Google’s link-spam policy bans any link built mainly to manipulate search rankings through unethical SEO (search engine optimization) tactics.
This includes manipulative practices like buying or selling backlinks that pass ranking credit, automated backlink creation, excessive backlink exchanges, and other manipulative link schemes. Avoid these to keep your site’s SEO safe.
Google has not announced a dedicated link-spam Update since 2022.
In 2026, the March, June, and August releases were normal Spam Updates, as seen in the Google Search Status Dashboard.
So Google’s existing link-spam policy remains the standard for evaluating whether a link building practice violates its guidelines.
The Short Version
- Google’s policy bans buying links, automated link schemes, and excessive link exchanges.
- Paid links can comply with Google’s guidelines when they use rel=”sponsored” or rel=”nofollow” to qualify the link.
- The March, June, and August 2026 spam updates specifically excluded link-spam.
- A manual action and an algorithmic devaluation recover differently, and one takes far longer.
- There’s no official percentage for anchor text or a safe number of new links per week.
- Links other sites point at you, without your involvement, rarely need a disavow.
What Counts as link-spam Under Google’s Own Definition
Google defines link-spam as any link built to manipulate your site’s ranking in search results. It isn’t a link that helps a genuine reader find something valuable.
In practice, link-spam covers four common manipulative patterns:
- Buying or selling backlinks that pass authority to a page.
- Using automated software to mass-produce links.
- Swapping links with other sites only to cross-link rather than helping either site’s readers.
- Stuffing links into widgets, footers, or forum comments across many sites.
Google draws one clear exception to the first link-spam pattern. Paying for a link is fine as long as it carries an appropriate rel value, since that value tells Google not to pass ranking credit through it.
How to Actually Add These Tags (the Technical Part)
If you paid for a link, you need to tell Google. Here’s how:
- Find the link code on your website (usually in your website’s HTML or your hosting provider’s editor).
- Change this: <a href=”https://example.com”>click here</a>
- To this: <a href=”https://example.com” rel=”sponsored”>click here</a>
- Save and publish.
If you’re not comfortable with code, ask your web designer or hosting provider to add rel=”sponsored” or rel=”nofollow” to any paid links.
Buying or selling links only counts as spam when no such tag marks the exchange for what it is.
Ranking credit means the ranking value Google may associate with a link. rel=”sponsored” and rel=”nofollow” tell Google not to treat the link as a normal ranking signal.
Even a properly tagged paid link is still not the same thing as a normal editorial link, the kind a real editor adds because your page was genuinely useful to their readers.
These practices fall under manipulative link schemes because they attempt to influence Google Search rankings rather than earn editorial backlinks.
If you’re only building links one at a time, through real outreach to real site owners, you’re not close to any of this list.
How Google’s link-spam Enforcement Has Changed Since the Penguin Algorithm
Google used to run enforcement as periodic updates, like Penguin. Now it runs continuously, using systems like SpamBrain.
Google introduced Penguin in 2012 as its first major link-spam algorithm.
It became a permanent part of the core algorithm in 2016.
SpamBrain is Google’s machine-learning system for detecting search spam and has been continuously improved since its launch in 2018.
The last update actually named for link-spam specifically shipped in December 2022. That’s the last update Google explicitly named as a link-spam update.
Since then, Google’s specifically named spam updates have been broader spam updates rather than updates dedicated to link-spam. That includes the Google Spam Update from March 2026:
It includes the June 2026 Google Spam Update:
And the recent 21st August 2026 Google Spam Update:
All three are reported as not targeting link-spam.
As Search Engine Land reported in May 2026, Google clarified that its spam policies extend to manipulating AI-generated search responses. That includes AI Overviews and AI Mode.
Most of them, including the three biggest ones this year, were never about link-spam.
Does Google’s Latest Link-Spam Update Target Your Backlinks?
No. The August 2026 spam update rolled out from August 18 to August 21, and it did not target link-spam.
If your rankings changed during that window, don’t assume your backlinks caused it. Check three things, in this order:
Google’s Own Announcement
Google posts the scope of every spam update on the Search Status Dashboard, including whether link-spam is in scope. Google’s August 2026 spam update was reported as not targeting link-spam.
