How to fix: Malicious software

Go to Google Search Console to review and fix safety issues related to your website domain

This policy applies to Shopping ads and local inventory ads with merchant hosted local store front.

Why this issue is happening

Google has determined that your site may be unsafe and has flagged it as such. This is often due to the presence of malware, malicious code, or security vulnerabilities on your website, leading to a "Compromised Site" disapproval. As a result, users may be blocked from visiting the site on some browsers and Google Search results.

How to fix your issue

To resolve this issue, immediately examine your site and ensure the safety of your domain or contact your web developer or security specialist to conduct a thorough security assessment of your website. Identify and eliminate any malware, malicious code, or security vulnerabilities present on your site. Update your website software, including CMS, themes, and plugins, to the latest versions. You may request a re-review after resolving the issue in Search Console.

Step 1 of 2: Understand and fix the issue

Examine your site and security measures to ensure your site’s safety. Look for the following issues:

Malicious code or malware on your website.
Hidden malicious links in your theme or plugin files.
Outdated plugins or themes with known vulnerabilities.
Security vulnerabilities that need to be patched.

Use Google Search Console to monitor your website's security status.

Step 2 of 2: Submit your domain to Search Console

After you’ve fixed the issue, go to Google Search Console for your domain and follow the instructions to resolve the security issue.

Request a review

After you've removed the malicious links and updated your software, resubmit your product data, then request an account review:

1. Make sure that you examine your site and ensure the safety of your domain.

Go to Products in Merchant Center, then select the Needs attention tab.

2. Above the summary cards, click on View setup and policy issues.

3. Locate the account-level issue that you would like to have reviewed.

4. Click Request review.

5. Read the pop-up window to ensure that you understand the review process, and its requirements and limitations.

6. Check the box and click Request review.

Note: Review requests can take up to 7 business days to complete. You’ll receive an email notification after the review has been completed.

After the review is performed, if your account meets the product data requirements, your account will be reactivated.

If you’re working with a third-party platform, some of these instructions may not apply to you. Refer to your third-party platform for instructions on how to resolve the issue and request a review. Learn how to find support if you use a non-Google platform

Next steps

After making the requested changes, check that you’ve fixed the issue by making sure it’s no longer listed on the “Needs attention” page.

Keep in mind: It may take some time for your change to be reflected on the “Needs attention” page.

Was this helpful?

How can we improve it?