Samsung
Block Automatic Downloads in Samsung Internet auf Samsung
Samsung Internet can download files the instant a page loads, without asking you first. This happens because the browser trusts every download request by default unless you tell it otherwise.
The setting responsible for this sits in the browser's privacy area, separate from your general phone security settings. Once enabled, it filters download requests that a website triggers automatically, rather than ones you tap yourself.
To turn it on: Tap on Internet ➔ Open the Menu ➔ Tap on Settings ➔ Tap on Privacy and security ➔ Enable or disable Block automatic downloads.
With the option enabled, the browser only allows downloads that you start directly, for example by tapping a download link or button. Anything a script or ad tries to push in the background gets stopped before it reaches your storage.
This setting will not help if a file already made it onto your phone before you turned the option on. In that case, check your Downloads folder and remove anything unfamiliar manually.
There is no real downside to leaving this enabled. Legitimate downloads you trigger yourself still work exactly as before, since the block only targets downloads a page starts on its own.