Toxic backlinks are links built or bought mainly to manipulate Google rankings, plus the random spam SEO tools flag alongside them. You deal with them in one order: check Search Console for a manual action, fix the links you paid for, and ignore the rest. Google’s disavow rules require two things at once, a considerable number of spammy links and a manual action they caused or will likely cause, and most sites never meet both.
I’ve worked in SEO since 2012 and placed 15,000+ editorial links, and the panic I see most often comes from a tool report, not from Google. A red “toxic” count is not a penalty. A manual action is.
What are toxic backlinks?
“Toxic backlink” is an industry label, not a Google term. Google calls the problem link spam, which its spam policies define as “creating links to or from a site primarily for the purpose of manipulating search rankings.” The key word is primarily: Google judges why a link exists, not how ugly the linking site looks.
In practice, links called toxic fall into three groups, and each needs a different response:
| Group | Typical examples | Real risk | How to deal with it |
|---|---|---|---|
| Links you built or bought to rank | Paid followed links, PBN posts, link exchanges, automated links | High: neutralized by Google, or a manual action if there’s a pattern | Remove or get rel="sponsored" added; disavow what stays |
| Spam you never asked for | Scrapers, mirror sites, junk directories, hacked pages | Low: Google says it ignores most of it | Leave it alone |
| Links a tool scored as “toxic” | Anything that trips a vendor’s markers | Unknown until you check the link by hand | Review, then sort into one of the two groups above |
What makes a backlink toxic?
Google’s spam policies list the link patterns it treats as spam. The ones that turn up in real audits:
- Buying or selling links that pass ranking credit, including links paid for with products or services
- Private blog networks and link farms (see our breakdown of PBN backlinks)
- Excessive link exchanges and cross-linking partner pages
- Links created by automated programs or services
- Low-quality directory and bookmark links
- Keyword-rich links in widgets, footers or templates spread across many sites
- Forum comments and signatures with optimized anchors
When you review a single link, these are the signals worth checking:
| Signal | Why it matters | What to check |
|---|---|---|
| Someone was paid for it | Paid links must not pass ranking credit | Invoices, vendor reports, “sponsored” or “nofollow” on the link |
| Exact-match money anchor | Repeated commercial anchors form a manipulation pattern | Your anchor distribution; read our anchor text guide |
| Site sells links openly | Google can spot sites that exist to pass links | “Write for us” price lists, dozens of unrelated outbound links per post |
| Same template across many domains | A network footprint | Shared themes, authors and outbound targets across linking sites |
| Hidden or injected link | A hacked site, not your doing | View the page source; the link is invisible on the page |
Do toxic backlinks hurt your SEO?
Spam you didn’t create: rarely. When someone asked Google’s June 2024 office hours how to report sabotage through toxic links, Gary Illyes replied: “I’d ignore those links.” He added that Google is “really, REALLY good at ignoring links that are irrelevant to the site they’re pointing at.”
Links you built to manipulate rankings hurt in two ways:
- They stop counting. Google’s December 2022 link spam update said rankings may change “as spammy links are neutralized and any credit passed by these unnatural links are lost.” If bought links were holding a page up, it falls.
- They trigger a manual action. Google’s manual actions documentation describes “Unnatural links to your site” as “a pattern of unnatural, artificial, deceptive, or manipulative links pointing to your site.”
Negative SEO is the fear behind most audits. Google’s ranking FAQ says it works “really hard to make sure that competitors can’t negatively affect other sites’ rankings.” That’s not a guarantee, but it’s why a spike of junk links alone is not a reason to act.
How to find toxic backlinks
- Open Manual actions first. Search Console, Security & Manual Actions, Manual actions. If it says “No issues detected”, you’re auditing for prevention, not recovery.
- Export your links from Search Console. The Links report exports top linking sites and latest links. Google’s own cleanup instructions say to start with the sites that link most, or the newest ones.
- Collect everything you built. Old vendor reports, guest post spreadsheets, link swap emails. A link you paid for is the first suspect, whatever its metrics.
- Use a tool to sort, then judge by hand. Semrush’s Backlink Audit, for example, scores each link from 0 to 100 using 45+ “toxic markers”, and Semrush itself says a high score means a link is “more likely to be risky”, not harmful. Treat any tool’s list as a shortlist.
Our backlink audit guide covers the full export and review process.
How to deal with toxic backlinks: 4 steps
Step 1: Sort every flagged link into a group
Use the three groups above. Most of a typical tool report lands in “spam you never asked for”, and that group needs no work. Only links you built or bought move to Step 2.
