A sealed amber jar with a faded warning label sitting untouched on a shelf

Toxic Backlinks and the Disavow Tool: When (and Whether) to Use It

Off-Page SEO Guide

Toxic Backlinks and the Disavow Tool: When (and Whether) to Use It

Here’s the honest answer most guides bury: for almost every site in 2026, you should disavow nothing. Google’s spam systems already ignore the junk, and disavowing carelessly does more harm than the bad links ever would. This guide covers the two times it’s actually the right call, and how to do it without hurting yourself.

By Rahul Saini, Author at Search Counsel Co. Last updated [July] 2026.

Featured answer: should you disavow toxic backlinks?

Usually no. Google’s spam systems automatically neutralize low-quality links for the vast majority of sites, so disavowing them changes nothing and can accidentally strip value from good links. Use the disavow tool in only two clear cases: you’ve received a manual action in Search Console for unnatural links, or you’re facing a documented negative-SEO attack you can’t stop at the source. Outside those, doing nothing is the right move.

The Verdict

Do nothing

is the correct move for almost every site. Google already ignores the spam.

The Filter

SpamBrain

Google’s AI neutralizes spam links by dropping their vote, not penalizing you.

The Two Cases

Only 2

legit uses: a manual action, or a real negative-SEO attack. That’s it.

The Real Danger

Over-disavow

stripping value from good links is the most common, most damaging mistake.

Every site owner eventually opens a backlink tool, sees a wall of unfamiliar domains flagged “toxic,” and panics. That panic is responsible for a lot of self-inflicted ranking damage. The truth in 2026 is that Google’s systems handle spam links on their own, and the disavow tool, once a necessary safety valve, is now the most dangerous button in Search Console for most people. This guide explains what a toxic backlink actually is, why doing nothing is usually correct, the two situations that genuinely justify disavowing, why over-disavowing backfires, and exactly how to disavow properly if you’re in one of those two cases.

Article note: Written by Rahul Saini at Search Counsel Co., reflecting Google’s public guidance and the audits we run for clients. This is not legal or guaranteed advice; disavow decisions carry real risk. When in doubt, under-disavow, or consult an experienced professional before touching the file.

1) What a toxic backlink actually is

A toxic or low-quality backlink is one built to manipulate rankings rather than earned on merit: links from link farms and private blog networks, spammy directories, hacked pages, comment and forum spam, and irrelevant foreign sites, often with over-optimized exact-match anchors. These are the links Google’s guidelines target, and the tactics our guide to white hat vs black hat SEO warns against.

But two things matter here. A low Domain Rating does not make a link toxic, plenty of small, legitimate sites have low scores. And a single exact-match anchor doesn’t make a link toxic either. Real toxicity is about intent and pattern: manipulation at scale, not any link that looks unfamiliar. For the flip side, what a genuinely good link looks like, see what makes a good backlink.

2) Why doing nothing is usually right

Google built an AI system called SpamBrain to identify and neutralize spam links at scale. When it spots a manipulative link, it doesn’t delete it or punish you, it simply drops that link’s voting power so it can’t affect your rankings. Think of it as a spam filter for links. This is why random junk links accumulating on your profile, which happens to every site, are almost always harmless: they’re already being ignored. Our guide to how Google evaluates links covers what does and doesn’t pass value.

Google’s own advocates have been blunt about this. The company has said most sites never need the disavow tool, it’s intentionally hard to find in Search Console, and Google representatives have noted the tool hurts more sites than it helps, with at least one confirming they don’t keep a disavow file for their own high-traffic site. Google has even discussed removing the tool as its spam detection improves. The practical takeaway: unfamiliar links are not the same as harmful links, and for the vast majority of sites, the correct response to a scary-looking backlink report is to close it.

Key reframe: when your rankings drop, it’s far more often because you lost good links than because you gained bad ones. A DR 70 site removing its link to you hurts more than a hundred spam links ever will. Investigate what you lost before you worry about what you gained, which is exactly what the lost-links step of a backlink audit is for.

3) The two times you should disavow

There are exactly two situations where disavowing is clearly correct. Everything else needs far more scrutiny before you touch the file.

Situation What it looks like Action
Manual action A notice in Search Console under Security & Manual Actions for “unnatural links to your site.” Clean up, disavow the offending links, then submit a reconsideration request.
Negative-SEO attack A sudden flood of hundreds or thousands of coordinated spam links you can’t remove at the source. Disavow the attack’s signature domains, ideally at the domain level.
(Rarer) legacy manipulation You or a past agency deliberately built paid or PBN links and want to clean up proactively. A targeted disavow of the links you know you built can be sensible.

The manual action case is the one unambiguous “act now.” Note that Google says disavowing alone isn’t enough for a manual action, you must show genuine effort to remove the links first, then disavow what remains, then request reconsideration. And even for a suspected negative-SEO attack, the first step is to monitor, not panic: if there’s no manual action and no ranking drop that correlates precisely with the link spike, the algorithm is almost certainly handling it already. Before assuming links are the cause, check whether the drop lines up with a known algorithm update instead.

4) Why over-disavowing backfires

This is the part that makes disavow dangerous. The tool doesn’t just neutralize bad links, it removes the value of any link you list, permanently until you undo it. So if you sweep up good links in an anxiety-driven cleanup, you’re voluntarily throwing away ranking signal.

We know disavowing genuinely removes link value because it’s been tested. When Ahrefs disavowed thousands of links to three of its own pages as an experiment, rankings and traffic dropped, then recovered once the disavow was reversed. That’s proof the tool works as described, which is exactly why aiming it at the wrong links hurts. The most common self-inflicted damage in SEO comes from disavowing links that were quietly helping, because they had a low DR or an exact-match anchor and looked risky at a glance. Neither of those makes a link harmful.

