Why Safari's Pop-Up Blocker Isn't Working on iPhone (and How to Stop Pop-Ups & Redirects)

If you have checked Settings > Apps > Safari, confirmed that Block Pop-ups is turned on, and still get hit by full-screen newsletter overlays, new tabs opening when you tap a video player, or sudden jumps into the App Store, it feels like Safari’s pop-up blocker is broken.

It isn’t broken. Safari’s built-in switch only checks for one narrow technique from twenty years ago, while modern websites use three different methods that bypass it entirely.

What Safari’s built-in “Block Pop-ups” switch actually checks

Safari’s Block Pop-ups toggle only stops a page from calling window.open() in JavaScript automatically while the page loads, before you touch the screen.

When people complain about pop-ups on iPhone today, they are almost always dealing with one of three things that Safari’s built-in switch ignores by design:

In-page HTML/CSS overlays and scroll locks. Discount wheels, newsletter nags, and cookie walls are not new browser windows. They are ordinary HTML <div> elements drawn over the article with position: fixed and overflow: hidden on the page body so your thumb can no longer scroll.
Tap-hijacking (“pop-unders” and tap-triggered tabs). Streaming, file-hosting, and reader sites often place an invisible layer over the page or play button. Because your finger physically tapped the screen, Safari treats the action as user-approved and lets the script open a new tab.
Forced App Store and native app redirects. Ad scripts reassign window.location.href to an itms-apps:// link, inject hidden iframes, or fire synthetic clicks to kick you out of Safari and open a game or shopping app in the App Store without asking.

Safari's built-in setting only catches unprompted window.open() calls. Stopping in-page modals, frozen scrolling, and forced App Store redirects requires a content blocker and script defense.

How to stop all three on iPhone

1. Keep Safari’s built-in switches on

In Settings > Apps > Safari, keep Block Pop-ups and Fraudulent Website Warning turned on. That covers basic unprompted windows and known phishing domains.

2. Block the ad scripts behind tap-hijacks and fake virus alerts

Scare-screen pop-ups claiming “Your iPhone is infected” are not iOS alerts; they are ordinary web pages served by low-tier ad networks to trick you into buying a shady “cleaner” app. The same ad networks serve the invisible overlays that open a new tab when you tap a video player. A Safari content blocker blocks those third-party ad domains before their scripts ever load.

3. Stop in-page modals, scroll locks, and App Store redirects

Blocking known ad servers still leaves first-party modals and scripted app redirects. Blindfold adds four specific defenses in Safari on iPhone and iPad:

Stay in Safari: Blocks untrusted JavaScript redirects (itms-apps://, hidden iframes, meta refreshes, and synthetic clicks) from kicking you out of Safari into the App Store or native apps, while allowing your real finger taps on normal links.
Automatic pop-up removal and scroll unlocking: Detects late-appearing modal overlays, removes them (with a one-tap Undo in the Safari menu if you needed a legitimate modal like a size chart), and restores page scrolling when a hidden banner leaves overflow: hidden behind.
Automatic cookie rejection: Taps “Reject” on supported cookie-consent banners automatically, or hides the banner outright.
Tap-to-hide Element Zapper: Open the Blindfold menu in Safari and tap Hide something on this page to tap any persistent floating bar or promo box, adjust the selection with - and +, and save a permanent rule for that site.

Blindfold runs on iPhone and iPad (iOS 26+) with 7 days free on the $19.99/year plan, 3 days free on the $1.99/week plan, or $69.99 once for lifetime access, with Family Sharing included and no account required. Try Blindfold free or get it on the App Store. For a broader overview, see how to block ads on iPhone.