Toxic Backlinks: How to Detect Them and When to Disavow

Few topics in SEO produce more unnecessary anxiety than toxic backlinks. Backlink tools flag hundreds of "toxic" domains, site owners panic, and a large disavow file gets uploaded that, in the best case, does nothing and, in the worst case, throws away links that were helping.

This guide takes a more accurate view. Google has said for years that its systems ignore most spammy links automatically. The links that can genuinely hurt you are a narrower set, usually ones that you, a previous agency or a previous owner built on purpose. Here is how to find them and what to do about them.

How Google handles spammy links today

Three facts frame everything else:

1. Google ignores most low-quality links. Its link spam systems, including the machine-learning system it calls SpamBrain, are designed to identify spammy links and neutralize them, so they pass no value in either direction. Random scraper sites and junk directories linking to you are typically just discounted.
2. Manual actions still exist. If Google's reviewers find a pattern of unnatural links built to manipulate rankings, they can apply a manual action for unnatural links to your site. This appears in Search Console under Security & Manual Actions > Manual actions.
3. The disavow tool is for specific situations. Google's own documentation describes it as an advanced feature, to be used when you have a significant number of spammy, artificial or low-quality links pointing to your site and those links have caused, or are likely to cause, a manual action.

The practical conclusion: you do not need to disavow every link a tool flags. You need to check for manual actions, and look for evidence of deliberate link schemes.

Step 1: Check for a manual action first

Open Search Console and go to Manual actions. There are two outcomes:

• "No issues detected." You have no manual action. Any link cleanup is optional and preventive. Keep reading, but be conservative.
• A manual action for unnatural links. This is the case the disavow tool was built for. The notice tells you whether it affects links to your site or links from your site, and whether the action is site-wide or partial.

If your traffic dropped and there is no manual action, the cause is almost certainly something else: an algorithm update affecting content quality, a technical problem, or competitors improving. A technical SEO audit will tell you more than a backlink audit in that situation.

Step 2: Export your backlink data

Use more than one source, because none of them is complete:

In Search Console, open Links, then Top linking sites > More, and use Export external links to download both the latest links and a larger sample. Merge everything into one spreadsheet, deduplicated at the domain level.

Your own records are often the most valuable source. If a previous agency bought links, their reports tell you exactly where to look.

Step 3: Triage at the domain level

Reviewing thousands of individual URLs is not practical. Group by referring domain and sort into three buckets.

Bucket 1: Normal links, ignore

• Links from real businesses, publications, blogs, forums and directories that people use.
• Scraper sites that copy content, including your links, automatically.
• Random low-quality sites with no pattern linking to many unrelated sites.
• Links with nofollow, sponsored or ugc attributes. These already tell Google not to pass signals; see robots.txt vs noindex vs nofollow for how those attributes work.

This bucket will be most of your profile. Leave it alone.

Bucket 2: Suspicious, review manually

• Sites with no real audience that publish thin articles on every topic, each with outbound links.
• Unusual clusters: many domains on the same theme, same template and same hosting, all linking to you.
• Sudden spikes of new referring domains you did not earn.

Bucket 3: Link scheme patterns, action likely needed

• Paid links that pass signals (no sponsored or nofollow), especially on sites that openly sell "guest posts" or "link insertions".
• Private blog networks: groups of sites built or bought to link to the same money sites.
• Exact-match commercial anchor text on a large share of links, such as "cheap car insurance quotes" repeated across dozens of domains.
• Site-wide footer or sidebar links on unrelated sites, often from old widget or theme deals.
• Large-scale link exchanges ("link to me and I will link to you") done for ranking purposes.
• Links from hacked pages or injected spam that you did not place, if they show a pattern of targeting your site.

Step 4: Recognize the patterns that matter

The question to ask for every bucket 3 domain is not "is this site low quality?" It is "was this link placed to manipulate rankings, and would a reviewer conclude that?"

On negative SEO (someone deliberately pointing spam links at your site to harm it): Google has stated repeatedly that its systems are designed to ignore this kind of attack. It does happen, but in most cases the spam is simply discounted. Monitor it; do not panic.

Step 5: Remove what you can

For links you or someone acting for you placed, removal is better than disavowal. It is a cleaner fix, and if you have a manual action, reviewers want to see a genuine effort to clean up.

1. Contact the site owner or the vendor you paid. Ask for removal, or for the link to be marked rel="sponsored".
2. Keep a log: domain, URL, date contacted, contact method, response.
3. For sites you control (old microsites, a former network), remove the links directly or add nofollow.

Do not pay for link removal if it can be avoided, and do not spend weeks chasing hundreds of unreachable spam domains. That is what disavow is for.

Step 6: Build and upload a disavow file, only if needed

Use disavow when you have a manual action, or when you have clear evidence of a large link scheme you cannot clean up by removal. The file is a plain text file, UTF-8 or 7-bit ASCII, one entry per line:

# Paid guest post network bought by previous agency, 2022.
# Removal requested 2026-02-03, no response.
domain:example-guestposts.net
domain:best-seo-articles.example
domain:pbn-site-one.example

# Individual pages where the rest of the site is fine
https://news-blog.example/2021/05/top-insurance-tips.html

Rules worth knowing:

• domain: disavows every link from that domain, including subdomains. Prefer it for spam sites; disavowing single URLs on a spam domain usually misses links.
• Lines starting with # are comments and are ignored. Use them to document why each entry exists.
• Each upload replaces the previous file for that property. Always download the existing file, edit it, and upload the complete updated version.
• Google documents size limits on the file (2 MB and 100,000 lines), which is far more than a legitimate cleanup needs.
• Disavow takes effect gradually as Google recrawls the linking pages, which can take weeks or longer.

Upload it through the disavow links tool for the correct Search Console property.

If you have a manual action

After cleanup and disavowal, submit a reconsideration request from the Manual actions report. Explain what happened, what you removed, what you disavowed, and what you changed so it does not happen again. Attach or link to your removal log. Vague requests are usually rejected.

Prevent the problem from coming back

• Do not buy links that pass signals. Paid placements must use rel="sponsored" or nofollow.
• Audit any link building vendor's work before paying, and ask for a list of every placement.
• Review new referring domains monthly in Search Console's Links report. Unusual spikes deserve a look.
• Earn links with things people want to reference: original data, tools, genuinely useful guides. A competitor SEO gap analysis is a good way to find content worth building.

If you want a broader check of your site alongside your link profile, our fixed-price audits cover technical, content and link issues in a single report.

Summary

• Google ignores most spammy links automatically. A long list of "toxic" links in a third-party tool is not, by itself, a problem.
• Check Search Console's Manual actions report first. A manual action for unnatural links is the main situation the disavow tool is designed for.
• Focus on deliberate link schemes: paid followed links, private blog networks, link exchanges and manipulative anchor text.
• Remove links you can, disavow at the domain level what you cannot, and document every decision.
• Disavow conservatively. It neutralizes risk; it never adds ranking value.