Negative SEO is the use of unethical tactics to harm another site’s search rankings. The attacker does not improve their own site. They try to damage yours, for example by pointing thousands of spam links at it, hacking it or copying its content across the web.
This guide explains the main types of negative SEO, how to tell an attack from an ordinary ranking drop, what Google says about spam links, and what to do if you think you are being targeted. It is written for site owners, not specialists.
Negative SEO exists, but most ranking drops have other causes, such as a search update or a competitor improving. Google says in its guidance on disavowing links that it can usually assess which links to trust without extra guidance, so most site owners do not need the disavow tool. Protect your site, watch Search Console, and investigate before you act.
Table of contents
What negative SEO is
Normal SEO tries to help your own site rank. Negative SEO does the opposite to someone else’s site. The person behind it may be a competitor, a disgruntled former employee, a hacker or someone with a grudge.
The idea is to make a site look as though it broke the rules, or to make it work less well. Google’s spam policies describe the kinds of behaviour that can lead to lower rankings, and some attacks are built to make a target look as if it was involved in them.
Types of negative SEO
These are the tactics most often described. Each works differently, and each has a different fix.
Spam links
The attacker builds many low quality or unrelated links to your site, hoping Google will think you bought them. Google’s spam policies define link spam as creating links to or from a site primarily to manipulate search rankings.
Hacking
The attacker breaks into your site and changes pages, adds hidden links or content, injects malware or redirects visitors. Google describes hacked content as content placed on a site without permission because of security weaknesses.
Content scraping
Your pages are copied to other sites, sometimes in large numbers. Google’s policies describe scraping as taking content from other sites, often through automated means. In most cases the original still ranks, but the copies can confuse things.
Fake removal requests
Someone contacts sites that link to you, pretending to be you, and asks them to remove the links. This takes away real links without your knowledge.
Fake reviews and smear campaigns
Fake negative reviews, false accusations and fake profiles that damage your reputation. These affect customers’ trust and, for local businesses, how prominent your profile looks.
Overloading your server
Large numbers of automated requests slow your site down or take it offline. If search engines cannot reach your pages, they cannot show them.
Is negative SEO real?
Yes, but it is rarer than people fear, and it is often blamed for drops that have other causes. Google has said in its guidance on disavowing that it can assess which links to trust without additional guidance, which is one reason a wave of spam links often does little harm. Hacking and heavy scraping are different: they cause real damage and need action.
It is also worth remembering that attackers need time, money or skill, and most small sites are not worth the effort. For a competitive niche or a high profile brand, the risk is higher, and it is sensible to watch for signs.
Signs of an attack
Check these in Search Console and your analytics. One sign alone is rarely proof.
- A sudden jump in odd links. The Links report lists top linking sites and top linked pages. Look for many links from unrelated or spammy sites, especially with strange anchor text.
- A manual action. The Manual actions report shows when a human reviewer decided pages do not comply with Google’s spam policies.
- Security warnings. The Security issues report shows hacked content, malware and deceptive pages.
- Pages you did not create. Unknown pages, hidden text or odd redirects in the site or in search results for your name.
- Traffic and rankings falling suddenly. Especially if it happens on many pages at once.
- Slow or unavailable site. Look at your hosting logs for strange spikes in requests.
- Odd reviews. A burst of negative reviews from accounts with no history.
When it is not negative SEO
Most ranking drops are not attacks. Before you blame one, rule out the common causes.
- A search update. Google changes its systems often, and sites can rise or fall as a result.
- A competitor improving. They may have published better pages or earned good links.
- Your own change. A redesign, a migration, a changed URL or a new plugin can break something.
- A technical fault. A page set to noindex or blocked in robots.txt will drop out of results.
- Seasonal demand. Interest in many topics rises and falls through the year.
- Old problems. Weak content or low quality links that you built yourself.
Check dates carefully. Compare the date of the drop with changes to your site, search updates and anything in Search Console. An answer often shows up in the timeline.
What to do if you think you are targeted
- Do not panic. Rash changes can cause more damage than the attack.
- Check the basics. Confirm that pages are indexable, the site loads and nothing has been changed that you did not approve.
