Chrome Adds New “Suspicious Site” Warnings — Here’s When You’ll See Them

Chrome has introduced new warnings for suspicious websites that appear before they are confirmed dangerous. These alerts are part of the Enhanced Protection mode, which is optional for users. Previously documented in Chrome 152 released on August 25, 2026, these notifications appear as pop-ups that users can bypass, but require appropriate responses to ensure workplace security.

Google differentiates between suspicious sites and dangerous sites, using unique colors, icons, and wording for the former, while the latter still triggers full-page red warnings.

Suspicious warnings do not necessarily indicate the presence of malware, but users should still exercise caution when encountering unfamiliar addresses and avoid entering sensitive information. Attackers have demonstrated the ability to exploit trusted-looking browser tools, as shown by a fake Perplexity Chrome extension discovered in July 2026 that redirected users through attacker-controlled servers.

Google has transitioned its Gemini-powered scam detection from an on-device model to a server-side system, analyzing page content for deceptive behavior, including fake antivirus alerts and fraudulent browser updates. Safe Browsing examines domain reputation and other signals to identify potential threats.

Enhanced Protection users can leverage Chrome's ability to check suspicious copied commands and warn them when dangerous content is identified. However, these warnings require the Enhanced Protection mode, while Chrome's default Standard Protection continues to identify known phishing sites, malware, and other threats. Administrators can manage these new warnings through Chrome's SafeBrowsingProtectionLevel policy and use SafeBrowsingAllowlistDomains to exclude specific sites from generating warnings.

Google provides instructions for managing these warnings through Chrome's existing policies and allows administrators to use SafeBrowsingAllowlistDomains to exclude specified sites. It is essential for organizations to carefully consider these exceptions, especially when previously trusted sites become compromised. Browser-management controls have also attracted attention from attackers, with Google working to develop defenses against extensions that abuse enterprise policies on unmanaged personal devices.

Employees can view their protection level under Chrome's Settings > Privacy and security > Security unless administrators restrict such changes. Google's Safe Browsing privacy documentation explains the additional browsing information shared under Enhanced Protection. While browser updates are crucial, they cannot prevent all security risks.

Chrome 154, released in September 2026, addressed 108 security vulnerabilities, including 11 rated Critical, and highlights the importance of keeping browsers updated to mitigate potential threats. Administrators should ensure that managed browsers use Enhanced Protection, review domain exceptions, and reinforce appropriate responses to alerts.

Ultimately, detecting suspicious pages earlier is beneficial, but users must still rely on their ability to recognize when a suspicious site is not worth the risk.