A notification you can't explain is worth taking seriously, but not because the notification itself is stealing anything. A push notification is only a delivery channel. The real concern is what sits behind it: an app collecting more data than it should, adware, a scam, or a website you once clicked "Allow" on without thinking.
This guide shows you how to trace the source of unwanted notifications, shut them off, and decide whether you need to do more than that.
Is the notification the problem, or the app behind it?
Blocking notifications and stopping data collection are two separate tasks. If you only turn off notifications, a suspicious app can still run, request permissions, and use the internet. Treat notification blocking as the first step, not the whole fix.
The sources usually fall into three groups:
- Websites. Browser notification permissions are the most common source of spam alerts, such as fake virus warnings, prize claims, or "your account is locked" messages. These sites generally can't read your files, but the links can lead to phishing or malware downloads.
- Apps you installed and forgot. Flashlight, cleaner, wallpaper, and "booster" apps are frequent offenders. Many are not criminal, but they may be aggressive about ads and tracking.
- Malicious apps. These are rarer on official stores than on sideloaded apps, but they exist. They may hide their icon, push scam alerts, or request unusual access.
Warning signs worth acting on
One odd alert isn't proof of anything. A pattern is more convincing. Pay attention if you notice:
- Alerts from an app name you don't recognize, or from a generic label like "System" or "Security" that doesn't match your phone's actual settings
- Notifications urging you to install a cleaner, antivirus, or "update," or to call a support number
- Ads appearing on your lock screen or outside the app itself
- Unusual battery drain or mobile data use traced to an app you rarely open
- Requests for passwords, payment details, or verification codes through a notification
Don't tap the notification to investigate. Opening it can load the very page the sender wants you to see.
Step 1: Find out where the notification comes from
On Android: Press and hold the notification. Most versions show the app name or a settings icon that opens that app's notification controls. If the alert disappeared, check notification history. On many phones it's under Settings > Notifications > Notification history, though you may need to turn it on first, and Samsung and other brands place it in different menus.
If the label says Chrome or another browser, the source is a website, not an installed app.
On iPhone: Go to Settings > Notifications. This lists every app permitted to send alerts. Scan for apps you don't remember installing. Websites only appear here if you added them to your Home Screen as web apps, since Safari doesn't send ordinary website alerts the way Chrome on Android does.
Step 2: Block website notifications in your browser
If the source is a site, removing the permission is usually enough. Menu names shift between versions, so look for the site or notification settings if yours differ slightly.
- Chrome on Android: Open the three-dot menu, then Settings > Notifications. You can turn off alerts for individual sites there. Under Site settings > Notifications, you can also block all new requests.
- Chrome on desktop: Go to Settings > Privacy and security > Site settings > Notifications. Remove any site you don't trust, then choose to stop sites from asking.
- Safari on Mac: Open Safari's settings, choose Websites, then Notifications. Set unfamiliar sites to Deny or remove them.
Alerts that keep arriving after you've done this are probably not coming from the browser. Go back to your app list.
Step 3: Review app permissions, not just notifications
For a suspicious installed app, check what it can access. On Android, open Settings > Security & privacy > Privacy > Permission manager. On some versions the path is Settings > Privacy > Permission manager. Look at location, contacts, SMS, microphone, camera, and files.
The question is whether the access makes sense. A weather app needing location is reasonable. A calculator requesting contacts and SMS is not.
On iPhone, go to Settings > Privacy & Security and open categories like Location Services, Contacts, and Photos to see which apps have access. You can also switch on App Privacy Report in the same menu, which records how often apps used permissions and which domains they contacted. It only collects data from the moment you turn it on, so it needs a few days to be useful.
Android also has a privacy dashboard showing recent permission use, usually in the same Privacy section.
Step 4: Uninstall what you don't need or trust
If an app is unfamiliar, unnecessary, or behaves oddly, remove it. Revoking permissions limits the damage, but deleting the app stops it completely. Uninstalling is also the fix when an app keeps sending notifications after you turn them off.
On Android, go to Settings > Apps, select the app, and tap Uninstall. If the option is grayed out, the app may have device administrator privileges. Look for Device admin apps in your security settings, which may be nested under additional security or advanced settings. Remove the app's admin status there, then uninstall.
If it still won't go, restart in Safe Mode, which temporarily disables third-party apps, and try again. Steps for Safe Mode differ by manufacturer, so check your phone maker's guidance.
On iPhone, press and hold the app icon, choose Remove App, then Delete App. Also check Settings > General > VPN & Device Management. A configuration profile you don't recognize can be a red flag, and you can remove it from that screen.
Step 5: Scan your device and secure your accounts
On Android, open the Play Store, tap your profile picture, choose Play Protect, and run a scan. It won't catch everything, but it's a reasonable baseline check and it's free. I'd avoid installing a random third-party "security" app to do this, since fake antivirus apps are a common source of the very notifications you're trying to stop.
Then think about what you did before the alerts appeared:
- Only tapped a notification and closed the page: You're probably fine, but clear the browser data for that site and monitor the device.
- Entered a password or card details: Change that password right away, enable two-factor authentication, and contact your bank if payment details were involved.
- Installed an app the alert suggested: Delete it, run a scan, and change passwords for important accounts from a clean device if you're concerned.
If the notifications keep coming
First, confirm they're really from the same source. Different alerts can come from different apps or sites, so recheck notification history after a day or two. Next, see whether the problem started after you installed something outside the official app store, as sideloaded apps carry much higher risk.
If you still can't find or remove the source, back up your photos and important files, then consider a factory reset. That is a last resort because it erases everything on the device. Don't restore from a backup that might include the suspicious app until you've confirmed it isn't coming back. If the device belongs to your employer, contact IT before resetting.
Keeping this from happening again
Allow notifications only for apps where you'd actually miss them: messaging, banking, calendar, and delivery. Deny or ignore permission prompts from sites you visited once. Review installed apps every few months, and remove any you haven't opened in a long time.
If you take one thing away: trace the source first, remove its access second, and uninstall anything you can't justify keeping. If you entered personal details or the problem returns after you've cleaned up, change your key passwords and contact your device maker, carrier, or a qualified technician.