Maybe an email landed in your inbox, or a software report lit up red, and now it says your site has hundreds of toxic backlinks that are hurting your rankings. There is a price attached, and a deadline that feels urgent. You did not build those links, you cannot see them all, and you do not know whether the warning is real. That is a fair thing to be unsure about, because the scary word in the message comes from the company selling the fix, not from Google. Before you pay for an audit, you can check Google's own report in about ten minutes, learn which situations genuinely call for a review, and reply to the sender with questions that sort a real problem from a sales pitch. This is the order to do it in.
Key Takeaways
"Toxic" is a label that software vendors such as Semrush and Ahrefs use for their own ratings, not a status inside Google Search Console.
In Search Console, a clear Manual actions report means Google has not recorded a manual action for your property, and that check is free.
Google says the vast majority of sites do not need the Disavow tool, and it can harm search performance when used wrongly.
A manual action for unnatural links, a past vendor who bought or built links, and a domain you bought with an unknown link history.
Make them name the exact link, the Google policy it breaks, and who created it before any money moves.
What Google says about a toxic backlink warning
Google's own documentation answers it directly. Its Disavow help page says that in most cases Google can assess which links to trust without additional guidance, and states plainly: "The vast majority of sites do not need to use this tool." When Google introduced the tool in a 2012 Search Central announcement, written by Jonathan Simon, it described it as a feature for sites affected by manual actions, paid links or other link schemes. It also said Google works to keep negative SEO from harming rankings, and that links you did not create are normally given appropriate weight without any extra input from you.
Google's current help page on the Disavow tool adds the condition that matters to you. Disavowing fits a site with a considerable number of spammy, artificial or low-quality links that caused, or are likely to cause, a manual action. It also says to try removing the links first, and it calls the tool advanced, with the warning that it can harm your search performance if used incorrectly.
So, a random unsolicited link is not evidence of a penalty. Google's spam policies define link spam as creating links to or from a site primarily to manipulate rankings. That covers buying or selling links for ranking purposes, excessive link exchanges, automated link creation, and paid articles with links that pass ranking credit. A strange link from a site you have never heard of is not on that list unless someone arranged it to move your rankings.
Ten minutes in Search Console shows whether Google flagged anything
Google tells you directly when it has taken action, and the place it tells you is Search Console. If you have not set it up, the Search Console setup guide for small businesses takes you through verifying your site. Once you are in, work through this list.
- Open Google Search Console and select the correct verified property for your site.
- Open Security & Manual Actions, then Manual actions. Google renames menus now and then, so look for the Manual actions report if the labels have moved.
- Read the page. If it says "No issues detected," Google has not recorded a manual action for that property.
- If it lists "Unnatural links to your site," that is the situation the Disavow tool was built for, and the section on paying for a review below applies to you.
- Open Links and look at Top linking sites, Top linked pages and the export options.
- Look for an obvious pattern: the same keyword-stuffed anchor text over and over, sitewide links from a handful of sites, or links that match something a past vendor did for you.
- Save the warning email or report, so you can ask the sender to point to the exact policy violation.
One limit to keep in mind: Google says the Links report shows a sample of the links it has found, not a complete list. You are reading a sample, so a total link count, or a count from a third-party tool, tells you very little about harm. If the Manual actions report is clear and nothing in the Links sample looks arranged, you have most of your answer already. Also search your email for older Search Console messages, because Google sends a message there when it records a manual action. If you want a refresher on what those messages mean, Search Console emails explained covers the common ones.
A "toxic" label comes from the tool that produced it
The word "toxic" is a third-party SEO term. It does not appear as a status in Search Console, and Google has no toxicity score for your site. Each tool vendor defines it in its own way, and the vendors say so in their own help pages.
Semrush says its Toxicity Score uses more than 45 toxic markers, which can include links from spammy sites, non-indexed sites, malware-related environments, link networks, poor page layouts and suspicious anchor text. It sorts links into categories such as whitelist, remove and disavow, as its toxic markers description explains. Ahrefs says in its help center that Google's guidelines do not specify a metric or score that decides whether a backlink is manipulative or spammy, and it describes "toxic backlinks" as an SEO term rather than a classification Google defines.
