The links that hurt a site are those with clear signs of manipulation: mass placements with exact-match commercial anchors, donors from PBNs and spam directories, backlinks from hacked or off-topic sites. Google devalues most of these links automatically, but with systematic abuse it may count them against the site. Let’s look at how to tell a truly toxic link from one that’s merely weak, how to find harmful backlinks in bulk and how to decide what to do with them.
Key points in 30 seconds
- Google simply ignores most weak links: there’s no need to react to each one.
- The danger isn’t a single backlink but a pattern: volume, anchor overuse, a network footprint.
- Exporting the whole profile and filtering by metrics helps you find toxic links.
- Disavow is a last resort: careless disavowing does more damage than the links themselves.
- If rankings dropped right after buying links, the links aren’t always to blame.
What “a link hurts the site” actually means
First, let’s pull apart two ideas. A bad link is simply a useless backlink that passes no link equity: an empty directory, an abandoned forum, an off-topic site. A toxic link is one that looks like an attempt to manipulate search results and can potentially work against you.
Since 2016, the Penguin algorithm has worked in real time and mostly doesn’t penalize bad links; it devalues them, i.e. simply stops counting them. Real problems arise in two situations: a manual action, which you’re notified about in Google Search Console, and an algorithmic reassessment of the profile when the system sees a systematic manipulative pattern. It’s the pattern, not an individual link, that does the damage.
Why can links cause harm at all? Because they still matter for ranking. Google explicitly lists link analysis systems and PageRank among its ranking systems, and PageRank has been one of the core systems since the search engine launched. That’s exactly why people try to manipulate links, and why Google invests so much effort into filtering out artificial signals.
What Google officially considers link spam
Before hunting for “toxic” links using third-party metrics, read the primary source. Google’s spam policies define link spam as creating links to or from a site primarily for the purpose of manipulating rankings. The key word is “primarily”: it’s about intent, not about the mere existence of a link.
Google gives concrete examples of link spam:
- buying or selling links for ranking purposes, i.e. exchanging money, goods or services for a link that is meant to pass equity;
- excessive link exchanges (“link to me and I’ll link to you”) or partner pages created solely for cross-linking;
- automated programs or services that create links (link blasts, auto-posting to profiles, comments and directories);
- large-scale guest posting or article marketing campaigns with keyword-rich anchor text.
Notice what’s not on the official list: “links from low-DR sites” or “links from forums”. A forum link isn’t spam in itself. It becomes spam when a bot posted it, when it adds nothing to the discussion, or when there are thousands of them with the same commercial anchor.
Separately, Google explains how sites should qualify outbound links: rel=”ugc” is recommended for links in comments and forum posts, rel=”sponsored” for ads and paid placements, and rel=”nofollow” when the owner doesn’t want to associate their site with the linked page. In other words, a normal forum that adds ugc to user links is doing exactly what Google asks.
One more piece of context: in March 2024 Google introduced new spam policies covering expired domain abuse, scaled content abuse and site reputation abuse. For link building, this means donors built on repurchased expired domains filled with generated content are now squarely in the risk zone, even if their third-party metrics look great.
Manual action vs algorithmic neutralization
When people say “the links hurt us”, they usually mix up two different mechanisms. Which one has kicked in determines what you should do next.
Manual action
A manual action is applied by a Google reviewer after examining the site. The key sign is a message in Search Console under “Manual actions” with wording such as “Unnatural links to your site”. It can affect specific pages or the whole domain. Here you have to act: remove or disavow the manipulative links, document what you’ve done and submit a reconsideration request.
