Disavow Toxic Backlinks Guide: Protect Your Site from Negative SEO
Quick Summary
- What this covers: Identify and disavow toxic backlinks harming your rankings. Audit link profiles, create disavow files, and submit to Google Search Console safely.
- Who it's for: site owners and SEO practitioners
- Key takeaway: Read the first section for the core framework, then use the specific tactics that match your situation.
Toxic backlinks from spammy link networks, hacked sites, and negative SEO attacks dilute domain authority and trigger Google manual actions or algorithmic penalties, suppressing rankings across entire sites. While Google's algorithms generally ignore low-quality links automatically, aggressive link schemes — paid directories submitting your URL to thousands of irrelevant sites, competitors building spammy links to harm you, old SEO campaigns using now-penalized tactics — require manual disavowal through Google Search Console to signal these links should be excluded from ranking calculations. Careless disavowing — rejecting high-authority domains by mistake, submitting malformed disavow files, or disavowing natural links from legitimate sites — causes ranking drops worse than the toxic links themselves. This guide identifies genuinely harmful backlinks using Ahrefs, Moz, and manual vetting criteria, formats disavow files correctly, and implements safeguards against over-disavowing valuable links.
When to Disavow Backlinks (and When Not To)
Google's official guidance: Most sites don't need to disavow. Google's algorithms ignore most spammy links automatically.
Disavow When:
1. Manual action for "Unnatural Links" Google Search Console → Manual Actions shows penalty. Symptom: Rankings dropped dramatically, traffic plummeted overnight Action: Disavow bad links, submit reconsideration request
2. Negative SEO attack Competitor builds thousands of spammy links to harm your site. Symptom: Link profile explodes with irrelevant anchors (Viagra, porn, gambling) from low-DR domains Action: Disavow attack links
3. Old paid link campaigns Historical black-hat SEO (paid directories, link networks, PBNs) now penalized. Symptom: Link profile contains obvious paid patterns (exact-match anchors from unrelated sites) Action: Disavow old schemes
Don't Disavow When:
1. Natural negative link accumulation Every site gets some spam links. Google ignores these automatically. Example: Random blog comments, scraped content, forum signature links Action: Ignore unless thousands appear suddenly
2. Links from competitors' sites Competitor linking to you isn't harmful (even if negative intent). Action: Ignore — competitor links pass minimal/no authority anyway
3. Links from unrelated but legitimate sites Irrelevant doesn't equal toxic. Example: Manufacturing company mentioned in food blog Action: Ignore — irrelevant links don't hurt, just don't help
Phase 1: Audit Backlink Profile for Toxicity
Identify truly harmful links before disavowing.
Export Backlink Data from Google Search Console
Search Console → Links → Export external links
Provides:
- Top linking sites
- Most linked content
- Top linking text (anchors)
Limitations: Doesn't show all backlinks, no toxicity scoring
Audit with Ahrefs or Moz
Ahrefs Site Explorer:
- Enter domain → Backlinks → All backlinks
- Export CSV (up to 50,000 links on basic plans)
- Sort by:
- Domain Rating (DR) — low DR (<20) suggests spam
- Anchor text — exact-match spam anchors
- Traffic — 0 traffic = likely spam site
Moz Link Explorer:
- Enter domain → Inbound Links
- Sort by:
- Domain Authority (DA) — low DA (<10) flags
- Spam Score — Moz's toxicity metric (0-100)
Red Flags for Toxic Backlinks
Domain-level red flags:
- Domain Rating / Domain Authority <10
- Spam Score >60 (Moz)
- Site in foreign language unrelated to yours (Russian gambling sites linking to US SaaS)
- Scraped content, auto-generated pages
- Hacked sites (pharmaceutical spam in footer)
- Link farms (pages with 100+ outbound links)
Link-level red flags:
- Exact-match commercial anchors ("buy viagra online")
- Sitewide links from unrelated sites (every page footer)
- Links from adult/gambling/pharma sites (unless your niche)
- Hidden links (white text on white background, CSS display:none)
Not toxic (don't disavow):
- Links from DA 30+ sites (even if irrelevant)
- Natural anchors ("click here," "website," brand name)
- Nofollow links (Google ignores these anyway, disavowing is redundant)
- Links from social media, forums, blog comments (Google devalues but doesn't penalize)
Phase 2: Manually Vet Suspicious Links
Automated spam scores produce false positives. Manually check before disavowing.
