Link toxicity is a risk score assigned by SEO tools — Semrush, Ahrefs, Moz — to individual backlinks, estimating how likely each is to harm rather than help your search rankings. Google does not publish toxicity scores; these are third-party estimates based on signals like the linking site's spam history, de-indexation status, anchor text over-optimisation, and membership in known link networks. The average site carries 5-15% potentially toxic backlinks.
Most businesses carry toxic links they did not ask for — built by a previous agency, acquired through negative SEO attacks, or accumulated from directory submissions that have since been flagged as spam. Understanding link toxicity is the first step to protecting your rankings from the damage these links cause.
What is link toxicity?
Link toxicity is not a Google-defined concept. Google's systems — specifically the spam-detection algorithms that replaced Google Penguin as a separate filter and absorbed it into the core algorithm in 2016 — evaluate links using their own internal signals. What SEO tools sell as "toxicity scores" are approximations of how likely a link is to be flagged by those systems.
Tools calculate toxicity scores based on signals including:
- Index status of the linking domain: De-indexed or recently penalised domains score high on toxicity
- Spam history: Domains previously flagged for hosting malware, cloaking, or selling links
- Outgoing link diversity: Sites linking to thousands of unrelated domains with exact-match anchor text are strong toxicity signals
- Anchor text patterns: Over-optimised commercial anchor text on otherwise low-authority pages
- Private blog network (PBN) signals: Footprint patterns indicating a site is part of a link network
- Topical irrelevance at scale: A gambling site linking to a dental clinic with "best dentist" anchor text combines multiple toxic signals
Before 2016, Google Penguin ran as a periodic algorithm update — sites were penalised in batches and recoveries could take months. Since Penguin became part of the real-time core algorithm, Google now devalues suspicious links continuously rather than applying site-wide penalties. The practical result: concentrated toxic profiles can still suppress rankings and trigger manual actions, but isolated low-quality links have less impact than they once did.
Why link toxicity matters for your site
Even if you have never hired a black-hat SEO agency, your link profile can accumulate toxic links through three routes:
- Legacy links from previous agencies. Many businesses discover that an agency they paid 3-5 years ago built links through PBNs, comment spam, or directory farms. These links remain in your profile indefinitely unless actively disavowed.
- Negative SEO attacks. Competitors or malicious actors can point thousands of spammy links at your site to trigger spam filters. Monitoring detects these attacks early enough to disavow before damage occurs.
- Natural profile drift. Link farms and spam networks scrape real sites and auto-link to them. Any visible site can accumulate these links organically over time.
The consequence of an unchecked toxic profile ranges from rankings plateauing below where they should be, to manual action penalties that de-index affected pages entirely.
How to audit and fix link toxicity
The cleanup process has four steps:
Step 1: Run backlink audit in Semrush or Ahrefs
Step 2: Sort by toxicity score — review all above threshold
Step 3: Manual review — confirm true positives vs false positives
Step 4a: Email webmaster removal requests for highest-risk links
Step 4b: Add confirmed toxic links to disavow.txt
Step 5: Submit disavow file to Google Search Console
# Monitor rankings over 2-6 months; repeat quarterly
What to include in a disavow file
Only include links you have confirmed are genuinely harmful after manual review. The disavow file format uses one entry per line — either a specific URL or an entire domain:
https://spammy-site.com/links/yoursite
# Disavow entire domain (if all links from it are toxic)
domain:link-farm-network.ru
Toxicity indicators and their severity
| Toxic signal | Severity | Action |
|---|---|---|
| De-indexed linking domain | High | Disavow immediately |
| Known PBN footprint | High | Disavow entire domain |
| Link farm (1,000+ OBLs to unrelated sites) | High | Disavow domain |
| Exact-match anchor on irrelevant site | Medium | Evaluate context; disavow if site is also low-quality |
| Low-authority niche blog (real traffic) | Low | Keep — false positive |
| Spam comment link | Medium | Disavow if site is clearly a spam network |
Real link toxicity case studies
Case 1 — restaurant with inherited agency links
A local restaurant hired a new SEO agency that uncovered 800 links built by the previous agency — from foreign-language directories, comment spam, and link farms. The site carried a toxicity score of 62/100 in Semrush. After disavowing 600 confirmed toxic links and earning coverage in 5 local food publications, the toxicity score dropped to 18/100. Organic traffic recovered to pre-stagnation levels within three months.
