# Bad backlinks usually waste money, not rankings

- Episode: P2E04 (Part 2: Link building)
- YouTube: https://www.youtube.com/watch?v=pTa1YMNGnfM
- Page: https://irongoo.com/videos/bad-backlinks
- Duration: 15:38
- Published: 2026-11-08T17:15:00+05:00

Learn why paid backlinks can lose ranking credit without triggering a penalty. Find out how to assess link building risk before you spend, and when disavowing links can do more harm than good.

## What this episode covers

- How Google neutralises unnatural links while they stay live.
- Why no manual action does not prove your backlinks work.
- What to monitor on target pages in Search Console.
- Where manual actions fit into Google's link spam policies.
- How nofollow, sponsored and ugc labels affect paid links.
- When Google's disavow tool is appropriate and why toxicity scores are insufficient.
- Why parasite SEO can lose the host site's authority.

## Key moments

- [00:00 Intro](https://irongoo.com/videos/bad-backlinks?t=0)
- [00:51 The silent default](https://irongoo.com/videos/bad-backlinks?t=51)
- [03:21 What a real penalty looks like](https://irongoo.com/videos/bad-backlinks?t=201)
- [05:45 Attributes and paid links](https://irongoo.com/videos/bad-backlinks?t=345)
- [07:20 Disavow and toxic scores](https://irongoo.com/videos/bad-backlinks?t=440)
- [09:36 Borrowed authority](https://irongoo.com/videos/bad-backlinks?t=576)
- [13:04 The risk map](https://irongoo.com/videos/bad-backlinks?t=784)
- [14:59 Wrap up](https://irongoo.com/videos/bad-backlinks?t=899)

## Transcript

### Intro

Every week someone asks us the same thing. I bought links, nothing happened, am I about to get penalised? Almost always, no. What happened is quieter. You paid, Google stopped counting the links, and nobody sent you a message about it.

That difference drives every decision in link building. If the usual result of a bad link is silence, the real risk of most tactics is wasted budget. Real penalties exist, but they cluster in a few places Google has named in writing. Know which is which and you avoid both kinds of panic: buying junk because nothing bad happened, and disavowing half your profile because a tool turned red.

So let's draw the map: what gets ignored, what gets punished, and what Google polices hardest.


### The silent default

Start with Google's own words. In December 2022 it said its AI spam system, SpamBrain, now neutralises unnatural links. It catches sites buying links and sites that exist to pass them on. And any credit those links passed is lost.

Read that last bit again. Lost, not punished. The default for a link Google thinks is unnatural is that it stops counting. Same idea as 2016, when Google said Penguin now runs in real time and devalues spam signals instead of hitting the whole site.

The update history agrees. The last update Google actually called a link spam update rolled out in December 2022. There have been spam updates since, four of them in 2026 alone, and not one was announced as a link spam update. Our reading: neutralising links has become routine work, not an event.

Here's the awkward bit for anyone selling links. A neutralised link looks exactly like a working one. It's live, it shows up in your backlink tool, and Search Console says nothing. The only symptom is that the rankings you paid for never turn up.

So how do you spot it? Watch the pages the links point at, not the links. In Search Console, compare those pages' impressions and average position for their target queries before the campaign and over the months after. Neutralised links show up as a flat line exactly where the lift should be.

And what does it look like when links do count? In our field work, impressions on the target pages usually move first, then average position on the target queries, and clicks follow. If none of that moves on the pages you built links to, while the rest of the site behaves normally, the links aren't pulling any weight.

Why would Google prefer silence to punishment? Our view, not Google's: silence gives spammers no feedback. A penalty tells you exactly which tactic got caught. A link that quietly stops counting keeps you guessing and keeps you paying. A cheap deterrent, if you're Google.

Claim number one. I never got a manual action, so my links must be working.

No. A manual action is one possible outcome, and the rarer one. Google's own announcement says unnatural links get neutralised and lose their credit, with no message attached. No penalty tells you only that you weren't penalised. Whether the links count is a separate question, and the only honest test is what the target pages do.


### What a real penalty looks like

Now the other side of the map. Google's spam policies say it finds violations with automated systems and, as needed, human review that can end in a manual action. Violating sites may rank lower or drop out of results entirely. A manual action is a person at Google deciding your site broke a named rule.

And it isn't subtle. It shows up in Search Console's Manual actions report and in your messages, with a named reason. For links it reads unnatural links to your site: Google has detected a pattern of unnatural, artificial, deceptive or manipulative links. It can cover some pages or the whole site.

