Fake Norton or McAfee Alerts on Mac: Stop Them Safely

By Game Osborne · September 4, 2026 · Mac · Mac security, scam alerts, browser notifications

Learn why these frightening warnings appear, how to silence them, and how to check your Mac without clicking or paying anyone.

First, take a breath

A Norton or McAfee warning does not automatically mean your Mac has a virus. These alerts often come from a website that received permission to send browser notifications. That permission may have been hidden behind an “Allow” button on a page claiming to check whether you were human.

The warning may mention an expired subscription, several viruses, or immediate danger. Its real purpose is to frighten you into clicking, calling a phone number, or entering payment details. Do not pay. You can safely fix this yourself.

1. Do not click any button inside the warning.
2. Close the browser tab by clicking its small X.
3. Quit the browser from its name menu if the warning returns.
4. Choose Force Quit from the Apple menu if the browser will not close.
5. Select the stuck browser in the Force Quit window.
6. Click Force Quit.

Silence the alerts immediately

The following path assumes macOS Ventura or later. On macOS Monterey or earlier, open System Preferences instead and look for Notifications or Notifications & Focus. This quick fix stops every notification from that browser, including legitimate ones.

1. Click the Apple menu in the top-left corner of the screen.
2. Open System Settings.
3. Click Notifications in the sidebar.
4. Click the browser that displayed the alert, such as Safari, Chrome, or Firefox.
5. Turn off Allow notifications.

Remove the website’s permission in Safari

Use this section if Safari is your browser. A website permission is simply approval you gave a site to use a feature, such as sending notifications.

1. Open Safari.
2. Choose Settings from the Safari menu.
3. Click Websites at the top of the Settings window.
4. Click Notifications in the left-hand list.
5. Select any website you do not recognize.
6. Click Remove.
7. Turn off “Allow websites to ask for permission to send notifications.”

Remove the permission in Google Chrome

Chrome keeps these permissions inside Site settings. The wording can move slightly between Chrome versions, but the reliable destination is the Notifications page under Privacy and security.

1. Open Google Chrome.
2. Choose Settings from the three-dot menu in the top-right corner.
3. Click Privacy and security.
4. Click Site settings.
5. Click Notifications.
6. Find the suspicious address under “Allowed to send notifications.”
7. Click the three-dot button beside that address.
8. Choose Block.

Remove the permission in Firefox

Firefox calls its notification list Settings for Website Permissions. You only need to remove sites you do not know or trust.

1. Open Firefox.
2. Choose Settings from the three-line menu in the top-right corner.
3. Click Privacy & Security.
4. Scroll to the Permissions section.
5. Click Settings beside Notifications.
6. Select the suspicious website.
7. Click Remove Website.
8. Click Save Changes.

Check your Mac without buying anything

A browser notification is not proof of an infection. Apple includes built-in malware protection called XProtect. It works quietly in the background and receives security information automatically. Installing available macOS updates helps keep that protection current.

Also look at your Downloads folder. A file is less concerning if it was merely downloaded and never opened. Common suspicious items have names involving “security,” “cleaner,” “antivirus,” or “installer.” Do not open one to investigate it.

1. Open System Settings from the Apple menu.
2. Click General in the sidebar.
3. Click Software Update.
4. Install any update offered by Apple.
5. Open the Downloads folder in Finder.
6. Move any unexpected installer to the Trash.
7. Empty the Trash from the Finder menu.

If you already clicked or paid

If you only opened the page, close it and complete the steps above. If you entered a card number, call the card issuer using the phone number printed on the card. Do not use a number shown in the pop-up.

If you entered your Apple Account password, change it through System Settings or Apple’s official account website. If someone persuaded you to install remote-control software, disconnect the Mac from Wi-Fi and ask a trusted technician for help. That situation needs a closer look, but it is still fixable.

1. Call your card issuer if you entered payment information.
2. Change your Apple Account password if you entered it on the suspicious page.
3. Turn off Wi-Fi if a stranger gained remote access to your Mac.

Bottom line

These alarming Norton or McAfee messages usually come from a website notification, not a virus scan. Block the site, update your Mac, and never pay or call anyone through the warning.