Step 2: Ask for removal or a link attribute
Google’s manual action guidance says to ask site owners to “either remove the links or prevent them from passing PageRank”. A rel="sponsored" or rel="nofollow" attribute does the second. A short request works best:
Hi [name], your post [URL] links to [our page] with the anchor “[anchor]”. It was placed as a paid or arranged link, so to stay within Google’s guidelines could you add rel=”sponsored” to it, or remove it? Thanks, [name].
Log every request and reply. Under a manual action, Google wants “documentation about the links you’ve had removed”, and it warns that disavowing everything without trying removal “might lead to rejection of your request.”
Step 3: Disavow what you couldn’t fix, at domain level
Only when Google’s two conditions apply (see the table in the section below). A disavow file looks like this:
# Paid links, removal requested 2026-10-01, no replydomain:example-links-site.com# PBN network, owner unreachabledomain:another-network-site.net
Use domain: entries. Our step-by-step guide on how to disavow backlinks shows the upload screens.
Step 4: Recheck monthly, not daily
Look at Manual actions and your newest linking domains once a month. If you had a manual action, file a reconsideration request with your removal log and wait for Google’s review message.
How can I disavow toxic backlinks?
With a text file uploaded through the disavow links tool in Search Console. Google’s disavow documentation sets the rules:
| Rule | Requirement |
|---|---|
| When to use it | “A considerable number of spammy, artificial, or low-quality links” and they “have caused a manual action, or likely will cause a manual action” |
| File | .txt, UTF-8 or 7-bit ASCII, one URL or domain: entry per line, # for comments |
| Size | Max 100,000 lines and 2MB; URLs up to 2,048 characters |
| Property | Doesn’t support Domain properties; use a URL-prefix property |
| Timing | “it can take a few weeks” to take effect |
| Risk | Google says misuse “can potentially harm your site’s performance” |
Which type of website is most vulnerable to toxic links?
Sites with a history of paid links, link swaps or cheap vendors who used networks. Google acts on patterns of manipulation, and only someone building links can create one.
My view: smaller sites carry more risk from the same number of bad links. Fifty bought links are a large share of a 100-domain profile and a rounding error in a 5,000-domain one.
Are backlinks good or bad?
Good by default. A link an editor chose to give is exactly what Google’s ranking FAQ recommends earning with “unique, compelling content that other people want to link to.” A link only becomes a problem when its main purpose was to manipulate rankings.
What most toxic backlink guides get wrong
Telling you to disavow URL by URL
At least one top-ranking disavow guide advises listing single URLs instead of whole domains. Google’s manual action instructions say to use the domain operator when one site links to you many times. Spam and network sites keep generating new pages, so a URL-level file goes stale fast. None of the top guides I reviewed mention that the tool won’t accept a Domain property either, which is the first wall many site owners hit.
Ignoring the only public tests
The top results argue about disavowing without data. Two real tests exist, and neither shows a gain from disavowing tool-flagged links:
| Test | What was disavowed | Result |
|---|---|---|
| Ahrefs, July to August 2024 | 129 “toxic” and “potentially toxic” URLs flagged by an SEO tool, pointing at 3 blog posts | Traffic fell 7.1% over 20 days across the three pages |
| Zyppy (Cyrus Shepard), 2024 | Every link to the site: 10,000+ links from 1,473 domains | No meaningful harm reported after nearly two months |
Both tests are small and short. Still, they line up with John Mueller’s November 2022 advice that disavowing links “that some tool has flagged, is not a good use of your time.”
Treating the disavow tool as routine maintenance
Guides that push quarterly backlink audits make the disavow file sound like routine upkeep. Google has moved the other way. Mueller said in 2024 that “at some point, I’m sure we’ll remove it”, and in April 2025 that the tool is “not part of normal site maintenance.” Google’s spam policies were last updated on 28 August 2026, and Google ran several spam updates in 2026. Read the current policy before you file anything, and file only for the cases in the table above.
Verdict: how I’d deal with toxic backlinks
No manual action and no bought links: close the toxic report. Your time is better spent earning links worth having.
Bought links in your past: clean those up first, with removal requests, rel="sponsored" and a domain-level disavow for the rest. That’s the case Google’s rules are written for.
The cheapest cleanup is the one you never need. When I vet a site for a placement, I check for at least 2,000 real monthly organic visitors, a human editor and a clean outbound profile, and we don’t use PBNs or link farms. If a vendor won’t show you its site list before you pay, walk away; our list of link building scams covers the other warning signs, and our editorial link building page shows how we place links.
Not sure which of your links fall in the risky group? Ask for a free audit, or see what vetted links cost on our link building pricing page.
