Link Profile and Penalty Recovery

The first question, and the one almost everyone gets wrong

Traffic falls. Someone says the word penalty. Within a week a proposal arrives for a link cleanup and a disavow file, and money moves before anyone has established what actually happened.

There are two entirely different conditions here, they look identical from the outside, and they share no remedy.

A manual action is a decision made by a human reviewer at Google. It is binary and it is visible: it appears in the Manual Actions report in Search Console and nowhere else. If that report is clean, you do not have one. There is no such thing as an invisible manual penalty, and anyone who tells you a site is penalized without pointing at that report is guessing or selling.

Algorithmic suppression is not a penalty at all. It is the ordinary operation of ranking systems reassessing a site, usually around a dated update, and concluding that other content deserves the position more. It is reported nowhere. There is nothing to appeal, no review to request, and no file to submit. The response is a different discipline entirely.

Establishing which one you are looking at is the core of this engagement, because every subsequent decision — including whether to spend anything at all — follows from it.

If Search Console shows a manual action

Then the path is defined, and it is the more tractable of the two. Google documents sixteen manual action types:

• Back button hijacking; cloaking and sneaky redirects; sneaky mobile redirects; cloaked images
• Hidden text and keyword stuffing; thin content with little or no added value
• Unnatural links to your site — a pattern of unnatural, artificial, deceptive or manipulative links pointing at it
• Unnatural links from your site — paid or deceptive outbound links
• User-generated spam; site abused with third-party spam; spammy free host; site reputation abuse
• Structured data issue; AMP content mismatch
• Major spam problems, covering aggressive techniques and repeat violations
• News and Discover policy violations

Each one names the violation and, in most cases, the affected pages or sections. The remediation sequence is prescribed: expand the description, identify every affected page, follow Google's linked guidance for that specific violation, fix it on all affected pages rather than a sample, confirm Google can actually reach those pages — no login, no paywall, no robots.txt block sitting over the fixed content — and only then submit a reconsideration request describing what was changed.

On timing, Google states that most reconsideration reviews take several days or weeks, and that link-related requests in particular may take longer than usual. The list of documented types and the process are on Google's manual actions report page.

If the report is clean, this is something else entirely

Then the work is diagnosis, not remediation, and starting with links would be starting in the wrong place. Google documents seven causes of a search traffic drop, and links appear in only one of them.

1. Algorithmic updates — core updates and smaller ones. Correlate the start of the decline against dated update windows. An algorithmic drop typically hits at template or topic level rather than a specific set of URLs.
2. Technical issues — crawling and indexing errors, server downtime, robots.txt problems. Google's instruction is direct: check the Crawl Stats and Page Indexing reports for a corresponding spike in issues.
3. Security threats — malware or phishing warnings, which appear in Search Console under their own report.
4. Spam violations, detected automatically or by manual review.
5. Seasonality — compare against the same period a year earlier, not against last month.
6. Changing user interests — demand for the query itself declining, which is visible as impressions falling rather than position falling.
7. Reporting glitches.

The instrumentation separates them. A technical cause shows corroborating evidence in the crawl and indexing reports. An algorithmic cause shows a clean technical picture, a dated onset, and a pattern by template or topic. Impressions falling while position holds is a demand problem, not a ranking problem — and a great deal of money has been spent on link cleanups that were, on the evidence, a seasonal comparison error.

The disavow tool, and why most sites should never touch it

This is where an honest engagement diverges most sharply from the market. Google's guidance is plain: in most cases Google can assess which links to trust without additional guidance, so most sites will not need to use this tool.

The documented precondition for using it is narrow. You should have both a considerable volume of spammy or low-quality links pointing at the site and a manual action, or a strong likelihood of one. It is a manual-action remediation instrument, not routine hygiene and not a quarterly service. A proposal offering a recurring disavow for a site with a clean Manual Actions report is recommending something Google's documentation advises against — a reasonable point at which to stop reading it.

