The sudden appearance of annoying advertisements, pop-ups with dubious offers or constant notifications about “winnings” in the browser Google Chrome on a smartphone is not just an annoying factor, but a sign of a serious violation of digital hygiene. Most often, users are faced with a situation where they accidentally allowed notifications to be shown to a malicious site, and now their screen is filled with spam even when the browser is closed.

This problem can arise after visiting sites with pirated content, downloading APK files from unverified sources, or following phishing links in instant messengers. It is important to understand that in most cases this is not a classic virus that has entered the system, but the result of incorrect permissions that you yourself have given to web pages. However, this cannot be ignored, as some scripts may try to steal your data or redirect traffic.

In this article we will look in detail at how to fully diagnose your browser, remove malicious extensions, clear the cache and get rid of spam forever. We will look at both standard Android settings tools and deeper cleaning methods that will help restore your device to its former speed and security.

Diagnostics of the source of the problem and initial check

Before taking drastic measures, it is necessary to accurately determine the nature of the spam. Users often confuse system notifications from applications with advertising push notifications from websites. Open your notification shade and take a close look at the source of the message. If the name of a specific site is indicated there (for example news-daily.com or a set of random characters), then the problem lies in the notification settings of the browser itself.

If advertising appears in the form of full-screen windows on top of other applications or on the desktop, this may indicate the presence of a malicious miner application or a Trojan masquerading as a system service. In this case, the problem is not limited to just Google Chrome, and you will need to check the entire list of installed apps. First, check to see if you have recently received an application without an icon or with a transparent icon in the general list of apps.

It is also worth paying attention to the behavior of the browser at startup. If the start page automatically changes to an unknown search engine or tabs open with casino and betting advertisements, it means that a malicious script is written in the browser settings or an extension is installed that you do not remember. A quick diagnosis will help you save time and choose the right treatment method for the device.

⚠️ Attention: If, when you try to close the pop-up window, the advertisement opens again or the “Close” button does not work, do not click on the contents of the window under any circumstances. Use the Home button or swipe to switch between applications to exit the browser, and go straight to clearing data.
📊 How often do you encounter ads in Chrome?
Daily
Once a week
Rarely
Never

Clearing the list of allowed notifications

The most common cause of spam is accidentally clicking the Allow button on a site that has requested the right to send notifications. Attackers often disguise this button as an “I’m not a robot” or “Watch video” button. To remove spam, you need to go to the settings and manually revoke these permissions for all suspicious resources.

Go to the browser and click on the three dots in the upper right corner to open the main menu. Select item Settings, then go to section Notifications. Here you will see a general status switch and a list of sites below. Please read the "Allowed" list carefully. Any sites with unclear names, country domains or just a set of letters should be blocked immediately.

For each suspicious site, click on its name and select the option Block or Delete. It is best to remove all permissions and then re-issue them only to those resources that you trust 100%, for example, email services or news portals. This action will instantly stop the flow of push notifications to the curtain of your smartphone.

  • 🔍 Check the domain name: spammers often use addresses similar to well-known brands, but with one letter replaced.
  • 🚫 Block everything unnecessary: if you don’t remember why a site needs notifications, feel free to disable it.
  • 📱 Use search: in the list of permissions you can often find sites that you visited months ago and have already forgotten about them.

After clearing the list, restart your browser for the changes to take effect. In some cases, you may need to completely restart the smartphone itself to clear the RAM of frozen notification processes. If spam continues to arrive after these manipulations, move on to deeper cleaning methods.

💡

To quickly block all notifications at once, you can temporarily turn the “Notifications” switch to the “Off” position in the main Chrome settings menu, and then turn it back on, after clearing the list of sites.

Full clearing of the cache and browser data

If manually blocking notifications did not help, the malicious code may be stored in the browser cache or in the site's local data storage. The cache is designed to speed up page loading, but it is where scripts that cause redirects and pop-ups are often hidden. Clearing this data will return the browser to a “clean slate” state.

To perform this procedure, open the smartphone settings, find the section Applications (or “All applications”) and select Chromefrom the list. Go to item Storage or Memory. Here you will see two main buttons: “Clear cache” and “Clear data” (or “Reset”). Try clearing only the cache first - this is safe and will not delete your bookmarks or passwords.

If the problem persists, you need to use the Reset datafunction. This operation will delete all saved logins, passwords, browsing history and browser settings, but is guaranteed to remove any embedded scripts. Before doing this, make sure that your Google account is synced so that you can easily recover bookmarks and passwords after logging in.

Android Settings → Applications → Chrome → Storage → Clear data

After the reset, launch the browser. It will open as if you just installed it from the Play Store. You will need to sign in to your Google account again. Carefully monitor the behavior of the browser in the first minutes of operation: if advertising does not appear, it means that the source of infection has been successfully eliminated.

☑️ Complete cleaning checklist

Done: 0 / 4

Search and remove malicious extensions

Although the mobile version Google Chrome does not officially support installing extensions from the store, as is done in the desktop version, there are ways to installations through third-party stores or corporate policies. Attackers can use this loophole to insert a module into the browser that displays ads or collects data.

To check for the presence of such modules, enter the command chrome://extensionsin the address bar of the browser. If the page opens and you see a list of installed add-ons, study it carefully. Any extension that you did not knowingly install, or that has a suspicious name (for example, "PDF Converter", "Weather Check", "Flash Player") should be removed immediately.

