Black Hat SEO: Techniques Google Penalizes and How to Spot Them

Black hat SEO is any tactic that tries to trick Google into ranking a page higher, and Google punishes it through its spam policies. Today the tactics that sink the most sites aren't 2010-era hidden text: they're mass-produced pages with no value (AI-written or not), renting another site's reputation, and paid links.

We checked in late October 2026: none of the top five Google results in the US for "black hat seo" names those policies, and two of them are 2019 threads from a black hat forum. We also asked ChatGPT, Perplexity and Gemini, and only one got the current rules mostly right.

Here are the black hat SEO techniques Google penalizes, by their official names, how to spot them on your site and how to recover. It's part of our SEO guides.

On this page

What is black hat SEO (white hat vs black hat SEO)

Black hat SEO chases rankings by fooling the search engine; white hat SEO earns them by following Google's rules and serving the searcher.

Black hat SEO is the set of tactics that try to manipulate Google rankings with shortcuts its spam policies prohibit. Examples: hiding text, stuffing keywords, buying links that pass authority, publishing thousands of pages with no value, or showing Google something different from what visitors see.

What it isn't: optimizing your titles, asking for links or publishing a lot. It turns black hat when the goal is to trick the system instead of helping the person searching. Grey hat sits in between, bending the rules without quite breaking them. White hat SEO is simply doing the work: useful pages, earned links and honest markup.

Black hat SEO techniques Google penalizes today (by their official names)

Google lists the black hat SEO techniques it penalizes in its spam policies: 16 named practices plus a few other cases.

According to Google's spam policies, last updated on August 28, 2026, sites that violate them "may rank lower in results or not appear in results at all." Google catches them with automated systems and, when needed, human reviewers. These are the ones we see most on business sites:

Technique (official name)	What it is	Example
Scaled content abuse	Many low-value pages made to grab searches, with or without AI	500 near-identical "plumber in [city]" pages
Site reputation policy	Third-party content on a strong site to borrow its authority	A news site hosting casino reviews it didn't write
Expired domain abuse	Buying a domain with history to host unrelated content	An old school's domain turned into a payday loan blog
Link spam	Buying, selling or swapping links that pass authority	A paid post with no rel="sponsored"
Cloaking	Showing Google one page and users another	Text for the bot, a gambling page for people
Keyword stuffing	Repeating the query until the text is unreadable	"Lawyer Dallas, Dallas lawyers, cheap lawyer Dallas"
Hidden text and link abuse	Text or links users can't see	White text on a white background
Doorway abuse	Pages built only to rank and funnel you elsewhere	One page per suburb, all pointing to the homepage

The rest of the list: sneaky redirects, scraping, thin affiliation, hacked content, machine-generated traffic, malicious practices, misleading functionality and user-generated spam. Duplicate content inside your own site isn't on it: Google just picks one version to show. What's penalized is copying others without adding anything.

Does Google penalize AI content?

Not for being AI. Google's guidance on generative AI content, updated on October 1, 2026, allows it; what it penalizes is using AI to churn out lots of pages with no value, which is scaled content abuse. Review every page by hand and add what only you know. If you draft with AI, here's how to humanize AI text without losing your voice.

What is parasite SEO (site reputation abuse)?

Parasite SEO is publishing content on a high-authority site, usually for a fee, so it ranks on that site's reputation instead of its own. Google handles it under its site reputation policy, and the manual action for it applies in the US. One detail almost nobody mentions: per Search Console Help, that manual action doesn't affect results shown to users in the European Economic Area.

Is buying backlinks black hat SEO?

Yes, when the link passes authority and isn't labeled. Paying for advertising is fine with rel="sponsored" or nofollow. We break it down in our guide to what backlinks are: what helps, what hurts and why buying links to rank is an expensive shortcut.

Google penalty: how to tell if your site has a manual action

A Google penalty is either a manual action, which Search Console shows you, or an algorithmic drop, which you only notice in your traffic.

A manual action is applied by a person at Google after reviewing your site. It shows up in the Manual Actions report in Search Console, which lists 16 types, from "Hidden text and/or keyword stuffing" to the site reputation policy. You also get a Search Console message and an email.

An algorithmic drop comes with no notice: automated systems demote your site and that's it. Many "penalties" people complain about on forums are really this. Compare the date of your drop with the Google Search Status Dashboard: in 2026 there were spam updates in March, June, August and September.

	Manual action	Algorithmic drop
Who applies it	A Google reviewer	Automated systems
Do you get notified?	Yes, in Search Console	No
How you recover	Fix it and request a review	Fix it and wait for Google to reassess

How to spot black hat SEO on your site, step by step

To spot black hat SEO on your site, check Search Console, your page code, your links and anything your team didn't write.

1. Open the Manual Actions report

   Done

   In Search Console, check Manual Actions and Security Issues. Hacked content counts as spam even if you didn't put it there.

2. Compare what Google sees with what you see

   Done

   Paste a URL into URL Inspection, click "Test live URL" and review the screenshot and HTML. If Google sees something else, you have cloaking or a redirect.

3. Look for hidden text and links

   Done

   Press Ctrl + A on the page and see what shows up when highlighted. Check the footer and theme templates: that's where free themes hide links.

4. Count your indexed pages

   Done

   Open the Pages report. Thousands of URLs nobody remembers publishing mean scaled content or a hack.

5. Check who publishes on your domain

   Done

   Coupon folders, casino reviews or "contributor" posts nobody edits: that's site reputation policy territory.

6. Review your inbound and outbound links

   Done

   In the Links report, look for repeated commercial anchors or unrelated domains. Your paid outbound links should carry rel="sponsored".

