Chrome Enhanced Protection uses Gemini to score fake update scams
First merged summary.
Chrome Enhanced Protection now scores suspected scam pages with server-side Gemini and adds ClickFix clipboard warnings.
Google said on October 20, 2026, that Chrome Safe Browsing Enhanced Protection uses a server-side Gemini model to score fake antivirus alerts, fraudulent browser-update pages, and other deceptive sites. Gemini reads page text for brand and intent; Safe Browsing combines that score with domain reputation and other signals, and Gemini does not block sites by itself. Analysis is limited to pages that already show high-confidence scam indicators, and Google says that text is not logged, retained, or used for training. Users also get a lower-confidence suspicious warning, while known-bad pages still receive the full red warning. Chrome can warn about ClickFix-style clipboard commands, typically PowerShell or cmd.exe, after stripping personal data.
- The checks require Safe Browsing Enhanced Protection.
- It extends a 2025 on-device Gemini check limited to supported hardware.
- Page text is sent only when strong scam indicators already exist.
- Google says scored text is not logged, retained, or used for training.
- Known-bad pages still get Chrome’s full-page red warning.
- Google’s “ten times safer” figure compares warning counts, not compromises.
Timeline
dated events in the reporting · oldest first- Oct 20, 2026Google announces Gemini scam scoring in Enhanced Protection · GBHackers
What each outlet adds
beyond the shared facts- GBHackersSays “ten times safer” compares warning counts, not compromises.
- Cyber Security NewsServer model follows hardware-limited on-device checks; Gemini does not block alone.
- Vendors
- Products
- ChromeSafe Browsing
- AI models
- Gemini
Coverage
oldest first · one row per article · UTCChrome uses server-side Gemini to flag fake antivirus scams
Enhanced Protection adds scam scoring, separate suspicious warnings, and clipboard checks for ClickFix commands.
Chrome Enhanced Protection uses Gemini to catch update and antivirus scams
Scam scoring moved to a server-side model for every Enhanced Protection user, with separate suspicious-site warnings and ClickFix command checks.