Google Safe Browsing protects over 4 billion devices. When it incorrectly flags your site, users see alarming red warnings in Chrome, Firefox, and Safari. This guide walks you through the fastest resolution path.
Verify in Google Search Console
Log into Google Search Console for your domain. Navigate to Security & Manual Actions > Security Issues. This shows you exactly what Google detected and which pages are affected.
If you haven't verified your domain in Search Console yet, do this first — it's required for requesting a review.
Check the specific issue type
Google flags sites for different reasons: malware, unwanted software, phishing, or deceptive content. The resolution process differs slightly for each. Phishing flags are cleared fastest (often within hours of a review request).
Ensure your site is completely clean
Google's automated scanners are thorough. Check for: hidden iframes, injected JavaScript, deceptive download buttons, social engineering elements, or outbound links to flagged domains. Even one overlooked issue can cause a re-review to fail.
Request a review through Search Console
In the Security Issues section, click "Request Review." Write a clear, specific description of what you fixed (or explain why the detection is incorrect). Be factual and concise — the review team processes thousands of requests daily.
A well-written review request can cut response time in half. Be specific: "We audited all pages and confirmed no phishing content exists. The flagged page is our legitimate login form at /login."
Wait for Google's review
Reviews typically take 24-72 hours. For malware flags, it can take up to a week. Once cleared, the warning disappears from Chrome, Firefox (which also uses Safe Browsing), and other integrated browsers within hours.
Prevent future flags
Keep your CMS and plugins updated, use strong admin passwords, implement Content Security Policy headers, and monitor your site for unauthorized changes. Consider setting up Google Alerts for your domain + "malware" or "phishing."