Toxic backlinks and how to disavow them: when Google actually cares
A client forwarded me an email last month from a "SEO audit" tool. Big red warning: 1,847 toxic backlinks detected. Panic in the subject line. I opened the report, and about 1,700 of those links were directory listings from 2011 that no human had visited in a decade.
That's the trap most people fall into. They see "toxic" in a dashboard and assume Google is quietly punishing them. Usually, it isn't. But sometimes it genuinely is, and knowing the difference between those two situations is the whole game.
Key Takeaways
- A toxic backlink is a link Google reads as manipulative, paid, or machine-generated rather than editorial.
- Most flagged links need no action at all. Google ignores weak links by default.
- Deletion at the source beats disavowing. Always try that first.
- The Disavow Tool is a last resort for links you cannot remove and that demonstrably hurt you.
- Backlinks still matter in 2026. What changed is how easily a bad profile gets discounted.
What actually makes a backlink toxic
Not every bad link is toxic. That distinction gets blurred constantly, and it costs people weekends of useless work.
A link is toxic when it exists because someone built it to manipulate rankings, not because an editor decided your page deserved a mention. Google's systems are built to detect intent, not just metrics. A link from a low-authority blog that genuinely references your study is fine. A link from a high-authority site that sells footer placements to anyone with a credit card is poison, regardless of how impressive the domain looks.
The signals that actually matter
After reviewing hundreds of link profiles, here's what I check first:
- Anchor text manipulation. If 60% of your anchors read "best CRM software for small business" with small variations, that pattern is machine-made. Natural links say your brand name, a URL, or "this tool."
- Links from sites that exist only to sell links. You know them when you see them: no real traffic, no author bios, hundreds of outbound links per page.
- Private Blog Networks (PBNs). Expired domains bought, resurrected, and stuffed with content that links out to clients.
- Forum and comment spam with keyword-stuffed signatures.
- Irrelevant foreign-language directories. A German plumbing site does not need 400 links from Vietnamese casino aggregators.
Notice what's missing from that list: domain authority scores. A "low DA" link is not toxic. It is just weak. Weak links are harmless.
How to identify toxic backlinks without losing your mind
Here's the thing most guides skip: your first move is not opening a tool. It's asking a simpler question. Did anything actually change?
Start with symptoms, not dashboards
If your rankings dropped in the same week a new batch of spammy links appeared, that correlation is worth investigating. If your rankings are stable and a tool screams about 2,000 toxic links, you are probably chasing a ghost.
When I do investigate, I work in this order:
- Pull your backlink profile from Search Console. The Links report is free and shows what Google actually indexed.
- Sort by recently discovered. New links matter more than a link from 2014.
- Spot-check the top linking domains manually. Open five or six in a browser. You will know within ten seconds whether a site is real.
- Look for patterns, not individual links. One weird link is noise. Three hundred links sharing the same anchor is a footprint.
Tools like Semrush and Majestic can speed this up, and their toxicity scores are a useful starting filter. But treat those scores as a hint, not a verdict. I have seen a perfectly legitimate industry association flagged as toxic because it used a keyword-rich anchor once. Disavowing that would have been a mistake.
Which type of website is most vulnerable to toxic links?
Small sites with thin content and few natural links are the most exposed. If you run a local service business with 15 pages and 30 referring domains, a sudden injection of 500 spammy links stands out sharply against your baseline.
Large publishers barely notice. Their profiles are noisy by nature, so a few hundred junk links disappear into the statistical background. Ironically, that means the sites with the least to worry about are the ones most likely to panic, because cheap audit tools flag proportional volume rather than absolute harm.
How to get rid of backlinks
There is a right order of operations here, and skipping step one is the most common error I see.
Step one: delete at the source
Contact the site owner. Politely. Give them the exact URL of the page carrying the link and ask for removal. In my experience, maybe one in five webmasters responds, and a fraction of those actually remove anything. Low success rate, but it costs you an email.
Never pay for removal. Anyone charging a fee to take down a link they placed is almost certainly the same person who placed it.
Step two: disavow, but only when it counts
The Google Disavow Tool lets you upload a file listing domains or URLs you want Google to ignore. It is genuinely advanced, genuinely risky, and it works on a delay measured in weeks. Disavow a good link by accident and you lose whatever value it carried, with no easy undo beyond editing the file and waiting again.
My rule: disavow only links you have tried to remove and failed, and that form a clear manipulative pattern. Not one-off oddities. Not low-quality directories.
| Situation | Recommended action | Effort |
|---|---|---|
| Handful of odd links, rankings stable | Do nothing | None |
| Links you can contact and get removed | Email the site owner | Low |
| Large coordinated spam network, rankings dropped | Disavow at domain level | High |
| Paid link scheme you participated in | Remove, then disavow leftover URLs | High |
| Low-authority but relevant directories | Leave them alone | None |
One detail that trips people up: the disavow file format is unforgiving. A stray character breaks the whole upload. And you should use domain: rather than listing individual URLs whenever the entire site is the problem, which is almost always the case with spam networks.
How to disavow toxic backlinks?
Open the Disavow Tool in Search Console, select the correct property, and download your existing file if you have one. Then create a plain text file. Each line holds either a full URL or a domain prefixed with domain:. Add a comment line starting with a hash to note why you included each entry, because future you will not remember. Upload, confirm, and then leave it alone for at least a few weeks before judging results.
When doing nothing is the right call
This is the part almost nobody writes, and it is the most valuable thing I can tell you.
Google's link spam systems are designed to ignore junk automatically. A link that carries no authority and no relevance simply gets discounted. It does not sit there as a penalty waiting to detonate. The vast majority of "toxic backlink" alerts from third-party tools describe links that Google has already written off.
I have watched site owners spend three weeks building disavow files, only to see rankings move zero. Not because disavowing failed, but because there was nothing to fix. The actual problem was thin content and a slow site.
So before you touch the disavow file, answer honestly: did your traffic drop, or did a tool just make you nervous?
Are backlinks still relevant in 2026?
Yes, but the mechanism has shifted. Links still function as one of the strongest trust signals in the ranking systems, and nothing has replaced them. What changed is that machine-generated content and AI-written pages are now everywhere, which makes genuine editorial links from real sites more valuable, not less.
The flip side: Google has gotten better at discounting link schemes without needing manual intervention. That means the return on aggressive link building has dropped, while the risk of a manual action for an obvious paid scheme has not. I now spend maybe 10% of my link work on acquiring new links and the rest on making sure existing ones are the kind an editor would defend.
If a link would embarrass you in a public conversation, it is probably toxic. If it would not, leave it alone and go write something worth linking to.
Can toxic backlinks get your site deindexed?
Rarely, and almost never from passive links alone. Manual actions for link spam typically follow active participation in a scheme, such as buying links at scale or operating a PBN. Random low-quality links pointing at you are not, on their own, a deindexing risk.
Does disavowing links hurt your rankings?
It can, if you disavow links that were actually helping you. The Disavow Tool is a blunt instrument with no preview and a slow feedback loop. That is precisely why it should be a last resort rather than a default response to a scary report.
The one habit worth building
Every few months, open your Search Console Links report and look at what changed. Ten minutes of that beats a $99 panic purchase from an audit tool with a red color scheme. Meanwhile, the sites I see ranking well in 2026 share something dull and unglamorous: they publish things people want to reference, which means the links arrive without anyone building them.
Which leaves the uncomfortable question I keep coming back to. If you removed every link you paid for tomorrow, would anyone still link to you on their own?