Chrome suspicious site warnings are a new, lower-confidence alert that sits below the red “dangerous site” screen, and they apply to people who have Enhanced Protection turned on. Google announced the change in a security blog post dated October 20, 2026.
The practical effect is that Chrome can flag a page that looks off without claiming it is confirmed malicious. If you have ever clicked through a harsh red warning on a site you half trusted, a differently styled alert is aimed at exactly that moment.
TL;DR: Chrome now uses two warning tiers when Enhanced Protection is on. “Suspicious” means lower confidence and a possible risk, while “dangerous” keeps the full-page red screen. Google is also moving its Gemini scam detection to a server-side model and adding clipboard checks for ClickFix scams. You can turn Enhanced protection on in Chrome’s security settings.
How Chrome suspicious site warnings differ from dangerous ones
Google’s post describes a two-tier system for Safe Browsing site warnings. Suspicious sites are lower-confidence verdicts with a possible risk of harm, and dangerous sites are high-confidence verdicts with a high risk of harm.
A suspicious warning appears when a page shows deceptive patterns commonly linked to known malicious sites. Google says these warnings differ from dangerous ones in format, iconography, color, and text, so you can judge each one in context.
Dangerous warnings keep the full-page red interstitial for known malicious pages. The split also lets Google show a higher volume of protective warnings, which only helps if people read them instead of swatting them away. The post does not say which platforms get the suspicious tier, so desktop versus mobile is still an open question.
Gemini scam detection moves to the server
Google says Chrome’s on-device Gemini detection for tech support scams, which launched last year, is moving to a more powerful server-side Gemini model. It will reach all Enhanced Protection users and will also cover fake antivirus and browser update scams.
The model looks at the brand a page is imitating, what the page is trying to get you to do, and a scam likeliness score. Safe Browsing then combines that with domain reputation and other signals to reach a verdict.
On privacy, Google says page text is analyzed only when a site shows high-confidence scam indicators. Content sent off the device is processed ephemerally and is not logged, retained, or used for model training. Pages that push you to install something are a pattern Android has also been squeezing, as the sideloading 24-hour wait shows.
ClickFix protection watches what you copy
Chrome will also detect when an Enhanced Protection user copies a suspicious command, which is the move ClickFix scams depend on. The clipboard content is scrubbed of personal information and sent to Safe Browsing, and Chrome shows a warning if the verdict is dangerous.
Google says the system is designed to be high precision to limit disruption to developers. That matters because developers copy and paste commands all day, and a check that cried wolf would get switched off quickly.
Turning on Enhanced protection and what “ten times safer” counts
Chrome Help lists the steps on desktop: open the More menu, choose Settings, go to Privacy and security, then Security, and select Enhanced protection under Safe Browsing. Standard protection is the other main option, so this is a setting you opt into.
Google says Enhanced Protection users are ten times safer from phishing, social engineering, notification abuse, and other scams than Standard Protection users. The footnote in the post says that figure compares the average number of safety warnings shown to each group. It measures warnings shown, not harm directly measured, and that is the detail most headlines will skip.
Enhanced Protection launched in 2020, and Google says more than 1 billion Chrome users had it enabled in 2025. If a suspicious warning does appear on a page you did not expect to visit, treat it as a reason to back out and check the address, much like the habits behind the call forwarding fraud fix in Android 17.
