There is no channel for reporting an attack
Google operates no complaint process for negative SEO, and never has. There is no form that says "someone is attacking my site," no case number, and no queue where a human weighs your evidence against a competitor's. Correcting that belief is the most valuable thing this page does, because the weeks people spend looking for that form are weeks the evidence is decaying.
What Google does operate is a set of intake channels, each built for its own purpose. The Business Redressal Complaint Form, for example - the subject most people are searching for when they type "Google redressal form" - is a Google Business Profile intake for reports of misleading or fraudulent information on Google Maps concerning a business's name, phone number or website URL. It is not a website channel, not a review channel, and not an appeals channel, and using it as one wastes a submission.
The channels fall into four groups, and knowing which group you are in saves a panicking owner most of the first week:
- Reports about someone else's site - the spam, malware and phishing reports. These are inputs to Google's enforcement systems. They do nothing for you directly.
- Legal demands - copyright removals, counter-notifications and other legal removal requests. These run on statute and policy rather than on ranking, and they are the only channels with an enforceable clock.
- Business Profile and Maps channels - the Business Redressal Complaint Form, review reporting, the Reviews Management Tool, the suspended-profile appeal. These affect a listing, not a website.
- Search Console review paths on a property you have verified - the Manual actions review and the Security issues review. These are the only two channels that can lift a penalty or a warning, and neither is available unless the corresponding report is showing a problem.
Every name and URL below was checked in a research pass - a documented round of source verification - on 3 September 2026. Google renames these channels constantly: the Redressal Form became the Business Redressal Complaint Form, the once-anonymous spam report moved inside Search Console, and Google My Business became Google Business Profile. Re-check before you file.
The spam report, and the two things that changed
Current name: "Report spam," reached from Google's documentation page "Report spam, phishing, malware, or other issues" (last updated 2026-04-23 UTC). Current URL: https://search.google.com/search-console/report-spam. It accepts pages that violate the spam policies - link spam, cloaking, scraped content, doorways, hacked content, site reputation abuse.
First change: it is no longer anonymous. The report used to be a public form at google.com/webmasters/tools/spamreport. It now lives inside Search Console, and fetching the current URL on 3 September 2026 produced a redirect to Google's sign-in. Anyone filing is filing under an identity Google holds.
Second change, and it is a reversal. In 2020 Google rewrote this guidance to strip out every reference to manual action, replacing wording about reports leading to removal with a statement that Google "prefers developing scalable and automated solutions" and would use reports "for further improving our spam detection systems." For about five years, the correct answer to "can a competitor report me into a penalty?" was no - the form fed a training pipeline. That answer is now stale. The change was noticed on 15 April 2026 and the documentation dated 2026-04-23 says Google "may use your report to take manual action against violations," alongside the older line that reports "help us understand how to improve the spam detection systems that protect our search results." Anyone quoting the 2020 position today is quoting superseded text.
The disclosure that matters most, and it is Google's own. The same page states: "To comply with regulations, we must send the submission text to the site owner to help them understand the context of a manual action, if one is issued." Read that twice. Filing is not anonymous in effect - whatever you type is relayed verbatim to the site you reported, with your account behind it, if an action issues. Write nothing you would not sign. Google adds that submissions containing personally identifying information will not be processed at all.
What it realistically achieves for a victim: nothing. It does not remove links pointing at your site, does not lift an action against your site, does not produce a reply, a case number or a status you can check, and does not get a competitor demoted on your say-so. Reporting the sites that host spam links aimed at you achieves nothing measurable, because those links were almost certainly being discounted already. Its one honest use is civic - telling Google about spam that is genuinely degrading results. Treat it as a contribution, not a remedy. The reverse case, where the form is aimed at you, is on the spam report weaponization page.
A note on paid links: Google's current documentation names only spam, malware and phishing reports, and does not name a paid-links form. The legacy URL still resolved behind sign-in on 3 September 2026 rather than returning an error, so the defensible statement is that Google stopped documenting the channel, not that it removed it. Either way the same limits apply.
The Business Redressal Complaint Form
Current name and URL: the Business Redressal Complaint Form. It accepts reports of "misleading information or fraudulent activity on Google Maps related to the name, phone number, or URL of a business." The form asks for your name and contact email, the affected entity, the type of malicious content - title, address, phone number, website, or a non-existent business - the public Maps URL for each affected location, and an explanation of why the content is fraudulent.
What it realistically achieves. Google's own caveats here are unusually blunt: the form does not guarantee action, and submitters do not receive status updates. For issues that are not fraudulent it simply redirects you elsewhere.
When it is the right channel. This is the Maps side of an attack: a competitor's edit changing your phone number or website URL, a fraudulent listing impersonating you, a listing at an address that does not exist. See Business Profile hijacking for what those attacks look like from the other side. It is not the channel for a review problem and not the channel for a suspended profile.
