Toxic Backlinks: How to Find Them and When to Disavow

Toxic backlinks are low-quality or manipulative links pointing at your site that could, in some cases, drag down rankings or trigger a manual action. The honest answer to “how do I find them and when should I disavow?” is that finding them is easy, and the harder skill is deciding to leave most of them alone. This guide covers both halves, with a decision framework you can actually apply.

Google has said for years that its systems ignore the vast majority of spammy links automatically. That does not make the disavow tool useless, but it does change who should be reaching for it.

What Actually Counts as a Toxic Backlink

A toxic backlink is one that exists to manipulate rankings rather than to point readers somewhere useful. The label gets thrown around loosely, so it helps to separate genuinely risky links from links that are merely low value.

• Paid or exchanged links that pass PageRank without a rel=”sponsored” or rel=”nofollow” attribute.
• Private blog networks (PBNs): clusters of sites with the same footprint, thin content, and outbound links to unrelated commercial pages.
• Automated or scraped links from directory dumps, comment spam, forum profile spam, and auto-generated “statistics” pages.
• Exact-match anchor text at unnatural volume, especially commercial or adult/pharma/casino anchors you never targeted.
• Site-wide footer or sidebar links from thousands of low-quality pages on a single domain.

What is not toxic: a link from a small blog with low domain authority, a link from a foreign-language site that legitimately cited you, or a link from a page with modest traffic. Low authority is not the same as spam, and treating it that way is how people disavow their own useful links.

Where Toxic Links Usually Come From

Most sites with a bad backlink profile fall into one of a few buckets, and knowing which bucket you’re in changes the response. Buying links in 2019 and forgetting about it is a different problem from being hit with scraper spam last month.

1. Legacy paid link campaigns run by a past agency or freelancer, often with invoices to prove it.
2. Scraper and aggregator sites that copy your content or your directory listing automatically. These are noise, not risk.
3. Negative SEO attempts, where a competitor points thousands of spam links at your money pages. Real, but far rarer than sales pages for link audit tools suggest.
4. Cheap link packages bought from marketplaces promising hundreds of links for a flat fee.
5. Hacked sites linking out to your pages after being compromised, sometimes with anchors unrelated to your business.

How to Find Toxic Backlinks

You can do a usable audit for free, and a deeper one with a paid tool. Start with the free layer, because it uses Google’s own data.

1. Start in Google Search Console

Open the Links report in Search Console, then export “Top linking sites” and “Top linking text.” Two things matter here: domains you don’t recognize appearing near the top, and anchor text that has nothing to do with your business. If your top anchors include pharmacy or gambling terms, you have a real problem worth investigating.

Search Console also tells you about manual actions. Check the Manual actions report first, because a confirmed “unnatural links to your site” penalty changes every recommendation below.

2. Pull a fuller backlink export

Search Console samples your links, so pair it with Ahrefs, Semrush, Majestic, or Moz to get closer to the full picture. Export referring domains rather than individual links; you’ll usually find that a few hundred domains account for tens of thousands of URLs. Sorting by referring domain keeps the review manageable.

3. Review by hand, in batches

Set a threshold you can live with. For most small sites, manually eyeballing the top 200 to 300 referring domains catches nearly everything that matters, and takes two to four hours. For each questionable domain, ask:

• Would a real person visit this site on purpose?
• Does the page linking to me have any editorial context, or is it a list of unrelated outbound links?
• Did I (or someone I paid) place this link?
• Is the anchor text something I would have chosen?

The same workflow applies when you analyze competitors’ backlink profiles, which is a good way to calibrate what “normal” looks like in your niche before you start labeling your own links.

The Gap Most Guides Skip: Toxicity Scores Are Not Verdicts

Every major tool now ships a “toxic score” or “spam score,” and those numbers are third-party estimates built from correlations, not signals Google shares. I’ve seen tools flag legitimate local news coverage as high risk because the publisher had a cluttered outbound link profile.

