Don't Mistake Your Crappy Links for Negative SEO

Every few months a business owner emails me convinced a competitor is doing negative SEO against them. Their rankings tanked overnight. They pulled their backlinks. They found thousands of spammy links. Somebody must be out to get them.

Nine times out of ten, the spammy links have been there for years. They were bought by a previous "SEO" who ran a $199 a month package that built directory and forum links by the thousand. The links sat dormant. Google's algorithm caught up to them. That's not negative SEO. That's a delayed bill.

How to tell which one is happening to you

In 2026 the actual diagnosis is faster than it used to be. Pull your backlink profile from Ahrefs, Semrush, or Google Search Console's link report. Then ask:

• How old are the bad links? If most of them are 5+ years old and come from low-quality directories, forums, comment sections, and PBN-style sites, that's old work catching up. Not an attack.
• How fast did they appear? A real negative SEO attack usually shows up as thousands of links pointing at one URL with one anchor text inside a few weeks. Slow, scattered junk is your old vendor.
• What anchors are being used? Attacks lean heavily on commercial money-keyword anchors (your top earner) or adult/pharma terms to poison your profile. Legacy spam tends to be brand or URL anchors.
• Did rankings drop on a known algorithm date? Google still rolls core updates and spam updates regularly. If your drop lines up with one, you got caught by the algorithm, not a competitor.

What changed since 2012

Three big things shifted that change how you respond.

Google mostly ignores junk links now

Penguin was folded into the core algorithm years ago. The current behavior is to ignore obvious spam rather than penalize sites for it. That's why most disavow files do nothing today. The bad links aren't hurting you, they're just being discounted, and the issue is that your other signals aren't strong enough.

Disavow is a last resort, not a first move

Google's official guidance is to only disavow when you have a manual action or know for a fact you participated in a link scheme. Random disavow uploads can do more harm than good if you accidentally include links that were actually helping you. Don't reach for the disavow file the moment things drop.

Most ranking drops are content quality, not links

Helpful Content System, Core Updates, and the rise of AI Overviews mean ranking drops in 2026 are usually about content depth, freshness, E-E-A-T, and the AI answer eating your click. Don't assume links are the problem until you've ruled out everything else.

What to actually do

• Pull a full backlink audit and tag legacy junk, recent suspicious spikes, and quality referring domains separately.
• Only disavow if you see a clear, recent, targeted attack or you have a manual action notice in Search Console.
• Check Search Console for manual actions before doing anything dramatic.
• Compare your drop date to the latest Google update history. If it lines up, this is a quality problem, not a link problem.
• Spend the next 90 days building real signals: earned links from relevant sites, named-author content, schema, review velocity, and topical depth. That stack is what makes the legacy junk irrelevant.

The takeaway

True negative SEO does happen. It's rare. The far more common story is the one I told in 2012: cheap link work from years ago finally caught up, the algorithm got smarter, and the site never built the real authority signals that would have made the old junk a non-issue. The fix isn't a witch hunt. The fix is doing the work you skipped the first time.