What to do about it
Do not just paint over it, and do not guess. Confirm the source.
The most common mistake is reaching for a can of stain-blocking primer. Paint hides the mark for a few weeks, but the water is still coming, the drywall keeps soaking, and the stain bleeds back through, often bigger. Painting over an active leak does nothing but buy mold more time. First you stop the water, then you fix the ceiling. In that order, every time.
Start with the cheap checks you can do yourself. Note whether the stain reacts to rain or ignores it. Look at what is on the floor above and what sits in the attic over that spot. If it is summer, the stain is near the air handler, and rain is not a factor, have your AC company check the condensate line first, because that is a quick, inexpensive fix and you can rule the roof out entirely. If the stain tracks the weather, it is time to confirm the roof. Our guide on what to do when your roof is leaking covers the immediate steps, and how to find where a roof is leaking explains why the entry point is rarely above the drip.
When the clues point at the roof, Coastline confirms it for free. We go into the attic and trace the water trail back uphill to the real entry, fly a drone over the roof to read the shingles, flashing, and vent boots from above, and where it helps we run a controlled hose test, wetting one area at a time until the leak shows itself inside. You get a written photo report showing exactly where the water is getting in. Often the trail leads to failed flashing around a chimney, vent, or wall, which is one of the most common roof leak sources of all. Our page on flashing failure explains how that happens. If it turns out the roof is dry and the source is plumbing or AC, we tell you that plainly so you can call the right trade and stop spending on the wrong one.