsubscribe from notifications directly from the Android notification panel without opening the application. Chrome also provides a safety check screen that clearly summarizes dangerous websites whose notification permissions have already been revoked.
Users should regularly review their notification permissions. They can check or manage permissions that have been automatically revoked through the browser’s safety menu, or by going directly to Settings, selecting Privacy and Security, then Site Settings and Notifications. This improvement not only helps block deceptive content, but also reduces background activity that consumes device battery resources. Users should keep these settings up to date to maintain the highest level of browsing security and receive only genuinely useful information.