Algorithmic neutralization
This is the main scenario today. In its December 2022 link spam update, Google announced that it uses SpamBrain, its AI-based spam-prevention system, to neutralize the impact of unnatural links. Any credit those links passed is simply lost. You won’t get a notification: the links just stop working, and if your rankings depended on them, the site gradually slides.
| Criterion | Manual action | Algorithmic neutralization |
| Who decides | A Google reviewer | An algorithm (SpamBrain) |
| Is there a notification | Yes, in Search Console | No |
| What happens | The site or pages are demoted in search | The links stop passing equity |
| What to do | Clean-up, disavow, reconsideration request | Build quality links and content; disavow usually won’t help |
| How it ends | After an approved reconsideration request | Lost equity doesn’t come back; it has to be replaced |
The practical takeaway: if there’s no manual action, you’re most likely not dealing with a “penalty” but with some of your purchased links simply not being counted. Disavowing them is pointless since they already pass nothing. It’s a bit like quitting a job that never paid you. The only way forward is to replace them with links Google will treat as natural.
Spammy, manipulative and “toxic” are different things
The term “toxic links” wasn’t coined by Google; SEO tools popularized it. In its guide to toxic backlinks, Ahrefs suggests separating three categories: spammy, manipulative and “toxic”. Spammy links you didn’t create (automated scrapers, content-copying sites, odd directories) usually aren’t a problem. What Google warns about is manipulative links, the ones created deliberately to influence rankings.
- Spammy: they appear on their own for any site that’s even slightly visible in search. Scrapers copy your content, aggregators generate pages with domain stats. You didn’t order them, they pass nothing, Google ignores them. Think of them as a side effect of being popular.
- Manipulative: created by you or a contractor to influence rankings: link blasts, PBNs, mass articles with exact-match anchors, link exchanges. These are what Google’s policy targets.
- “Toxic” according to a tool: anything that tripped the tool’s filter. This bucket mixes spammy links, manipulative links and perfectly normal links that just have suspicious-looking metrics.
So the first audit question isn’t “how spammy is this donor” but “who placed this link and why”. If neither you nor your contractor ordered it, you can usually ignore it safely.
Signs of a toxic link
No single sign is a verdict on its own; it’s their concentration that’s dangerous. Here’s what to look at first:
| Sign | Why it’s dangerous | How to check |
| Exact-match commercial anchor at scale | Unnatural: real people don’t link that way | Ahrefs → Anchors, calculate the shares |
| Donor from a PBN | Shared IP, template, cross-linking within the network | Ahrefs, WHOIS, hosting lookup |
| Spam directories and profiles in bulk | Classic link buying footprint | Profile export, page type |
| Off-topic donor | The link isn’t supported by the content | Manual topic check |
| Gambling, pharma, adult (not your niche) | Living in “bad neighborhoods” | Ahrefs, manual review |
| High domain spam score | A combination of manipulative signals | Moz Spam Score, SEMrush Toxicity |
| Sudden link spike | Looks like link buying or an attack | Ahrefs → Referring domains, chart |
| Pages with thousands of outbound links | Link farms, link equity gets diluted | Manual check, Ahrefs |
| Hacked sites and doorways | A direct spam signal | Manual review, Google cache |
Anchors have their own deep dive: anchor text over-optimization: signs, diagnosis and fixes. You can quickly calculate anchor shares in your profile with our free anchor text analyzer. And for a safe building pace, read whether a sudden spike in links is harmful.
Types of harmful links: risk level and what to do
The table above helps you recognize the problem. This one helps you decide what to do about it. The risk level depends not on a single link but on how many such links are in the profile and who created them.
| Link type | Risk | Action |
| Scrapers, domain-stats aggregators, automated copies | Low | Ignore |
| A few off-topic directories and profiles | Low | Ignore, don’t add more |
| Link blasts across thousands of profiles and directories that you ordered | Medium | Stop, monitor the trend; disavow if there’s a manual action |
| Mass articles with exact-match commercial anchors | High | Dilute the anchor mix; change or remove anchors where possible; disavow if penalized |
| PBN (shared templates, hosting, cross-links) | High | Get links removed; if impossible, disavow at domain level |
| Expired domains with generated content | High | Don’t buy; disavow existing ones if penalized |
| Hacked sites, doorways, hidden links | High | Disavow at domain level, especially during an attack |
| A sudden wave of spam with gambling or adult anchors (negative SEO) | Medium | Monitor; disavow if it grows and rankings fall |
| Relevant links from live forums, ugc or nofollow | None | Keep: a natural part of the profile |
What domain spam score is
Spam score (toxicity) is an estimate of how likely a domain is to use manipulative techniques. Each tool calculates it its own way: Moz shows Spam Score as a percentage based on a set of “spam signals”, SEMrush has a Toxicity Score from 0 to 100, and Ahrefs has its own quality filters. All these metrics are estimates and don’t match each other, so you can’t rely on a single number. A high score is a reason to review the link manually, not to delete it automatically. More on donor metrics in our breakdown of DR, DA and Trust Flow.
