Start with the decision, not the icon
If someone posing as support talked you into installing a browser add-on, the question is whether that add-on still has permission to run. Icon visibility is a separate, cosmetic setting. Treat these as four different actions with different effects:
| Action | What it changes | What it does not change |
|---|---|---|
| Unpin the icon | Hides the icon from the toolbar | The extension stays installed and keeps its access |
| Disable the extension | Stops it running until you re-enable it | It stays in your extension list; settings may remain |
| Restrict site access | Limits where it can act, where the browser offers that control | Some extensions reach the network in ways site-access controls do not cover |
| Remove the extension | Deletes it from that browser profile | Does not undo anything it already did or sent |
If you are unsure whether the extension is still active, do not rely on the toolbar. Go to the Extensions page and read the state of each entry there.
Remove or disable it in Chrome desktop
Chrome desktop provides Extensions, Manage extensions, where an extension can be turned off or removed; unpinning an icon only hides it from the toolbar. Source
A practical sequence:
- Open Chrome’s Extensions page (Manage extensions).
- Find the add-on you installed after the message. Read its name and permissions rather than trusting the icon you remember.
- If you might need it later and it is plausibly legitimate, disable it first. If you do not recognise it, or it arrived through a support conversation, remove it.
- Confirm removal by reloading the Extensions page and checking the entry is gone.
- Restart the browser so the change takes effect in your normal session.
Do not reinstall an untrusted extension to “test” whether it was the problem. Reinstalling restores its access and gives you no new information.
If you only want it out of the way
Unpinning is fine for an extension you trust and want to keep. It is not a security action. If your reason for acting is a fake support message, unpinning leaves the add-on installed and running, so it does not answer the question you actually have.
Restricting access, and where that stops
Chrome offers site-access settings for extensions, and using them to narrow an add-on you have decided to keep is reasonable. Read the limit carefully:
Chrome extension site-access controls do not affect extensions that change lower-level network access through VPN or proxy settings. Source
So if the add-on works through a VPN or proxy configuration rather than through page-level access, site-access controls are not a substitute for disabling or removing it. When in doubt, remove.
Check the right browser profile
Chrome extensions are installed per browser profile, not once for the whole computer.
- If you use more than one profile (for example a work profile and a personal one), open the Extensions page in each profile and check separately.
- If you signed into Chrome and sync is on, an extension can appear in other signed-in profiles. Check those too rather than assuming one removal covered everything.
- If you are unsure which profile was active when you installed the add-on, check every profile you use.
Removing it from one profile does not tell you anything about another browser on the same machine, or about a different browser entirely. Those need their own check.
If the controls are greyed out or missing
On a managed device, the browser may be controlled by an organisation, and extension settings can be locked. In that case:
- Do not try to work around the restriction.
- Note the extension’s name and what it appears to do.
- Contact the device administrator or IT contact for that machine and ask them to remove or block it.
- Keep using the device as your organisation’s rules allow while you wait.
If you are the administrator, the same Extensions page is the place to start; the difference is that you can act on it directly.
What removal does not fix
Removal is a containment step, not a clean-up receipt. Be honest with yourself about the boundary:
- Data already shared is not recalled. If you typed credentials, codes or payment details into a page while the extension was active, removing it later does not undo that.
- Removal is not a malware scan. It does not establish that the device is free of other unwanted software.
- Removal is not identity verification. Seeing a support account, a profile photo or a matching name during the conversation never proved who you were talking to.
If you shared a password, change it from a device you trust, and change it anywhere you reused it. If you shared a one-time code, treat the account it protects as potentially accessed and review its recent activity. If money moved, contact your payment provider directly using the contact details on your own card or bank statement, not any number or link from the conversation. Consumer-protection guidance varies by country; in the United States, the FTC publishes current advice on what to do and report, and it does not set deadlines that apply everywhere.
A short worksheet
Write these down before you close the browser:
| Question | Your answer |
|---|---|
| Extension name as shown in the Extensions page | |
| Which browser profile(s) had it installed | |
| Action taken: disabled / removed / restricted | |
| Date and time of the action | |
| Credentials or codes entered while it was active | |
| Payment details shared, if any | |
| Who else needs to know (administrator, bank, account providers) | |
| Follow-up date to re-check the Extensions page |
This record helps you answer questions later and stops you from re-adding the add-on out of habit.
When the next question is about the message itself
Removing the extension closes the browser side of the problem. The other half is the conversation that led to it: who contacted you, what they claimed, and how to check a support account before trusting it. If that is your next task, the guide on checking fake customer support social accounts covers it. If you are instead trying to follow a public username you already know, a lookup tool such as TraceSeek can search public profiles across 3,000+ platforms; it does not change browser settings, provide recovery codes, retrieve money or verify anyone’s real identity.