Check Domain in Browser
Visit linking domain:
- Legitimate site? (real content, navigation, branding) → Don't disavow
- Spam site? (auto-generated content, ads-only, link lists) → Disavow
- Hacked site? (pharma spam injected in footer) → Disavow
- Parked domain? (domain for sale landing page) → Disavow
Check Archive.org (Wayback Machine)
Historical context reveals intent:
- Visit https://archive.org/web/
- Enter linking domain
- Check snapshots from when link appeared
Example:
- Site was legitimate in 2020, hacked in 2024 → Disavow (hacked)
- Site always spammy → Disavow
- Site legitimate but changed owners → Research further
Check Link Context
View page where link appears:
- Editorial link in article body → Don't disavow (earned link)
- Footer sitewide link from unrelated site → Disavow (likely paid)
- Sidebar widget with 50+ links → Disavow (link farm)
- Auto-generated "related links" section → Disavow (scraped)
Phase 3: Create Disavow File
Disavow file format is strict — malformed files are rejected.
Disavow File Syntax
Plain text file (.txt), UTF-8 encoding:
# Disavow spam domains
domain:spamsite.com
domain:anotherspamsite.com
# Disavow specific pages
http://example.com/spam-page
https://example.org/bad-page
# Comments explain disavow reasons (optional but recommended)
Rules:
- One URL or domain per line
- Use
domain:to disavow entire domain (all pages) - Use full URL to disavow specific page
- Comments start with
# - No spaces before URLs
- Use UTF-8 encoding (no BOM)
Disavow Entire Domains (Recommended)
Disavowing domain is safer than individual URLs (new spammy pages won't evade disavow):
domain:spamsite.com
Disavows all pages:
http://spamsite.com/page1https://spamsite.com/page2http://subdomain.spamsite.com/page
Disavow Specific URLs Only
Use when domain is legitimate but specific page is spam:
http://legitimatesite.com/hacked-page-with-spam-links
Example: News site with legitimate content but one hacked article linking to you.
Organize Disavow File with Comments
Large disavow files benefit from organization:
# Negative SEO attack - January 2026
domain:spam-attack-1.com
domain:spam-attack-2.com
# Old paid directory links - 2019 campaign
domain:directory1.com
domain:directory2.com
# Hacked sites
http://hackedsite.com/pharma-spam-page
Phase 4: Submit Disavow File to Google Search Console
Disavow tool is separate from main Search Console interface.
Access Disavow Tool
Direct URL: https://search.google.com/search-console/disavow-links
Or: Google "disavow links tool"
Submit Disavow File
- Select property (domain) from dropdown
- Click "Disavow Links"
- Read warnings (disavowing can hurt rankings if done incorrectly)
- Click "Choose File" → upload
.txtfile - Click "Submit"
Processing time: Google processes within 1-7 days, but full effect takes weeks/months as Google recrawls disavowed domains.
Verify Submission
Confirmation message: "Your uploaded file has been successfully imported."
Check status:
- Return to disavow tool
- Click "View disavowed links"
- Shows list of disavowed domains/URLs
Phase 5: Monitor Impact After Disavowing
Disavowing doesn't guarantee instant ranking recovery. Monitor for positive/negative changes.
Track Rankings Weekly
Before disavowing: Record baseline rankings for 10-20 key terms
After disavowing: Track weekly changes
- Rankings improve: Toxic links were harming you
- Rankings drop: Over-disavowed valuable links (reverse disavow)
- No change: Links weren't affecting rankings (Google already ignoring them)
Monitor Google Search Console
Coverage report:
- Check for new manual actions (shouldn't appear if disavow was correct)
- Monitor organic traffic trends
Links report:
- Track if new spam links appear (indicates ongoing negative SEO)
Re-audit Link Profile After 3 Months
Quarterly audits catch new toxic links:
- Export fresh backlinks from Ahrefs/Moz
- Compare to previous audit
- Identify new spam domains
- Update disavow file, resubmit
Phase 6: Request Reconsideration (If Manual Action Exists)
Manual actions require reconsideration requests after disavowing.
Check for Manual Actions
Search Console → Manual Actions
Common manual actions:
- "Unnatural links to your site"
- "Unnatural links from your site"
Submit Reconsideration Request
- Search Console → Manual Actions → Request Review
- Explain actions taken:
I've disavowed 347 toxic backlinks from spammy domains identified in my link audit. These links were built without my knowledge/were part of an old SEO campaign I've discontinued. I've also removed 12 paid directory links by contacting webmasters. Disavow file has been submitted. - Submit request
Processing time: 1-4 weeks Possible outcomes:
- Action revoked: Manual penalty lifted, rankings recover
- Action remains: Google wants more links removed/disavowed
Follow Up if Reconsideration Denied
Google provides feedback in denial message:
- "We still see unnatural links from..."