Remember that Google uses none of these scores. They’re a third-party attempt to predict how the search engine will assess a domain. So a “toxicity of 60” in a report doesn’t mean Google has already counted anything against you. It’s your neighbor’s take on the weather, not the forecast.
How to find harmful links in bulk
Assessing backlinks one by one makes no sense when there are hundreds of them. A batch approach works:
- Export the entire link profile. Sources: the “Links” report in Google Search Console, Ahrefs, SEMrush. Combine them: no single source sees all links.
- Merge the data into one spreadsheet and collapse duplicates by domain: it’s easier to assess sites than individual URLs.
- Sort by risk signals: spam score, anchor type, topic, number of outbound links on the donor.
- Flag candidates for disavow. Don’t remove them right away: first build a pool of suspicious links.
- Check the borderline ones manually. 15 minutes of review saves you from a mistaken disavow that hits your traffic.
Auditing with the Search Console Links report
Start with the free source that shows links the way Google itself sees them. The Links report in Search Console has three blocks that are useful for an audit:
- “Top linking sites”: sort by number of links. A domain sending thousands of links to your site is almost always a sitewide link (footer, sidebar), a network or a scraper.
- “Top linking text”: if commercial keywords sit at the top of the list instead of your brand name and URL, your anchor profile is skewed.
- “Top linked pages”: if external links are concentrated on 2–3 commercial pages rather than the homepage and useful content, that’s another sign of artificial building.
Export all three tables and add data from a third-party tool. Search Console doesn’t show when links appeared or any donor metrics, but it gives you Google’s version of your profile, which makes it valuable for cross-checking. How to connect a site and where to find the reports is covered in our guide to setting up Google Search Console.
What to check manually on a borderline donor
- Does the site have real content written for people, or is it a collection of “link-ready” articles on random topics?
- How many outbound links are on the page and where do they go: to dozens of irrelevant commercial sites or to relevant sources?
- Do the design, template and structure look like your other donors? Sameness often gives a network away.
- Are there hidden blocks, strange redirects or casino pages in a section unrelated to the site’s topic? That’s what a hack looks like.
How to choose donors by quality and not confuse a network with a live site is covered in the guide on checking website trust with 12 criteria.
From our practice
Clients often ask whether forum links are the very “toxic” links everyone warns about. The answer depends on the platform. When we checked 16,500 forums in October 2026, 90% were alive, but among the forums where we could inspect threads, 68% had no external links at all in the threads we checked: moderators remove them or don’t let them through. And of the 7,872 forums with a visible last-post date, only 58% had new posts in the previous 3 months. So a link that survived moderation on a live forum with an active discussion is, by nature, ordinary UGC. The risk comes not from forums as a type, but from abandoned boards where links are dumped in batches and nobody cleans them up.
When to ignore and when to disavow
The default is to leave everything alone. Google filters out junk fairly well on its own, and a mass disavow “just in case” hurts more often than it helps.
That’s Google’s own position too. Its help page on disavowing links states plainly that in most cases Google can assess which links to trust without additional guidance, so most sites won’t need this tool. The same page calls disavow an advanced feature that should be used with caution.
Ignore if:
- there are only a few isolated spam links;
- it’s the natural junk that every site picks up;
- they’re links you didn’t build, as long as their volume is small.
Disavow if:
- there’s a manual action for links in Search Console;
- there’s an obvious negative SEO attack underway: a mass influx of toxic donors;
- there was a mass purchase from link marketplaces, after which the profile became clearly manipulative.
The main rule: when in doubt, don’t disavow. Doing nothing is almost always safer than a mistaken mass disavow.
