What 'toxic' actually means
A genuinely harmful link is one that connects your site to a manipulation pattern: paid placements without proper attributes, link networks and PBNs, mass-produced guest posts with money anchors, comment and forum spam campaigns done in your name, or link exchanges at scale. What these have in common is intent that's attributable to you. That's different from random spam — scraper sites, junk directories, and weird foreign-language pages link to every site on the internet. Google's systems see that background radiation on every domain and have every incentive to discount rather than punish it, and Google has publicly said its systems ignore most such links.
Links that can genuinely hurt you
- Links you paid for that pass ranking credit — placements with no rel="sponsored"/nofollow, sold in lists or bulk, on sites built to sell them.
- Private blog network (PBN) links — networks get discovered in batches, and every client in the network shares the consequence.
- Scaled guest posts on write-for-us farms with exact-match commercial anchors — the most common footprint I find behind manual actions.
- Site-wide footer or sidebar links from unrelated sites, especially with commercial anchors (common leftovers from old sponsorships and widget schemes).
- Any pattern a past SEO vendor built 'at scale' — if the pitch mentioned quantities per month at a fixed price, assume it left a footprint.
Links that almost never hurt you
- Scraper and aggregator copies of your pages (they mirror everyone).
- Junk directories you never submitted to, and automatically generated 'stats' or 'value-of-website' pages.
- Foreign-language spam links that appeared on their own — the classic false positive in every 'toxic' report.
- A handful of low-quality links of any kind. Harm comes from patterns at scale, not from stragglers.
- Nofollow links from anywhere — they don't pass the signal that could create the problem.
How I actually assess a profile
- Check Search Console first for a manual action. No manual action changes the entire calculus — you're doing preventive review, not crisis response.
- Pull backlinks from multiple sources (Search Console plus at least one commercial index) — every index misses links.
- Look for patterns, not individual links: clusters of similar sites, bursts of acquisition on the timeline, and above all anchor-text concentration on commercial pages.
- Correlate with history: ranking drops that align with link-spam algorithm updates plus a manufactured pattern is signal; a scary tool score alone is not.
- Human-review anything you're considering disavowing. Tools flag by domain metrics; only a human recognizes an earned link on a small site.
The disavow decision
Google's own documentation says most sites should never need the disavow tool, and that misuse can harm your site's performance. I use it in exactly two situations: there's a manual action for unnatural links and removal requests can't clean up enough of the pattern; or there's no manual action yet, but I know (from history or vendor records) the profile contains manufactured links at a scale I'd rather formally disown. When I do disavow, it's at the domain level, from a human-reviewed list, documented so future owners of the site know what was disavowed and why.
Cleanup, in order
- Stop the inflow: cancel the vendor, end the scheme, close whatever process is still producing the links.
- Attempt removal where sites are real and reachable — document every request if you're working under a manual action.
- Disavow the residue that fits the criteria above, at domain level.
- If under a manual action, file a reconsideration request that owns the history plainly, shows the cleanup work, and explains what changed.
- Rebuild with the opposite pattern: linkable assets and editorial placements that arrive with boring, branded anchors. Recovery is credibility earned back, not just spam removed.