Removing a scam website from Google Search: the 2026 takedown playbook
Here's a step-by-step playbook for getting scam or phishing websites pulled from Google Search in 2026. We'll cover reporting sites to Google Safe Browsing, filing DMCA takedowns, making use of Google's removal tools, and addressing impersonation sites. You'll also find out when a do-it-yourself approach is enough and when it's better to bring in specialists such as Unled Network, along with ways to protect your brand over the long haul. With realistic timelines and practical advice, you'll have everything you need to tackle malicious sites and keep your online reputation intact.
Finding a scam website that copies your brand or goes after your customers is always a shock. These sites tarnish your reputation and, just as importantly, put users at risk of phishing and fraud. The good news is that Google offers several ways to report malicious content and get it removed from search results. This playbook runs through the best tactics for 2026, taking you from DMCA notices to Google Safe Browsing's reporting tools. We'll take you through every step, spell out when it makes sense to handle the problem yourself, and highlight when bringing in specialists like Unled Network is the smarter move for a quicker, more thorough takedown. Whether you own a brand, build apps, or work in law, this guide gives you the know-how to defend your online presence.
Recognise the Scam Website and Build Your Evidence
Thorough documentation is essential before you can get a scam website taken down. This evidence will be key when you report it to Google or pursue legal action. Begin by taking screenshots of the site, writing down the URL, and making a note of anything misleading. If the site is pretending to be your brand, take side-by-side shots of the fake and your real site.
It's also worth checking whether the site is hosted on a platform such as WordPress.com or Shopify, because both have their own abuse reporting procedures. Phishing pages can be reported straight to Google Safe Browsing. If it's a copyright issue, you'll need to demonstrate that you own the content.
- Keep your screenshots safe and write down the exact URL, plus any contact details shown on the scam site.
- Find out who hosts the site using tools such as WhoIs or Netcraft.
- Keep a record of exactly how the site misleads users, for example with fake login pages or unauthorised use of your logo.
If you're not certain about the legal basis, our content removal services can help you weigh up your options. For more advice on dealing with abuse reports, see our abuse report response guide.
Report the Site to Google Safe Browsing
Think of Google Safe Browsing as your front line of defence against phishing and malware sites. When you report a URL, Google's automated systems take a look and may add it to a blacklist, causing Chrome and other browsers to show warnings. That won't get the site taken out of search results, but it will seriously limit how many people see it.
To report a site, go to the Google Safe Browsing reporting page and submit the URL. You can also use the Report phishing tool in Chrome. If a site is impersonating your brand, you can complain to Google's Trust & Safety team, but it's a less straightforward route.
- Head over to the Google Safe Browsing reporting page.
- Paste the scam site's URL and choose the reason (phishing, malware, etc.).
- Add any extra details, such as the site's deceptive intent.
Safe Browsing might flag the site, but that doesn't necessarily remove it from search results. For full de-indexing, you'll need to use Google's removal tools or submit a legal request. If you'd like help with this, our content removal service can handle it for you.
Submit a DMCA Takedown Request for Copyright Infringement
If the scam site is using your copyrighted content, whether text, images or videos, you can file a DMCA takedown request with Google. It's a legal process: you'll need to prove ownership and make a declaration under penalty of perjury. Google's DMCA policy is strict, but it works.
To file, go to Google's Legal Removal page and submit the form. You'll need your contact information, details of the copyrighted work, and the URL of the infringing page. Google will review your request and, if it's valid, remove the page from search results within a few days.
- Make sure you have clear proof of ownership, such as copyright registration or the dates the work was originally created.
- Be precise about the exact URLs that infringe your content.
- If you hear back from the site owner, submit a counter-notice.
For a comprehensive guide to DMCA requests, see our DMCA takedown guide. If it all feels overwhelming, our content removal experts can sort the whole process out for you.
Use Google's Removal Tools for Outdated or Deceptive Content
Google has a number of self-service tools that let you remove content from search results. When the scam site is offline but still appearing in search, the 'Remove outdated content' tool comes in handy. The 'Remove content from my site' tool is meant for site owners, but you can also use it to ask for pages to be taken down when they break Google's policies.
Where impersonation or defamation is concerned, you can request removal under Google's 'Removals' policy, which targets content that is 'financially, sexually, or personally harmful.' It's a less predictable process, but one that can be effective.
- Head to Google Search Console and verify you own the site, if that applies.
- For pages that are no longer live, use the 'Remove outdated content' tool.
- Lodge a legal request for content that breaches Google's policies.
These tools cost nothing, but you'll need to be meticulous. If you'd like some guidance, our guide to cleaning up negative search results is full of practical tips. For trickier cases, think about our professional removal service.
_MID_PLACEHOLDERReporting Impersonation Sites to Google's Trust & Safety
When a scam site is passing itself off as your brand, you can flag it to Google's Trust & Safety team. This is a separate process from DMCA and zeroes in on deceptive practices. You'll need to show proof that visitors are being misled into thinking the site belongs to you.
To make a report, complete the 'Report impersonation' form on Google's support page. You'll need to provide the URL, your official site, and a description of how the scam site copies your brand. Google might step in, but there's no promise it will.
- Offer clear examples of the impersonation, such as logos or design features.
- It's worth mentioning any user complaints or reports you've received.
- If you haven't heard back within a week, chase it up.
For a more forceful approach, you can also contact the hosting provider directly. Our abuse report handling service can help you draft effective complaints. If you need to escalate, our content removal team is on hand to assist.
Get in touch with the hosting provider and registrar
Getting in touch with the hosting provider or domain registrar directly can also work well. Most hosts have acceptable use policies that ban phishing and fraud. If you can demonstrate that the site is malicious, they may suspend it, and that takes it offline for good.