Before disavowing, try the simpler route: if your contractor placed the links or you have access to the site, ask for them to be removed or marked rel=”sponsored”. A removed link is more reliable than a disavowed one, and Google can see your effort if it comes to a reconsideration request.
Disavow instructions (with a sample file)
A disavow file is a list of domains and URLs that you ask Google not to count. It’s uploaded through Google’s Disavow Links tool as a single UTF-8 text file.
The syntax is simple: to disavow a whole domain, add a line domain:example.com; to disavow a specific page, add its full URL. Lines starting with # are comments. Google skips them, and six months from now they’ll remind you why you did any of this.
# Toxic PBN network, disavowed 2026-02
domain:spam-catalog-123.ua
domain:pbn-network-site.net
# individual spam page
https://forum.example.com/spam-thread-457After the upload, Google reprocesses the links during subsequent crawls. That takes weeks, sometimes longer. The file is replaced entirely with each upload, so keep a master version. And remember: a mistaken disavow can’t be rolled back instantly; devalued links don’t regain their weight right away.
Typical mistakes we see in disavow files: disavowing major media and social networks “because there are lots of links from there”, disavowing a URL instead of the domain for a network (a new page on that network will count again), and uploading the file for the wrong property version in Search Console. Read the list through one more time before uploading.
How to avoid picking up harmful links when buying
Cleaning a profile costs more than keeping it clean. Same as the carpet after a house party. A few rules remove most of the risk before you pay:
- Check every donor before placement, not after. Basic indicators are visible in our free donor site checker; review the rest manually.
- Plan anchors in advance. Most links should be branded, naked URLs or generic, with exact-match commercial anchors kept to a handful.
- Keep a steady pace. Hundreds of links in a week after a year of silence look like a purchase, even if each one is fine on its own.
- Demand a report with the URL of every placement. Without it you can neither check quality nor remove problem links.
- Avoid “packages” of thousands of links for pennies. These are almost always automated blasts, which Google explicitly calls spam. Buying a thousand links over a weekend is easy. Explaining to Google where all those new admirers came from is the hard part.
The full list is in our backlink buying checklist.
From our practice
We don’t place links on boards where moderation doesn’t work at all: that’s where spam piles up, and you don’t want to sit next to it. Among the forums in our check that do have external links, 49% are dofollow, 32% nofollow or ugc, 10% mixed and 8% go through a redirect. So a normal forum profile always has a mix of attributes, and we don’t try to artificially make it “100% dofollow”: that kind of uniformity looks suspicious in itself. Every placement goes into a report with its URL, so the client can check at any time where a link sits and in what context.
The site dropped right after buying links: are the links to blame?
Not necessarily. A drop often coincides with a core update, technical issues or growing competition rather than new links. Before you panic and disavow everything, separate a penalty from an update: they’re different diagnoses requiring different actions. The detailed process is laid out in our articles on recovering a site from a penalty and on whether negative SEO exists.
A short sequence: check “Manual actions” in Search Console; match the date of the drop against Google’s official updates; see whether all pages fell or only those the new links pointed to; check the site’s technical health (indexing, robots.txt, speed). Only if everything points to links should you move on to a profile audit.
If your profile is already overloaded with toxic links or the site dropped after a failed link purchase, start with diagnosis: a link profile audit will reveal the real source of the problem, and penalty recovery will restore rankings without an unnecessary disavow. To build backlinks safely, use live topical platforms; you can order crowd links from us. General link building theory is in the core article “What is link building”.
Sources
- Google Search Central: Spam policies for Google web search: definition of link spam
- Google Search Central: Qualify your outbound links to Google: ugc, sponsored and nofollow attributes
- Google Search Central Blog: December 2022 link spam update: SpamBrain and link neutralization
- Google Search Central Blog: March 2024 core update and new spam policies
- Google Search Central: A guide to Google Search ranking systems
- Search Console Help: Disavow links to your site
- Search Console Help: Links report
- Ahrefs: Toxic Backlinks: the difference between spammy, manipulative and “toxic” links
