Most bad backlinks do nothing. Google says its systems already ignore most spammy links, and that most sites never need the disavow tool. That is true, and it is also why the sites that do need it often find out late.
This guide covers how to tell the difference: which links are worth worrying about, how to check your own profile, and how to disavow safely when you have to. It uses a cleanup we did for a client whose link profile was almost entirely bought.
What are toxic backlinks?
"Toxic" is a word SEO tools use, not Google. It describes links that look like an attempt to manipulate rankings: paid links, links from private blog networks, link exchanges at scale, and links stuffed with exact-match anchor text.
Google's term is unnatural links. The distinction matters, because a tool's toxicity score is an estimate made by that tool. Google does not see it, and a high score is not proof of a problem.
Do toxic backlinks actually hurt your rankings?
Usually not. Random low-quality links, such as scraper sites copying your content or spam directories nobody built on purpose, are typically ignored. They earn you nothing and cost you nothing.
The risk is a pattern that looks deliberate. A profile made up mostly of paid links, with the same commercial anchor text repeated across dozens of domains, is the kind of thing that leads to a manual action. Even without a penalty, links Google discounts give the site no authority to rank with.
| Kind of link | Usually a problem? |
|---|---|
| Scraper sites copying your content | No, ignore them |
| Old, low-quality directory listings | Rarely, unless there are hundreds |
| Spam links you did not build | Rarely. Google ignores most of them |
| Links bought from a network or package | Yes, especially at volume |
| Exact-match commercial anchors repeated across many domains | Yes. This is the clearest signal of a link scheme |
| Links from sites hacked to insert them | Yes, if there are many |
What does a toxic link profile look like in practice?
A client site we took over had 165 referring domains. 161 of them carried paid-link signals. They shared one anchor text, "Buy Backlinks Online Cheap", every one pointed at the homepage, and every linking domain had zero authority.
The links came from an inexpensive previous provider. The low fee was not the real cost. Every keyword the site targeted was held back by a profile Google had every reason to distrust.
Three things gave it away, and they are the same three to look for in any profile:
- Proportion: almost every referring domain was suspect, not a handful among many good ones
- Anchor text: one commercial phrase repeated across the profile, unrelated to the business
- Source quality: no linking domain had traffic, authority or real content of its own
Any one of those on its own can be noise. All three together are a link scheme, and the fix had to happen before any new SEO work could start counting.
How do you find toxic backlinks?
Start with the free data and only pay for a tool if the free data suggests a problem.
- Open the Links report in Google Search Console and export the top linking sites. This is Google's own list, so it is the one to trust first
- Check Manual actions in Search Console. A notice about unnatural links settles the question immediately
- Sort the linking sites and look for domains you have never heard of that have nothing to do with your industry or location
- Review the anchor text. Repeated commercial phrases, especially ones you would never use yourself, are the strongest signal
- If the profile is large, use a backlink tool such as Semrush or Ahrefs to speed up the review, then check its flags by hand
Note - Never disavow from a tool's toxic list without opening the sites. Tools flag legitimate local directories, foreign-language news sites and new blogs alongside real spam. Disavowing good links throws away authority you cannot get back quickly.
Should you remove links or disavow them?
Remove them where you can, and disavow what is left. Removal is the cleaner fix, because the link stops existing rather than being discounted.
In practice, removal only works when someone controls the linking site. If a previous provider placed the links, ask them for the list and ask them to take the links down. Network sites built to sell links rarely answer removal requests, which is when the disavow tool earns its place.
When should you use Google's disavow tool?
Google recommends disavowing only when both of these are true: you have a significant number of spammy, artificial or low-quality links pointing to your site, and those links have caused a manual action or are likely to.
- Use it when you have a manual action for unnatural links
- Use it when you know, or find, that links were bought or built through a scheme on your behalf
- Do not use it for a few odd links that appeared on their own
- Do not use it because a tool score went up
- Do not use it to try to explain a traffic drop you have not diagnosed
The client case met the first test easily. 161 of 165 domains is not stray spam. It is a bought profile, and leaving it in place would have meant building new links on top of a foundation Google already distrusted.
How do you create and submit a disavow file?
The file is a plain text list. Getting the format right matters, because the tool does not explain what it ignored.
- Save it as a .txt file in UTF-8 or 7-bit ASCII
- Put one entry per line: either a full URL or a whole domain written as domain:example.com
- Prefer domain-level entries for network sites, since they often link from many pages
- Add notes on lines starting with #, so whoever handles it next knows why each entry is there
- Upload it through the disavow links tool for the correct Search Console property
- Remember that a new upload replaces the old file completely, so always add to the existing list rather than starting over
Keep a copy of every version you upload. If a good link is ever disavowed by mistake, removing it from the file and uploading again is how you undo it.
How long does a disavow take to work?
Weeks, not days. Google applies the file as it recrawls the linking pages, and network sites with little traffic are crawled infrequently. If you have a manual action, submit a reconsideration request after the cleanup and explain what you removed and what you disavowed.
A disavow also does not add anything. It stops bad links counting against you. The site still needs genuine links to rank, which is what the link building strategies that work in 2026 and broken link building cover.
How do you stop it happening again?
Most toxic profiles were bought, not attacked. The prevention is mostly about who you hire.
- Ask any SEO provider for examples of links built in the last six months, and open them
- Treat link packages priced per link as a warning, because they almost always come from networks
- Keep ownership of your own Search Console property, so you can see new links as they appear
- Review your linking sites every quarter, which takes minutes when nothing is wrong
Our link building and digital PR service starts with a review of your existing backlink profile before building anything new. To check where your site stands first, run the free AI audit.
