Negative SEO is any malicious practice aimed at sabotaging search rankings of a competitor's website. This is generally considered “black hat SEO” for its malevolent nature.

Mindfulness and Internet 

What is negative SEO and how to suppress a negative SEO attack?

marketingandsales

Marketing & Sales

In this article, we are going to talk about negative SEO — what it is, how harmful it may be, and what you could do to detect and tackle a possible negative SEO attack.

First, let us define what is Negative SEO and what it implies.

Negative SEO is any malicious practice aimed at sabotaging search rankings of a competitor's website. This is generally considered “black hat SEO” for its malevolent nature.

An example of a negative SEO service offer in a Reddit thread.

GSA SER (GSA Search Engine Ranker) is a tool for automated spammy link building.

Another example of a negative SEO service offer.

There are different forms of negative SEO. In this article, we will cover the most common tactics associated with negative SEO.

1. Hacking a Website

This might be the most efficient, yet costly tactic. As seen below, by hacking a website an attacker can undermine a site’s SEO performance however they wish. If it is the type of hack that results in a loss of search engine visibility, it can be deemed a negative SEO attack.

The answer above was posted in a Google Search Console Help Center. <a href="https://support.google.com/webmasters/thread/5705844?hl=en&msgid=5715723">Click </a> to view the thread.

2. Creating Toxic Backlinks with Spammy Anchor Texts Pointing to the Website

Link farms, automated software, and PBNs (public blog networks) are widely used for generating these types of bad links. The number of links may vary - from a few hundred to thousands.

An example of a negative SEO attack using toxic backlinks. <a href="https://twitter.com/JohnMu/status/966409521395634177">Click </a>to view the thread.

3. Scraping a Website’s Content and Creating Duplicates of the Website

This practice is based around creating duplicates of websites or parts of its content, <a href="https://support.google.com/webmasters/thread/21350334?hl=en">hotlinking </a>, and spreading the fakes across the web.

A question about a negative SEO attack using content duplication and website cloning. <a href="https://support.google.com/webmasters/thread/49602689?hl=en">Click </a>to view the thread in Google Search Console Help Center.

4. Posting Fake Negative Reviews About the Website

<a href="https://www.semrush.com/blog/how-to-deal-with-negative-review-attack/">This tactic </a>may work for ruining a website’s (or brand’s) reputation, therefore, it could lead to traffic drops.

A Google Search Console Help Center thread about suspected fake review posting. <a href="https://support.google.com/websearch/thread/63498781?hl=en">Click </a>to view the thread.

5. Removing a Website’s Backlinks by Sending out Fake Removal Requests to Webmasters

Attackers may target your backlink profile in an effort to harm your SERP positions. They might pretend to be you or an agency acting on your behalf and get in touch with the webmasters to persuade them to remove the links pointing to your site.

An example of a fake backlink removal request. <a href="https://isc2.sans.org/forums/diary/Fake+Link+removal+requests/15517/">Click </a>to view the source.

Some negative SEO practices go even further, for example, <a href="https://support.google.com/websearch/thread/32731101?hl=en">sending fake DMCA removal requests </a>but these cases are rare. The tactics above are the most common for negative SEO.

NOTE: The DMCA is a United States copyright law that provides guidelines for online service provider safe harbor in case of copyright infringement. Google has a special <a href="https://support.google.com/legal/contact/lr_counternotice?product=websearch&hl=en">report form </a>for that.

Before we dig deeper, it is important to stress that the very concept of negative SEO is debatable. Let us look into the reasons for that.

Why Negative SEO Attacks Can Be Difficult to Spot and Prove

Spotting and proving a negative SEO attack is tricky, especially if a website’s backlink profile already contained a bunch of toxic links and/or the site’s content is poor.

Very often, webmasters that believe they are a victim of negative SEO will not take into account the other conditions that could cause a drop in rankings, such as:

<ul><li>An update in Google’s algorithms/Core Algorithm Update. </li><li>Getting filtered out by Google’s algorithmic filtering. </li> </ul>

Sometimes these drops are mistaken for negative SEO. <a href="https://mariehaynes.com/">Marie Haynes </a>, SEO Consultant at MarieHaynes.com, said the following about that:

We have had many clients who thoroughly believed they were suffering ranking drops because a competitor built unnatural links pointing at their site. In almost every case, we could find another more plausible explanation for the ranking drops.

