A disavow file tells Google to ignore specific backlinks when assessing your site. It’s a plain text file uploaded through Google Search Console, and it exists for one reason: to help site owners distance themselves from links they can’t get removed and that may be hurting their rankings. The tool has been available since 2012, but Google’s guidance on when to actually use it has shifted significantly since then.
Here’s the short version. Most sites don’t need a disavow file. Google’s algorithms are better at ignoring bad links than they were a decade ago, and filing a disavow when you don’t need one can do more harm than good. But there are situations where it’s the right move, and when those situations arise, getting the file format and strategy right matters. That’s what this article covers, along with the decision framework most guides skip entirely.
What Are Toxic Backlinks?
Toxic backlinks are inbound links from sites or pages that could signal to Google that your site participates in link manipulation. The term “toxic” isn’t one Google uses officially. It comes from third-party tools like Semrush, Ahrefs, and Moz, which assign toxicity scores based on their own criteria.
What actually makes a link harmful? It depends on pattern, not individual links. A single link from a spammy directory isn’t going to tank your rankings. But a pattern of links that looks engineered, purchased, or generated through schemes Google explicitly calls out in its spam policies can create problems. Common characteristics include:
Links from private blog networks (PBNs) where sites exist solely to pass link equity
Paid links without proper rel="sponsored" attributes
Links from hacked sites or pages injected with hidden content
Bulk links from foreign-language sites unrelated to your industry or market
Sitewide footer or sidebar links from low-quality sites
Links with over-optimized, exact-match anchor text at unnatural ratios
The distinction matters. A messy backlink profile isn’t the same as a harmful one. Every site on the web has some low-quality links pointing at it. Google knows this. The algorithm is built to handle noise.
How Does Google Handle Spammy Links Now?
Google’s approach to link spam has changed fundamentally since the Penguin era. Understanding where things stand now saves you from making disavow decisions based on outdated information.
The Penguin era and algorithmic devaluation
Google’s Penguin algorithm, first launched in April 2012, was designed to penalize sites that built links through manipulative practices. Early versions imposed site-wide ranking penalties that could take months to recover from. In September 2016, Penguin became part of Google’s core algorithm and shifted from penalizing to devaluing. Instead of punishing your site for bad links, Google began simply ignoring the links it identified as manipulative.
This was a fundamental shift. It meant that in many cases, bad links pointing at your site just stopped counting rather than actively hurting you. Google’s Gary Illyes confirmed this approach, stating that the disavow tool is rarely needed because Google is “really good at ignoring links.”
SpamBrain and modern detection
SpamBrain, Google’s AI-based spam detection system, now handles link spam identification at scale. It identifies both the sites buying links and the sites selling them. Unlike manual actions, SpamBrain operates silently. There’s no notification in Search Console. Links flagged by SpamBrain are simply neutralized, their value zeroed out without any alert to the site owner.
The March 2024 spam update expanded SpamBrain’s scope further, targeting expired domain abuse and scaled link manipulation. Google is investing heavily in automated detection rather than relying on manual reviews or site owners to self-police through disavow files.
What this means for disavow decisions
If Google is already ignoring most spammy links automatically, why does the disavow tool still exist? Because automated systems aren’t perfect. There are edge cases where Google’s algorithms haven’t caught manipulative link patterns, where a manual reviewer needs a signal from the site owner, or where the volume and pattern of toxic links is severe enough that waiting for algorithmic devaluation isn’t a viable strategy.
When Should You Actually File a Disavow?
This is where most guides fall short. They list the steps to create a disavow file but skip the harder question: should you?
Here’s a decision framework based on what actually warrants action.
You’ve received a manual action for unnatural links
This is the clearest case. If Google Search Console shows a manual action under Security & Manual Actions for “Unnatural links to your site,” you need to act. A manual action means a human reviewer at Google has looked at your link profile and determined it violates their guidelines. The disavow file is part of the reconsideration process.
Before filing the disavow, attempt direct link removal first. Contact the webmasters of the linking sites and request removal. Document every attempt. Google’s reconsideration request process expects evidence that you’ve tried to remove links manually before resorting to the disavow tool. The disavow covers what you couldn’t get removed through outreach.
You’ve inherited a site with a clearly manipulated link profile
If you’ve acquired a domain, taken over from a previous agency, or inherited an SEO program with obvious link building violations, a targeted disavow can be appropriate. The key word is “obvious.” If the link profile shows clear PBN patterns, bulk paid links, or link schemes that are well-documented in Google’s spam policies, proactive disavowal makes sense.
