---
title: "Google manual action: what the notice means and what to do"
description: "Find the Google manual action notice in Search Console, read the affected pages and violation type, then fix the whole pattern before you request a review."
url: "https://webleveling.com/blog/google-manual-action-notice-what-to-do/"
lang: "en"
published: "2026-10-16"
modified: "2026-10-16"
author: "Cal Hewitt"
tags: ["seo","website-security","small-business"]
image: "https://webleveling.com/og/blog-google-manual-action-notice-what-to-do.jpg"
alternates:
  es: "https://webleveling.com/es/blog/accion-manual-de-google-que-hacer.md"
---

# Google manual action: what the notice means and what to do

Find the Google manual action notice in Search Console, read the affected pages and violation type, then fix the whole pattern before you request a review.

![A closed laptop, a blank notepad and a pencil on a worn wooden desk beside a small stack of unopened envelopes.](https://webleveling.com/blog/google-manual-action-notice-what-to-do/manual-action-featured.jpg)

A message in Search Console about a manual action can feel like a verdict. It is closer to a work order. A Google manual action names a problem, says how much of your site it covers, and gives you a way to ask for a review once the problem is fixed.

It does not automatically mean a permanent ban. Your customers may still find the pages that were not touched, and the report tells you which ones were.

Start by reading the notice itself, in the right place, before you change anything on the site. The steps run in a fixed order, and the first few take about ten minutes.

**Key Takeaways**

**Read the notice in Search Console, not in the email**

Open Search Console yourself, choose the right property, and go to Security & Manual Actions, then Manual actions. Record the action name, the affected pages, Google's description and whether Request Review is available.

**Fix the whole pattern before you ask for review**

Google says to fix every affected page, not only the sample URLs, and to select Request Review only after the work is finished. Hacked content means security cleanup comes first.

**Approval lifts the action but promises nothing about rankings**

Google says most reviews take several days or weeks, and link-related ones may take longer. Plan for a wait, and for competing again once the action is gone.

## A manual action means a Google reviewer found a spam-policy problem on your site

A manual action is an enforcement decision. A human reviewer at Google decided that some or all of your site breaks Google's Search spam policies, and [Search Console Help on the Manual Actions report](https://support.google.com/webmasters/answer/9044175) says it can lower rankings or remove affected pages from Google Search. Google tells the site owner inside Search Console.

The action may cover a group of pages or the whole site. The report says which. That one detail answers the late-night question: how much of my site is affected, and can customers still find me.

Google describes these actions as aimed mostly at attempts to manipulate the search index, as laid out in its [spam policies](https://developers.google.com/search/docs/essentials/spam-policies). A notice usually points to a specific practice, such as paid links, thin pages, injected spam or misleading markup. It names something fixable, and a fixed problem can be reviewed again.

![A closed laptop beside a stack of unopened envelopes on a worn wooden desk, with a pencil and a blank notepad on top.](https://webleveling.com/blog/google-manual-action-notice-what-to-do/manual-action-desk-envelopes.jpg)

The notice is a work order with a scope, so start by reading it.

## The notice lives in Search Console, three clicks from the property list

Open Search Console directly rather than tapping a link in the email. Sign in with an account that has access, select the correct verified property, then open Security & Manual Actions and choose Manual actions. If an email looks odd, or you are unsure it came from Google, our post on [what Search Console emails mean](https://webleveling.com/blog/google-search-console-emails-explained/) walks through the common ones.

If the report shows no issues, Google shows a green check or a similar clean-status message. That settles whether your site has a manual action, and a traffic drop with a clean report points somewhere else.

If there is an action, expand it and copy these details into a document before you touch the site:

- The action name
- Whether it affects part or all of the site
- The URL patterns it lists
- Google's short description
- The Learn more link
- The date of the notice, if shown
- Whether Request Review is available

Keep a copy of the notice and of the pages as they look now. That record becomes the "before" in your review request.

![A closed manila folder with a blank sheet held by a paper clip, a pencil beside it, on a plain gray desk.](https://webleveling.com/blog/google-manual-action-notice-what-to-do/manual-action-notice-folder.jpg)

Save the notice and the current state of the site before anything changes.

## A traffic drop with no notice is a different problem

How do you tell whether Google has penalized your site? Check the Manual actions report. If it is clean, a drop in traffic comes from somewhere else, such as an automated ranking change, a technical fault or a seasonal dip. [Google's guide to debugging traffic drops](https://developers.google.com/search/docs/monitor-debug/debugging-search-traffic-drops) covers how to sort out which one.

An algorithm update is a change to Google's automated ranking or spam-detection systems. It does not normally send a notice. A site can lose traffic during an update and have no manual action at all.

A manual action works the other way around. It comes with a named problem, a stated scope and a review path. If you also saw a spam update in the news, our post on the [Google September 2026 spam update](https://webleveling.com/blog/google-september-2026-spam-update/) covers that separate event.

Security problems sit in their own report. A manual action concerns spam-policy violations that affect Search. The Security Issues report covers hacking, phishing and malware, as [Search Console Help on security issues](https://support.google.com/webmasters/answer/9133276) describes. A site can have one, both or neither, so check both.

