Some websites genuinely want to notify you about shipping updates or new messages. But a large number of suspicious pages ask for notification permission for a different reason: once you click Allow, they can keep sending scary or manipulative alerts long after you leave the page.
If a page says "Click Allow to continue," "Click Allow to watch," or "Click Allow to prove you are not a robot," treat it as suspicious. Notification permission is not required for any of those things.
The small box with Allow and Block comes from your browser, not from the page. It names the site and one permission, usually "Show notifications". Clicking Allow lets that site send pop-up alerts to your desktop or phone, even after you close its tab. It does not verify you, unlock the video or prove you are human. Block costs you nothing: the page works the same either way, apart from the notifications.
Everything around that box, like the "press Allow to prove you are not a robot" text, the play button or the fake loading bar, is drawn by the website to make you click.
Browser notifications are powerful because they break out of the page. After you grant permission, the site can push alerts that look like system warnings, account problems, prize notices, or fake virus messages. Many users assume those alerts come from the browser or Windows, not from a site they visited days ago.
One permission can turn into repeated fake warnings even when the original tab is gone.
The messages are designed to make you click fast before you ask where they came from.
Those alerts often lead to fake support pages, bogus giveaways, or more phishing forms.
Allow only gave the site permission to send notifications. Take it back and the alerts stop:
chrome://settings/content/notifications into the address bar. Under Allowed to send notifications, open the menu next to the site and choose Remove.edge://settings/content/notifications. Under Allow, open the menu next to the site and choose Remove.Remove any site you do not remember approving. If a notification already led you to a download, a support number or a login form, deal with that separately: here is what to do after a fake virus alert.
People are used to permission prompts. Phones, browsers, and apps ask for them all the time. Attackers hide inside that familiarity. The user thinks they are approving a small step to get to the content. The attacker knows they are buying a future channel to keep grabbing attention.
Two close relatives of this trick: tech support scam popups, which the notifications often lead to, and the fake CAPTCHA that tells you to press Win+R, which goes a step further and gets you to run malware yourself.
Is it safe to continue when a site says "click Allow to continue"?
Closing the prompt or clicking Block is safe. Clicking Allow does not continue anything; it signs you up for the site's notifications, and the page behind the prompt usually has nothing on it.
I clicked "I'm not a robot" and then got an Allow or Block prompt. What does Allow mean?
That second box comes from your browser, not the page. Allow means the site may send notifications to your desktop or phone at any time, even after you close it. A real robot check never needs that permission, so click Block.
Are all notification prompts bad?
No. The red flag is when the site claims Allow is required for something unrelated, like watching content or proving you are not a robot.
Does clicking Allow mean my device is infected?
Not necessarily. In many cases it means the site can send browser notifications. That is still annoying and risky, but it is not the same as a deep device compromise.
Why do the notifications look like system alerts?
Because scammers intentionally write them that way. They know people trust anything that looks like a browser or operating-system warning.
Since version 1.7.0, PhishClean recognises "click Allow to continue" pages and covers them with a warning before you answer the prompt. The check runs on your device; nothing about the page is sent anywhere.
Install PhishClean freeLast updated:
If this helped, share it with someone who would benefit from it, or subscribe for new browser-security guides from PhishClean.
Get practical phishing and browser-safety articles in your inbox. No salesy drip, just new guides and product updates when they are worth sending.