"This site may be hacked."
Google shows this under a result when it believes content was placed on the site without the owner's permission because of a security weakness. It is usually spam pages or injected links.
Guide
What "This site may be hacked" means, and how to clear it
A warning under your site in Google results scares customers off. This is what triggers it, what we check and what Google controls.
By Hamza Rivera, updated
Short answer: Google shows this warning when it detects content placed without the owner’s permission. Passieon investigates and cleans the site, then handles the Search Console review request. Google decides whether to clear the warning.
The two labels Google shows
"This site may harm your computer."
A different label, for sites that appear to spread malware or unwanted software. Chrome can also show a full page warning before a visitor reaches the site.
What Google calls the hacked content
Content injection
Google describes this as a hacker adding spammy links or text to your pages, for example pharmacy spam.
Code injection
A hacker adds malicious code to your pages, for example redirects to harmful sites or cryptocurrency mining scripts.
URL injection
A hacker creates new pages on your site, often with spammy words or links, which may redirect visitors.
How we handle the warning
- 1
Review the warning
We check the search result, the site and the Security Issues report to understand what Google has flagged.
- 2
Resolve the security problem
We inspect affected content and access, clean the site, and address the weakness that allowed the intrusion.
- 3
Work with Search Console
Once the issue is resolved, we handle the relevant review request and explain the work to the owner.
- 4
Report the outcome
Google makes the review decision. We share its response and check any remaining issues.
Where to read next
These details were checked against Google's Search Console help on November 8, 2026. Google changes its tools and wording, so check again if you read this much later.
Questions about the hacked warning
What does "This site may be hacked" mean?
It means Google thinks a hacker placed content on the site without the owner's permission, usually spam pages or links. It can refer to only some pages, so check what the Security Issues report lists.
Is the label the same as a Google penalty?
No. Hacked content is reported in the Security Issues report, which is separate from the Manual Actions report. Check both in Search Console, because a site can have more than one problem. Our guide on Google penalty recovery explains manual actions.
How do I get the label removed?
The security issue must be resolved before Google reviews the site. We can handle the cleanup and the Search Console request, then report Google’s answer.
Do I have to request a review?
Google says pages that are spammy or break its policies are re-evaluated when it recrawls them, with no request needed. For hacked content and malware, the Security Issues report is where you request the review, once every listed issue is fixed.
I do not have Search Console. What now?
Add and verify your site first. Without it you cannot see the Security Issues report or request a review. We can help with that.
Can you fix it for me?
Yes. Passieon is an independent agency, not connected to Google. Send your site through the form for a free written check.
Can you guarantee the label will go?
No. Google decides. We clean the site, handle the review request and report what Google answers.