Read that as a triage signal for a person to review, not as proof. A score does not show that a link hurts your rankings, that it belongs to a manual-action pattern, or that it should go in a disavow file. These four things are easy to blur together in a sales email, so it helps to keep them apart.
| What it is | Who decides | What it means for you |
|---|---|---|
| An unsolicited link | Nobody; it just appeared | Not a penalty. Google says its systems can generally assess which links to trust |
| A tool's "toxic" rating | The software vendor, by its own markers | A prompt for a human to look, not a Google status |
| A deliberate link scheme | Google's spam policies | Paid links, link exchanges and automated links made to move rankings |
| A manual action | A Google reviewer, shown in Manual actions | The one that Google itself reports, with steps to fix it |
Three situations make a backlink review worth paying for
A paid review earns its fee when there is evidence of a real link problem. Without that evidence, you are paying to sort through tool output that Google tells you to treat lightly. These are the situations that qualify.
- A manual action for unnatural links. Google's Manual actions documentation says a human reviewer found a pattern of artificial, deceptive or manipulative links pointing to your site. Some or all of your pages can rank lower or be left out of results.
- A history of bought or built links. If a past SEO vendor sold you link packages, ran a private link network, or used automated link creation, someone needs to identify the domains, pages, dates and anchor text involved.
- A domain you bought or inherited with an unknown history. The link profile came with the name, and you have no record of how it was built.
A fourth reason is paperwork. If you are about to file a reconsideration request, Google expects you to document the links you removed, explain the ones you could not remove, and describe the corrective work. A reviewer who builds that record is doing something useful.
A large, clearly patterned group of links created through a known link scheme also qualifies, even before Google acts on it. The test in every case is the same: a real event, a real policy, and a real record, not a percentage on a dashboard.
If you suspect that a past vendor bought links for you, dig out what you paid for, since the invoices are the best evidence you have. The questions to ask when hiring an SEO company are worth reading before you sign with the next one. And if you want to know how links are earned in a way that Google's policies allow, how to get backlinks for a small business covers that side, including what counts as a bought link.
The cold email deserves questions, not a payment
An unsolicited message saying you have toxic backlinks comes with an offer attached. You do not need to accept it or ignore it. You can answer it with questions, and the quality of the answers tells you what you are dealing with. Send these:
- Which specific links are harming my site? Please send the URLs.
- Which Google policy does each one violate, and where is it published?
- Is there a manual action on my property, and how did you check?
- Who created these links, and what evidence connects them to my site?
- If you remove or disavow them, what exactly will you document, and what do I receive at the end?
- Does the price depend on a toxicity percentage, and what happens if the work changes nothing?
A vendor with a real finding can answer all six. A vendor sending a bulk template will answer with a bigger number or a shorter deadline. That is your signal. Nobody can guarantee that a disavow file will restore rankings, so treat any promise of recovery as a reason to walk away. If the sender also pushes you to pay through an unusual channel, fake domain renewal and SEO invoice scams shows what that pressure can look like.
A broad disavow file can remove links that help you
If you do have a manual action, Google's guidance has a clear order, and it applies to a hands-on cleanup too. Google recommends this sequence in the Manual actions help:
- Review the link spam policy.
- Export the links from the Search Console Links report.
- Identify the links that violate Google's policies.
- Ask the owners of those sites to remove the links, or to add a qualifying attribute such as `nofollow` or `sponsored`. Google's link tagging and link spam update post explains those attributes.
- Disavow the remaining artificial links only when that is appropriate.
- Submit a reconsideration request through the Manual actions report.
Only the owner of the linking page can take a link down. You can ask, and you should keep a record of every request and every reply, because the reconsideration request has to show what you did. A disavow file does not delete anything from the internet. It tells Google to ignore the links you list, so a broad file that lists useful links as well as junk can cost you links you wanted. That is why Google calls it an advanced tool and why a score-driven "disavow everything flagged" job is the wrong move.
Press release links are another place where the same policy applies, since paid articles with links that pass ranking credit are on Google's list. For how that plays out, see do press releases help SEO. If you are building real local links through sponsorships and events, local link building with sponsorships, events and partners covers links that fit the policy.