## The action type tells you what to fix

Why would a site get a manual action? Because a reviewer found one of the practices Google lists in its Manual Actions report. These are the types most relevant to small business sites, with the job each one usually involves.

Manual action types and the work behind each

| Action type | What Google describes | Typical job |
| --- | --- | --- |
| Unnatural links to your site | Artificial, deceptive or manipulative links, including purchased links and link schemes | Medium to large |
| Thin content with little or no added value | Shallow, copied or scraped pages, doorway pages, thin affiliate pages | Medium to large |
| Hacked content | Pages added or altered by an attacker | Medium to very large |
| Structured data issue | Markup that is misleading, irrelevant or invisible to users | Small to medium |
| User-generated spam | Spam in comments, profiles, forums or guestbooks | Small to large |
| Cloaking and sneaky redirects | Users and Google shown different content or redirected differently | Depends on the pattern |
| Pure spam | Aggressive spam techniques with little or no value | Depends on the pattern |

The job sizes in the last column are practical estimates for planning, not figures from Google. They depend on how many pages or links are involved and on who has access to fix them.

A structured data action is narrower than it sounds. [Google's structured data policies](https://developers.google.com/search/docs/appearance/structured-data/sd-policies) say markup must represent visible page content. The usual result is lost rich-result eligibility, and the page itself can still appear in ordinary Search.

If the action is hacked content, deal with the compromise before anything else. Our post on the [first 24 hours after a website is hacked](https://webleveling.com/blog/website-hacked-first-24-hours/) covers the immediate steps, and Google's guidance on [hacked sites](https://web.dev/articles/hacked) covers cleanup. A [website security audit](https://webleveling.com/services/website-security-audit/) looks at compromised access, malware, suspicious users, redirects and preventive controls.

![A padlock resting open on a stack of blank index cards beside a small brass key, on a wooden shelf.](https://webleveling.com/blog/google-manual-action-notice-what-to-do/manual-action-open-padlock.jpg)

When the cause is hacked content, the security cleanup comes before the review request.

## Fix every affected page and pattern before you ask for review

Google says to fix every affected page and every listed action before requesting review. The sample URLs in the notice are examples of a pattern. If the notice lists a folder of location pages, every page in that folder needs the fix.

Work in this order:

1.  Open the notice and record its details.
2.  Check the Security Issues report separately.
3.  Clean up security problems first if hacked content is involved.
4.  Keep a copy of the notice and the current site.
5.  Fix every affected page and pattern, not only the samples.
6.  Confirm the fixed pages are reachable.
7.  Write the review request, then select Request Review.

Step 6 trips people up. Google needs to open the corrected pages, so they cannot sit behind a login, be blocked by robots.txt or carry a noindex tag you did not intend. Open each fixed page in a private browser window and check it loads.

Stop worrying about links you did not create. Google's link guidance separates manipulative link schemes from ordinary links, and you do not control every site that links to you. Moving to a new domain does not repair a content, link, security or markup problem, and a move adds risks of its own.

## A reconsideration request reports finished work

A reconsideration request asks Google to confirm that the listed problem is fixed. It is not a request to try ranking you again. Google says a good one explains the exact issue, describes the corrective work and documents the outcome. The full steps are in Google's [reconsideration request guidance](https://support.google.com/webmasters/answer/35843).

Make the explanation concrete. Name the pages you removed or rewrote, the links you deleted or qualified, the markup you changed and the security work you did. If new safeguards are now in place, such as moderation for comments, say so. A request that describes intentions gives the reviewer little to check.

Select Request Review only when the work is done, and send one request. Do not submit another while the first is pending. Google sends a confirmation and then a final email.

Google says most reviews take several days or weeks, and link-related reviews may take longer. Approval removes the action. It does not restore old rankings, because your site goes back to competing under Google's normal ranking systems.

![A wall calendar page left blank with a single pencil mark on one square, beside a small brass bell on a table.](https://webleveling.com/blog/google-manual-action-notice-what-to-do/manual-action-review-calendar.jpg)

Review takes days or weeks, so build the wait into your plans.

## Bought links need the vendor's full record before you change anything

If the action is unnatural links and a former SEO vendor handled your link work, get their records first. Removing links or editing pages before you know what was done can erase the evidence you need for the request.

Google's spam policies say, "Buying or selling links in order to manipulate ranking in Google Search results is a violation of our spam policies." Paid links meant to pass ranking credit should carry \`rel="sponsored"\` or \`rel="nofollow"\`, as [Google's guidance on qualifying outbound links](https://support.google.com/webmasters/answer/2648487) explains.

Ask your vendor, in writing:

- Which links were purchased, exchanged, placed, automated or included in guest posts?
- Which domains, URLs, anchor texts, dates and payment arrangements are involved?
- Was the work sold as links meant to pass ranking credit?
- What outreach records, invoices, contracts and spreadsheets exist?
- Which links can be removed, and which should be qualified or disavowed?
- What has already been changed?
- Who will write and submit the reconsideration request?
- What will prevent this from happening again?

