How to Fix Invoice Links Classified as Malicious in Google Chrome
Question details
Users need to resolve an issue where legitimate invoice URLs are being flagged or blocked as security threats.

- Product
- Google Workspace / Google Chrome
- Device & OS
- not provided
- Scenario
- Sending invoice links to clients or colleagues from a business email account.
- Observed behavior
- Invoice links are blocked by Chrome, antivirus software, browser security policies, or email protection services, displaying a malicious warning even when using HTTPS.
Verify whether the warning appears only on company-managed devices or affects external customers, and never instruct users to bypass a security warning until the link has been independently verified as safe.
Check Domain Reputation and Local Security Policies
Investigate if the block is caused by Google Safe Browsing, SSL configuration issues, or internal endpoint security software.
Often, URLs are blocked because the domain is flagged by a global reputation service, or strict enterprise rules are applied to managed devices.
Ensure the invoice link uses a valid SSL certificate (HTTPS) and does not contain excessive or masked redirects, which often trigger security filters.
If the issue only affects company devices, check the logs in Microsoft 365 Defender, local antivirus, or your firewall to see which specific policy is blocking the URL.
If you confirm the link is safe, add the invoice domain to the 'Safe Links' or exception list within your company's email protection service and antivirus software.

Report Incorrect Classification to Support
Submit a false positive review request if the domain is incorrectly flagged by browser security services.
Avoid Link Issues by Sending PDF Invoices with WPS Office
Instead of relying on cloud links that might trigger strict browser security policies, you can use WPS Office to create, manage, and export professional PDF invoices directly. WPS Office provides a free, lightweight, and highly compatible alternative to Microsoft Office.
- 1. Create an Invoice: Open WPS Spreadsheet or Writer and select a professional invoice template from the built-in library.
- 2. Export as PDF: Click 'Menu', select 'Export to PDF', and save the file securely to your local drive.
- 3. Send as Attachment: Attach the PDF directly to your email, bypassing the need for cloud links that may trigger security warnings.

Frequently Asked Questions
Why is Chrome blocking my HTTPS invoice link?
Even with HTTPS, Chrome may block a link if the domain has been reported for phishing, contains unsafe redirects, or if strict Chrome Enterprise policies are enforced on company-managed devices.
Should I tell my customers to bypass the malicious warning?
No. You should never instruct users to bypass a security warning until your IT team has independently verified the link's safety and resolved the underlying reputation issue.
Does Microsoft 365 Defender affect Google Workspace links?
Yes. If the recipient uses Microsoft 365 Defender or similar email protection services, it scans inbound links and may block them based on its own threat intelligence, regardless of Google's settings.