Three things improve the odds without promising an outcome: report one problem per submission with the exact Maps URL; attach or describe dated documentary evidence such as registration, a utility bill or signage photographs; and name the specific policy violated rather than describing how much the situation has hurt you. Then follow up by re-checking the listing, not by waiting for a reply. No reply is coming.
Reviews: the report, and the single appeal
Reporting one review is documented as "Report inappropriate reviews on your Business Profile" (support.google.com/business/answer/4596773). Google's rule is that only reviews breaching the content policies are eligible: "If you find a review on your Business Profile that violates Google policies, you can report it for removal." Disagreeing with a review is not grounds, and no amount of rephrasing makes it grounds.
Checking and appealing happens in the Reviews Management Tool, documented as "Manage your Google Business reviews" (support.google.com/business/workflow/9945796), which exists to report review removals and check review status. Evaluation typically takes several days and resolves to one of three statuses: decision pending, report reviewed with no policy violation found, or escalated.
The constraint nobody tells you about in advance: if a report is denied, you get one appeal. One. That single appeal is the entire escalation budget for that review, which is why the first report should name the specific policy - off-topic, fake engagement, conflict of interest, spam - rather than argue that the review is unfair. It will not remove a truthful negative review, it will not identify the reviewer, and it adjudicates each review alone, so a coordinated fake review campaign is handled one item at a time.
A suspended or disabled profile is a different channel again: "Fix suspended or disabled profiles" (support.google.com/business/troubleshooter/2690129), which may ask for registration, a license, a tax certificate or a utility bill. It is the one Business Profile channel that reliably answers - Google states it will review the appeal and send an email with a decision.
Legal removals, copyright, and the Lumen consequence
Current name: "Report content for legal reasons" (support.google.com/legal/answer/3110420), with the intake tool at support.google.com/legal/troubleshooter/1114905. It accepts content that violates the law or your rights, and it requires separate notices when content appears in more than one Google product - a Search delisting and a video removal are different requests.
What it achieves depends entirely on the legal basis, and the spread is enormous. Copyright is the most effective channel Google operates, in both directions. Google's own documentation says it removes results linking to infringing content "when it is brought to our attention, and we do it quickly," with an average processing time of about six hours, while conceding that it "cannot always notify a site owner before content is removed" and "is not always able to verify the accuracy of a request." That speed and that concession are exactly why the channel is abused - see fake DMCA takedowns. The counter-notification under section 512(g)(3) is the one remedy in this entire subject that runs on a clock a victim can rely on: on a valid counter-notice the provider restores the material not less than 10 nor more than 14 business days after receipt, unless the complainant sues.
Defamation is not that. In the United States this route means a court order, and even then removal is not assured; no Google statement committing to honor US defamation orders was located in this research pass, and scrutiny tightened after the fabricated-defendant matters of 2017. Do not plan around a court order producing de-indexing.
A counter-notification is a legal filing, not a form. It forwards your name, address and telephone number to the person who attacked you and consents to United States federal court jurisdiction, and whether filing one is wise in your situation depends on the facts and on where you are. That is a question for a lawyer. I am not one, this page is general information rather than legal advice, and the legal theories guide explains what the surrounding claims would require.
The Lumen consequence cuts both ways, and you should know it before filing. Google shares copies of qualifying removal requests with the Lumen Database at lumendatabase.org. That is how a victim obtains the text of a notice filed against them, the claimed original URL and the submitter's stated identity - the evidentiary core of any misrepresentation claim. It also means your own removal request becomes a public, searchable document.
Search Console: the only two channels that lift anything
The Manual actions report is the single most important diagnostic in this subject. Google takes "a manual action against a site when a human reviewer at Google has determined that pages on the site are not compliant with Google's spam policies," and notifies the owner "in the Manual actions report and in the Search Console message center."
If that report says no issues detected, no manual action exists - whatever an extortion email claims, whatever a vendor selling cleanup says, and whatever the traffic graph looks like. A drop with a clean manual actions report is algorithmic, technical, seasonal or competitive, or else it is a copyright delisting, which does not appear here either. The review path is to fix the problem sitewide, select Request Review, and describe the fixes. Google's stated timing: most reconsideration reviews take several days or weeks, and link-related requests may take longer than usual.
The Security issues report (support.google.com/webmasters/answer/9044101) covers hacked content - "any content placed on your site without your permission because of security vulnerabilities in your site" - along with malware, unwanted software and social engineering. Same path: fix sitewide, request review, describe the fixes. It is the only mechanism that lifts a Safe Browsing interstitial or a hacked-content flag. No statute, letter or complaint form removes one, and requesting review before the backdoor is genuinely closed burns cycles and delays recovery.
