Toxic Backlinks and Negative SEO: Should You Disavow?

A tool tells you 47 of your backlinks are toxic. A red gauge. A score of 78 out of 100. Then an agency offers to clean it up for a monthly fee.

Notice who produced that number: the company whose product only sells if you believe toxic links are dangerous. Google's position is public, dated, and much less exciting than the dashboard. Here are the four questions that decide whether you have a real problem — and three of them end in do nothing.

Do toxic backlinks actually hurt you, or does Google just ignore them?

Google ignores most of them. Its official disavow documentation says: In most cases, Google can assess which links to trust without additional guidance, so most sites will not need to use this tool.

The word that matters in Google's link-spam announcements is neutralize, not punish. In the December 2022 link spam update, Google said it was using SpamBrain to 'neutralize the impact of unnatural links on search results,' and that 'our algorithms and manual actions aim to nullify these unnatural links at scale.'

Nullify means the link stops passing credit. It does not mean your site gets a penalty for someone else's spam. Google's own 2022 webspam report says SpamBrain detected 50 times more link spam sites than the previous link spam update, and that more than 99% of visits from Search were spam-free. The filtering happens on their side, automatically, whether you disavow or not.

So the honest default for a service business with a normal link profile — some directories, a chamber of commerce listing, a few supplier pages, a stray scraper site — is that the spam is already discounted and there is nothing to clean.

Do you have a manual action — or just a scary number in a tool?

Check in 30 seconds: Search Console, left sidebar, Security & Manual Actions, then Manual actions. Google's manual actions report documentation states that if your site has no manual actions, 'you'll see a green check mark and an appropriate message.'

A manual action is issued 'when a human reviewer at Google has determined that pages on the site are not compliant with Google's spam policies.' If that happened, Google tells you twice — in the report and in the Search Console message center. There is no secret penalty you have to hire someone to detect.

Green check mark plus a tool screaming about toxicity equals a tool problem, not a Google problem. If your rankings are flat and the manual actions report is clean, your issue is almost certainly on the page, not in the link profile — start with a technical and content audit instead.

Did you (or a past agency) actually buy links?

This is the one branch where disavow is genuinely on the table before a penalty lands. Google's disavow rule has two conditions that must both be true: you have 'a considerable number of spammy, artificial, or low-quality links pointing to your site,' AND 'the links have caused a manual action, or likely will cause a manual action.'

'Likely will' is the escape hatch for people who know what they bought. If a previous agency ran a monthly blogger-outreach package, or you bought a 'DA 50+ guest post bundle' on a marketplace, those links are link spam under Google's spam policies — which name paid links, advertorials, low-quality directory links, and links embedded in widgets or footers.

Go get the invoices. Disavow the domains you can prove you paid for. Do not disavow anything else. If you are not sure what a real link program looks like after that, our take is in link building for service businesses: fewer links, from places a human would actually find you.

Did your rankings drop on a date that matches a core update?

Before you blame links, check the calendar against Google's Search Status Dashboard ranking history, which lists every ranking update with a start date and a rollout duration. The March 2026 core update started 27 March 2026 and took 12 days and 4 hours to roll out. The December 2025 core update started 11 December 2025 and ran 18 days and 2 hours.

That shape matters. Core updates roll out over one to three weeks, so a core-update loss usually looks like a slide across many pages and many keywords. If your traffic slid during a listed rollout window, links are not your story — the content evaluation is. Our triage order for that is in why your service business isn't ranking.

A drop with no update on the dashboard, no manual action, and one page affected is usually something dumber and more fixable: a noindex tag shipped by a developer, a canonical pointing at a staging URL, a redirect chain. Those show up in a technical SEO audit, not in a toxicity score.

Was this a negative SEO attack — and what would that even look like?

Competitor sabotage is the last hypothesis, not the first, and it has a very specific fingerprint: a step-function spike in referring domains over days, not a gradual drift over months. Real evidence is a shape, not a feeling.

• Step function, not slope. Referring domains jump from, say, 40 to 900 inside two weeks in the Search Console Links report. A slow climb is just the internet.
• Anchors you would never write. Foreign-language anchors, pharma, casino, or adult terms pointing at your service pages.
• One target. The spam concentrates on a single money page or a single keyword you compete on.
• Mirrored junk. The same scraped page appears on dozens of throwaway domains — a link network, not a mistake.

Even then, the documented answer is not panic. Google's stated aim is to nullify unnatural links at scale, and the disavow tool exists so you can add a line of defense if a manual action is issued or looks likely. Document the spike with a dated export, keep publishing, and check the manual actions report weekly. If nothing lands in 90 days, nothing is going to.

When should you actually use the disavow tool?

Exactly one situation makes disavow mandatory: an 'Unnatural links to your site' manual action in Search Console. Google's fix sequence there is specific — download your links from Search Console, contact site owners to remove or nofollow the bad ones, and only then disavow what you could not get removed, before filing a reconsideration request.

Verdict: three of those four rows end in 'do nothing to your link profile.' And disavow is not free to get wrong. Google calls it 'an advanced feature' that 'if used incorrectly... can potentially harm your site's performance in Google Search results.' Google also warns that blindly adding every backlink to a disavow file 'is not considered a good-faith effort, and will not be enough to make your reconsideration request successful.' A bulk-uploaded 'toxic' list can throw away real links that were earning you rankings.

Why does every backlink tool sell you a toxicity score?

Because the score is a product, and fear is its distribution channel. Semrush's own documentation is refreshingly clear that the number is theirs, not Google's: there are '45+ different toxic markers' behind the Toxic Score, and the tool 'takes into account each toxic marker's frequency and importance' using 'machine learning and user feedback.'

Read the published marker list and the fear drains out of it. Some markers are reasonable — mirror pages, link networks sharing an AdSense ID, malicious pages. Others are things that describe half the honest web:

• Long domain name — 'the number of characters in the linking domain name is above average.'
• Numerals in domain name — above-average digits in the linking domain.
• No CSS & JS — the linking page doesn't use CSS and JavaScript markup.
• Link in footer — a footer link, which is how most partner and supplier links are placed.
• Community error — 'several Semrush users have already marked links from this domain as harmful and added it to their Disavow file.' Other customers' fear is an input to your score.

None of this is Google data. It cannot be — Google does not publish per-link trust scores to anyone. A vendor score is a guess about a guess, and the vendor's incentive is for the guess to look alarming. That is not a conspiracy, it's a business model. Same reason every page ranking above this one wants you to believe your links are poisoning you.

What should you cancel, and what should you do with the money instead?

Cancel any recurring line item that says 'toxic link cleanup,' 'backlink monitoring,' or 'disavow management' if your manual actions report shows a green check mark. You are paying every month to clean a profile Google already discounts for free.

Point that budget at the things that actually move a service business: pages that answer the questions your buyers type, a site that loads fast on a phone in a truck, and tracking that ties a call back to a keyword. That is what we build, and it is also why we run a 90-day kill switch — a channel with no qualified leads in 90 days gets cut, not re-explained in a PDF.

If you inherited a mess and genuinely can't tell whether you have a penalty, a technical fault, or a content gap, get a real SEO audit that checks the manual actions report, indexation, and the pages themselves — not a toxicity gauge. Get my free audit and we'll tell you which of the four branches you're actually on, including the ones where the answer is 'do nothing and keep your money.'