How to Stop Pop-Up Ads on Android

Pop-up ads on an Android phone in 2026 almost always trace back to one rogue app. Either a sideloaded utility, a recently installed game from a sketchy publisher, or a free wallpaper or flashlight app that hides an aggressive ad SDK. Find that app, remove it, and most of the popups stop immediately.

This guide walks through the four-step diagnostic that we use to clean an infected phone: identify which app is firing the popups (Android logs the source), disable cross-app overlay permissions for everything that should not have them, switch the device DNS to a blocking resolver, and revoke risky permissions like Display over other apps and Accessibility from anything that does not need them.

The 2026 tools that matter: Android 14 and 15 made the offending app discoverable via the Apps with Display over other apps screen, NextDNS and AdGuard DNS are both free for personal use with strong ad-blocking lists, and the Play Protect malware scan finally catches most ad-fraud SDKs at install time. Doing this in sequence finishes the cleanup in under fifteen minutes.

Step one: identify the rogue app

Open Settings, Apps, scroll down to Special app access (Android 14 and earlier) or Settings, Apps, Special access, Display over other apps (Android 15+). The list shows every app that has permission to render content on top of other apps. The legitimate entries are Messenger, Twilio, password managers, screen recorders, and maybe a launcher. Anything else is suspect.

Sort by recently installed. If the popups started this week, the new entry on the list is the source ninety percent of the time. Uninstall it. If you are not sure, toggle off the overlay permission first; the popup will stop while the app stays installed, which confirms the source without committing to removal.

If no recent installs match, check Accessibility. Settings, Accessibility, scroll through the list. Anything you do not recognize that has Accessibility access is high risk. Accessibility is one of the two most-abused permissions on Android (alongside Display over other apps) and a known vector for popup ads, click fraud, and worse. Toggle off anything unfamiliar.

Step two: clean the launcher and the browser

If the popups appear on the home screen (not inside a specific app), the launcher itself is the source or there is a system-level cross-app overlay. Switch temporarily to a clean launcher (Niagara Launcher, Lawnchair, or stock Pixel Launcher) to test. If popups stop, your previous launcher was the source.

If the popups appear only inside Chrome or another browser, check the browser notification permissions: open Chrome, Settings, Site settings, Notifications, scroll through the allowed list. Block notifications from every site you do not deliberately want. Repeat for Brave, Firefox, and any other browser you use.

Chrome on Android 13 and later also has the Notification Permission Reset feature: Settings, Notifications, Manage notification categories, find rarely-used sites and revoke. Doing this once cleans years of accidentally-allowed notification spam.

Step three: switch DNS to block ad domains

Most ad popups load creative content from a small set of well-known ad-tech domains. Blocking those domains at the DNS layer stops the popup before it loads. Open Settings, Network and Internet, Private DNS, and set it to dns.adguard-dns.com (AdGuard) or your-config.dns.nextdns.io (NextDNS, requires free signup for a custom config).

Both block ads, trackers, and most malware domains across every app on the phone, not just the browser. The performance impact is invisible; in some cases pages load faster because they skip the ad fetches. NextDNS is free up to 300,000 queries per month (more than a typical phone uses), AdGuard DNS is free and unlimited.

Add a system-level ad blocker as the second layer if you want, but DNS alone covers eighty to ninety percent of ad-popup vectors. For a deeper look at the broader privacy stack on Android, the BFA piece on improving Android security covers the rest of the steps worth taking once popups are under control.

Step four: revoke risky permissions and run Play Protect

Open Settings, Apps, and tap each app installed in the last two months. Scroll to Permissions. If a calculator has microphone access, a flashlight has location, or a wallpaper app has Display over other apps, revoke. Android 14 and later make this a one-tap operation.

Run Play Protect: Play Store, profile icon, Play Protect, Scan. It takes thirty seconds and flags known ad-fraud SDKs and trojanized apps. If it surfaces anything, uninstall the flagged app and run the scan again to confirm clean.

If you still see popups after all four steps, the device may have a system-level malware infection (typically from sideloaded APKs). Boot to Safe Mode (hold the power button, long-press Power Off, tap Safe Mode), and if the popups stop in Safe Mode, the culprit is a third-party app you have not yet identified. Reboot to normal, then uninstall recently sideloaded apps one at a time until the popups stop.

At a glance

FAQ

Why are popups appearing even when I am not in an app?

Some apps have Display over other apps permission, which lets them render on top of any active screen. This is the most common single cause of ‘popups out of nowhere’. The Settings list of overlay-allowed apps usually shows the culprit.

Will a factory reset fix this for sure?

Almost always yes, if you do not re-install the same problem app afterward. Factory reset wipes user-installed apps, permissions, and DNS settings. If popups return after the reset, the issue is either the launcher or the same app re-installed; identify and remove.

Are pop-up ads dangerous beyond being annoying?

Yes. Many redirect to credential-phishing pages or fake antivirus ‘your phone is infected’ scams. Some load drive-by malware on click. Treat any unexplained popup as a possible vector for an attempted account compromise.

Does Play Protect catch every popup-ad app?

No, but it catches most of the worst SDKs (HiddenAd, AdLibrary, Joker family). For the rest, the manual diagnostic above is more reliable. Run Play Protect monthly as a baseline.

What about Chrome push notifications I do not recognize?

Open Chrome, Settings, Site settings, Notifications, Allowed, and revoke any site you do not actively follow. The default for new sites should be ‘Ask first’ or ‘Block’; never click Allow on a notification prompt unless you intend to subscribe.

Should I install a third-party ad-blocker app?

AdGuard for Android (free for DNS, paid for the full content blocker) is the most reliable. Avoid ‘free’ ad-blocker apps on the Play Store that ironically show their own ads; many use the same SDKs they claim to block.

The verdict

Pop-up ads on Android are almost always solvable in fifteen minutes without a factory reset. The four-step diagnostic (identify rogue app, clean launcher and browser, switch DNS, revoke permissions and scan) handles ninety percent of cases. Safe Mode is the escape hatch for the stubborn remainder.

Prevention is cheaper than cleanup. Stop sideloading APKs from random sites, do not grant Display over other apps or Accessibility permissions casually, and run Play Protect monthly. The popup problem mostly disappears for users who keep the install diet clean.

If you do see popups today, start with the Display over other apps screen. The source is almost certainly there.

How we put this guide together

We tested every step on a Pixel 8a running Android 16 and a Galaxy S23 running One UI 7 in May 2026. The diagnostic was run on a deliberately infected test profile (installed three known ad-SDK apps from a sideloaded APK source) and verified to remove all popups within fifteen minutes. NextDNS and AdGuard DNS performance was measured against a baseline DNS-over-TLS resolver; no measurable speed cost. We update this guide when Google changes the overlay permission model or when a major ad-fraud SDK becomes prevalent.