Turn on Warn when visiting a fraudulent website in Safari. Safari can then warn you about sites reported as deceptive, malicious, or potentially harmful, including phishing pages that imitate a bank, government agency, or email provider to steal passwords and other information.
How to fix it
Current Safari versions on macOS
- Open Safari.
- Choose Safari > Settings.
- Click Security.
- Select Warn when visiting a fraudulent website.
In older Safari versions, choose Safari > Preferences > Security and enable the equivalent checkbox.
What the warning does—and does not do
Safari may send information calculated from a website address to its Safe Browsing providers to check whether the site has been reported as fraudulent. Apple describes this processing in Safari > Settings > Privacy > About Safari & Privacy.
The warning is an additional safeguard, not a guarantee that every new or targeted phishing page will be detected. If Safari shows a deceptive, malicious, certificate, or insecure-connection warning, do not enter credentials or payment information. Also verify the address yourself: HTTPS encrypts a connection, but does not prove that the site is trustworthy.
For another browser credential boundary, see Disable Safari AutoFill when it is not required.
