How can you avoid fake AI-app download sites and misleading search ads?

Start from the vendor rather than the search result

Search ads are paid placements. They can be useful, but their placement is not proof of a software publisher's identity. The safest habit is to avoid clicking ads for installers altogether. Type a short, known vendor address, use a saved bookmark, or navigate from the product company's verified documentation and support pages. The FTC gives the same advice for software ads on search engines and social media: do not click the ad, type the known website address instead. FTC malware guidance

For Claude Desktop, start at claude.com/download. Anthropic currently offers desktop downloads for macOS, Windows, Windows on Arm, ChromeOS, and Linux, and its Help Center gives platform-specific installation guidance. Anthropic download page Its current Linux instructions recommend the official apt repository for supported Ubuntu and Debian systems and publish a signing-key fingerprint for that route. Anthropic Linux installation guidance Follow the vendor's current instructions instead of pasting terminal commands or downloading archives from a search result, forum post, video description, or social-media reply.

The same pattern works for any AI app: begin at the company home page, product documentation, or the operating system's official store only when the company itself directs you there. A password manager’s domain matching can help flag an unfamiliar login page, but behavior varies with its settings. It does not verify a download or replace checking the address.

Check the address before the file

Read the domain from right to left. In download.example.com, the registered name is usually example.com; in example-downloads.test, it is not. Compare the complete domain with the official address. Extra words or misspellings can create a lookalike; a country suffix or hyphen alone does not show that a site is malicious. A redirect can be legitimate, so compare the final host against the vendor's own download instructions rather than guessing from the product name alone.

HTTPS is necessary, but it has a narrow meaning. It protects the connection to the site whose address you reached; it does not prove that the site is the genuine vendor. Chrome's security guidance also tells users to check the site name even when a connection is secure. Chrome site-security guidance

Check the installer and every permission prompt

Use the official page to choose the correct operating-system and processor version. A fake site may offer a generic “Download now” button, an archive that requires a password, or a request to disable browser or antivirus warnings. Chrome says attackers may ask people to ignore download warnings to avoid antivirus detection; cancel a download marked dangerous or suspicious rather than overriding the warning. Chrome download-safety guidance

The operating system provides a second check. On macOS, Gatekeeper checks a downloaded app or installer for an identified developer, notarization, known malicious content, and alteration. Apple warns that overriding its security settings for an unchecked app is a common route to malware infection. Apple Gatekeeper guidance On Windows, keep Microsoft Defender and potentially unwanted app protection current. Microsoft recommends trusted download sources, current security software, and Windows updates. Microsoft guidance on unwanted software

Check who signed the file as well as whether the signature is valid. A valid signature can show that a file has not been changed since its signer produced it, but you still need to recognize the signer and obtain the file from the vendor route. Do not accept an unexpected publisher name, a missing signature, a certificate warning, or a prompt that says to bypass security just to make installation succeed. If the vendor publishes a file hash or signing-key fingerprint, compare it before installing. Anthropic currently documents such a fingerprint for its Linux apt repository. Anthropic Linux installation guidance

Permissions should match a feature you chose

An installer may need permission to place an app in a system location. That does not automatically justify later requests for broad access. Pause when an app asks for screen recording, accessibility control, full disk access, browser control, microphone, camera, or access to folders and accounts you do not want it to use. Do not paste a command into Terminal, PowerShell, or a system settings panel solely because a download page instructs you to do so.

Some real desktop AI features do need sensitive access when you choose to use them. Anthropic says Claude Desktop can use desktop extensions that connect to local files, browsers, and native applications. Anthropic download page Begin with no optional extensions, grant only the permission needed for a feature you actively want, and review those permissions again after updates. If you only need chat, use the official web version until you have decided whether the desktop features are worth the added access.

If you downloaded or ran a suspect installer

Downloaded but not opened

Do not double-click the file, drag it into Applications, run an installer, or enter an archive password. Delete or quarantine it, then update your security software and scan the device. A scanner finding nothing is reassuring but not proof that the file was harmless, especially if it was new or unusual. If the file came from a work or school device, follow the organisation's security procedure rather than forwarding it to colleagues or uploading it to an arbitrary online scanner.

Keep a screenshot of the ad, the displayed address, the final URL, the file name, and any warning message if you want to report it. Do not preserve or share passwords, API keys, session cookies, personal documents, or a copy of an installer that someone else could run. The old discussion that prompted this article alleged malware, but it does not independently establish that any present-day ad or linked file is malicious. Observed Hacker News question

Opened or installed

Stop entering passwords, payment details, recovery codes, or other sensitive information on that device. Update the device's security software and run a full scan. From a different device you trust, change important passwords and enable two-factor authentication, starting with your email account, password manager, financial accounts, and any account that was signed in on the affected computer. These are the FTC's recommended actions after suspected malware. FTC malware guidance

On Windows, Microsoft advises getting the latest security intelligence, running a full Microsoft Defender scan, and using Microsoft Defender Offline if unwanted software persists. Microsoft guidance on unwanted software On a managed work, school, or client device, contact the IT or security team promptly and tell them what you downloaded, ran, and entered. They may need to preserve evidence or check other systems, so do not try to conceal the incident or rely on an untrusted remote-support offer.

If you entered card details, see unexpected payments, or supplied identity information, contact the relevant card issuer or financial institution through the number on its official statement or site. In the United States, the FTC also directs people to ReportFraud.gov for reports about suspected malware and scam sites. FTC malware guidance

Report the ad and reduce repeat risk

Report an ad only after saving the evidence you need. In Google results, select the ad's More or Info control, choose Report ad, select the reason, and submit the form. Google says a report does not block the ad for you, so leave the site rather than revisiting it to see whether it disappeared. Google ad-reporting instructions

For future downloads, keep browser and operating-system protections enabled, install updates promptly, and use bookmarks for products you use regularly. Chrome's Safe Browsing download warnings cover dangerous, suspicious, unverified, and insecure downloads; do not turn them off simply to obtain a file. Chrome download-safety guidance If an app claims it needs a warning bypass, an administrator password, or broad device access before you can verify its source, stop and find the vendor's official support route.