And sellers don't get a free pass. Google has a separate manual action called unnatural links from your site, for a pattern of manipulative outbound links. So a site that sells followed links is betting its own standing on every sale. Worth remembering the next time a seller swears their site is completely safe.

Getting out is a process, not a mystery. Fix the problem, which for links means removing what you can and disavowing the rest. Then file a reconsideration request that explains what you did. If Google agrees, the action is lifted. Compare that with devaluation, where there's nothing to file and nobody to ask.

It helps to know what Google's link spam policy actually lists. Buying or selling links that pass ranking credit. Excessive link exchanges. Automated programs that create links. Optimised anchors in articles, guest posts and press releases. Low quality directory and bookmark links, sitewide footer links, and keyword stuffed forum signatures. Quite the menu.

So where do real penalties cluster? Unnatural links at scale, from obvious high volume schemes. Expired domain abuse and scaled content abuse, both named policies since March 2024. And at the top, the site reputation policy, which covers borrowed authority and gets the most attention from Google. We'll spend proper time on that one.

Claim number two. Buy one link and you're penalised.

That's not how any of this works. A single bought link is the textbook case for neutralising: the credit disappears and the site carries on. Google's own word for what triggers a link manual action is a pattern. One link isn't a pattern. It's usually just money you won't see again.


### Attributes and paid links

Now the link attributes. Since September 2019, nofollow, sponsored and ugc are hints, not commands. Use sponsored for paid links, ugc for comments and forum posts, and nofollow when you don't want to vouch for a page. From March 2020, nofollow also became a hint for crawling and indexing.

Remember why Google switched to hints. It said links carry useful information, like the words describing the target, and that looking at all links helps it spot unnatural patterns. So a nofollow link still gets read. It usually passes no credit, but it still tells Google something about you.

Here's what many people get wrong. Buying links isn't against Google's rules. Google calls buying and selling links a normal part of the web's advertising economy, and fine as long as the links carry nofollow or sponsored. The paid link isn't the problem. The paid link dressed up as an editorial vote is.

Does a labelled paid link do anything for you? Normally it won't pass ranking credit, but it can bring visitors, put your name in front of a relevant audience, and lead to links nobody paid for. Judge it as an advert. If it's worth the price as an advert, buy it, label it, and move on.

A real world version for ReelRadar: it sponsors a film podcast, and the show notes link to the site with a sponsored label. No ranking credit expected. What it buys is listeners who love films, some of whom run blogs and festivals, and some of those link back on their own. That's a sponsorship doing its actual job.


### Disavow and toxic scores

Now disavow, the Search Console tool behind more self inflicted damage than any other. Google's help page says to use it only if you have a considerable number of spammy links, and they've caused a manual action or likely will. It also says most sites will never need it.

Think of disavow as a scalpel that most people use like a leaf blower. It tells Google to ignore links you name. Point it at the wrong ones and you've quietly switched off part of your own authority, and nothing in Search Console will tell you that you did.

So when does disavow make sense? After a manual action for unnatural links, once you've removed what you can. And when you know you, or an SEO you hired, built bad links through paid schemes, which is the exact example Google gives. That's the list. A scary number in a third party report isn't on it.

What about negative SEO, a competitor pointing spam at you? Google says it works very hard to make sure actions on third party sites don't harm a website. Spam you didn't build is exactly what the neutralising systems were made for. We don't lose sleep over it, and neither should you.

Already uploaded a giant disavow file built from a tool score? It's fixable. A new upload replaces the old list, and you can cancel all disavowals for a property. Either way, Google says it takes a few weeks to process as it recrawls the web.

Claim number three. Disavow your toxic links. Every popular backlink tool has a toxicity score now, and plenty of agencies sell clean ups built on it.

Those scores aren't Google's. When Google launched its 2024 spam policies, it said third party reputation or authority scores don't correspond to any of its own signals. A toxicity score is one company's guess. Disavow on that guess and you can throw away links that were helping you, and Google warns the tool can hurt your site when it's used wrongly.

Here's what a typical toxic links report looks like when you actually read it. This is ReelRadar's, with example data. Scrapers copying its pages. Foreign directories nobody built on purpose. Spam blogs that link to everyone. None of it was built by ReelRadar, and Google already ignores this kind of junk. The action list is one old paid link to review. That's it.