Case 2 — B2B SaaS under negative SEO attack
A SaaS company running quarterly audits discovered 40 new toxic links in a single quarter from suspected competitor-driven negative SEO. All 40 were added to the disavow file within one week of discovery. Because the company caught the attack early, no measurable ranking impact occurred. Without the quarterly audit cadence, those links would have continued accumulating undetected.
Link toxicity vs low link quality — what is the difference?
Not every low-quality link is toxic. The distinction matters when building a disavow file.
Low-quality link (keep)
- From a real site with minimal traffic or authority
- No spam signals — just a small blog or local directory
- Passes little equity but causes no harm
- Disavowing it removes even the small equity it passes
- Example: a personal blog post that mentions your brand
Toxic link (disavow)
- From a de-indexed, penalised, or PBN domain
- Active spam signals: thousands of OBLs, exact-match anchors
- May trigger Google spam evaluation
- Disavowing it removes a risk without removing real equity
- Example: a link from a known gambling link farm
5 best practices for managing link toxicity
- Set up link alerts, not just quarterly audits. Ahrefs and Semrush offer email alerts for new backlinks. A sudden spike of 200 new links from suspicious domains is a negative SEO attack — catching it early means disavowing before any ranking damage occurs.
- Always manual-review before disavowing. Automated toxicity scores generate false positives. A legitimate industry blog with DR 12 is not toxic — it just has low authority. Only disavow domains you can confirm are spam networks, PBNs, or de-indexed.
- Disavow at the domain level for confirmed link farms. If one domain has sent 50 toxic links, disavow the entire domain rather than individual URLs.
domain:spamsite.comin your disavow file is more efficient and future-proofs against new links from the same source. - Dilute with new quality links, do not only disavow. Disavowing removes the harm but does not replace the equity. Running a parallel link-building campaign — earning editorial links from industry publications — improves the profile's health signal faster than cleanup alone.
- Keep a running disavow file, not a one-off cleanup. New toxic links arrive continuously. Maintain a living disavow file and update it after every quarterly audit, not as a one-time exercise.
Over-aggressive disavowing is as damaging as ignoring toxic links. If you disavow a real editorial link from a niche publication — because its domain rating is low — you strip yourself of equity you earned legitimately. The disavow tool is for spam. Every link in it should be verifiably harmful, not just low-authority.
Common link toxicity mistakes to avoid
- Treating every low-DR link as toxic: Domain rating is a proxy metric, not a spam score. A DR 15 blog with real traffic and relevant content is not toxic.
- Submitting a disavow file without webmaster outreach first: Google recommends attempting removal requests before disavowing. Document outreach attempts — this is expected practice if a manual action is ever issued.
- Auditing once and considering it done: Toxic links accumulate continuously. A one-time cleanup with no follow-up monitoring is a partial solution at best.
- Panicking over a moderate toxicity score: A site with a 25/100 toxicity score on Semrush and stable rankings does not need emergency action. Prioritise links associated with actual ranking drops or manual action warnings in Search Console.
- Ignoring Search Console manual action alerts: If Google issues a manual action for unnatural links, act immediately. The disavow file alone is not sufficient — you need to also submit a reconsideration request with documented evidence of cleanup efforts.
Frequently asked questions
No. Manual review is essential before submitting a disavow file. SEO tools generate false positives — legitimate niche blogs with lower domain authority are often flagged incorrectly. Only disavow demonstrably spammy, irrelevant, or scheme-based links. Disavowing real links strips you of equity you legitimately earned.
Quarterly for most sites. Monthly checks are appropriate for competitive niches where negative SEO attacks are common, or if you are running active link-building campaigns and want to monitor quality in near real-time. Set up link alerts in Ahrefs or Semrush to catch sudden spikes between audits.
Not always. Since Google Penguin became part of the core algorithm in 2016, Google primarily devalues suspicious links rather than penalising the destination site outright. However, concentrated toxic link profiles — especially those resembling paid link schemes — can still trigger manual actions from Google's webspam team.
A low-quality link comes from a real but low-authority site — a small blog with no traffic. It passes minimal equity but poses no harm. A toxic link comes from a de-indexed site, link farm, or PBN — it may actively trigger spam signals. The distinction matters when deciding what to disavow: disavow toxic links, keep low-quality ones.
Recovery after a disavow and remediation campaign typically takes 2-6 months. Google needs to recrawl and re-evaluate the site's link profile after the disavow file is processed. Recovery is faster when combined with fresh editorial link building to dilute remaining low-quality links and demonstrate positive profile momentum.