Google's Chrome browser on Android devices significantly reduced unwanted notifications, blocking over 7 billion per day during the first quarter of 2026. The company stated that notification abuse has become a prevalent method for distributing scams, malware, phishing attempts, and fraudulent payment requests.
To combat this, Google implemented a multi-layered "Swiss cheese" defense model, designed so that if one protective layer fails, another is in place to intercept the abuse. This approach aims to stop malicious content at its source, preventing it from reaching users while maintaining a balance between utility and security.
Chrome automatically revokes notification permissions from websites deemed inactive or those that repeatedly trigger suspicious activity warnings. When permissions are revoked, users are automatically unsubscribed from that site's notifications. Users can review these automatically revoked permissions in the Safety Hub and re-grant access if desired. Additionally, users can unsubscribe from notifications directly through Android's notification panel.
Google also analyzes behavior across networks of related websites, including coordinated service-worker activity, to identify groups distributing malicious or deceptive notifications. This allows for the proactive revocation of permissions from persistent bad actors, even if the site content itself doesn't appear immediately malicious.
Factors considered in this analysis include notification volume, user time spent on a site, frequency of permission prompts, and user engagement. Websites classified as disruptive may have their notification volume limited to 1,000 messages per minute, with excess requests returning an HTTP 429 error. These restrictions can become more aggressive for repeat offenders and are only reset after a period of non-disruptive behavior.
Furthermore, Chrome has updated how notification permission prompts appear on Android, introducing a less intrusive interface. This change is intended to allow users to decide on notification preferences without interrupting their browsing experience. Google noted that this strategy has substantially decreased unnecessary background activity, reduced device battery consumption, and refined the notification lifecycle to ensure users receive only valuable content.
Users can review their notification permissions in Chrome under Settings > Privacy and security > Site Settings > Notifications on desktop, or Settings > Notifications on Android.