Treat the score as a sorting mechanism, nothing more. It tells you which 150 domains to look at first out of 3,000. It does not tell you which links are hurting you, and if you upload a tool’s auto-generated toxic list straight into the disavow tool, you are gambling with links that may be helping. That single habit causes more damage than the spam ever did.

Google’s own spam policies documentation is a better reference point than any score: read the link spam section and judge your links against it directly.

When You Should Disavow (and When You Shouldn’t)

Google’s guidance is blunt: use the tool only if you have a manual action, or if you believe a manual action is coming because of paid or manipulative links you or someone acting for you built. Here’s the practical version.

Disavow if any of these are true

• You have a manual action for unnatural inbound links in Search Console.
• You know links were bought, exchanged, or mass-built on your behalf, and removal requests went unanswered.
• You’re inheriting a site or domain with a documented history of aggressive link buying.
• You’ve received a warning from a partner or the links were part of a network that got publicly deindexed.

Don’t disavow if

• You just want to “clean up” a profile that looks messy but was never manipulated.
• Rankings dropped and you’re guessing at the cause. Check for a core update, a technical change, or a content issue first.
• The only evidence is a tool’s toxicity score.
• The spam is scraper or auto-generated junk that showed up on its own. Google filters that at scale.

If your traffic fell and your links are clean, the fix is usually on-page or content quality. Auditing your on-page SEO fundamentals is a far better use of a week than building a disavow file.

Try Removal Before Disavowing

For a manual action, Google wants to see a good-faith removal effort documented in your reconsideration request. Find contact details or a WHOIS email, send a short, polite request naming the exact URLs, and log the date. Expect a response rate somewhere between 10% and 30%, and give it two to three weeks before moving the remainder to your disavow file.

How to Disavow Links, Step by Step

1. Build the file. Plain text, UTF-8 or 7-bit ASCII, one entry per line, up to 100,000 lines and 2MB.
2. Prefer domain-level entries. Write domain:spamsite.com rather than listing 400 individual URLs from the same host.
3. Add comments with a # at the start of a line to record why an entry is there and when you added it.
4. Upload it through the Google disavow tool, selecting the correct property. Each upload replaces the previous file, so always edit your master copy rather than submitting additions.
5. File a reconsideration request if you have a manual action, explaining what happened, what you removed, and what you disavowed.

Processing is gradual: Google recrawls the listed pages over weeks or months, so expect no instant movement. A manual action revocation, by contrast, often lands within one to two weeks of a successful reconsideration request.

What to Do Instead of Obsessing Over Bad Links

Dilution beats deletion for most sites. Earning a steady flow of genuine links makes the leftover junk statistically irrelevant, and it moves rankings in a way that removing spam almost never does. Digital PR and white hat link building both pay off here.

Pair that with on-page work: strong internal linking, sensible topical coverage, and natural use of related semantic keywords so your pages read as thorough rather than thin.

Frequently Asked Questions

How do you disavow toxic backlinks?

Create a plain text file listing one domain or URL per line (using domain:example.com format for whole sites), then upload it in Google’s disavow tool under the correct Search Console property. The file must be under 2MB and 100,000 lines, and each new upload replaces the old one entirely, so keep a master version.

How do you identify toxic backlinks?

Export your referring domains from Search Console plus a backlink tool, then manually review the top 200 to 300 domains for paid placements, PBN footprints, irrelevant exact-match anchors, and site-wide links. Third-party toxicity scores are useful for prioritizing that review, but they should never be the sole basis for removal.

Is it worth disavowing links?

For roughly 90% of sites, no: Google ignores most spam links automatically, and disavowing good links by mistake causes real harm. It is worth doing when you have a manual action for unnatural links, or when you know manipulative links were built for your site and could not be removed.

How do you find your current disavow links?

Sign in to the Google disavow tool with the account that has owner access to the property, select the site, and download the existing file. If nothing downloads, no disavow file is active for that property, which is common when a previous agency uploaded it under their own account.

Want a Second Opinion on Your Backlink Profile?

A link audit is worth doing properly once, with someone who will tell you when the answer is “leave it alone.” Get in touch with SEO Quirk for a review of your backlinks, your manual action status, and what’s actually holding your rankings back.