Google is reportedly developing a new warning message for Google Messages that could prevent users from falling into phishing scams or unknowingly installing malware on their devices. This feature is triggered whenever a user clicks on a link sent by a number that is not saved in their contacts. The new warning message is said to require users to take extra steps to check the box containing the warning message before continuing to the site. Notably, a recent report suggested that Google Messages is developing a satellite messaging feature that could provide two-way communication.

according to a Report Discovered by PiunikaWeb (via Tipster AssembleDebug), the feature was discovered via the Google Messages application in RCS Chat. While Google Messages does display warning text when clicking on a URL sent from an unknown number, this is a simple “do you trust the sender” warning and users can click “Continue” and open the link. The new pop-up warning comes with a two-step process that helps users pause before deciding whether to continue.

According to a screenshot shared by the tipster, the new warning is more clearly labeled and says “Warning: This sender is not one of your contacts” and adds the message “Links from people you don’t know may be opened.” Unwanted and Harmful Content”. If the user still wants to proceed, they must check a box that states “I understand this link may be harmful”. If the user decides not to open the link, they can click on the “Cancel” button.

Since the feature itself was discovered in RCS mode, it may also work with standard SMS.Comments posted on AssembleDebug postal on X (formerly Twitter) confirmed that warnings appear even when clicking on links sent by users’ banks. The feature is expected to be rolled out to Android users globally soon.

This warning may save many people from falling for a phishing scam. For those who are unfamiliar, a phishing scam is an online scam in which an attacker impersonates a person or institution representative that the victim is familiar with and asks the user to click a link. The linked website usually looks like a legitimate website and requires the user to log in. But once the account ID and password are entered, it is passed to the scammer, who can then use it to access their own account.

---