Open your .htaccess file (if you do not have any then make it) and place inside:

ErrorDocument 403 default

RewriteEngine on 
RewriteCond %{THE_REQUEST} ^.*(@|%40).* 
RewriteRule .* - [F]

Save it. Then go to your and directly test it using one of example that they send it to you.

Code above block using of any request inside your domain using @ or %40 (Escape Code for @).

Good luck.

ps

I have recently solved same issue with my account on 4 different domain. If you are not sure how to test then send me PM with example from Google and i will take a look for you.

[edited by: dolcevita at 8:20 am (utc) on Mar 25, 2015]

@Dolcevita: Can you please explain what these rules do?

yarun21:

Code above block using any request inside your whole domain (within any url) with @ character or %40 (It is escape code for @).

If someone try to do something with @ or %40 in any url of your domain then he will be blocked with 403 HTTP error code.

Dolcevita,

Thank you very much for the answer. The problem is, they sent me example.com as the example! I have not received any of my domains as an example. It literally says example.com - nothing else.

It is strange. When they did send it to me 6-7 weeks a go then there were mention exactly pages which broke policy:
[webmasterworld.com...]

Have you open attachment that they send it to you? Do you have only one domain within your account or more? Is example only for domain without any specific page behind domain?

There are 6 domains whitelisted in our adsense account.

In the attachment, it always says example.com. The only thing I changed is:
"Url sample: http://Keyword:redacted@example.com/"

Keyword here. It is a keyword that we are targeting for SEO. But all it says is redacted@example.com - not identifiable at all.

[edited by: martinibuster at 4:19 pm (utc) on Mar 25, 2015]
[edit reason] Fixed URL. [/edit]

Under Url group: and Url sample: should be your domain or full url where they detected issue.

Url group: yourdomainnamehere.com/page1.php
Found xxx time(s) or xxxxx of the total records
Url sample: yourdomainnamehere.com/page1.php?email=redacted@example.com


In place from yourdomainnamehere.com should be your domain name with page.

redacted@example.com is example for email that they found in url.

This is what I am saying, there is nothing there, exactly redacted@example.com only, not our domain

If you know what domain they mean with Keyword:redacted@example.com then you will know which domain and then you can place rules from my first post there. Then try to test it to be sure of it works.

If you're eligible for support, email AdSense and ask them.

Did that. I will update the thread if I get feedback. Thanks for the ideas.

I hope that you will get answer. Emails are signed with The Google Publisher Policy Team (no reply) and I think that it is different team than Adsense team which is signed with The AdSense Support Team.

What i found strange is that first 2 email (when they detected issues) Policy Team send to me and as CC to my consultant (actually i think that it is consultant. He contact me once in past for idea about optimization, suggestion and placing of Adsense).

But my consultant did not send me any suggestion regarding this issue which was solved from my side. And i;ve mailed him 2x asking for suggestion and help in solving issue.

He could say 'sorry i can not help you' or whatever but nothing. Not any response. It was really frustrating.

Wonder why then policy team send as CC email to him.

Dear dolcevita, I think you missed the point. The message never named professionalnoob's own, genuine, actual domain name. Instead it used the literal text "example.com".

(It's worth a laugh, because it is inarguably true that "example.com has 1 unique url(s)". For any example.tld you choose, there is a single page linking to IETF explanations. I spent some time reading.)

Dear dolcevita, I think you missed the point. The message never named professionalnoob's own, genuine, actual domain name. Instead it used the literal text "example.com".

I got point later. It is very strange but from other side is difficult to say anything without seeing actual domain names and email from policy team.

@professionalnoob

This is John from Google. We have support information regarding false positives: [support.google.com...]

Also, per the AdSense Help Center, if you select "I believe I was contacted in error. Please re-review my account." on the form linked in the policy notification, the policy team should re-review your account and get back to you.

I'm pretty sure that if this is indeed the way you describe the issue, that this should be resolved quite quickly.

Good luck to you, and apologies for the issue.

Best,
JB

welcome to WebmasterWorld, JB!

as a WebmasterWorld admin, i also want to verify for members that John is "from Google".

@pubpolicycomms

JB, I do appreciate your response on the issue. I am not sure if this is a false positive, as we have made some changes on our website and told Google that we fixed the issue, but we were told that we are still sending PII.

The problem is, we are being told that the sample URL for us is "example.com" - LITERALLY. We have 6 domains in our Adsense account, and we are definitely not running "example.com".

Url sample: [Keyword:redacted@example.com...]

I also understand that, in many cases, the PII is sent as an argument to the URL and AFTER the domain, and we cannot figure out how we are able to send PII to Google in Keyword:redacted@example.com/ format. We do not have any problems fixing anything if there is something wrong, but we are simply unable to identify what we are doing wrong, and clueless so far.

We are really putting all our brains into this in my company but we are not able to figure out what this is about.

We contacted Google Adsense support as well. We first got a generic response with usual links, and then when we sent the screenshots to prove that we have not received any real URLs under our control to check, we received another generic response from another agent.

Do you think I can pass you our account information via sticky-mail and you could check this for us?

Time is kicking for us and we really need to solve this.

Please let me know,

Thanks,

Please send me info related to your account at: (edited) and I'll pass along to the appropriate team to review.

[edited by: martinibuster at 4:04 pm (utc) on Apr 1, 2015]
[edit reason] Edited for privacy. ;) [/edit]

@pubpolicycomms

JB, I have just sent the email with all the details available to us so far. Looking forward to your feedback.

Thank you very much again.

@pubpolicycomms

Thank you! The team has re-checked us and it was indeed a false positive! Phew! Appreciate the help.

Dear all, thank you all for ideas.