This means you should not jump to conclusions about why your rankings dropped.

To avoid any possible impact of updates in algorithms and algorithmic filtering, you should always ensure the quality of your content is up to <a href="https://support.google.com/webmasters/answer/35769?hl=en">Google’s guidelines </a>and you are looking after your backlink profile.

Auditing your backlinks is highly important since you may already have a backlink profile that Google’s filtering may consider spammy (containing unnatural links). You can learn more about tackling algorithmic filtering from the <a href="https://www.semrush.com/blog/google-penalties-expert-tips/#header8">experts interviewed on our blog </a>.

Some webmasters miss these factors and judge straightaway that their website suffered a negative SEO attack. As <a href="https://www.youtube.com/watch?v=GXFmWVg_QfA">John Mueller puts it: </a>

Usually, the cases where I see that something around the negative SEO is happening are kind of the cases, when you would look at them manually, you would say, well, this looks like maybe someone has built these links up over the past. And it’s not really the competitor but maybe an SEO that has been working for the company.

Thus, your website’s <a href="https://www.semrush.com/blog/content-audit-for-content-marketing-strategy/#header16">content </a>should always be optimized, engaging, user-oriented, and your <a href="https://www.semrush.com/blog/toxic-links-guidelines/">backlink profile </a>must be kept as trustworthy and clean as possible.

Why the Efficiency of Negative SEO is Arguable

Google doubts that negative SEO, especially the intentional generation of bad backlinks, is an efficient practice.

<a href="https://twitter.com/johnmu/status/913222203071594496">Click </a>to view the Twitter thread.

So, is an efficient negative SEO attack even possible?

Google is very good at distinguishing between backlinks that you created and toxic links that appeared out of the blue. Yet, it might be easier to sabotage a website that already has thin content and a poorly attended backlink profile because the attacker will just be putting more fuel on the fire.

At the same time, a quality website may suffer a negative SEO attack too but it may turn to be a costly and time-consuming endeavor for the attacker. An attack must be thoroughly designed and carried out intelligently to be really effective.

If a competitor was building a spammy link to your site it would be extremely expensive and would have more of a chance of helping your rankings rather than hurting them. [...] In all of my years of auditing links and helping websites who have experienced traffic drops, I can only recall one case where I truly felt that links built via negative SEO were the culprit.

How to Detect and Suppress a Negative SEO Attack

An attacker could combine multiple efforts in order to make your website fall off the SERPs. To minimize the consequences of such an attack, here are some pre-emptive actions that you can consider.

For negative SEO to work in this case, it is unlikely the hacker will hijack your website entirely. You may still have full access to your website while an attacker has installed various spammy signals that you might not detect. For example, messing with robots.txt or <a href="https://www.semrush.com/blog/10-awesome-visual-proven-sitemap-generator-tools/">sitemap </a>could hurt your site without you noticing any obvious change right away.

In order to detect security breaches, you can <a href="https://developers.google.com/web/fundamentals/security/hacked/how_do_I_know_if_site_hacked">set up notifications in Google Search Console </a>and regularly run <a href="https://www.semrush.com/features/site-audit/">site audits </a>to fix any technical issues.

Also, you can use <a href="http://isithacked.com/">this simple tool </a>that provides a top-level overview telling you if there are any signs of your website being hacked.

Finally, you can use <a href="https://ftccomplaintassistant.gov/#crnt&panel1-2">The FTC Complaint Assistant </a>to report a hacking.

John Mueller on disavowing links. <a href="https://twitter.com/JohnMu/status/1073160865002807302">Click </a>to view the original tweet.

Google may not see Negative SEO as a serious black hat SEO tactic but, according to John Mueller, using the Disavow tool may be a good thing if you think you were hit by a negative SEO attack when someone is generating toxic links pointing to your site.

As seen from the comment above shared on the r/SEO subreddit, some <a href="https://www.reddit.com/r/SEO/comments/eam8bv/is_a_google_penalty_the_only_time_to_disvow/fau3p4w/">users say disavowing works </a>when tackling negative SEO.