5) Ignore the toxicity score

When Ahrefs, Semrush, or Moz labels a link “toxic,” “risky,” or “harmful,” that score comes from the tool’s own proprietary model, trained on patterns its engineers believe correlate with links Google might distrust. It is not Google’s evaluation. Google has data no third-party tool can see: user behavior, entity relationships, click data, and the full content of every page. So a toxicity score is an educated guess, and disavowing off it alone is how good links get killed. If you must assess a link, open the page and read it. That tells you more than any score.

6) How to disavow properly (if you’re in one of the two cases)

If you genuinely have a manual action or a confirmed attack, do it carefully and surgically.

  1. Audit from two sources. Pull the Links report in Search Console plus a third-party tool, and focus on links added recently or matching the attack pattern.
  2. Try removal first. For a manual action especially, attempt to get the worst links taken down at the source, then disavow what you can’t remove.
  3. Be surgical. Include only links directly tied to the problem. Don’t add domains just because they’re unfamiliar.
  4. Prefer domain-level entries for clearly bad sites (one bad domain spawns many bad URLs); use URL-level only for a legitimate site with one problem page.
  5. Format the file correctly. Plain text, UTF-8, one entry per line, “domain:example.com” syntax, “#” for comments. Uploading a new file completely replaces the old one, so include everything you still want disavowed.
  6. Submit and wait. Upload in the disavow tool, add a reconsideration request if it’s a manual action, and expect several weeks for processing (disavowed links still show in your reports). Recovery can take months.

Watch out: document every entry with the date and reason. An undocumented disavow file that grows over years becomes a liability, you won’t remember why links are in it, and you can’t safely clean it up later. And for over-optimized anchors specifically, the fix is usually offset links, not disavow, see anchor text best practices.

7) The truth about negative SEO

Negative SEO, a competitor pointing spam links at your site to tank it, is real but far rarer than the fear around it. Google’s algorithms are built to ignore links you didn’t build, and sites with no history of manipulation almost never get a manual action from spam pointed at them. Genuine attacks that actually move rankings are sustained, coordinated, and high-volume, and even then, the first move is to monitor Search Console and your traffic, not to reflexively disavow. Most “attacks” people worry about are just the normal background noise of spam links every site collects. To tell the difference, watch whether a ranking drop lines up precisely with a link spike, that correlation is what turns monitoring into action.

How we do it: at Search Counsel Co. we treat disavow as a last resort, not routine hygiene. The real protection is upstream, being careful about the links you build in the first place, which is the whole point of how to get backlinks. If you’d rather hand off a genuine cleanup, see our link building and authority services.

8) Sources used for this guide

Source What it supports
Google Search Central and public statements (Mueller, Illyes) Most sites never need disavow; SpamBrain neutralizes spam; the tool can harm if misused; possible deprecation.
Ahrefs (disavow / impact-of-links experiment) Disavowing links dropped rankings and traffic, which recovered when the disavow was reversed.
2026 disavow practitioner guides The two legitimate use cases, over-disavow risk, domain-level preference, and file formatting.

FAQ: toxic backlinks and disavow

Do I need to disavow toxic backlinks?

For almost every site, no. Google’s SpamBrain automatically neutralizes spam links by dropping their ranking value, so they don’t hurt you. Disavow only if you have a manual action for unnatural links or a documented negative-SEO attack you can’t stop at the source. Otherwise, doing nothing is the correct move.

Will spam backlinks hurt my rankings?

Almost never on their own. Google ignores links you didn’t build, and random spam links are background noise every site collects. A ranking drop is far more likely to come from losing good links than from gaining bad ones, so investigate what you lost first.

Should I trust the toxicity score in my SEO tool?

Not as a decision-maker. Toxicity scores from Ahrefs, Semrush, or Moz are proprietary estimates, not Google’s actual evaluation of your links. They generate false positives constantly. Use them to flag links for manual review, then open the page yourself, never disavow off a score alone.

When should I use the disavow tool?

In two clear cases: you’ve received a manual action in Search Console for unnatural links (clean up, disavow, then request reconsideration), or you’re under a genuine negative-SEO attack with coordinated spam links you can’t remove. A rarer third case is cleaning up manipulative links you or a past agency deliberately built.

Can disavowing links hurt my site?

Yes. The tool removes the value of every link you list, so disavowing good links, common when people act on low DR or exact-match anchors, throws away ranking signal. Over-disavowing is the most frequent and damaging mistake. When unsure, under-disavow.

How long does a disavow take to work?

Google needs to recrawl the listed URLs, so expect several weeks before any effect, and disavowed links still appear in your Search Console reports. Recovery from a manual action can take months. There’s no success message confirming the file worked.

Conclusion: the responsible move is usually nothing

Most people arrive at a disavow guide looking for permission to act on a scary backlink report. The honest answer for nearly every site in 2026 is to close the report and do nothing, because Google already ignores the spam, and disavowing carelessly is how good links get killed. Reserve the tool for a manual action or a real attack, use it surgically, and spend your energy upstream, building good links, not cleaning up after imaginary bad ones.

To keep your profile healthy from the start, read what makes a good backlink, to review what you have, run a backlink audit, and for the wider picture, see the full off-page SEO and link building guide.

Editorial note: This guide is for general marketing education, not guaranteed advice. Disavow decisions carry real risk and Google’s guidance evolves. Verify current guidance in Google Search Console help, and consult an experienced professional before disavowing if you’re unsure.

Scroll to Top