Reading a Backlink Report Without Being Sold a Disavow File

Every few months a business owner forwards me a PDF from a tool or an agency. Forty pages, a scary number of “toxic” links, a red gauge, and a recommendation to buy a cleanup package. Almost none of these reports describe a real problem, and acting on them is usually worse than ignoring them.

Here is how to read one properly.

“Toxic score” is a vendor invention

No search engine publishes a toxicity metric. Every toxic-score column you have ever seen is a third-party tool's own model, usually built from a mix of signals like TLD, outbound link count, anchor repetition and whether the domain looks like a network. Those signals correlate loosely with low quality. They are not Google's assessment, and the tool has a commercial interest in the number being high enough to justify a subscription.

Treat the score as a sorting aid for your own review. Never as a verdict.

This is the part that disarms most of these reports. Google has spent fifteen years getting better at discounting links it does not trust, and since the 2012-era penalty wave the default handling of obvious junk has shifted from punishment to indifference. A scraper site, an auto-generated directory, a hacked blog footer — these overwhelmingly contribute nothing rather than costing you something.

A link that contributes nothing does not need removing. Removing it changes your rankings by zero and costs you a fortnight of outreach emails.

There are real cases. They have specific signatures, and a report that does not show these signatures is not describing one.

A manual action in Search Console. Open Security and Manual Actions. If there is nothing there, you do not have a link penalty. This single check invalidates most of the PDFs in circulation.

A sharp, dated drop that matches a link event. Not a slow decline — a step down, on a date, that lines up with either a Google update or a batch of links appearing. Slow declines are almost always content, competition or technical.

Anchor text that is visibly manipulated. If forty percent of your inbound anchors are the same commercial phrase, that is a pattern worth fixing. Normal link profiles are dominated by brand names and URLs, with commercial anchors as a minority. Check the distribution, not the toxic column.

Links you or a previous agency paid for. This is the only category where you have genuine exposure, because you know they were bought and so, eventually, might Google. If a past engagement produced a thousand links in three months, that is worth examining regardless of what any score says.

The disavow file is a last resort, not a maintenance task

Disavowing is irreversible in practice and easy to get wrong. Disavow a domain that was actually helping you and you have removed value with no way to measure what you lost.

The honest guidance, which Google's own search advocates have repeated for years, is that the overwhelming majority of sites never need a disavow file. The exceptions are sites with a manual action, and sites that know they have a history of bought links and are cleaning up deliberately.

If you have neither, the correct action on a toxic-link report is to read it, note anything genuinely odd, and do nothing.

What to do with the report instead

There is useful information in these files, just not the part being sold. Use it for:

That last one turns a defensive report into a plan.

The one-line version

Check Search Console for a manual action. If there is none, no link report has found a penalty, because a penalty is a thing Google tells you about. Spend the budget on links you want rather than on removing links that were already being ignored.

Earlier in this series: an SEO audit is not an SEO strategy, which is the same category of mistake one level up.

If you have been handed one of these reports and want a second opinion before authorising a cleanup retainer, Deep Bhardwaj can read it against your Search Console history in an afternoon and tell you whether there is anything in it worth acting on.