Disavowing bad links and recovering from negative SEO

You check your backlinks one day and notice something wrong. In the past week, 50 new links appeared from obvious spam sites—casino domains, pharmacy sites, and auto-generated directories. You didn't ask for these. You didn't approve them. But they are there, pointing to your site.

Your first thought: "Will this hurt my rankings?" Your second thought: "How do I get them off my site?" The bad news is you cannot remove links other people put on their sites. You do not own those links. The good news is you can tell Google to ignore them.

Disavowing links means telling Google: "I do not endorse these links, and I do not want them counted as votes for my site." It's a safety tool for when your backlink profile gets polluted—either through your own mistakes or someone deliberately trying to harm you.

When to disavow links

Not every bad link needs disavowal. Some low-quality links are harmless—Google's algorithm is smart enough to ignore them without your help. Disavowal is for when you have a pattern of clearly unnatural, harmful links.

Disavow if you have many links from obvious spam

If 50+ links suddenly appear from poker sites, casino sites, pharmacy sites, or other obvious spam directories, you should disavow them. These are not real endorsements. Someone built them deliberately, either through a cheap link-buying service or as a negative SEO attack.

Disavow if you bought links and now regret it

If you bought links from a service, or participated in a link scheme, disavow them as soon as possible. The sooner you clean up your profile, the faster you can recover from the penalty.

Disavow if you have links from completely irrelevant sites

A gardening supply website linking to your dental practice site is suspicious. If you have dozens of links from completely unrelated industries, that is a pattern worth disavowing.

Disavow if you notice a sudden spike from new domains

If you suddenly get 100+ links from new, low-authority domains in a short period, and you didn't launch any campaigns, something's wrong. Disavow those links.

When NOT to disavow

Disavowing can backfire if you overdo it. Be selective.

Don't disavow a small number of low-quality links. A few bad links are not worth the effort. Google's algorithm filters them out automatically. Disavowing is for patterns, not individual outliers.

Don't disavow competitors' links just because you disagree with them. You cannot disavow your way to better rankings than competitors. Disavowing is a defensive tool, not an offensive one.

Don't disavow legitimate but underperforming links. A link from a small local directory might be low-authority, but it is not spam. Small, legitimate sites are fine. Only disavow obvious spam.

How to identify which links to disavow

You need a system. Open your backlink monitoring tool (Ahrefs, SEMrush, or Google Search Console) and pull a report of all backlinks. Sort by domain authority (lowest first) and quality rating.

Red flags for spam links

Domain authority below 10 — not always spam, but newer, low-authority sites are suspect.

Sites in unrelated industries — A link from a casino site to your coaching business is a red flag.

Automatic or scraped content — Sites that look like auto-generated directories (thousands of low-quality listings) are spam.

Links with overstuffed anchor text — If the anchor text is unnaturally keyword-dense ("best fitness coaching online los angeles for beginners"), that is artificial.

Private blog networks or known spam domains — If your tool flags a site as part of a PBN (private blog network) or known spam network, disavow it.

Links from sites that have been penalized — Some tools flag sites that Google has previously penalized. These are worth disavowing.

Examining individual links

For questionable links, do manual review. Visit the site. Does it look legitimate? Is it a real business or publication? Can you tell why they'd link to you? Or does it look like an auto-generated spam directory?

For a site like projectmanagement.com, if you get a link from a site called "Top Business Software Tools" that lists thousands of unrelated software products with auto-generated descriptions, that is spam. If you get a link from a legitimate business publication in your industry, that is legitimate even if their domain authority is lower.

Trust your judgment. Does the link look like it came from a real person who found your site valuable? Or does it look like it came from an automated spam service?

How to use Google's disavow tool

The disavow tool lives in Google Search Console. It's straightforward to use:

1. Create a disavow file. It's a simple text file, one domain per line. If you want to disavow a specific URL (not the whole domain), add the URL. Format is "domain:example.com" for domains or "http://example.com/page" for specific URLs.

2. Upload it to Google Search Console. Go to Search Console, find "Links," then "Disavow Links." Upload your file.

3. Google processes it. Google takes a few days to process the disavow file. After that, those links are ignored in your ranking calculations.

That's it. You do not remove anything. You just tell Google to ignore those links.

The disavow file format

Keep it simple. One domain per line:

domain:casino-spam.com
domain:pharmacy-ads.net
domain:auto-generated-directory.io
http://scraped-content-site.com/page-about-businesses

Comments start with #:

# Disavowed 2026-04-09
# Reason: Spam links from negative SEO attack
domain:attacksite-1.com
domain:attacksite-2.com

Google's disavow tool has clear documentation on formatting. Follow it exactly. A malformed file will not process.

Recovery from negative SEO attacks

Negative SEO is when someone builds bad links to your site to hurt your rankings. It's rare, but it happens. If you suspect negative SEO:

Step 1: Audit your backlinks immediately

Pull a full backlink report. Look for patterns. Are there dozens of new links from obvious spam sites in a short period? From sites you never contacted? From competitors' backlink lists?

Step 2: Document the attack

Take screenshots. Note the domains, the timing, and the pattern. This documentation helps if you need to request manual review from Google.

Step 3: Disavow the bad links

Create a disavow file with all suspicious domains. Upload it to Google Search Console. Google processes it within days.

Step 4: Monitor for continued attacks

Set up alerts in your backlink monitoring tool. If more spam links appear, disavow them immediately. If the pattern continues and links keep appearing from new spam sites, you have a real problem.

Step 5: Consider requesting manual review

If your rankings dropped significantly after the negative SEO attack, you can request manual review from Google. Go to Search Console, select "Manual Actions," and click "Request a Review." Explain that your site was targeted by negative SEO, show that you've disavowed the links, and ask Google to review your site.

Google will not always approve these requests. But if your site was penalized because of someone else's attack (not your own mistakes), there's a chance they'll lift the penalty.

Recovery timeline

After you disavow bad links, how long until your rankings recover?

Algorithmic penalties (Google's algorithm automatically downranking you due to bad links): Recovery usually takes 2-6 months after you've disavowed the links. Your next ranking update will incorporate the disavow. Subsequent updates will further improve your profile as new legitimate links accumulate.

Manual penalties (Google's spam team manually penalizing your site): Recovery takes longer. After you disavow and request manual review, it can take 2-8 weeks for Google to review and approve. Even after approval, your rankings might take a few weeks to recover fully.

During recovery, focus on building legitimate links. The sooner you replace bad links with good ones, the faster your site recovers.

Protecting against future attacks

If you've been hit with negative SEO once, you are vulnerable to it again. Protect yourself:

Monitor constantly. Weekly check-ins on your backlink count catch attacks early. Early disavowal prevents penalties from taking full effect.

Build a clean link profile naturally. The more legitimate, diverse links you have, the less impact a few bad links will have. A site with 200 legitimate links getting 50 spam links will not be hurt as much as a site with only 50 legitimate links getting 50 spam links.

Set up alerts for sudden spikes. Your monitoring tool can notify you if backlinks spike 20%+ in a week. Jump on it immediately.

Use Google Search Console to verify links. When you are first building links, monitor what's showing up in Search Console. The earlier you catch spam, the better.

WEMASY and link cleanup

Your WEMASY site comes with good security and clean infrastructure. That helps protect against certain attacks. But link security comes down to vigilance and monitoring, not platform features. Use the disavow tool when you need to, keep monitoring your profile, and focus on building legitimate links from the start.

When you've been through link cleanup on a WEMASY site, your next focus is on quality. Every new link you earn should be from a legitimate, relevant source. This compounds—each legitimate link makes your site more resistant to attack.

Frequently asked questions