### Borrowed authority

Now the most policed tactic on the map: borrowed authority, better known as parasite SEO. You publish third party content on a trusted site so it ranks on that site's reputation. Picture a casino bonus section quietly bolted onto a respected film school's website and run by an outside affiliate. Google made this a named spam policy in March 2024, enforced from May.

Why did this ever work? Google describes the goal itself: content that ranks better than it could on a different site, by riding the host's established ranking signals. A casino guide on its own fresh domain starts from zero. The same guide on a respected domain starts with someone else's years of trust. The policy exists to close exactly that gap.

Google gives examples on both sides. Not okay: an educational site hosting a third party page of sponsored payday loan reviews, or a medical site hosting a low quality best casinos page. Fine: wire services, syndicated news, forums, editorial columns, advertorials clearly meant for readers, and affiliate links handled properly.

In November 2024 Google tightened it. No amount of first party involvement changes the third party nature of the content, so the host's oversight is no excuse. And it answered the obvious workaround: moving the content to a subfolder or subdomain doesn't fix it, and may be seen as an attempt to get around the policy.

Claim number four. Put the parasite content on a subdomain. Technically a separate site, so it's fine.

Google answered that one in writing, and the answer is no. A subdomain on the same domain doesn't solve the problem and may lead to broader action against the site. Moving it to another established site just moves the problem to a new address.

Then in August 2026 the policy changed again. Google renamed it the site reputation policy and, after discussion with the European Commission, changed enforcement in the European Economic Area. From August 30, for users in the EEA, a site reputation manual action no longer applies. Instead the section may be separated so that, over time, it ranks on its own.

Outside the EEA nothing softened. A manual action still hits that part of the site, and owners still get notified in Search Console. Inside the EEA, the separated section loses the host's boost and has to rank on its own merits, which for most parasite content is the entire problem. Those are the rules as of October 2026.

Google also judges site sections on their own, penalty or not. In November 2024 it said it has systems that spot a section starkly different from the main site and treat it like a standalone site. That's not a demotion. The section simply stops getting a free ride on a famous domain.

Google's FAQ even covers moving parasite content after a manual action. To another established site: same problem, new address. To a fresh domain with no reputation: far less likely to be an issue. And don't redirect the old URLs to it, because that may bring the issue back. Hold on to that one. It matters a lot in the next episode.

That's why borrowed authority sits at the far edge of the map. It's the one area where Google keeps rewriting the policy, answers workaround questions in public, and keeps people reviewing cases. If you want reputation, build it on your own domain, where nobody can separate it from you.


### The risk map

Here's the map, put together. Along the bottom, the low risk moves: earned editorial links, digital PR with real data, and paid links that are properly labelled. Top left, the most common fate of grey tactics: unlabelled paid placements and automated junk, which usually just get ignored. In the middle, guest post networks with optimised anchors.

Why is the bottom row safe? Nothing there tries to pass credit Google hasn't agreed to. Earned links and real digital PR are what the system is designed to reward, and a labelled paid link openly opts out. The top left tries to pass credit, gets caught by the neutralising systems, and quietly stops counting.

The right side is where penalties live. Private blog networks. Expired domains flipped into unrelated topics, a named policy since 2024. And on the far edge, parasite sections on trusted sites. The further right a tactic sits, the more you need to know exactly what you're doing.

Why does a private network sit so far right? Because it fails as a group. One owner tends to mean shared habits in hosting, templates, writing and linking, and once one site is spotted the rest are easy to follow. That's a reason for extreme care, not proof it can't work. Both of these get proper episodes later in this part.

A word on reading this picture. The positions come from Google's published policies and our field work. And grey doesn't mean lost. Plenty of it works when it's done precisely, which is what the coming episodes are about. The map just tells you what you're betting.

Use the map before you spend anything. Put the tactic on it and ask two questions. If this goes wrong, do I lose money or rankings? And can this business afford that particular loss? A startup can shrug off a wasted link budget. A clinic that lives on search traffic can't shrug off a manual action.


### Wrap up

The episode on one screen. Silence is the default, penalties are the exception, and the exceptions have names.

So, what to do with it. Stop reading backlink tool colours as Google's opinion, and check the Manual actions report, because that's where real penalties are announced. Label every paid link. Keep disavow for the cases Google describes. And build your authority on your own domain.

The risk map is free as a one page reference on the episode page at irongoo.com. Next: how to rescue a site that really has been buried by toxic links, and when to stop repairing and move.