7. Match your drops with spam updates

   Done

   Note the date your traffic fell and look it up on the Google Search Status Dashboard.

How to recover from a Google penalty with a reconsideration request

To lift a manual action, fix the issue on every affected page, then request a review from the same Search Console report.

1. Fix all of it. Google is clear: fixing only some pages won't get you partially back.
2. Document what you did. What you found, what you removed, sample URLs and dates.
3. Click "Request Review". Explain your fixes with facts, no excuses.

An algorithmic drop has no request to file: you fix things and wait for the systems to reassess your site, which can take months. The best protection is the opposite of black hat: evergreen content that answers better than anyone for years.

How long does a reconsideration request take?

According to Search Console Help on manual actions, most reconsideration reviews "can take several days or weeks," and link-related ones may take longer. Don't resubmit while you wait.

Negative SEO: what it is and how to protect your site

Negative SEO is using black hat tactics against someone else's site to sink its rankings. The usual attacks are a flood of spammy links, hacking the site to inject spam pages, and scraping its content to republish it elsewhere.

Here's the reality check on links. Google's disavow documentation says that in most cases it can assess which links to trust without extra guidance. So a pile of junk links is rarely why your traffic fell. Check the date of your drop against the Search Status Dashboard first, as we saw earlier.

Hacking is the real risk, because hacked content counts as spam even if you didn't publish it. A short monthly routine covers most of it:

1. Open the Links report in Search Console and look for sudden spikes of unrelated domains.
2. Check Manual Actions and Security Issues, and keep the alert emails switched on.
3. Update your CMS and plugins, and use two-step verification on your hosting and admin accounts.
4. Touch your links only if a manual action for unnatural links shows up. Then follow the steps below.

How to use the Google disavow tool (and when not to)

Disavow links only if you have a manual action for unnatural links or are likely to get one. Google calls its disavow tool an advanced feature that can hurt your performance in Search if used incorrectly, and says most sites don't need it.

If you're in that spot, work in this order:

1. Ask for removal first. Email the sites that link to you. Google's guidance puts taking the links down before disavowing them.
2. Export your links from the Links report in Search Console and delete from the file any you want to keep.
3. Build a .txt file in UTF-8 with one URL or domain per line. Write domain:example.com to disavow a whole domain, and start comment lines with #. The limit is 100,000 lines and 2 MB.
4. Upload it as a property owner. The tool doesn't support Domain properties, so use a URL-prefix property.
5. Wait a few weeks. Google has to recrawl before the list takes effect, and disavowed links keep showing in your Links report.

When you request the review, say which links you removed and which you disavowed.

Frequently asked questions about black hat SEO

01

Is black hat SEO legal?

Usually, yes. Breaking Google's spam policies isn't a crime in itself: you're breaking the rules of a private service, and the penalty is ranking lower or vanishing from its results. It becomes a legal problem when the tactic is illegal for other reasons, like hacking someone else's site, spreading malware, impersonating a brand or running undisclosed paid endorsements, which the FTC treats as deceptive advertising. So the real risk isn't only lost rankings.

02

What are the four types of SEO?

The most common split is on-page SEO (your content, titles and headings), off-page SEO (links and mentions from other sites), technical SEO (crawling, indexing, speed) and local SEO (your Google Business Profile and local signals). It's an industry convention, not an official Google list. Black hat tactics show up in all four: keyword stuffing on-page, link schemes off-page, cloaking and sneaky redirects on the technical side, and fake reviews in local.

03

What are some black hat SEO examples?

Two famous ones: in 2006 Google removed BMW's German site from its index for using doorway pages, and in 2011 J.C. Penney lost rankings after The New York Times exposed thousands of paid links pointing to it. Today's typical cases are smaller and more automated: hundreds of near-identical AI pages for every city, coupon sections rented out on news sites, and expired domains turned into casino blogs. Each one maps to a named Google spam policy.

04

What is grey hat SEO?

Grey hat SEO is the zone between white and black hat: tactics that aren't spelled out in Google's spam policies but stretch the rules. Think small link swaps with friendly sites or rewriting other people's articles with AI without adding anything. Be careful, because several old grey hat tactics, like expired domains and mass-produced content, now have their own policy. If you'd only do it because of Google, it's probably not grey anymore.

05

What is keyword stuffing?

Keyword stuffing is repeating a search term so many times that the text stops reading naturally, whether in sentences, lists of cities or hidden blocks. It's one of Google's named spam policies. Picture a Phoenix dentist who writes "dentist in Phoenix" in every sentence and adds twenty neighborhoods to the footer. There's no ideal keyword density: write for people and use the phrase where it fits, especially in the title and near the top.

06

How do I report spam to Google?

Use Google's spam report form in Search Console (search.google.com/search-console/report-spam). You describe the page and what's wrong, and Google says it can use those reports to improve its spam detection and, in some cases, to take manual action. A report doesn't guarantee anything happens to the site, so don't count on it as a weapon against a competitor. Your best defense is still a site that clearly deserves its rankings.

07

What is a link farm?

A link farm is a group of sites, often low quality or automated, built only to swap or pass links so a target site looks more popular. Google's spam policies count that as link spam: they list automated link creation and excessive link exchanges among their examples. It's the cruder, older cousin of a PBN. Links from a farm rarely help and can trigger a manual action. If you inherit some, ask the sites to remove them, and disavow only if a manual action is in play.

Keep going with these guides

• 8:42
  SEO YouTube SEO: How to Rank Your Videos on YouTube and Google Read the guide
• running shoes

  SEO Ecommerce SEO: How to Rank Your Online Store and Product Pages Read the guide
• Evergreen5 years
  SEO Evergreen Content: What It Is and How to Create Posts That Rank for Years Read the guide