Google emailed you, or Search Console shows a Security issues or hacked content notice. Here's what it means and the safe first steps to take.
What it means
Google detected security problems on your site - malware, hacked content, spam injections, or deceptive pages. Search Console shows exactly what type and which URLs are affected.
Why it happens
It means Google's crawlers found something malicious - injected spam links, malware downloads, phishing pages, or cloaked content. Your site is actively harming visitors or rankings.
A real example
A retailer received a Search Console email saying "Google has detected that your site is hacked" with examples of pharma spam URLs indexed under their domain. The visible site looked normal - the hack had injected hidden pages and spam links that only appeared to Googlebot. This is one of the stealthier compromises: the owner sees nothing wrong, search traffic quietly collapses, and the spam pages can stay indexed for months. A proper cleanup removes the injected content, closes the entry point, and requests a review so the warning clears.
What to do
- Open Search Console > Security Issues for the specific classification.
- Don't just hide the pages - find and remove the malicious code.
- Scan all files for malware - the infection is likely deeper than the flagged pages.
- Check for unauthorized admin users and suspicious file modifications.
- After cleanup, click "Request Review" in Search Console.
Still stuck? Google security flags need proper malware removal, not just page blocking - we clean the infection and handle the reconsideration process.
Get emergency help