- Review Search Console. Look at manual actions, security issues and the links report.
- Take a record. Save screenshots and exports, with dates, of the links, pages and reviews that worry you.
- Fix what is under your control. Clean up hacked pages, change passwords, update software and restore from a clean backup.
- Report what you can. Report fake reviews on the platform, ask hosts to remove scraped copies and contact owners of sites that copied your content.
- Request a review if there is a penalty. Google says to fix the issue on every affected page, then use the Request Review option in the report.
- Get help for serious cases. A hacked site or a manual action is worth professional help.
When to use the disavow tool
The disavow tool asks Google to ignore specific links to your site. Google describes it as an advanced feature that should be used with caution, and says misuse can harm your site’s performance in search results.
Google says the tool is for cases where you have a manual action for unnatural links, or expect one because of paid links or other link schemes, and where you have many spammy or low quality links. Even then, try to have the links removed first.
When not to use it
- You see a few odd links in a report
- Your traffic dropped and you have not found the cause
- A tool shows a high “toxic score”
- You want to be safe, with no evidence of a problem
For ordinary sites with a few poor links, doing nothing is usually the right choice.
How to protect your site
Good habits make an attack harder and easier to spot.
- Secure logins. Use strong, unique passwords and two step verification for your site, hosting, email and Search Console.
- Keep software updated. Out of date themes and plugins are a common route for hackers.
- Back up regularly. A clean copy lets you recover quickly.
- Limit access. Give each person the minimum permissions and remove people who leave.
- Use Search Console alerts. Turn on email notifications so you hear about issues quickly.
- Monitor links and mentions. Check the links report each month and keep a baseline.
- Watch your content. Search for a sentence from a key page in quotation marks to find copies.
- Protect your reputation. Reply to reviews and report fakes promptly.
Local businesses and fake reviews
For a local business, the most likely form of attack is not links. It is a burst of fake negative reviews, or a change to your listing details that you did not make. Google’s page on managing customer reviews says you can flag a review that violates its content policies, and that you must verify your business before you can reply to reviews.
- Keep a record. Save screenshots of the reviews, with dates and reviewer names.
- Flag the ones that break the rules. Use the platform’s report option for each one.
- Reply calmly. A short, polite reply helps other readers more than an argument.
- Check your listing. Look for changes to your name, address, phone number or website.
Negative SEO vs bad SEO
Searchers often ask what “bad SEO” means. It is not the same as negative SEO. Bad SEO is harmful work done by or for the site owner, such as buying links, stuffing keywords or copying content. Google’s spam policies describe keyword stuffing as filling a page with keywords or numbers in an attempt to manipulate rankings.
Negative SEO is something done to you. Bad SEO is something done by you, or by a provider you hired. In practice bad SEO is the more common cause of problems, which is why choosing a provider carefully matters. Our SEO guide covers the basics of doing it properly.
Negative SEO FAQ
What is negative SEO?
It is the use of unethical tactics, such as spam links, hacking or content scraping, to try to harm another site’s rankings.
What does “bad SEO” mean?
It means search practices that break the rules or harm a site, such as buying links, stuffing keywords or copying content. It is usually done by the site owner or a provider, not by an outside attacker.
What does SEO actually mean?
SEO stands for search engine optimization, the work of improving a site so it can be found in search results.
Is SEO dead now with AI?
No. Google says in its page on AI features and your website that the best practices for SEO remain relevant, so protecting your site’s health and reputation still matters.
Can competitors really hurt my rankings?
They can try, and hacking or heavy scraping can do real damage. A few spam links usually do little, because Google says it can generally assess which links to trust. Treat each case on the evidence.
Should I hire someone to check?
If you have a manual action, a security warning or a sudden large loss of traffic, yes. For a minor worry, a review of Search Console and your site is a sensible first step.
Where to start
Start by checking three reports in Search Console: Manual actions, Security issues and Links. If all three look normal, a ranking drop probably has another cause. Compare the date of the drop with changes to your site and with search updates, and fix any technical faults first.
If you want a second opinion, Torplix offers a free audit of your site, with a written list of fixes in priority order. It is yours to keep whether or not you work with us, and we do not promise rankings. See our technical SEO service for how we work.