Independent Confirmation From SEO News Sites
Search Engine Roundtable and Search Engine Land both track spam updates the day they roll out and report exactly what Google said about scope.
For example, Search Engine Roundtable reported on the Google August 2026 spam update rollout the same day it completed, August 21, 2026.
https://x.com/seroundtable/status/2090733075885945015
If a site claims an update targeted link-spam and Google’s own dashboard doesn’t say that, trust the dashboard.
Your Own Search Console Data
Open the Performance report, filter by date, and compare your ranking or traffic changes against the update’s rollout window. For this update, that’s August 18 to August 21.
A drop that started before the 18th or after the 21st isn’t due to this update.
What you do next depends on what those three checks turn up:
| IF YOU FIND… | DO THIS |
|---|---|
| The dashboard confirms link-spam wasn’t in scope, and your traffic drop lines up with the rollout dates | Look elsewhere for the cause. A content quality update, a technical issue, or a seasonal shift is more likely than your backlinks to be the reason. |
| The dashboard confirms link-spam wasn’t in scope, but your dates don’t match the rollout window | The update isn’t related. Check Search Console for a manual action message first, then review other changes you made around the date your traffic shifted. |
| Your Search Console shows a Manual Actions report entry naming specific links | Fix the specific links or issues Google flagged, then request a review in Search Console. |
| Nothing in Search Console, no dashboard match, but you’re still unsure | Wait. Google said recovery from algorithmic changes runs on its own schedule, and reacting before you’ve confirmed a cause usually wastes more time than it saves. |
Most site owners skip the checks entirely. They see “Google update” in a headline and assume the worst. That wastes energy better spent on actual link building.
What’s Still Fine, Even Though It Looks Risky
Paid links, guest posts, and reciprocal links aren’t automatically against policy, but Google’s enforcement has tightened, and proper execution now matters enormously.
| PRACTICE |
STATUS |
CONDITION |
|---|---|---|
| Paying for a link |
Can be compliant | Carries a nofollow or sponsored tag |
| Guest posting |
Can be compliant | Real content for a real audience, not just a vehicle for a link |
| Reciprocal linking |
Can be compliant | Occasional, and each site links because the other page is genuinely useful |
| Buying a link with no tag, passing full ranking credit |
Against policy | No condition makes this fine |
| Trading links at scale just to trade links |
Against policy | No condition makes this fine |
The mechanism behind the first row in the table is simple.
The nofollow and sponsored link attributes tell Google how to qualify links that should not pass normal ranking signals.
The ugc attribute identifies links placed within user-generated content, such as comments and forum posts.
Add one of these, and paying for the placement stops being a policy violation.
Most people skip the tag entirely, not because they’re hiding anything, but because nobody told them it existed.
Guest posts and niche edits deserve their own deep dive. For a deeper look at how existing-content placements work, see how niche edits actually work.
Both stay compliant here as long as the content itself is genuinely useful, not just a container for the link.
Why Manual Actions and Algorithmic Devaluations Recover Differently
A manual action means a real person at Google reviewed your site and flagged it manually, while an algorithmic devaluation is done by automated systems.
You’ll always see a message about it in Search Console, Google’s free tool for tracking how your site performs in search.
An algorithmic devaluation is different. No manual-action notification is generated, because the change comes from Google’s automated systems.
Rankings can drop when Google’s systems stop crediting manipulative links, though the timing and size of the drop vary by site.
With a link-spam update, Google says that once its systems remove the ranking effects of spammy links, the previous benefit from those links cannot be regained.
Google’s own spam policy documentation is direct about this.
To resolve a manual action, you need to fix the issues Google identified and then request a review in Search Console.
An algorithmic devaluation has no review to request.
You wait for Google’s systems to reassess your site on their own schedule.
Manual actions usually leave a clear trail in Search Console because Google identifies the issue in the Manual Actions report.
Algorithmic ranking changes typically do not produce a manual-action notification, so you may first notice them through changes in rankings, impressions, or organic traffic.
A traffic drop alone does not prove that an algorithmic devaluation caused it.
If a manual action points at specific toxic links you can identify, when to disavow backlinks walks through the narrow cases where removing or disavowing them actually helps.
