Epic Web Studios
EPIC INSIGHTS
Edition 41  ·  Oct 13, 2026

Google's Warnings About Your Site Go to One Inbox

When Google decides something on your website breaks its rules, it tells one group of people: whoever's listed on your site's Search Console account. If that list is a web designer from 2019 and an old Gmail address, the warning still goes out. You just won't see it.

 
THE BIG STORY

Google Tells You When Something's Wrong. Make Sure It's Telling You.

Most of what Google does to your rankings happens without a word. Core updates don't send a letter, and neither do spam updates like the one that finished rolling out Oct 8. The big exception is a manual action: a person on Google's team reviews your site, decides it breaks Google's spam rules, and pushes it down or out of the results. Google says it'll tell you when that happens, in Search Console, its free dashboard for site owners.

Credit where it's due: this is Google at its most helpful. A manual action names the problem, lists the pages involved, and gives you a button to request a review once it's fixed. Google says most reviews take several days or weeks. After an algorithm update, you get none of that.

Why bring it up now? Consultants who handle these penalties say they've picked up in recent weeks. One longtime specialist went from essentially no requests to several a week, mostly from longstanding, legitimate businesses. Google hasn't confirmed a rise, so treat it as a trend worth watching, not an emergency. The usual triggers are thin pages, pages churned out in bulk, and spam someone else slipped onto a site after breaking in.

Here's where it gets interesting. Those messages go to the people listed as owners and full users on your Search Console account, and by email unless they've switched notifications off. Google also emails owners when someone new gets added, which is how you'd find out about a break-in. If the only owner is the designer who built your site years ago, or an inbox nobody opens, those messages pile up unread.

A penalty you know about is a to-do list. One you don't know about looks like a slow month that never ends.

WHAT THIS MEANS FOR YOUR SITE
Google's warnings about your site only help if someone who works for you, or with you, actually reads them. Checking who's on that list takes about five minutes.

Your move: This week, ask whoever handles your website whose email gets Search Console's messages for your site. If nobody's sure, reply and we'll help you find out.

 
QUICK HITS

The rest of the week, in bite-sized pieces

Review Stars Seem to Be Gone for Health Pages
Google appears to have stopped showing review stars beside healthcare web pages in regular search results, according to a schema company that's tracked the drop since late May. Google hasn't confirmed it, and the star rating on your Business Profile is a separate thing.
Your move: If you run a medical or chiropractic practice, leave your review code alone and keep asking patients for honest Google reviews.
Every Name on Your Website Should Be Real
Google added a line to its content guidance last week calling made-up author names, AI-generated headshots and false credentials "a form of deception" and a sign of a low-quality page. A blog signed by an expert who doesn't exist counts.
Your move: Make sure every byline and team photo is a real person, or sign posts with your business name instead.
Paying to Get Into AI Answers Can Backfire
Google's spam rules already count "attempting to manipulate generative AI responses" as spam. Anthropic, which makes Claude, just tightened its own rules against fake "independent" sources, effective Nov 12, and both are aimed at articles planted on sites built to look unbiased.
Your move: If someone offers to get you into ChatGPT or Google's AI answers for a fee, ask who owns the sites, and pass if it's them.
If Your Site Uses Ninja Forms, Update It
Attackers started abusing a flaw in Ninja Forms, a popular WordPress form plugin, on Oct 4. A booby-trapped form entry can create a hidden admin account when a logged-in admin opens it. Version 3.15.4, out since September, fixes it.
Your move: Check that Ninja Forms is on 3.15.4 or later. If it wasn't, reply and we'll look for accounts that shouldn't be there. epicPlatform sites aren't affected.
 
ASK EPIC

"Search Console keeps emailing me that some of my pages 'aren't indexed.' Is Google penalizing me?"

Breathe. Almost certainly not.

Those emails are Search Console doing housekeeping. Google finds pages it decides not to show, like an old address that now redirects, a duplicate, or a page it hasn't gotten around to yet, and it lets you know. Healthy sites get these all the time, and most need nothing from you.

A penalty looks different. The email says "manual action" right in it, names the rule Google thinks you broke, and points you to the Manual actions report. You won't have to squint to figure out which kind you got.

So here's our rule of thumb. An indexing email? Forward it to us if you're curious and we'll translate. A manual action email? Call us that day, and don't start deleting pages in a panic first.

And if you've never gotten an email from Search Console at all, that might be the more interesting question.

 
WHAT EPIC'S DOING FOR YOU THIS WEEK
This week we're checking who has access to Search Console on the sites we manage, flagging anyone who shouldn't still be there, and making sure warnings land in an inbox our team reads. We're updating Ninja Forms on the WordPress sites we maintain and looking for admin accounts nobody recognizes. And we're watching traffic now that the spam update has finished. Anything that needs you will show up in your Client Center.
 
YOUR 15-MINUTE SELF-AUDIT

Find Out Who Google Is Writing To

  1. Open Search Console and pick your site. Can't get in? That's your first finding. Ask whoever built the site to add you as an owner, or reply and we'll sort it out.
  2. Go to Settings, then Users and permissions. Read every name. Note anyone who's left, any old agency, any address you can't place, and send us the list before removing anyone, since old owners can sometimes let themselves back in. An owner you don't recognize at all? Call us. Google says that can mean a hack.
  3. In the left menu, open Security & Manual Actions and click both reports. "No issues detected" is what you want to see.

If anything looks off, reply and we'll take it from there.

 

Thanks for reading! Got questions? Ideas? I'm all ears. Share your thoughts with me and help shape future editions of Epic Insights.

— Kristy Freeman
Epic Web Studios
k.freeman@epicwebstudios.com

Talk to Epic →

Return to all