Run a WHOIS lookup to identify the hosting provider. Then send a formal abuse report to their abuse team, making sure to include evidence and a clear explanation of how the site breaches their terms.
- Run a WHOIS lookup to find out who the host and registrar are.
- Check the host's website for their abuse contact details.
- Send a detailed abuse report with any supporting evidence.
This approach can be quicker than going through Google, but it depends on how responsive the host is. For help with this, our abuse response service can draft and send these reports for you. You can also read more about takedown strategies in our blog.
Monitor and prevent future scam sites
After you've taken down one scam site, it's essential to watch for others. Scammers tend to register multiple domains. Set up Google Alerts for your brand and keep an eye on new registrations. You can also use services that flag domain names similar to yours.
Prevention means registering common misspellings of your domain and securing your brand on social media. It's also worth educating your customers about phishing attempts and how to verify a site is legitimate.
- Create Google Alerts for your brand and key products.
- Register similar domains to prevent cybersquatting.
- Set up DMARC for your email domain to prevent phishing.
For ongoing protection, consider our content removal and monitoring services. We also offer pricing plans that come with routine checks. For more practical tips, check out our guide to getting negative results removed.
DIY or Professional Takedown Service: When to Choose Which
If the case is a simple one, DIY can work. But it is often slow and can fail when the site is hosted abroad or uses clever evasion methods. Professional services like Unled Network have the skills and muscle to sort out complex takedowns.
Think about bringing in professionals if you have tried DIY and come up short, if the scam site is causing real harm, or if you lack the legal background to file DMCA requests. We provide an all-round content removal service which includes legal requests, reports to hosting providers about abuse, and continuous monitoring.
- For obvious copyright infringement, doing it yourself is perfectly adequate.
- When it comes to impersonation or international cases, professional assistance is advised.
- Our team enjoys a high success rate and can fast-track the whole thing.
Browse our client testimonials to see how we have helped other people. To book a consultation, go to our contact page or contact us on Telegram for a speedy reply.
Legal Routes: Lawsuits and Injunctions
When things get serious, legal action may be the only route. It costs money and takes time, but it can end in a court order that forces the site offline. You would need a solicitor who specialises in cyber law.
A typical route is to bring a claim against the site owner, but that means tracking them down, which can be tricky. Alternatively, you could seek an injunction against the hosting provider to make them take the site down.
- Talk to a solicitor to find out where you stand.
- Gather all available evidence of the fraud and the harm it is doing.
- Lodge a complaint with the relevant jurisdiction.
Court action should always be the last resort, though it can deliver results. For a less drastic step, our online content removal services can manage most cases without needing to go to court. To see what other options you have, read our DMCA guide.
Rebuilding Your Brand Reputation After Removal
Once the scam site is gone, make rebuilding trust your main priority. Publish positive content about your brand, talk to customers on social media, and deal with any negative reviews. Doing so will push any remaining negative search results further down the rankings.
You could also publish a dedicated page on your website that addresses the scam openly. If that page ranks in search, it will inform users, show that you are transparent, and make it harder for similar attacks to harm you in future.
- Write a blog post or FAQ explaining the scam and how people can avoid it.
- Ask happy customers to leave positive reviews.
- Check your search results on a regular basis.
For longer-term reputation management, our online content removal service comes with continuous monitoring. You can also take a look at our guide to clearing negative results for more tactics. If you need help right away, contact us through our contact page.
Frequently asked questions
It varies. Reporting the site to Google Safe Browsing can get it flagged in 24 to 48 hours, but full removal from search results might take up to a week. DMCA requests usually take 5 to 7 working days. Abuse reports to the hosting provider can be quicker, sometimes landing within 48 hours. Professional services can accelerate the process, and often sort it out in 3 to 5 days.
Yes. You can report the site to Google Safe Browsing for phishing or malware, ask Google to remove outdated content with its removal tools, or submit an impersonation report to Trust & Safety. That said, if the site has copied your copyrighted material, sending a DMCA notice is the most powerful legal course of action.
You can still flag it to Google and the hosting provider. Hosting providers based overseas often react to abuse reports, particularly if they operate under strict cybercrime legislation. If necessary, you can get legal advice for takedowns that cross borders.
Head to Google's Safe Browsing reporting page and submit the web address. You can also pick the 'Report phishing' option in Chrome. Explain what makes the site deceptive. Google will take a look and might put it on their blacklist, which then triggers warnings in browsers.
De-indexing takes the site out of Google's search results, so it stops showing up when people search. Blocking, on the other hand, triggers a browser warning via Safe Browsing but doesn't always get rid of it from search. Both play a part in keeping users safe.
Google's removal tools work for particular situations, like outdated material or content that breaks Google's policies. For phishing or impersonation cases, you might need to report via Safe Browsing or put in a formal legal request. It's best to assess the nature of the scam.
Prices depend on how complicated the case is. Unled Network's <a href='/pricing.html'>pricing page</a> sets out our transparent rates. A straightforward DMCA request might set you back a few hundred dollars, while something more involved, such as multiple sites, will cost more. We offer free consultations to work out what you need.
If the site is still up after you've reported it, you can up the ante by getting in touch with the hosting provider directly, making a formal legal request, or bringing in a professional service. Stubborn sites might call for a mix of tactics. Our <a href='/services/content-removal.html'>content removal service</a> is built to deal with exactly this sort of problem.
Comments
Got a question or first-hand experience of this? Join the conversation. Your email will never be displayed or shared.
Our team had been going back and forth over the best approach, so this is exactly what we needed.
Great question! We see this a lot with clients who buy Microsoft Ads accounts for Bing. It's about staying consistent, not a one-off fix.