Where it genuinely applies, the file specification is exact and worth stating because badly formed files fail silently: one URL or domain per line; UTF-8 or 7-bit ASCII encoding; a .txt extension; a maximum of 2,048 characters per URL; a maximum of 100,000 lines including blank lines and comments; and a maximum file size of 2MB. Domain-level entries use the domain: prefix, and comments start with #. Google states it can take a few weeks for a submitted list to be incorporated as pages are recrawled and reprocessed. The specification is on Google's disavow links page.

Disavowing carries risk in the other direction too: a broad domain-level file built from a tool's score can remove links that were working, and nothing reports that afterward.

What a link profile review actually consists of

When one is warranted — during a manual action for unnatural links, before an acquisition, or when a site has a documented history of paid link buying — the work is inventory and classification, not scoring.

The link inventory is assembled from multiple sources, since no single index sees everything, then sorted into categories that mean something operationally: links you or a previous provider procured; links from sites that exist to sell links; links from sites hacked or abused by third parties; unqualified paid links; and everything else, which is normally the overwhelming majority and needs nothing done to it.

Removal is attempted before disavowal where the link was placed on your instruction, because removal is the actual remedy and disavowal is the fallback for what cannot be reached. Documenting those attempts matters: a reconsideration request is read by a person who wants evidence of effort.

What does not happen is running a third-party toxicity score and disavowing everything above a threshold. Those scores are vendor models, not Google signals, and treating a model's output as a penalty diagnosis is how sites end up disavowing links that were earning them rankings.

Paid links: the violation is the disclosure, not the transaction

This is widely misunderstood and it changes what needs fixing. Google's spam policies cover link spam — buying and selling links, exchanges, automation, and unqualified paid links. But the carve-out is explicit: buying and selling links for advertising purposes is permitted when the links are qualified with rel="nofollow" or rel="sponsored". Google's own wording is that it is not a violation to have such links as long as they are qualified.

So the violation is the unqualified paid link, not the commercial arrangement. That reframes the remediation on a site with a sponsorship program, an affiliate arrangement or a paid placement history: the answer is frequently to add the correct attribute rather than to unwind the relationship. It also means an audit of outbound links is part of this work whenever the manual action concerns unnatural links from your site, which is a different violation from unnatural links to it and gets confused with it constantly.

What you receive, and what cannot be committed to

The first deliverable is a written determination: manual action or not, and if not, which of the documented causes the evidence supports, with the instrumentation that establishes it. That document sometimes concludes that no remediation is warranted, and that is a legitimate result rather than a failed engagement.

Where a manual action exists, the deliverables are the affected-page inventory, the remediation record, the removal correspondence log, the disavow file if one is genuinely warranted, and the reconsideration request itself. Where the cause is algorithmic, the deliverable is an assessment of what changed and where the site now stands against the content that outranks it — which is a content and positioning problem, and should be handed off as one rather than dressed up as a penalty.

Cost is driven by how many links have to be classified and how many pages a violation touches. And the clearest signal that it worked is narrow: the manual action disappears from the report. Traffic afterward is a separate question.

On outcomes, the correct citation is Google's own. Some changes take effect in a few days while others could take several months, and there is no guarantee that changes you make to your website will result in noticeable impact in search results. Google says that on its page about debugging traffic drops. Any provider who tells you recovery is certain is contradicting the search engine in writing, which is a useful thing to notice while comparing quotes.

When you do not need this

If the Manual Actions report is clean and the decline started at a dated core update, buying penalty recovery is buying the wrong service. The work that follows an algorithmic reassessment is content quality, topical depth and positioning against whatever now outranks you — slower, less satisfying, and not a cleanup.

If the decline coincides with a migration, a redesign, a platform change or a robots.txt edit, this is a technical problem and the crawl and indexing reports will usually say so within an hour of looking.

If nobody has ever bought a link, run a link campaign, or inherited a domain with a history, a link profile review will almost certainly conclude that the profile is unremarkable. Google works to make sure actions on third-party sites do not negatively affect a site, and the routine assumption that competitors have poisoned a link profile is, on the evidence of most inventories, unfounded.

And if the traffic never existed at the level being mourned — a spike from one seasonal query, or a page that briefly ranked for something unrelated — establish that before commissioning a recovery for it.

Frequently Asked Questions

Published 2026-08-11