A vendor who cannot answer these cannot give you a reliable account of the cleanup. Get the answers before agreeing to any paid fix.

## You can start alone, and some notices are worth handing off

Reading the report and recording the details costs you nothing, and a vendor has no special access to that screen. A limited structured data action or a single spammy comment section can be a job you or your developer finish yourselves.

Professional help earns its fee when the work gets larger. That is the case when the notice covers a site-wide pattern, the cause traces to a former SEO vendor, the site may be hacked, the affected pages are numerous, or the cleanup needs technical access and written evidence.

Whoever you hire should confirm the notice and its scope first, explain the work, and tell you when doing it yourself is enough. Nobody can promise Google's decision, the length of the review or restored rankings. If someone does, treat that as a reason to look elsewhere.

**Quiz: Do you know your next move on a manual action notice?**

1. Where do you read a manual action notice?
   - In the link inside the email
   - In Search Console under Security & Manual Actions, then Manual actions **(correct answer)**
   - In Google Analytics under Acquisition
   - In Google Business Profile
2. When should you select Request Review?
   - As soon as the notice arrives
   - After fixing only the sample URLs
   - After the work is finished across every affected page and pattern **(correct answer)**
   - Every few days until Google replies
3. What does approval of a review mean?
   - Your old rankings come back right away
   - Google lifts the action, and your site competes again under normal ranking **(correct answer)**
   - Google promises no future action
   - The Security Issues report is cleared

## Frequently Asked Questions About Google Manual Action

**How do I tell if Google has penalized my website?**

Open Search Console, go to Security & Manual Actions, then Manual actions. A listed action means a reviewer found a spam-policy problem. A clean report means a traffic drop has another cause, such as a ranking change or a technical fault.

**Why would a website receive a manual action report?**

A reviewer found a practice on the site that breaks Google's spam policies. Common types include unnatural links, thin or copied content, hacked content, misleading structured data and user-generated spam.

**Does a manual action remove my whole website from Google?**

Not always. Google's report shows whether the action affects some pages, a pattern of pages or the entire site. Read the scope in your notice.

**How long does a reconsideration request take?**

Google says most reviews take several days or weeks, and link-related reviews may take longer. Do not submit another request while one is pending.

**Will my rankings return after a manual action is lifted?**

Approval removes the enforcement but does not guarantee old rankings. Your pages go back to competing under Google's normal ranking systems.

**Does a structured data manual action take my page out of Search?**

Google says the page can still appear in ordinary Search, but the affected markup loses rich-result eligibility until the problem is fixed and reviewed.

## The Bottom Line

A manual action is a documented Google decision with a named problem, a stated scope and a route to review. Read it in Search Console, record the details, check Security Issues separately, and fix every affected page and pattern. Hacked content comes first, and bought links start with the vendor's records. Send one review request when the work is done.

Once the action is lifted, you have a clean report, a record of what was fixed and a site that can compete again under Google's normal ranking systems. The documentation also helps the next person who works on your site, whether that is staff or a future vendor.

If the notice covers a large pattern, traces back to a former vendor, or points to a hacked site, [Web Leveling](https://webleveling.com/) can read it with you and do the cleanup. Our [search engine optimization](https://webleveling.com/services/search-engine-optimization/) work covers diagnosis, technical cleanup and documentation for the review request, and we will tell you if you can handle it yourself. We work with small and medium businesses across the country and overseas. [Send us your notice and the affected pages](https://webleveling.com/contact/), and we will tell you what the work involves.

## Terms

Manual action words in this post

Tap a term to see what it means.

**Manual action.** A Google enforcement decision, made after a human reviewer finds that some or all of a site violates Search spam policies.

**Algorithm update.** A change to Google's automated ranking or spam-detection systems, which does not normally send a notice.

**Reconsideration request.** A request, sent through Search Console, asking Google to review a site after the listed problem is fixed.

**Unnatural links.** Artificial, deceptive or manipulative links pointing to a site, including purchased links and link schemes.

**Structured data.** Markup that describes a page's content to search engines and can make a page eligible for rich results.

**Noindex.** A tag that tells search engines not to show a page in results.

**Disavow.** A request asking Google to ignore certain links that point to your site.

- [Rank Math PRO malware: check your site tonight, in this order](https://webleveling.com/blog/rank-math-pro-malware-check-your-wordpress-site/): Only activated copies of Rank Math PRO 3.0.123 in the October window count as compromised. Restore from a backup taken before October 15 where possible.
- [AI agents tried 1,200 websites: what to check on yours first](https://webleveling.com/blog/ai-agents-hacked-100-websites-what-to-check/): Reuters reported AI agents attempting intrusions on more than 1,200 websites in one week. Start with admin accounts, updates, backups and logs.
- [UpdraftPlus Hacked: Act If You Have an UpdraftCentral Key](https://webleveling.com/blog/updraftplus-updraftcentral-hack-what-to-do/): UpdraftPlus hacked? If your site has a cloud UpdraftCentral key, delete it and update to Free 1.26.12 or Premium 2.26.12. Then check users and plugins.