One more channel affects only your own verified property: the Removals and SafeSearch reports tool (support.google.com/webmasters/answer/9689846). Google is explicit that "a successful request lasts only about six months" and that "blocking a URL does not prevent Google from crawling your page, only from showing it in Search results." It buys six months while you implement a real fix, and it is useful in exactly one attack scenario: spam URLs indexed on your domain that you need out of results while you clean up. Refresh Outdated Content is a different tool for a different job - it asks Google to update a result for a page that has already changed on the live web, and it does nothing to a page whose owner has not changed it.
Which routes achieve nothing - say it plainly
A defender's time is the scarcest resource in the first week. These consume it and return nothing:
- Filing a spam report about the sites linking to you. It removes no links, moves no rankings, returns no reply - and sends your words to the reported site owner if an action issues.
- Filing a reconsideration request when no manual action is outstanding. There is nothing to reconsider and the control does not exist.
- Disavowing on suspicion. Not a reporting channel at all. Google restricts the tool to cases involving considerable spammy links that caused or likely will cause a manual action, and warns that "if used incorrectly, this feature can potentially harm your site's performance in Google Search results."
- Reporting a competitor hoping Google will demote them. No channel does this. The spam report is not an adjudication of a dispute between two businesses.
- Looking for somewhere to report an extortion demand to Google. Nothing exists. That is a law-enforcement matter, and the extortion guide covers where it actually goes.
- Emailing or messaging Google staff on social platforms. The Search Central team are public communicators, not a support queue. Two trade publications did get 2026 copyright delistings reversed after public reporting, but they had mastheads; it is not a remedy and should not be planned around as one.
- The Search Central Help Community. A volunteer forum with occasional Google employee visibility. Useful for diagnosis, sometimes useful for surfacing an obvious error, never a channel with an outcome you can plan around.
- Filing the same complaint through five channels. It does not raise the odds of action, and in the Business Profile channels it can reset queues.
Matching the symptom to the channel
The correct channel follows from the diagnosis, and getting the diagnosis wrong is what sends people to the wrong form. Each line below gives the symptom, then the channel, then the channel people wrongly reach for.
- Search Console shows a manual action - Manual actions, Request Review. Not the spam report, and not a disavow on its own.
- Search Console shows a security issue - Security issues, Request Review. Not a legal removal.
- One URL vanished, manual actions clean, and the results footer shows a copyright notice - the counter-notification. Not a reconsideration request.
- A Maps listing's phone number or website URL was altered - Business Redressal Complaint Form. Not the spam report.
- Fake or policy-violating reviews - report the review, then the Reviews Management Tool appeal. Not the Redressal Form.
- The profile is suspended - the Business Profile appeal for suspended or disabled profiles. Not the Redressal Form.
- Spam URLs indexed on your own domain - the Removals tool for six months, plus a real fix. Not Refresh Outdated Content.
- Thousands of junk links appeared - usually nothing, after you verify the Manual actions report. Not the spam report, and not a mass disavow.
- A grievance page ranks for your brand - usually nothing at Google at all. Not the spam report and not a reconsideration request.
The pattern in that list is worth stating on its own: the channels that do something are the ones on a property you control, and the channels that do nothing are the ones aimed at somebody else's. Only two Google channels lift anything, both live in Search Console, and both require a problem to already be showing there.
Frequently asked questions
Can I report negative SEO to Google?
Not as such. Google runs no intake for "someone is attacking my site," and it never has. What you can do is check the Manual actions and Security issues reports in Search Console to find out whether the attack achieved anything, use the Business Redressal Complaint Form for a fraudulent Maps edit, report policy-violating reviews, and file a counter-notification against a false copyright removal. Reporting the attacker's spam pages is a civic contribution, not a remedy for you.
Is a Google spam report anonymous?
No, not in effect. The form now sits inside Search Console behind a Google sign-in, and Google's own documentation states that to comply with regulations it must send the submission text to the site owner to help them understand the context of a manual action, if one is issued. Assume the site you report will read what you wrote, in full. Google also states it will not process a submission containing personally identifying information.
Will reporting my competitor's spam get them penalized?
Possibly, but not on your say-so, and the position changed recently. Google removed manual action from this guidance in 2020 and restored it in 2026: the current documentation says Google may use a report to take manual action against violations. A reviewer still has to find an actual violation, so a report is an allocation of attention rather than a verdict, and a clean site that gets reported a hundred times has a hundred reviewers finding nothing.
How long does Google take to respond?
Google publishes almost no timelines, and any specific number you read elsewhere is probably invented. What is documented: reconsideration reviews take several days or weeks, and longer for link-related requests; review reports take several days; copyright removals average about six hours. The Business Redressal Complaint Form sends no status updates at all, and the spam report never replies.
Which form removes bad backlinks pointing at my site?
None of them. No Google channel removes a link on someone else's website, and no channel exists for asking. The disavow tool is not a report and Google restricts it to considerable spammy links that caused or likely will cause a manual action, warning that incorrect use can harm your performance. Check the Manual actions report first; in most cases the honest answer is that nothing needs doing.