- Identify additional bad links
- Disavow more aggressively
- Submit new reconsideration request
Common Disavow Mistakes to Avoid
Mistake 1: Disavowing Nofollow Links
Nofollow links don't pass PageRank. Google ignores them for ranking purposes.
Don't disavow:
domain:twitter.com
domain:facebook.com
Social media links are nofollow by default — disavowing is pointless.
Mistake 2: Disavowing High-Authority Domains
DA 50+ domains are rarely toxic, even if link seems unrelated.
Example: Don't disavow:
nytimes.com(even if link is in comments section)wikipedia.org(even if link is in external links section)github.com,linkedin.com,medium.com
Exception: If you paid for link on high-authority site and Google penalized you, disavow specific paid page, not entire domain.
Mistake 3: Disavowing All Low-DR Domains
Low Domain Rating ≠ toxic. Many legitimate small sites have DR <20.
Vet manually before disavowing low-DR links from:
- Local business directories
- Niche blogs in your industry
- Customer testimonials on client sites
Mistake 4: Not Backing Up Disavow File
Disavow tool doesn't version control. If you resubmit, old file is replaced entirely.
Best practice:
- Save each version:
disavow-2026-01.txt,disavow-2026-02.txt - Keep spreadsheet of disavowed domains with reasons
- Don't accidentally remove previously disavowed domains when adding new ones
Advanced: Undo Disavow (Remove Links from Disavow File)
Over-disavowing happens when valuable links are mistakenly disavowed.
Remove Domains from Disavow File
Edit .txt file:
# Before (disavowed all these domains)
domain:site1.com
domain:valuable-site.com <-- mistake, remove this
domain:site3.com
# After (remove valuable-site.com)
domain:site1.com
domain:site3.com
Resubmit updated file to disavow tool.
Processing time: 1-7 days for Google to process, weeks/months for full effect as Google recrawls.
Completely Remove Disavow File
To stop disavowing all links:
- Disavow tool → Upload empty
.txtfile (file with no URLs) - Google clears disavow list
Use case: Testing if disavows are helping or hurting rankings.
Frequently Asked Questions
How long does it take for disavowed links to stop affecting rankings?
Initial processing: 1-7 days for Google to accept file. Full effect: 4-12 weeks as Google recrawls disavowed domains and recalculates rankings. Manual action recovery (if applicable) happens after reconsideration request approval, typically 2-4 weeks.
Should I disavow links from competitors trying to harm my site?
Only if negative SEO attack is obvious (thousands of spammy links appear suddenly with toxic anchors). Google's algorithms usually ignore negative SEO automatically. Disavow if: (1) Manual action received, (2) Rankings dropped dramatically after link spike, (3) Links are clearly malicious (adult/gambling/pharma from foreign domains). See crawl budget optimization for related issues.
Can I disavow links before Google penalizes me?
Yes. Proactive disavowing is safer than waiting for penalties, especially if you know your link profile contains paid/spammy links from old SEO campaigns. However, don't disavow legitimate links just because they look "suspicious" — over-disavowing hurts more than natural spam accumulation.
Do I need to contact webmasters before disavowing?
Google recommends attempting removal first: contact webmasters requesting link removal, then disavow links that can't be removed. Practically, contacting hundreds of spam sites is futile — most won't respond. Reasonable approach: Contact legitimate sites where you have real relationships, disavow obvious spam domains directly without contact attempts.
Will disavowing competitor backlinks help my rankings?
No. Competitor analysis tools show competitor backlinks, but disavowing them doesn't transfer their link equity to you. You can only disavow links pointing to your site. If competitors have better backlinks, you need to build your own quality links through outreach and content marketing, not disavow theirs.
When This Fix Isn't Your Priority
Skip this for now if:
- Your site has fundamental crawling/indexing issues. Fixing a meta description is pointless if Google can't reach the page. Resolve access, robots.txt, and crawl errors before optimizing on-page elements.
- You're mid-migration. During platform or domain migrations, freeze non-critical changes. The migration itself introduces enough variables — layer optimizations after the new environment stabilizes.
- The page gets zero impressions in Search Console. If Google shows no data for the page, the issue is likely discoverability or indexation, not on-page optimization. Investigate why the page isn't indexed first.