Most sites that come to me about a link penalty do not have one. Since Penguin 4.0 in 2016, Google generally ignores links it does not trust rather than penalising the site receiving them. That means a spam link usually stops helping instead of actively hurting. A genuine link problem exists in two situations: a manual action for unnatural links, or a site whose rankings were built on links Google has now discounted. Everything else attributed to links is normally content, technical or click displacement, and confirming which comes before any cleanup.
Do you actually have a link problem?
This page starts with the question because the answer is no more often than the industry admits, and disavowing on a wrong diagnosis costs real link value that takes weeks to restore.
| Situation | Link problem? | Measurement (how to confirm) | What it actually needs |
|---|---|---|---|
| Manual action for unnatural links | Yes, definitively | The Manual Actions report names a link issue | Cleanup, disavow, then a reconsideration request |
| You or an agency bought or placed links at scale | Usually yes | Invoices, outreach records or a link-building contract exist | Removal where possible, disavow for the rest |
| Drop aligns with a link spam update | Possibly | Drop date sits inside a confirmed link spam rollout | Audit first, act only on what you can justify |
| A tool flagged toxic links | No | Toxicity scores are vendor estimates, not Google signals | Ignore the score, review by hand only if concerned |
| Drop aligns with a core update | No | Site-wide loss inside a core rollout window | Content quality work, not link work |
| Spammy links you never built appeared | No | Random foreign or scraper domains linking to you | Nothing. This is normal and Google ignores it |
The fourth row is the most expensive misdiagnosis in this category. Third-party toxicity scores are useful for sorting a large profile into a review order, but they are one vendor's opinion. Disavowing on the score alone routinely removes legitimate links from directories, local press and small niche sites that were doing real work.
Confirm the cause before committing. Run your drop date through the date checker and check specifically whether it aligns with a link spam update rather than any update. If nothing matches, work through the seven causes of a drop with no update first.
The three link scenarios, and how each is handled
1. Manual action for unnatural links
The clearest case and the only one with a defined resolution path. A human reviewer has decided your link profile violates the link spam policy, and the demotion lifts when a reviewer accepts that you have fixed it.
- Document genuine removal attempts before disavowing. Why: Reviewers look for evidence of effort. A disavow file with no removal history reads as the minimum possible action.
- Group the disavow file by reason with dated comments. Why: Those comments become the evidence in the reconsideration request. The disavow builder formats this correctly.
- Explain what happened and what changed. Why: The reconsideration request guide covers what a submission needs. Vague requests get rejected and each rejection adds weeks.
2. Algorithmic link devaluation
No notice, no message, and nothing to appeal. Google discounted links that were carrying the site, so rankings fell without anything being penalised. The December 2022 link spam update did this at scale, neutralising both the spam links and the credit they had passed.
This is the hardest scenario to accept because the fix is counterintuitive. There is nothing to remove. The rankings depended on support that no longer counts, so the work is earning links that do count, not deleting the ones that stopped working.
3. Negative SEO
Genuinely rare, and far more often suspected than confirmed. Someone points a large volume of low-quality links at your site hoping to trigger a penalty.
- Check whether the links actually correlate with your drop. Why: A spike in junk links is normal background noise for most sites and usually has no ranking effect at all.
- Confirm no manual action exists. Why: If Google had acted on the links, there would be a notice. Without one, the links are almost certainly being ignored.
- Disavow only if the volume is genuinely extreme and coincides with the drop. Why: Google's systems are built to handle this specific attack, which is why the disavow tool is described as unnecessary for most sites.
The audit method
- Pull the full referring domain list from Search Console plus one third-party source. Why: Search Console is Google's own view, which is the one that matters, but it samples. A second source fills the gaps.
- Sort by what you know, not by what a tool scored. Why: Start with domains you or an agency placed links on. That set is where the actual policy risk sits.
- Apply the reviewer test to each questionable link. Why: Would you be comfortable explaining to a Google reviewer how this link came about? That is the real standard, and it is a faster filter than any metric.
- Check referring domain trend over twelve months. Why: Steady link loss produces a gradual decline that gets misattributed to an algorithm event. That needs link earning, not cleanup.
- Leave out anything you are unsure about. Why: An unnecessary disavow costs a real link permanently. A missed spam link is probably already being ignored.
Realistic timelines
| Scenario | Work required | Measurement (time to visible change) |
|---|---|---|
| Manual action | Cleanup, disavow, reconsideration request | Days to four weeks after the request is approved |
| Algorithmic devaluation | Earning links that count | Months, because it is growth work rather than repair |
| Disavow processing | Upload and wait | Weeks to months, as Google recrawls each linking page |
| Suspected negative SEO | Usually monitoring only | No action needed in most cases |
Link work is faster than core update recovery because link evaluation has run in real time since Penguin 4.0, rather than waiting for a scheduled refresh. Full context on that shift is in the Google Penguin update, and comparative timelines are in how long recovery takes.
Link penalty recovery FAQ
Do I need to disavow links in 2026?
Only with a manual action for unnatural links, or a known history of bought or scaled link building you cannot get removed. Google generally ignores untrusted links rather than penalising you for them, so most sites never need a disavow file.
Can bad links from other sites hurt my rankings?
Rarely. Since Penguin 4.0 in 2016, Google devalues links it does not trust instead of demoting the target site. Random spam links pointing at your site are normal and usually have no effect.
How do I know if I have a link penalty?
Check the Manual Actions report in Search Console. If it is empty, there is no link penalty in Google's sense, and any drop is algorithmic, technical or competitive.
How long does link recovery take?
A manual action can clear within days to four weeks of an approved reconsideration request. Algorithmic devaluation has no fixed timeline because the work is earning replacement links rather than removing old ones.
Should I use a toxicity score to decide what to disavow?
No. Toxicity scores are vendor estimates rather than Google signals. Use them to prioritise a manual review if your profile is large, never as the decision itself.
Before you disavow anything
Send your Search Console access. Within 48 hours I will tell you whether links are involved at all, and if they are, which of the three scenarios you are in. Most of these end with me confirming that links are not the problem. Free, no obligation.
Get free recovery audit