If Someone Else Is Spamming Your Backlink Profile
Links you didn’t build rarely need action. Google filters most spam automatically. Only disavow after a manual penalty or obvious attack.
Negative SEO means someone deliberately points spammy, artificial backlinks at a competitor to get them penalized.
Google says it works to prevent actions on third-party sites from negatively affecting your site. Most sites do not need to disavow random backlinks they did not create.
You can check whether the links pointing at you are actually a problem by working through the signals that flag artificial incoming links.
A light, occasional check is still worth the ten minutes it takes, even though panic is not.
Rejecting toxic links through a disavow file only makes sense for a small, identifiable cluster, not your whole profile on a hunch.
What Google Checks About Anchor Text and Link Velocity
Google monitors anchor text distribution across your profile, link acquisition velocity for suspicious spikes, and whether patterns match legitimate business activity or manipulation.
Google does not publish a recommended anchor-text percentage or a weekly target for new referring domains.
Anchor texts are the clickable words inside a link, like a sign on a door describing what’s behind it.
Link velocity is the pace at which new referring domains, separate websites linking to you, start pointing at your site.
You’ll see specific numbers thrown around online.
None of them come from Google:
- A maximum anchor text percentage
- A safe count of new referring domains per week
- A reciprocal link ceiling
They’re estimates from individual SEO tools and agencies, presented with more confidence than the underlying data supports.
Treating someone else’s guess as an official rule is how confident beginners become paranoid.
None of this means link metrics stop mattering.
Domain Rating is Ahrefs’ 0 to 100 score for how strong a site’s backlink profile looks.
It’s still a useful signal to watch over time.
It just isn’t a compliance threshold Google publishes anywhere.
The same fabricated precision shows up elsewhere in link building advice, and we covered other assumptions worth double-checking.
In auditing our clients’ backlink profiles, we found that some of their sites had at least one paid link missing a nofollow tag. It wasn’t an intentional policy violation, just a simple oversight.
Run This Check Before Your Next Link Building Push
Before you build another link, run a quick compliance check against everything above.
Confirm every paid placement carries a nofollow or sponsored tag; skip any tactic built purely to trade links rather than earn them.
Check whether a new update actually names link-spam before you react. Then glance at your backlink profile every few months for anything that looks planted rather than earned.
Want to Build Links Without Crossing Google’s Spam Guidelines?
Get a practical link building approach to earning quality backlinks through genuine outreach.
Does buying links always violate Google’s spam policy?
Paid links used to advertise or sponsor content can comply with Google’s spam policies when properly qualified with rel=”sponsored” or rel=”nofollow”. They must not be intended to pass ranking signals.
Google treats paid links as a normal part of the web’s advertising economy as long as that tag is in place to block ranking credit.
Can editorial links be earned without risking Google’s spam policy at all?
Yes. Editorial links happen when a publisher chooses to link to genuinely useful content, with nothing exchanged for the placement, which is exactly the kind of link Google’s policy has no issue with. A trusted link building agency earns links this way, keeping a profile clean enough that it never resembles the manipulated patterns Google actually targets.
Did the August 2026 spam update target link-spam?
No. Google confirmed the August 2026 update, like the March and June updates before it, excluded link-spam from what it targeted. All three named 2026 spam updates left link-spam untouched.
What’s the difference between a manual action and an algorithmic devaluation for bad links?
A manual action means a real person at Google reviewed your site and flagged it, and it always shows up as a message in Search Console.
An automated ranking change, or algorithmic devaluation, happens silently. There’s no message and no review to request, since Google’s systems simply stop trusting the links behind your rankings.
Is there an official safe anchor text percentage or link velocity Google recommends?
No. Google has never published a safe anchor text percentage or a safe number of new referring domains per week. Any specific numbers you see online come from individual SEO tools or agencies, not from Google itself.
If you want a clearer benchmark, natural link velocity breaks down what a healthy pace looks like.
Do I need to disavow links other sites built to me without my involvement?
Rarely. Backlinks you did not create usually do not require action unless they meet Google’s criteria for disavowal.
Google recommends disavowing backlinks only when you have a considerable number of artificial or low-quality links. They must also have caused, or be likely to cause, a manual action.