A traffic drop needs a diagnosis, not a link cleanup
Alarm emails can arrive right after a dip in traffic, which makes the link story feel believable. A ranking decline that follows a spike in backlinks does not prove one caused the other, so check the other causes before you pay for link work. In Search Console, compare clicks, impressions, queries and pages across the dates of the drop. Then look at the following.
- Indexing: whether important pages dropped out of the index.
- Technical changes: a redesign, a plugin update, a moved page, a changed robots file.
- Seasonality: whether the same weeks fell last year.
- Algorithm updates: whether the dates line up with a known change.
- Conversions: whether leads fell as much as visits did.
If a hacked site or a compromised account is involved, a website security audit is a better first step than anything link related, because hacked pages can create spam links and spam pages you never wrote. A focused diagnosis of the drop is also a sound place to spend money when you cannot connect it to a manual action. What SEO includes shows where that kind of diagnosis fits in ongoing work.
A vendor may still be worth paying for a wider SEO diagnosis when you have a traffic decline, an indexing issue, a technical problem, a content problem or a conversion problem. Selling a large cleanup solely because a software tool shows a high toxic score is not supported by Google's guidance, so ask what a proposal would change in those areas as well.
Final Thoughts
If your Manual actions report says "No issues detected," you have never paid for links, and the only evidence is a toxic score in a message or a tool, the usual right answer is that you do not need a backlink audit or a disavow file. Google says its systems generally handle links you did not create, and that the vast majority of sites do not need the Disavow tool. Save the email, run the ten-minute check, and send the questions above instead of a payment.
The answer changes when there is a manual action for unnatural links, a vendor who built links for you, or a domain you bought with a past you cannot trace. In those cases a careful review is worth paying for, because it can identify the links, document the removal attempts, and support a reconsideration request. Use the same evidence test with every offer: a real event, a named policy, and a record you can keep.
If you want a second set of eyes on your report or a proposal, Web Leveling can read it with you as part of our search engine optimization work, and you can send us the warning email and your Search Console results to start. If you have no manual action and no link-buying history, you do not need to pay anyone for cleanup, including us. We work with small and medium businesses across the country and overseas.
Do you need a backlink audit?
Pick an answer to begin.
1. A tool says 40 percent of your backlinks are toxic. What is the best first step?
2. Which situation makes a paid backlink review most worth considering?
3. What does a disavow file do?
Frequently Asked Questions About toxic backlinks
Do toxic backlinks automatically hurt rankings?
No. "Toxic" is a third-party tool label, not a Google penalty classification. Google says it can usually assess which links to trust without additional guidance.
Does every business need a backlink audit?
No. Google says the vast majority of sites do not need the Disavow tool. A review makes sense when there is a manual action, a history of bought or built links, or a domain with an unknown link past.
How do I check for a Google backlink penalty?
Open Search Console, then Security & Manual Actions, then Manual actions. If the report says "No issues detected," Google has not recorded a manual action for that property.
Should I disavow links I did not create?
Usually not. Google says disavowing is for a considerable number of artificial links that caused, or are likely to cause, a manual action, and that you should try removing the links first.
Is a high Semrush Toxicity Score proof of harm?
No. It is Semrush's own rating built from its markers, and it needs a person to review it. It does not show that a link breaks Google's policies.
Does Search Console show every backlink I have?
No. Google says the Links report shows a sample of the links it has found, so use it to spot patterns rather than to count.
Terms
Backlink words in this post
Tap a term to see what it means.
Backlink. A link from another website to yours.
Toxic backlink. A third-party SEO tool label for links the tool rates as risky; Google does not use it as a status.
Manual action. A Google enforcement decision, made by a human reviewer, shown in the Search Console Manual actions report.
Disavow file. A list of links you ask Google to ignore, uploaded through the Disavow tool.
Reconsideration request. A message to Google, sent through the Manual actions report, documenting your cleanup after a manual action.
Link scheme. Links made mainly to manipulate rankings, such as paid links, excessive link exchanges or automated link creation.
