By Hridoy Ahmed | Last updated: October 2026 | 7 min read
Short answer: To get removed from the Google Safe Browsing blacklist, clean your site first, fix how it was hacked, then open the Security Issues report in Google Search Console and request a review. Google checks the site again, and if it is clean, the warning is removed. Google does not promise an exact time, and a review can take a few days.
What is the Safe Browsing warning?
Google Safe Browsing flags sites that may spread malware, phishing or harmful downloads. When a site is flagged, browsers like Chrome can show a big red warning page before the visitor reaches your site. Most visitors leave at once.
This is not the same as the small “This site may be hacked” label in search results. That one is a different warning. If you see it, read my guide on how to remove the “This site may be hacked” warning.
Step 1: Confirm the problem
- Open Google Search Console and go to Security & Manual Actions > Security issues. It shows what Google found.
- You can also check your domain in Google’s Safe Browsing site status page.
No Search Console yet? Add and verify your site first. You need it to request a review.
Step 2: Clean the site
Do not ask for a review before the site is clean. If Google finds malware again, the review is rejected and you wait longer.
- Remove the malware and any spam pages
- Look for hidden backdoors (see my guide on WordPress backdoors)
- Update WordPress, plugins and themes
- Change all passwords and remove unknown admin users
If you want an expert to do this for you, see my WordPress malware removal service.
Step 3: Fix the cause
Find out how the attacker got in. An outdated plugin, a weak password or a pirated theme are common reasons. If you only clean the symptoms, the site is likely to be flagged again.
Step 4: Request a review in Search Console
- Open Security issues in Search Console.
- Check that the issues you fixed are listed.
- Tick the box that says you fixed them and click Request review.
- Write a short, honest note: what was wrong, what you cleaned and what you changed to stop it happening again.
Step 5: Wait and check
Google does not give an exact time. It can take a few days. Keep the site clean and watch the Security issues report. If the review is rejected, Google usually shows what it still found. Fix that and request again.
Other blocklists
Google is not the only one. Your hosting company, antivirus companies and other browsers may have their own lists. Each has its own removal process, and you may need to contact them separately.
Common mistakes
- Requesting a review before the site is fully clean
- Removing visible malware but leaving a backdoor
- Writing a vague note in the review request
- Not fixing the cause
- Making a new review request again and again without changes
FAQ
How long does it take to get off the Safe Browsing list?
Google does not give a fixed time. A review can take a few days, and sometimes longer if the first review fails.
Can I do this without Search Console?
No. You need a verified Search Console property to see the issue details and request a review.
Will my rankings come back after the warning goes?
Often they recover as the site stays clean, but nobody can promise it. Keep monitoring.
Do I need to restore a backup?
Only if you have a backup made before the infection. Update everything right after restoring.
Stuck with a red warning page? Message me and I will help. See my WordPress security and malware removal service.
About the author: Hridoy Ahmed is an SEO specialist and WordPress security expert based in Dhaka, Bangladesh. He has 8+ years of experience and works with clients worldwide.