Chrome Enhanced Protection Adds AI Scam Detection

Google updates browser safety features to neutralize complex social engineering attacks like ClickFix.

Updated on Oct. 21, 2026 in Cybersecurity

Isometric editorial illustration of a geometric lattice structure protecting a central core from abstract intrusions, representing AI-driven cybersecurity. — Google has updated Chrome's Safe Browsing mode, deploying cloud-based AI models to identify and neutralize sophisticated social engineering and ClickFix-style scams. AI Illustration. Upload story photo >

Live Poll

Do you trust browser-based tools that analyze your page content to prevent online scams?

Google has updated its Chrome Safe Browsing Enhanced Protection mode to include AI-driven scam detection and new defenses against ClickFix social engineering attacks. These features utilize cloud-based Gemini models to analyze site content for malicious intent while scrubbing clipboard data to prevent unauthorized command execution.

Why it matters

The update targets ClickFix, a social engineering technique that bypasses standard browser protections by coercing users into manually executing malicious system commands. By integrating Gemini for real-time site analysis, Google aims to identify and block sophisticated scams that evade traditional static safety filters.

Google claims Enhanced Protection offers 10x greater safety than Standard Protection. The system now uses cloud-based Gemini models to score pages on brand representation and scam likeliness, while programmatically removing personally identifiable information from the clipboard to thwart ClickFix scripts.

The players

Google

Developer of the Chrome browser and the Safe Browsing security infrastructure.

The details

ClickFix attacks deceive users by tricking them into manually executing malicious commands within their own systems, effectively circumventing conventional download filters. Chrome now defends against this by identifying such scripts and automatically sanitizing clipboard data before it can be pasted. Additionally, Gemini-based models process page content ephemerally in the cloud, evaluating site indicators for scam patterns without logging user data or training models on the input.

2020: Enhanced Protection mode was first introduced.
2025: One billion users enabled Enhanced Protection.
October 20, 2026: Google announced the new security features.

The Tech Race

This update follows the rise of ClickFix social engineering, which has forced browser vendors to evolve beyond static URL blacklists. Google is positioning its Gemini models as a primary defense against the next generation of dynamic, user-coerced web attacks.

Users can enable Enhanced Protection in their Chrome browser settings to access these new warnings and clipboard protections. The system automatically triggers red interstitial screens for identified dangerous sites and flags lower-confidence threats with a shield icon.

The takeaway

Google is increasingly relying on cloud-based LLMs to verify site intent in real-time. Watch for future performance benchmarks regarding the latency of Gemini-based scam detection compared to existing heuristic-based Safe Browsing methods.