Influence Ops Records

Reported networks

Google TAG bulletins explained

Last checked 24 October 2026 · 6 sources

Short answer

TAG bulletins are quarterly posts from Google's Threat Analysis Group listing coordinated influence operation campaigns terminated on Google platforms 1. Each entry gives the action taken, such as YouTube channels terminated or domains blocked from Google News and Discover, the actor as Google describes it, the languages used and a short summary of the content 1. The bulletins do not state overall totals 1,2. The latest bulletin confirmed for this page covers Q4 2025 and was published on 29 January 2026 1.
Latest bulletin confirmed
TAG Bulletin: Q4 2025, published 29 January 2026 1
Largest single Q4 2025 entry
6,280 YouTube channels, PRC, December 1
Largest single Q3 2025 entry
6,484 YouTube channels, PRC, September 2
Largest Russia entry, Q4 2025
1,256 YouTube channels linked to a Russian consulting firm, December 1
DRAGONBRIDGE instances disrupted in 2022
Over 50,000 across YouTube, Blogger and AdSense 3

What a bulletin is

Each bulletin opens with one line. The Q4 2025 bulletin says it includes coordinated influence operation campaigns terminated on Google platforms in Q4 2025 1. The Q3 2025 bulletin, published on 13 November 2025, uses the same wording for Q3 2025 2. Both are credited to Trust and Safety and the Threat Analysis Group 1,2.

Entries are grouped by month. Each one starts with the action, for example a number of YouTube channels terminated, and then describes the campaign in a sentence 1.

What each entry records

  • Action: YouTube channels terminated, Blogger blogs, Ads accounts, or domains blocked from eligibility to appear on Google News surfaces and Discover 1.
  • Actor: a country such as Russia, Indonesia or Azerbaijan, or wording such as United Kingdom-based actors 1.
  • Links: some entries say the activity was linked to the Internet Research Agency or to a Russian consulting firm 1.
  • Languages: the languages the content used, for example Russian and Romanian 1.
  • Content: a short summary, for example content supportive of Russia and critical of Moldova 1.
  • Continuity: the larger PRC entries are described as part of an ongoing investigation and consistent with previous reports 1.

Largest entries in Q3 and Q4 2025

Bulletin and monthActor as statedAction
Q4 2025, December 1PRC 16,280 YouTube channels 1
Q4 2025, October 1PRC 13,715 YouTube channels 1
Q4 2025, December 1Indonesia 12,584 YouTube channels 1
Q4 2025, December 1Russia, linked to a Russian consulting firm 11,256 YouTube channels 1
Q4 2025, October 1Russia, linked to a Russian consulting firm 11,054 YouTube channels 1
Q3 2025, September 2PRC 26,484 YouTube channels 2
Q3 2025, September 2Russia, linked to a Russian consulting firm 23,269 YouTube channels 2
Q3 2025, July 2PRC 22,497 YouTube channels 2
Q3 2025, August 2PRC 22,533 YouTube channels 2
Q3 2025, September 2Azerbaijan 21,119 YouTube channels 2
Q3 2025, September 2Romania 266 domains blocked 2

The PRC entries and DRAGONBRIDGE

Google described DRAGONBRIDGE in January 2023 as a spammy influence network linked to China, which it says is known by the other name Spamouflage Dragon. It said it disrupted over 50,000 instances of its activity across YouTube, Blogger and AdSense in 2022 and had terminated over 100,000 of its accounts over the network's lifetime 3.

Google said most DRAGONBRIDGE channels had 0 subscribers when disrupted and over 80% of its videos had fewer than 100 views 3. The 2025 bulletins describe the PRC entries as content in Chinese and English about the PRC and US foreign affairs 1,2.

How to read the counts

A bulletin entry counts accounts or channels, not people. In Q4 2025 single entries ranged from 1 YouTube channel to 6,280 1. The bulletins give no overall total, so any total is a reader's own sum 1,2.

Channel terminations follow YouTube rules. YouTube's spam policy covers coordinated networks of channels and says it may terminate a channel or account 5. Domain blocks relate to Google News surfaces, where Google says sites with repeated or egregious violations may no longer be eligible to appear 6. Google's threat team shares findings with other companies. Meta said Google Threat Intelligence Group shared information that helped start one Iran investigation in 2025 4.

Common questions

Does a TAG bulletin entry mean a government ran the campaign?

Not always. Entries name a country or actor as Google describes it, and some use wording such as United Kingdom-based actors 1.

How many channels did Google remove in Q4 2025?

The bulletin does not give a total. It lists each entry separately, with the largest at 6,280 YouTube channels 1.

What is DRAGONBRIDGE?

Google describes it as a spammy influence network linked to China, which it says is known by the other name Spamouflage Dragon 3.

What does blocked from Google News mean?

Google lists domains blocked from eligibility to appear on Google News surfaces and Discover 1. Its news policies say repeated or egregious violations can make a site ineligible 6.

Rules and charges change. Check the official source linked on this page before you pay or travel. Spotted an error? Email hello@influenceopsrecords.com.

Sources

  1. Google Threat Analysis Group: TAG Bulletin: Q4 2025 (29 January 2026)
  2. Google Threat Analysis Group: TAG Bulletin: Q3 2025 (13 November 2025)
  3. Google Threat Analysis Group: Over 50,000 instances of DRAGONBRIDGE activity disrupted in 2022 (26 January 2023)
  4. Meta: Adversarial Threat Report, First Quarter 2025 (May 2025)
  5. YouTube Help: Spam Policy
  6. Google Publisher Center Help: Google News policies

Related

  • Meta's adversarial threat reports explained

    What Meta's adversarial threat reports contain, how each network entry is laid out, and what the Q4 2024, Q1 2025 and Q2/Q3 2025 reports listed.

  • OpenAI threat reports explained

    What OpenAI's reports on disrupting malicious uses of AI contain, how cases are rated on the Breakout Scale, and what the 2024 to 2026 reports found.

  • How to read a takedown report

    What the counts, follower figures, ad spend, origin labels, impact scores and threat indicators in Meta, OpenAI, Google and EEAS reports mean.

  • Fake news websites in influence operations

    Spoofed outlets, invented news brands and aggregator networks as documented by Meta, Microsoft, OpenAI, Google and the EEAS, with dates and counts.