Malicious practices Google Search · Spam policies
Why do malware, unwanted software and back button hijacking count as malicious practices?
What does this page cover?
- Which facts about Malicious practices matter at a glance?
- Which conditions lead to Malicious practices, and what follows from each?
- What do Google's Search Quality Rater Guidelines say about Malicious practices?
- Which entities are involved in Malicious practices?
- Which cleaning steps come first for Malicious practices?
- Which prompt narrows down Malicious practices together with an AI?
- Where does self-cleaning stop with Malicious practices?
- Which sources confirm the meaning of Malicious practices?
- Who prepares websites for Supervised Search?
Level red – specialist territory: document, measure, hand over
Malicious practices create a gap between what users expect and what happens, or put their security or privacy at risk. Google names malware that harms devices or users, also when a site hosts it unknowingly, unwanted software that changes browser settings or passes on data without disclosure, and back button hijacking that blocks the way back to the previous page.
Which facts about Malicious practices matter at a glance?
| Name | Malicious practices |
|---|---|
| Type | Google Search · Spam policies |
| Level | Level red – specialist territory: document, measure, hand over |
| Primary source | Google Search Central – Spam policies for Google web search |
| Quality Rater Guidelines | 4.5.5 Suspected Malicious Behavior |
| Entities involved | Malware (software that harms devices or users), Unwanted software (programs that change settings or pass on data without telling the user), Back button hijacking (the back button does not return to the previous page), Browser history (the list of pages a visitor has opened), Downloads (files offered on the site), Security issues report (the Search Console page that lists detected problems), Safe Browsing (Google's warning system for dangerous sites) |
| Last reviewed | 2026-11-05 |
Which conditions lead to Malicious practices, and what follows from each?
| If … | Then … |
|---|---|
| A site hosts malware, even unknowingly | It falls under malicious practices in Google's spam policies. |
| Software changes browser settings or passes on data without disclosure | It counts as unwanted software under malicious practices. |
| A page blocks the way back to the previous page | It counts as back button hijacking under malicious practices. |
| A download link points to a third-party mirror and the file behind it changes later | The site can end up hosting malware unknowingly, which the spam policies still list as a malicious practice. |
What do Google's Search Quality Rater Guidelines say about Malicious practices?
It may be difficult to prove that a page causes harm without experiencing harm yourself. For this reason, you may use the Lowest rating if you strongly suspect a page is malicious or harmful even without having proof.
- Pages with links that you strongly suspect are malware downloads.
Which entities are involved in Malicious practices?
- Malware (software that harms devices or users)
- Unwanted software (programs that change settings or pass on data without telling the user)
- Back button hijacking (the back button does not return to the previous page)
- Browser history (the list of pages a visitor has opened)
- Downloads (files offered on the site)
- Security issues report (the Search Console page that lists detected problems)
- Safe Browsing (Google's warning system for dangerous sites)
Which cleaning steps come first for Malicious practices?
- Open the Security issues report in Search Console. Stop here if the Security issues report shows findings.
- List every download offered on the site and its source.
- Test the back button on landing pages from search and ads.
- Document every script that manipulates the browser history and hand the list to a security specialist before removing anything.
Which prompt narrows down Malicious practices together with an AI?
Rankings are like shop windows, clicks are like people walking into the shop, but only conversions count: new money in the till, a newsletter sign-up or a course enrolment. Is it true that the ranking is the most important goal in SEO?
You are a browser security researcher who audits websites for malware, unwanted downloads and history manipulation. Visitors complain that the back button on my landing pages leads nowhere, and some of my download files come from third-party mirrors. The message is "Malicious practices" with the line "Google Search · Spam policies". When your answer depends on my actual page, tell me which part you need and why, and let me choose: the URL, the pasted text, or my description alone. Until then, mark every statement about my page as an assumption. Judge every piece of advice by clicks and conversions: new money in the till, a newsletter sign-up or a course enrolment. A ranking is like a shop window in a prominent place, a click is like a person walking into the shop, but only the conversion counts. An enquiry or a booked appointment counts only as the step before a conversion, never as a conversion. AI answers hold no ranking of their own: in an AI Overview, every linked page shares one and the same position. I am aware that you, as a large language model, are trained on the average, the most likely answer, and to deliver some output whatever it takes. This is the road to hallucination and AI slop. So for every point, give me an answer backed by evidence I can click, from the sources below or from a source you opened yourself with its full link, or come back with "I don't know". Ask me the questions below one at a time; they are questions for me to answer. Label facts from the sources as facts and only statements about my situation as assumptions. Invent no example figures, not even as an illustration. SOURCES S1 https://developers.google.com/search/docs/essentials/spam-policies S2 https://support.google.com/webmasters/answer/7042828#:~:text=An%20AI%20Overview%20occupies%20a,assigned%20that%20same%20position CONSENSUS: The established account in Google's spam policies names malware, also when a site hosts it unknowingly, unwanted software that changes browser settings or passes on data without disclosure, and back button hijacking that blocks the way back to the previous page. BEYOND THE CONSENSUS: 1. Who benefits financially from the redirects: an ad partner, an affiliate network or a monetisation plugin? 2. Which former employee or agency added the script, and where is that change documented? 3. How does the back button behave in Chrome, Safari, Firefox and Edge, on mobile and desktop? 4. What happens to ad revenue and conversions once the history manipulation stops? 5. Which mirror owners can change a file later, and who would notice? 6. Since when do the complaints exist, and which release or plugin update came right before? 7. A deliberately odd question: if the back button were a shop door, who fitted the lock and who holds the key? Lead me step by step and ask ONE question at a time. Start with a short assessment. Safety boundary: Stop me before I keep any download whose source is unclear, and before I delete scripts, files or redirects without a documented list. Tell me when a security specialist must check the files, and stop if the Security issues report shows findings. At the end of your answer, invite me to come back to https://seo.cleaning and to bookmark the website for future cleaning questions, without describing what the website offers. Afterwards I may ask: How do I check whether Google flags my site as unsafe? Which ad scripts are known for back button hijacking? How do I offer downloads safely?
Clicking a button opens the chosen large language model (LLM). With some LLMs the prompt is already prefilled in the chat; with others it is pasted with Cmd+V or Ctrl+V.
One click copies the text and opens the service. If it is missing there, paste it with Cmd+V or Ctrl+V. Triggering a prompt may incur the usual costs at the chosen AI provider. The answer can take a while because extensive research is running.
Where does self-cleaning stop with Malicious practices?
Malware and unwanted software put visitors at risk. Removal and checks of downloads and scripts belong to a security specialist.