But exercise restraint. Don’t disavow every link that a third-party tool flags as “toxic.” Those toxicity scores are estimates based on domain-level signals, not Google’s actual assessment. A link from a low-authority site isn’t inherently toxic. A link from a site specifically built to sell links is a different story.
Negative SEO with sustained, high-volume attack patterns
Negative SEO, where a competitor points thousands of spammy links at your site to hurt your rankings, is something Google says it handles automatically. And in most cases, it does. But if you’re seeing sustained, high-volume link spam directed at your site (thousands of new referring domains from obviously malicious sources over a short period) and you’re also seeing ranking drops that correlate with the timeline, a preemptive disavow can provide an additional safety net.
Be honest about the assessment, though. Most sites that suspect negative SEO are actually looking at normal web spam. A few hundred links from junk directories isn’t an attack. It’s the internet being the internet.
When NOT to disavow
Don’t file a disavow if:
You just have some low-quality links and no ranking issues. Google ignores these.
A third-party tool gave you a high “toxicity score” but you have no manual action and no ranking drops. Tools aren’t Google.
You’re trying to “clean up” a link profile as a preventive measure without specific evidence of harm. You risk accidentally disavowing links that were actually helping.
You’ve already recovered from a penalty. Removing a disavow file after recovery doesn’t reverse the recovery, but an overly broad disavow that’s still active can suppress links you need.
How Do You Audit Your Backlink Profile?
Before building a disavow file, you need data. A proper audit identifies which links are genuinely problematic versus which are just low quality.
For a comprehensive look at how backlink evaluation works, including what metrics actually matter and what’s noise, our guide to measuring backlink value covers the full framework. Here, we’ll focus specifically on the audit steps that inform disavow decisions.
Pull your link data from multiple sources
No single tool sees every backlink. Export your full link profile from Google Search Console (Links section), then cross-reference with at least one third-party tool (Ahrefs, Semrush, or Moz). GSC shows what Google actually knows about. Third-party tools often surface links Google hasn’t indexed or has already devalued.
Identify patterns, not individual links
Don’t evaluate links one at a time. Look for clusters:
Groups of links from the same C-class IP range or hosting provider
Links from sites that share identical templates, thin content, or no real traffic
Sudden acquisition spikes that don’t correlate with any content or PR activity
Large volumes of links with the same exact-match anchor text
These patterns indicate link schemes. Individual low-quality links are noise.
Cross-reference with ranking data
A toxic link profile matters when it’s connected to ranking performance. If your rankings are stable and trending upward, the urgency of disavowing drops significantly. If you’ve seen unexplained ranking declines that correlate with periods of link acquisition, the case for disavowal strengthens.
Analyzing how competitors build their link profiles can also reveal whether what looks “toxic” in your own profile is actually standard practice in your vertical. Our competitor backlink analysis guide walks through that process.
How Do You Create a Disavow File?
The disavow file itself is simple. Getting the content right is the hard part.
File format and syntax
The disavow file is a plain text file (.txt) with UTF-8 encoding (or 7-bit ASCII). Each line contains either a specific URL to disavow or a domain-level directive. Comments start with #.
Here’s the structure:
# Disavow file for example.com
# Last updated: 2026-03-14
# Reason: Manual action recovery - unnatural inbound links
# PBN network identified during audit
domain:spammysite1.com
domain:spammysite2.com
domain:linkfarm-network.net
# Individual URLs from otherwise legitimate sites
https://legitimatesite.com/sponsored-post-that-wasnt-tagged
https://anothersite.com/old-paid-placement
# Bulk spam domains (foreign link packages)
domain:junklinks.ru
domain:spamlinks.xyz
Domain-level vs URL-level disavow
Use domain: when the entire linking site is problematic. This catches all current and future links from that domain, including subdomains. Use individual URLs when only specific pages from an otherwise legitimate site contain harmful links.
A common mistake is disavowing at the URL level when the entire domain is a link farm. If a PBN site links to you from three different pages, disavowing those three URLs leaves you exposed when they add a fourth. Use domain: for sites that are entirely spam. Use URLs for surgical removal from real sites.
File specifications
Google’s documentation sets clear limits:
Maximum file size: 2 MB
One URL or domain directive per line
Lines beginning with # are treated as comments
The file must be plain text (.txt), not .csv, .doc, or any other format
You can only have one active disavow file per property. Uploading a new file replaces the old one entirely; it doesn’t append
That last point catches people. If you upload an updated file that’s missing entries from your original, those links are no longer disavowed. Always maintain your full disavow file and add to it, never start from scratch unless you intend to remove previous disavows.
