Toxic backlinks: when to disavow and when to leave them alone

Most of the links your SEO tool calls toxic are already doing nothing to you. Google has spent more than a decade building systems that spot paid, manipulative and spammy links and strip their value out before they touch your rankings. The usual toxic backlinks panic goes like this: a tool shows a red score, someone exports 900 domains, uploads a disavow file, and months later the site has lost a handful of real editorial mentions and gained nothing. Nothing was broken in the first place.

This piece takes a clear position. Disavowing everything is the wrong default. The disavow tool is a narrow repair for a specific situation, usually a manual action from Google. The rest of the time, the right move with a toxic backlink is to leave it alone and spend your attention on the patterns that actually matter.

What “toxic” means, and who decided

“Toxic” is not a Google term. It’s a label that third-party tools attach to links. Semrush calls its figure a Toxic Score, Moz uses a Spam Score, and other platforms run their own classifiers. Each one looks at a mix of signals: anchor text that repeats the same commercial phrase, links from networks that appear across thousands of sites, thin or auto-generated pages, unusual country and TLD patterns, and footprints left by known link vendors.

Those signals are useful for triage. They are not verdicts. A tool is estimating what Google might think, using its own crawl, which covers only a slice of the web. Two tools can score the same domain very differently, and neither one knows whether your site is under a penalty.

So the question to ask about any flagged link isn’t “is this toxic?” It’s narrower: does this link give Google a reason to treat my site as manipulative, and is there enough of it to matter? Almost every link on a typical toxic list fails the second half of that question.

Why Google discounts most spam links on its own

Google’s link evaluation has been largely automated for years. Penguin became part of the core ranking system in 2016 with version 4.0, runs continuously, and its job is to devalue links that look manipulative rather than to punish the sites they point at. Google’s spam detection also leans on SpamBrain, its AI-based spam system. You don’t need the internals to draw the practical conclusion. A link from a spam network usually has its value removed quietly, long before you ever see it in a tool.

The mechanism explains where the real risk sits. Spam is cheap to produce and repetitive by nature. A link farm generates thousands of near-identical pages, each with a few outbound links, most using the same anchor. One of those pages tells Google almost nothing. Several thousand of them pointing at the same commercial site with the same phrase form a pattern that is easy to recognize at scale. Google doesn’t need to judge each link individually. It judges the pattern.

That’s why a single toxic link is almost never your problem. Look at what a typical flagged link actually is: a comment on a dead blog, a scraped copy of your article on a content farm, a forum signature from a site that stopped posting years ago, or a directory listing from a network that carries 3,000 unrelated businesses. None of these is an endorsement, and none was written for a human reader. Google was built to see past them, and in most cases it does.

Negative SEO deserves a sentence too. The disavow tool arrived in 2012, partly in response to fears that competitors could sink a site with bought links. Those attacks exist, but they are rarer and less effective than many posts suggest, and the same pattern logic applies. One spammy link pointed at you does very little. A sustained, growing flood with the same footprint is a different story, and we’ll come back to it.

There’s a flip side to this, and it matters for the next section. A link that Google discounts is not a link that’s gone. If your links are indexed but still not moving anything, that’s a different problem, covered in our piece on why new backlinks aren’t moving rankings. Toxicity and indexing are separate questions, and mixing them up is how teams end up disavowing the wrong things.

Which toxic backlinks are worth acting on

Google’s own documentation is more restrained about the disavow tool than much of the SEO industry. Paraphrasing its guidance: most sites don’t need it. You should use it only when you have a substantial number of spammy, artificial or low-quality links pointing at your site, and those links have caused, or appear likely to cause, a manual action.

The phrase that matters there is manual action. It means a human reviewer at Google looked at your site and applied a penalty. You’ll see it in the Manual actions report in Search Console, under categories such as “unnatural links to your site” or “unnatural links from your site.” If that notice isn’t there, a disavow file is almost certainly not the lever you need.

Outside a manual action, three patterns are worth taking seriously, because they look like manipulation to a system that is good at spotting patterns:

• Links you bought, or a vendor bought for you. Paid placements at volume, sitewide footer links sold in bulk, and guest post networks that accept anything are the real exposure. If an agency or an earlier vendor did this, you can often find it by lining up the dates of your link growth against their invoices.
• Anchor text that clusters. When 40 percent of your links use one exact-match commercial phrase, you have a profile no organic audience would produce. A natural profile is messy. Brand names, bare URLs, “this guide” and “here” tend to dominate, and that mess is a sign of real editorial linking.
• Sudden bursts from one footprint. Hundreds of links from the same CMS template, the same network or the same hosting neighborhood arriving in one month is a pattern worth investigating. Look at when the links appeared, not only at what they are.

Here is how a manual action case tends to unfold. The numbers below are hypothetical, but the shape is typical. Take a B2B software site that receives an “unnatural links to your site” notice. Its audit shows 2,300 referring domains. Working back through old invoices, the team traces about 140 of them to a guest post network bought in 2023, plus around 60 sitewide footer links from a link vendor. They email the site owners. Roughly 70 remove the link or nofollow it. The rest never reply.

