Google Ads Suspended for Phishing or Policy Flags? What to Do Today

What owners are reporting

This week on X, a few small-business owners described Google Ads accounts shut off for phishing, appeals denied in about an hour, and no human review they could reach. Those were individual, low-engagement posts, not research. I can't tell you how common that pattern is, or whether a bot alone decided those cases. Google's own help pages say it uses a mix of AI and human evaluation to enforce policies. Treat the posts as a reminder to prepare a careful appeal, not as proof of how every review works.

Holiday weeks raise the stakes. CISA's #SecureTheSeason guidance notes that scammers push harder when shopping and travel spike. That doesn't mean your account was wrongly flagged, but it does mean payment requests and fake ads get noisier, so a clean site and locked-down access matter more.

What a suspension notice usually looks like

According to Google's account suspensions overview, when an account is suspended you get an in-account notice and an email. The email lists the policies you're suspended for and includes a link to submit an appeal. Ads in that account stop running. The account stays in a limited, mostly read-only mode: you can still view reports, update security settings, work on billing tasks Google still allows, and use the appeal and verification tools.

Phishing sits under Google's unacceptable business practices policy. Google treats that family of violations as egregious, which means detection can lead to immediate suspension without a prior warning. Google's overview also says a suspension is treated as permanent unless you appeal and the account is reinstated, and that advertisers have at least six months from the suspension date to appeal.

Step 1: Figure out which Google product was hit

These are different systems with different appeal paths:

Google Ads. Suspension notice inside ads.google.com, with Contact Us opening the appeal form.

Google Business Profile. Use Google's Business Profile appeals tool. Google says appeals there can only be submitted once, so gather business registration, license or utility bill evidence first, and don't create a new profile for the same business.

The Google account that owns Ads. If sign-in itself is locked, use Google's account recovery prompts before you can open Ads or submit anything.

This post focuses on Ads suspensions for phishing or related policy flags. If only your Business Profile is down, follow the Business Profile path above instead.

Step 2: Secure the account before you appeal

Google's guide on what to do if your account is compromised is clear: fix security first, then appeal. Policy suspensions are a known side effect when an unauthorized user creates violating ads or landing pages.

Review every user with access to the Ads account. Remove anyone you don't recognize. Re-invite only people you still need.

Turn on two-factor login, and prefer passkeys where Google offers them. Google's compromised-account page recommends passkeys because they can't be copied the way a shared sign-in can, and it also mentions multi-party approval for sensitive changes.

Check Manager Account links and unlink any MCC you don't recognize.

Review linked payment profiles and recent billing changes for anything you didn't authorize.

Audit campaigns, ads and landing pages. Pause or remove anything you didn't create, and clean up any page that could look like it collects personal details under someone else's brand.

Only after that should you appeal, and if compromise is involved, say so and list the steps you took.

Step 3: Appeal once, through the official Ads path

Google's suspensions overview says to open the suspended Ads account, select Contact Us in the notice at the top, and complete the appeal form that opens on the right. Relevant policy info appears while you fill it out. If you click Contact Us again while a review is pending, you'll see an Appeal pending status. The outcome arrives by email. If it's rejected, Google says you can re-appeal through the same process.

Prepare before you hit submit:

A short description of what your business actually does, with a clear About page and current contact details on your site. Google's phishing help page asks for that.

Your own branding in ads and on the site. If you mention another brand, explain the partnership and share proof, such as a listing on their site.

Anything that changed recently: a new site, a new agency, a new account, or a known compromise.

Advertiser verification, if Google asks for it. Selected advertisers must complete verification to appeal, and after three failed identity attempts Google says you won't be allowed to appeal.

Google also says it only reinstates accounts in compelling circumstances, such as a mistake, and that filing too many appeals for the same suspension can delay processing, including a possible seven-day pause if the appeals function is misused. One careful appeal beats five short ones.

Do not open a fresh Ads account to keep spending while you wait. Google warns that related accounts may be suspended too, and that new accounts an advertiser tries to create may also be suspended. Reinstate what you have first.

Step 4: Keep leads coming while Ads is dark

Nobody can promise the account will come back, or how long a review will take. Your pipeline shouldn't depend on the answer.

Your website with a simple contact or booking form, pointed to from every profile you still control.

Your email list of past customers and prospects who already said you can write to them.

Your Google Business Profile, if it is still live: hours, phone, posts and reviews keep local search working even when paid search is off.

Your phone, with a fast callback habit for missed calls from any channel.

Owned channels are what stop a single policy flag from cutting off the business. That is a different problem from Meta Page or ad-account lockouts, and a different problem from a general email phishing checklist. Here the work is Google's Ads appeal path plus not putting every lead in one paid account.

What we don't know

I can't tell you whether your suspension was a mistake, whether a person will read your appeal, or how often phishing flags are reversed. Google publishes the appeal path and the policies, not reinstatement rates. What I can say is that securing access, cleaning violating content, submitting one thorough official appeal and keeping owned lead sources alive is the playbook Google's own docs support.

How Local Business Search can help

We manage Google Ads for local businesses, set up small-business IT and security including two-factor login and passkeys, and build marketing sites and lead capture you own so paid search isn't your only door. Done-for-you how-to videos are coming soon too.

If your Ads account is dark and you want a second set of eyes, contact Local Business Search and we'll help you sort the next step.