Updated November 3, 2026. Instructions checked against Microsoft and Google documentation.
A virus warning that keeps appearing on your Windows desktop may be coming from a website you allowed to send notifications. It is not, by itself, proof that your computer is infected. Open your browser settings or Windows Security yourself to check what is happening, instead of using the warning’s buttons or phone number.
There is also a useful change in Edge. In its November 2, 2026 announcement, Microsoft explained how the browser can cut off notifications that lead people back to scam pages. Here is how to use the available protections and stop unwanted alerts yourself.
First, identify where the warning comes from
| What you see | What to check | What to do |
|---|---|---|
| An alert in the corner of the desktop or notification center | Look for a browser name and website address. | Block that website’s notification permission. |
| A warning inside a tab, new window or full-screen page | It may be a page designed to resemble Windows or an antivirus app. | Close the page using the browser or Windows controls. |
| A warning you can also find by opening your installed security app | An actual security product may have detected something. | Review its findings in the app and follow its recommended action. |
Scam pages often use urgent language, alarm sounds, a support number or a demand to install a repair tool. A familiar logo does not prove who sent the message. Our guide to scareware scams explains how these warnings try to pressure you into acting.
Microsoft’s advice on online scams is clear that its genuine error messages do not contain a phone number to call. Do not pay, share passwords or give a stranger remote access because a browser warning asks you to.
How to stop scam notifications in Edge
Use Edge’s website notification settings to block the sender without returning to the suspicious page:
- Open Edge’s Settings and more menu, shown as three dots, then choose Settings.
- Go to Privacy, search, and services > Site permissions > All sites.
- Select the website shown as the sender of the unwanted notification.
- Find Notifications and change its permission to Block.
Repeat this for other unwanted senders. Closing the original tab is not enough: Microsoft says permitted website notifications can appear even when Edge is closed.
What changed in Edge 156?
Microsoft says the change arrived with October’s Edge 156 rollout. If Microsoft Defender SmartScreen or Scareware blocker detects a scam reached through a notification, Edge automatically disables notifications from the site that sent it. An information bar explains the action the next time Edge starts.
You can review blocked sites in Settings. Edge also offers Block and report from the menu beside the Block option on a notification permission request. It is useful when a page misleadingly asks you to allow notifications to prove that you are human.
This protection depends on a scam being detected. If unwanted messages continue, block the sender manually rather than waiting for automatic detection.
Check that Scareware blocker is available and turned on
Microsoft’s Scareware blocker support page explains that the feature looks for deceptive full-screen pages using a model running on your device. To check it:
- In Edge Settings, open Privacy, search, and services > Security.
- Find Scareware blocker and turn it on if the option is available.
- Keep your browser current. Open Settings > About Microsoft Edge, apply any offered update and restart when requested.
It is enabled by default on qualifying computers, but availability and the default setting depend on the device. A missing switch does not mean your PC is infected. On a work or school computer, ask IT about settings managed by your organization.
Automatic on-device analysis is different from choosing to submit a report. Microsoft says a Block and report submission can include the requesting URL and a screenshot, so review what you are sending.
Notifications and pop-ups need different controls
If a site keeps opening windows or tabs, check Edge’s pop-up blocker too. In Settings, open Privacy, search, and services > Site permissions > Pop-ups and redirects, then make sure Blocked (recommended) is enabled.
This setting does not revoke notification permissions. It also cannot stop every advertisement drawn inside a web page. If unwanted windows continue, review your browser extensions and turn off unfamiliar ones.
Using Chrome instead?
Google’s Chrome notification instructions provide a similar way to block a sender:
- Open Settings > Privacy and security > Site Settings > Notifications.
- Beside Not allowed to send notifications, choose Add.
- Enter the unwanted website’s address in that settings dialog and select Add.
Make the change in the browser that is sending the alert. Blocking a site in Edge does not change its permissions in Chrome.
What if the scam page will not close?
Microsoft provides a Task Manager method for an unresponsive Edge window:
- Right-click Start and open Task Manager.
- Select Processes, then find Microsoft Edge under Apps.
- Right-click Edge and choose End task. Reopen the browser afterward.
Ending the browser can close other tabs and lose unsaved work. Avoid restoring the suspicious page when you reopen it. Use this when normal closing controls do not work.
If you already interacted with the warning
The FTC’s tech support scam guidance also covers what to do after sharing personal information, granting access or making a payment.
| What happened | Your next step |
|---|---|
| You only allowed website notifications | Block that site’s notification permission. The permission alone is not proof of a malware installation. |
| You downloaded a file but have not opened it | Do not run it. Remove the unwanted download and check your device if you are concerned. |
| You ran a program or allowed remote access | End the remote session, get help from a trusted support provider and scan the computer. Blocking notifications alone will not address software already installed. |
| You shared passwords or made a payment | Change exposed passwords using a trusted device. Contact the bank or payment provider directly if payment details or money were involved. |
To check the PC, search for Windows Security from Start, then open Virus & threat protection > Quick scan. Microsoft recommends a quick scan when you suspect malware. If you use another antivirus, open that product directly instead.
For a wider check, Windows Security’s Scan options include Full scan and Microsoft Defender Offline. The offline option restarts the computer, so save your work first. Our comparison of quick, full and offline Defender scans explains which check suits different concerns.
Frequently asked questions
Does a fake virus notification mean my PC is infected?
Not necessarily. A website can send alarming notifications after you grant permission. Check the sender, block unwanted permissions and scan the device if you downloaded or ran something suspicious.
Why do the alerts appear after I close Edge?
Website notifications can continue when Edge is closed. Blocking the sender’s notification permission addresses that source; closing one browser tab does not.
Will turning on the pop-up blocker stop all notifications?
No. Notifications and pop-up windows use different settings. Revoke the site’s notification permission as well as checking the pop-up blocker when needed.
Does Scareware blocker replace my antivirus?
No. It helps detect deceptive browser experiences. Keep your regular antivirus protection active and use it to investigate suspicious files or installed software.
Why is the Scareware blocker switch missing?
Microsoft documents device requirements for the feature, and some computers do not support it. Check that Edge is updated and ask IT about managed settings on an organizational device.
Should I reinstall Windows just to stop these alerts?
Start by blocking the notification sender and checking your security app. An unwanted website permission alone does not justify a Windows reinstall. Seek trusted help if you ran untrusted software or gave someone remote access.