The disavow file then lists the confirmed network domains as domain: entries, and the non-responding links by full URL where a domain hosted both spam and legitimate pages. The reconsideration request describes the outreach, with dates and outcomes. The point isn’t the exact numbers. The file contains only links the team had good reason to consider manipulative, and the reviewer can see proof of effort.

A decision table for common situations

The decision path is shorter than most audits make it look. The disavow step is last, and most flagged links never reach it.

Running a disavow audit without overreaching

When you do need to act, the audit should be boring. Work through it in this order.

1. Start in Search Console, not in your SEO tool. Check the Manual actions report first. If it’s empty, you’re in ignore-and-monitor territory, and the rest of this list is about watching, not uploading.
2. Pull referring domains from two sources. Search Console’s Links report shows links Google has found. A third-party index shows others. Merge them so you’re working from a full list rather than one vendor’s view.
3. Sort by pattern, not by score. Group links by anchor text, by network, by CMS template and by the month they appeared. Clusters are where the evidence lives.
4. Open real pages. For every cluster you’re considering, look at ten examples. Is the page real? Is the link inside content? Would a person plausibly click it? A score can’t answer those questions, and you can.
5. Check your best links before you decide. Cross-reference the candidate list against the domains that send traffic or carry editorial mentions. If any of your strongest referring domains appears on it, stop and re-check.
6. Try removal before disavowing. For a manual action, contact the site owners, keep a log with dates and responses, and only disavow what remains.
7. Build the file deliberately. The disavow file is plain text, UTF-8 or 7-bit ASCII, one entry per line. Lines starting with # are comments. A domain: line disavows every link from that domain, and a full URL disavows one page.

A finished file looks like this:

# Guest post network, bought 2023, removal requests unanswered
domain:spam-network.example
# Mixed site: only this thread is spam, the rest is legitimate
https://forum.example/threads/12345

Each upload replaces the previous file for the property. That means a file you wrote quickly last spring keeps applying to your links whether or not you remember what’s in it. Keep the file in version control, put a dated comment on every entry, and review it every quarter. If an entry no longer has a reason written next to it, remove it.

Why over-disavowing costs more than it saves

A disavow tells Google to discount the links you list. If Google was already discounting a link, the disavow changes nothing. If the link was real, the disavow removes value you earned. Every unnecessary line is a bet that can only lose.

The mistakes that cause this are predictable:

• Disavowing by score. A domain scoring 70 on a toxicity metric might be a niche blog with an unusual TLD and a thin archive, which is exactly the kind of site that gives you a genuine editorial mention in a specialist field. The score measures resemblance to spam. It doesn’t measure whether a human chose to link to you.
• Domain-level entries on large platforms. A domain: line for a big forum or Q&A site removes every link from it, including the thread where someone recommended your product. Use full URLs whenever a domain hosts both spam and legitimate content.
• Panic disavows after a ranking drop. Rankings move constantly. A disavow filed in response to a traffic dip removes good links while the real cause sits in the content, the page’s intent or a technical problem. You’ll see no recovery, and you’ll have less to work with next time.
• Treating the list as the job. A team that spends a month cleaning a link list it didn’t need hasn’t spent that month on the content or outreach that would have moved rankings.

The honest wrap-up

Toxic backlinks are mostly a distraction. Google discounts the bulk of spam by itself, and the links that can actually hurt you are usually patterns you created or paid for. The disavow tool is a precise instrument for manual actions and for sustained, evidenced clusters, and a blunt one everywhere else.

Keep the process dull. Check the manual actions report, look for patterns instead of scores, try removal before disavowing, disavow narrowly, and document everything. Then put your effort where links come from in the first place: relevant pages, editorial mentions and placements a reader would actually click. Our piece on relevance beating volume makes the longer case for that.

That’s the thinking behind OptiLink. The goal is to earn relevant placements inside real content, check that each one is indexed and dofollow, and track them live, so the links you build are the ones worth keeping and you aren’t sorting through a list of doubtful ones later. If you want to see how that works on your own site, start with how OptiLink works on the homepage.

Keep reading

Playbook

Anchor text optimization without tripping a filter

A hundred random links can do less than five relevant ones. Here's what makes a backlink pass real ranking value in 2026 — and what makes it worthless or worse.

Sofia Meyer September 24, 20262 min read

Playbook

Broken link building, step by step: find, fix, and pitch

A hundred random links can do less than five relevant ones. Here's what makes a backlink pass real ranking value in 2026 — and what makes it worthless or worse.

Sofia Meyer October 9, 20262 min read

Playbook

Competitor backlink analysis that finds real opportunities

A hundred random links can do less than five relevant ones. Here's what makes a backlink pass real ranking value in 2026 — and what makes it worthless or worse.

Sofia Meyer September 26, 20262 min read

Explainer

Dofollow vs nofollow in 2026: what still passes value

The link attributes changed, Google's treatment changed, and a lot of advice is out of date. Here's what dofollow, nofollow, sponsored and ugc actually do now.

The OptiLink Team October 10, 20262 min read