Documenting your decisions
Add comments liberally. When you revisit this file in six months (and you should), you’ll want to know why each entry was added. Group entries by category: PBN links, paid placements, hacked site links, negative SEO. This documentation also helps if you’re filing a reconsideration request, where Google wants to see that you’ve done thorough, deliberate work.
How Do You Submit the Disavow File?
Submission happens through Google’s Disavow Links tool, which is separate from the main Search Console interface. You need to be a verified owner of the property, not just a user with access.
Steps
Go to the Disavow Links tool page
Select the correct property (domain or URL-prefix, matching your GSC setup)
Upload your .txt file
Confirm the submission
Google processes the file as part of its regular recrawling cycle. This isn’t instant. It can take several weeks for Google to recrawl the disavowed links and factor the disavow into its assessment. For manual action recovery, submit the disavow file before filing your reconsideration request.
What happens after submission
Nothing dramatic. There’s no confirmation email, no visible change in Search Console’s links report. The links still appear in your profile because Google is aware of them; it’s simply choosing to discount them. Ranking changes, if any, appear gradually over weeks to months as Google reprocesses the affected links.
If you filed the disavow as part of a manual action recovery, you’ll receive a response to your reconsideration request in Search Console, typically within two to four weeks.
What About Link Removal Outreach?
Before disavowing, Google’s guidelines recommend attempting to remove problematic links manually. This means contacting the webmaster of each site and requesting removal.
In practice, the success rate is low. Many of the sites hosting toxic links are abandoned, monetized spam properties, or operated by people who have no incentive to help you. But the attempt matters for two reasons:
Manual action recovery requires it. Google’s reconsideration process specifically asks whether you’ve made “a good faith effort” to remove links. Document every outreach attempt, including failed ones.
Actual removal is better than disavowal. A removed link is gone. A disavowed link still exists; you’re just asking Google to ignore it. If your disavow file gets accidentally replaced or you forget to include those entries in a future update, the link is back in play.
Keep a spreadsheet tracking: linking URL, contact email found, date contacted, response received, outcome. This documentation protects you during reconsideration and serves as an audit trail.
How Do You Maintain a Disavow File Over Time?
Most guides treat the disavow file as a one-time fix. It isn’t. Forgotten disavow files are a real and underappreciated problem.
Regular review cadence
Check your disavow file at least every six months. Ask:
Are the disavowed domains still linking to you, or have the links been removed? If they’re gone, the disavow entries are harmless but unnecessary.
Have you gained new links from the same networks? Add them.
Has your site’s authority grown to the point where some previously concerning links are now negligible? Possibly. But don’t remove disavow entries for confirmed spam sources just because your rankings improved.
Did you accidentally disavow a legitimate site? This happens more than people admit, especially when using broad domain-level disavows or relying entirely on third-party toxicity scores.
Recovering from a bad disavow
If you suspect your disavow file is suppressing links that were actually helping, you can upload a new, reduced file. Google will begin reconsidering the previously disavowed links during its normal recrawling process. This isn’t instant; allow several weeks for the change to take effect.
The safest approach is to remove entries in batches rather than gutting the entire file at once. Monitor rankings after each batch removal to isolate which changes have an impact.
Where Does Link Building Fit Into All of This?
The best way to deal with toxic links is to not acquire them in the first place. That’s less glib than it sounds. The vast majority of disavow situations stem from past link building practices that prioritized volume over quality, used paid placements without proper attribution, or relied on networks that Google eventually identified as manipulative.
Modern link building that focuses on editorial merit, digital PR, and content-driven outreach doesn’t generate the kind of links you’ll need to disavow later. If your current link acquisition creates future cleanup work, something is fundamentally wrong with the strategy.
For sites that need to build authority while cleaning up past mistakes, the two efforts run in parallel. You disavow the bad while building the good. Our technical SEO team works alongside link strategy specifically because a clean technical foundation makes new, legitimate links more effective.
What Should You Take Away From All of This?
The disavow tool is powerful, but it’s also easy to misuse. The biggest mistake isn’t having toxic links. It’s panicking about them and filing an aggressive disavow that strips out links your site actually needs.
Here’s the framework, simplified:
Manual action? Disavow after attempting removal. Non-negotiable.
Inherited manipulated link profile with ranking issues? Targeted disavow of confirmed schemes. Be surgical.
Some low-quality links but rankings are fine? Leave it alone. Google handles this.
Third-party tool shows a scary toxicity score? Investigate the actual links before acting. Tools flag aggressively.
Build links the right way, audit your profile periodically, and treat the disavow file as a scalpel, not a sledgehammer. If you’re dealing with a messy backlink profile and aren’t sure where the line is between noise and genuine risk, get in touch with our SEO team. We’ll look at the data with you and figure out what actually needs action.
