Resolving a "Compromised Site" Disapproval in Google Ads
What to do when a client's website is flagged as a "Compromised Site" in Google Ads, resulting in disapproved campaigns. In most cases, this is a false positive by Google's automated system, and a manual review request is the fastest path to resolution.

Important: Do NOT use the standard appeal flow

The standard "Appeal" button inside Google Ads is processed by automated systems and will almost always be rejected within 1-3 business days without a human review. This wastes time. Instead, follow the manual review process below, which routes the case to a human policy specialist.

Step 1: Run all required security checks

Before contacting Google, verify the site is actually clean. You'll need screenshots of all four results to attach to the support request as evidence.


1. Google Search Console — Security Issues

Google Search Console → property → Security & Manual Actions → Security Issues (Check note below if need access)


2. Google Safe Browsing


3. Sucuri SiteCheck


4. VirusTotal


Take a clean, uncropped screenshot of each result. Save them with clear filenames (e.g., 01-search-console.png, 02-safe-browsing.png, etc.). These will be attached to the support request.


If any check shows an actual issue, stop here — this is not a false positive and the site needs to be cleaned before proceeding. Coordinate with the client and their web/hosting provider to address the issue first.


Search Console access note: If the client hasn't already added you to Search Console, youll need to:

1. Select the URL prefix option and use the clients URL:

2. If we created the GTM container and is correctly installed, you should get:

3. If you get this, ensure you are logged into the account that has admin access to the installed GTM container.


Step 2: Open the support contact form

  1. Go to Google Ads Help
  2. Scroll to the bottom and click Contact us
  3. In the description box, enter: "Need manual review for compromised site, all checks have been passed"
  4. Skip Step 2 (the suggested help articles)
  5. On Step 3, select Email as the contact method

Step 3: Fill out the support form


Contact name

Your name

End Customer Company Name

The client's Google Ads account name

Contact email

Your DIAMO email

Account Login Email ID

Account that has admin access.

Google Ads Customer ID

The 10-digit ID for the client's individual account — NOT the MCC/Manager account ID. Find it at the top right of the Ads dashboard (format: XXX-XXX-XXXX)

Campaign name

The exact campaign name as it appears in the Campaigns tab. Click "Add additional field" if there are multiple campaigns.

Ad group name

Optional — include if the disapproval is at the ad group level

Language of unreviewed ads

Match the campaign's language.


What would you like us to review? -> Ads

Ad format -> Match the campaign's ad format (usually Responsive Search Ads)


Summary of the issue

Use the template below


Response method -> Email me (creates a paper trail; phone is faster but harder to track for follow-ups)


Attachments

All four security check screenshots from Step 1

Summary of the issue — copy-paste template

Two campaigns for [client name] have been disapproved with the reason "Compromised Site." We have not appealed through the standard flow because we are confident this is a false positive and would like a manual policy review.

The site has been independently verified as clean by four sources:

  • Google Search Console (Security Issues): No issues detected
  • Google Safe Browsing: No unsafe content found
  • Sucuri SiteCheck: Clean
  • VirusTotal: Clean

Screenshots of all four results are attached.

The site is a legitimate, long-running business with verified ownership in Search Console. There is no malware, no compromised content, and no policy violation that we can identify. We are requesting a manual review by a policy specialist.

Affected campaign(s): [campaign names] Customer ID: [10-digit ID] Website: [client domain]


Step 4: After submitting

  • Save the case number that's emailed to you. Use it as a reference in any follow-up communication.
  • Expected response time: 1-3 business days, sometimes faster.
  • While waiting: do NOT keep creating new campaigns pointing to the same URL — they will be flagged the same way and repeated disapprovals can affect account standing.

Step 5: Update the client

Send a brief update letting the client know:

  • The site was flagged but verified clean by four independent sources
  • A manual review has been requested (not the standard appeal, which is auto-rejected)
  • Expected resolution: end of the week / 1-3 business days
  • You will follow up as soon as Google responds

Step 6: If the manual review is also rejected

If even the manual review comes back rejected, escalate through, reply to the rejection email asking for the specific evidence Google detected, and re-state that all independent checks are clean


Did this answer your question?