Click the button Remove next to each suspicious item. If the page with extensions does not open or displays an error, this is a good sign - it means that third-party extensions are not active in your browser. However, it is also worth checking the section chrome://flagswhere experimental settings may have been changed, causing unstable operation.

Threat type Symptoms Removal method
Spam notifications Advertising in the curtain Revocation of permissions in settings
Malicious cache Redirects to other sites Clearing application data
Hidden extension Changing search, banners Removing via chrome://extensions
System virus Advertising on the desktop Deleting an application in Android settings

Remember that legitimate extensions for mobile Chrome are extremely rare. In 99% of cases, the presence of an active extension on an Android smartphone indicates that the security of the device has been compromised. After cleaning, check your address bar again to make sure there are no unwanted redirects.

⚠️ Attention: Never download files with the .apk extension from pop-up windows offering to “update Flash Player” or “install antivirus”. The official app store is the only safe source of software for Android.

Resetting your browser to factory settings

If the previous methods did not work, there may be deep changes in the browser configuration files that cannot be removed by simply clearing the cache. In this case, the solution is to completely reset the browser settings to the factory state through the internal menu, if such a function is available in your version, or through the Android system settings.

In the latest versions Chrome for Android, the reset function is often integrated into the settings menu of the application itself. Go to SettingsPrivacy and SecurityClear history. Select the "Advanced" tab, set the time range to "All time" and check all the boxes, including "Site Settings", "Offline Application Data" and "Media Licenses".

Press the button Delete data. This process may take several minutes depending on the amount of accumulated information. Once completed, the browser will close. When you restart it, it will offer to configure it as a new device. Do not restore old settings from a backup copy right away; it is better to configure the browser manually to make sure there are no problems.

What to do if the reset did not help?

If even a complete reset and data deletion did not eliminate the spam, there is a high probability that the virus is not in the browser, but in the Android system. Try booting your phone into Safe Mode (hold the power button and tap Safe Mode). If there are no ads in this mode, the culprit is a third-party application that needs to be found and removed.

It is also important to check whether your browser is managed by an organization. Go to the menu and see if it says “Managed by your organization.” If you are a private user and see this message, it means that a malicious profile is installed on your device, which dictates to the browser which sites to open. Deleting such a profile is carried out through the device settings in the “Device Administrators” section.

Prevention and protection from future spam

After successfully wiping the device, it is critical to change your Internet usage habits so that the problem does not recur. Modern mobile spam is becoming more and more aggressive, and one accidental mistake can lead to infection again. Use Google's built-in security features and third-party tools to create a strong barrier.

Activate the feature Safe Browsing in Chrome settings. It uses Google databases to check sites for malware and phishing in real time. Go to SettingsPrivacy and SecuritySafe Browsing and select the “Advanced Protection” mode. This may make some pages load a little slower, but will significantly improve security.

  • 🛡️ Enable an ad blocker: install a browser that supports ad blocking at the DNS level, for example Brave or set up a private DNS in Android.
  • 🚫 Ignore horror stories: sites that scare you that “your phone is infected” are always fake. Never call the numbers listed there.
  • 🔄 Update your browser: regularly go to the Play Market and update Chrome to the latest version, as updates contain security patches.

It is also recommended to set up a private DNS server in the settings of Android itself. This will allow you to filter advertising traffic at the level of the entire system, not just the browser. In the network settings, select “Private DNS” and enter the address of a reliable ad-blocking service (for example, dns.adguard.com). This simple action will remove the lion's share of banners on any site.

💡

The most effective anti-spam protection is a combination of Safe Browsing in Chrome, a private DNS filter in Android, and careful attention to requests for sending notifications.

⚠️ Attention: Android settings interfaces and Chrome browser versions may differ depending on the smartphone model and manufacturer (Samsung, Xiaomi, Pixel). If you can't find the menu item you need, try searching inside your phone settings using the keywords "Applications" or "Notifications".

Frequently asked questions (FAQ)

Why do ads appear even when I didn't open the browser?

This is because you allowed a specific site to send you push notifications. These notifications work regardless of whether the browser is running or not, as they are handled by the Android system service. To fix this, you need to go to Chrome's notification settings and block access for all sites.

Will wiping Chrome data remove my saved passwords?

Yes, wiping app data locally will remove all saved passwords, history, and bookmarks from the device. However, if you have Google Account synchronization enabled, all this data is stored in the cloud. After re-logging into your account in the browser, passwords and bookmarks will be automatically restored.

Can a virus in Chrome steal money from a bank card?

Spam in the browser itself rarely leads to direct theft of money. However, if you click on the link in such a notification and enter your card details on a phishing site, scammers will be able to intercept them. Never enter confidential information on sites opened through advertising notifications.

How to distinguish a system virus from spam in the browser?

Spam in the browser usually appears in the form of notifications in the curtain or pop-ups only when you launch Chrome. The system virus displays ads on the desktop, locks the phone settings, quickly drains the battery and may be present in the list of applications under a strange name without an icon.

Do you need to install an antivirus to clean Chrome?

In most cases, an antivirus is not required to remove spam from Chrome, since the problem is solved by the browser settings. However, if you suspect a system virus (out-of-browser advertising), installing a reliable antivirus such as Malwarebytes or Kaspersky will help scan the system and remove malicious APK files.