Skip to: main navigation | main content | sitemap | accessibility page

How to remove "This site may be hacked" in Google Search Console

In the second of our posts on using Google Search Console, we look at how you can tell Google that your site is no longer compromised if a “This site may be hacked” message is displaying above your website in search results. This can happen if your site has been the victim of hackers, spam or phishing scams.

Sign up to get updates via Google Search Console

If Google add “This site may be hacked” to your search listings, they will notify you via your Google Search Console. Even if your site is currently fine, it’s a good idea to sign up for email notifications on Google Search Console, so you’ll get an email if your site is ever marked as hacked. If your site is compromised, you’ll also get a notification as soon as Google re-reviews your site and confirms that it’s clean.

To turn on email notifications, go to Search Console Preferences (access via the gear icon in the top right hand corner). 

Resolve any security issues

Before you can ask Google to remove the “This site may be hacked” message from search results, you will need to take action to resolve any security problems on your website. There are a number of resources that can help you do this, including the Stop Badware website and Google’s 7 step process to recover a hacked site. If you’re stuck, get in touch, we may be able to help.

Request a review

Once you are confident the security issues have been resolved, you can let Google know and ask them to re-review your site.

To do this, navigate to the message within the Security Issues area of Google Search Console, where Google will have provided information on the areas they believe are affected.

Select “Request a review” and provide details of how you resolved the security issues.  

Once a review is requested, Google will review your site to confirm the compromised content is no longer available. This can take up to several weeks, depending on the type of security issue you experienced. As soon as Google confirms that your site is clean, you will receive a notification via Google Search Console and the “This site may be hacked” message will be removed from search results within 72 hours.

If your site fails the review, the infected URLs will be displayed in the Security Issues section of Google Search Console and the message will remain on your search listings. In this situation, you’ll need to repeat the process of cleaning your site and resolving any issues that remain, before you can re-submit your site to Google.

Share this article

Related Blogs

10Jan 18 

Are people leaving my website? Find out with Google Analytics

You might have looked at how many people are visiting your website, but do you also pay attention to how many are leaving? Using Google Analytics to find out where people leave Google Analytics can give you insight into where people are leaving your website, and you can then do a bit of detective work to try and work out why that might be. Here's three metrics to look at. Related blog: Learn how to set up Google Analytics 1) Exit pages Go to 'Behaviour > Site Content > All Pages' and ...

29Jan 16 

How to set up Google Search Console

Google Search Console is a must for any business hoping to get more website traffic from search engines. Not sure what Google Search Console is and why you should use it? Read our Google Search Console blog first. How to set up Google Search Console Ideally, get set up on Google Analytics first, then adding Google Search Console is very easy.Go to Google Search Console.   First you will need to log in. If you have Google Analytics, log in using the same details as you use to access y...

10Nov 15 

Why use Google Search Console

Google Search Console (previously called Google Webmaster Tools) has always been an essential tool for search marketing, but it became more important after the introduction of "not provided" search terms in Google Analytics in 2011.This move marked a big change in the world of search engine optimisation as previously search engine success could be precisely measured, right down to the number of click-throughs and conversions from individual search terms. Although not a replacement for detai...

Subscribe