How to Spot Fake Updates and Notifications on Your Phone
Updated:
Scammers know that most of us act on our phones without thinking twice. We tap notifications, follow prompts, and install updates almost on autopilot — and that’s exactly what they count on.
Fake notifications are one of the most common ways hackers try to get into your device. They disguise malicious links and apps as system alerts, software updates, or security warnings to trick you into doing something you otherwise wouldn’t.
Here are five red flags that should make you stop and think before tapping.
Worried your phone is already compromised?
Run a free security scan with Certo to check for spyware, malware, and hidden threats.
1. A system update pop-up appears out of nowhere
If a pop-up suddenly appears claiming your phone needs an urgent software update, be skeptical. This is a common tactic used to push fake “update” files that are actually malware.
Real software updates don’t appear as browser pop-ups or full-screen interruptions. On iPhone, genuine updates come through Settings > General > Software Update. On Android, go to Settings > Software Update (the exact path varies slightly depending on your phone model). If there’s nothing there, the pop-up wasn’t real.
When in doubt, ignore the notification and check your settings manually.
Fig 1. Checking for updates in Settings on iOS and Android.
2. You get an alert saying your phone has a virus
Fake virus alerts are one of the oldest tricks in the book, and they’re still working. You’re browsing a website and suddenly a warning fills your screen: “Your device is infected. Tap here to remove the virus immediately.”
These alerts are designed to make you panic. In reality, your phone almost certainly isn’t infected — the notification itself is the threat. Tapping it typically leads to one of two things: a malicious app download or a phishing website designed to steal your personal information.
No legitimate security app will warn you about a virus through a browser pop-up. Close the tab, and don’t interact with the message.
Fig 2. A fake virus pop-up.
3. You receive an email or text with an update link
Phone manufacturers and app developers don’t send software updates via email or text message. If you receive a message with a link to “install the latest update,” that’s a phishing attempt.
These messages are designed to look like they come from Apple, Google, Samsung, or another trusted brand. They may even spoof official-looking email addresses or phone numbers. But the link almost always leads somewhere harmful — either a fake site that harvests your credentials or a prompt to download a malicious file.
Delete the message and, if you’re concerned about missing a real update, check your phone’s settings directly.
Fig 3. An example of a fake Apple phishing link.
4. A pop-up asks you to subscribe to a calendar (iPhone only)
This one catches a lot of people off guard. While browsing, a notification appears asking whether you want to subscribe to a calendar. It might be dressed up as a verification step, a requirement to access content, or just a generic-looking system prompt.
If you tap “OK,” your calendar gets flooded with spam entries containing links to scam sites or phishing pages. The entries can appear at regular intervals, making them persistent and harder to ignore.
This particular trick is specific to iPhone, where Safari allows websites to prompt you to add a calendar subscription.
The fix is simple: if you don’t recognize where the request is coming from, tap “Don’t Allow.” If you’ve already subscribed accidentally, go to Settings > Apps > Calendar > Accounts, find any unfamiliar calendar subscriptions, and delete them.
Fig 4. A calendar subscription pop-up.
5. You get an alert from an app you don’t recognize
If you receive a notification from an app you don’t remember installing, don’t tap it. It could be a legitimate pre-installed system app you’ve forgotten about — but it could also be something more concerning.
Check your installed apps first. On iPhone, go to Settings > General > iPhone Storage to see a full list. On Android, go to Settings > Apps. If you see an app you don’t recognize and can’t account for, look it up before doing anything else. If it looks suspicious, delete it.
This is especially worth taking seriously if you’ve noticed other strange behavior on your phone — unusual battery drain, unexpected data usage, or your phone running warm without obvious reason.
Fig 5. Finding a suspicious app on iOS and Android.
Wrapping Up
The common thread running through all of these is urgency. Scammers want you to react before you think. Taking a few seconds to pause — and check your phone’s settings directly rather than following a notification — is usually enough to protect yourself.
If you want extra peace of mind, Certo’s security apps for iPhone and Android can scan your device for real threats, so you’re not relying on guesswork.
FAQs
What should I do if I tapped a fake notification?
If you tapped a fake update or virus alert, don’t enter any personal information on any page it leads to. Close the browser or app immediately. If you downloaded anything, delete it and run a security scan on your device.
Can fake notifications install anything on my phone without me tapping them?
Generally, no — most attacks require you to take some action, like tapping a link or approving a download. However, some sophisticated attacks can exploit browser vulnerabilities, so keeping your phone’s operating system and apps up to date is important.
How do I stop fake pop-ups appearing on my phone?
Most fake virus pop-ups appear in your browser. Make sure pop-ups are blocked in your browser settings:
- iPhone (Safari): Go to Settings > Apps > Safari and enable Block Pop-ups
- Android (Chrome): Tap the three-dot menu > Settings > Site settings > Pop-ups and redirects and make sure it’s set to Blocked
You should also avoid visiting untrustworthy websites and be cautious about clicking on ad links from unknown sources.
Sophia is a Senior Cybersecurity Writer at Certo, with over five years of experience writing about digital security, privacy, and emerging threats. Drawing on a background in IT and technology, she specializes in translating complex cybersecurity topics into clear, practical guidance that helps everyday users stay protected online.