But what are you supposed to do when someone is generating thousands of toxic backlinks that point to your site? You will need to <a href="https://www.semrush.com/blog/how-to-disavow/">disavow </a>them with the same process of fixing a manual action from Google.

Below are two examples of negative SEO campaigns based on generating toxic backlinks.

In the span of three months starting from October 2018, a small business company faced a sudden spike in the number of backlinks pointing at their website. The number of backlinks grew immensely from 275 to 341,824.

This unnatural spike resulted in a manual action from Google. The webmaster then had to run an in-depth backlink audit and submit reconsideration requests to Google together with the disavow files.

It took two reconsideration requests to get the penalty lifted - and it was removed by August 2019, almost one year later.

In the second request, the webmaster emphasized that this was a negative SEO attack, and that might have helped to clear things up and get the penalty removed. As of today, the rankings are still being restored.

Another suspected negative SEO attack that continues to this day actually might be targeting the SEMrush website. Starting from November 2019, we have been detecting a spike in toxic backlinks being posted on identical websites. Below is an example of such a website.

This suspicious activity did not bring obvious negative results but is still keeping us a little busy watching out for these unexpected backlinks. Most of these links are targeting a non-existing page.

How Do You Protect a Website From Fake Backlinks?

Here is a summary of actions to take:

<ul><li>Use <a href="https://www.semrush.com/features/backlink-audit-tool/">the Backlink Audit tool </a>for your website regularly and watch out for the <a href="https://www.semrush.com/webinars/all-you-need-to-know-about-google-penalty-toxic-score-and-semrush-backlink-audit/">Toxic Score metric </a>to detect any suspicious changes in your backlink profile. </li><li>Check the value and trend of <a href="https://www.semrush.com/blog/semrush-authority-score-explained/">your website’s Authority Score </a>. A drop in the score may indicate that there is something wrong with your backlink profile. </li><li>Regularly update your <a href="https://www.semrush.com/blog/how-to-disavow/">disavow file </a>if you get new toxic backlinks that you do not have a chance to remove. </li> </ul>

Spotting Scraped Content and Website Doppelgangers

Identical content not only triggers <a href="https://www.semrush.com/blog/keyword-cannibalization-guide/">cannibalization issues </a>but can also result in websites or specific pages getting completely filtered out in the search results.

Attackers may duplicate your whole website or some parts of it to sabotage your search performance.

In order to detect malicious behavior related to copying your content or the entire website, audit the web regularly using tools like <a href="https://www.copyscape.com/">Copyscape </a>or <a href="https://www.siteliner.com/">Siteliner </a>.

If you spot a fraudulent website that copycats yours, consider doing the following:

<ul><li>Contact the provider where the fake website is hosted and explain why it must be taken down.  </li><li>Use <a href="https://support.google.com/legal/troubleshooter/1114905?hl=en#ts=1115655">this Google form </a>to report it and demand it is taken down. </li><li>Use <a href="https://ftccomplaintassistant.gov/#crnt&panel1-2">The FTC Complaint Assistant </a>to report the imposter. </li> </ul>

Finding and Reporting Fake Negative Reviews About Your Website

The impact of posting fake reviews varies depending on the case. Fake reviews will hardly ruin the reputation of a large retail company but could hurt a small business company.

Making people fall for such feedback demands time and well-crafted “reviews”. Spreading negativity may result in the website's reputation declining and, thus, its traffic may go down.

To do this, an attacker must try really hard to ruin the reputation of a website, and there is no guarantee this effort will work. Still, you should look out for such activity by <a href="https://www.semrush.com/features/brand-monitoring/">monitoring online reviews </a>.

If a review is definitely fake, you should report it to the site’s administration where the “review” was published. You can read more about this negative SEO practice in <a href="https://www.semrush.com/blog/how-to-deal-with-negative-review-attack/">the article about a case of a fake review attack </a>.

Watch out for your backlinks, especially your most valued ones. You never know when an attacker might start sending out fake removal requests asking your referring domain to remove links.

There is no guarantee that a webmaster where the backlink was posted will not follow such fraudulent requests.

To swiftly detect the disappearance of valuable links, you can set up notifications to track any lost and found backlinks in <a href="https://www.semrush.com/features/backlink-audit-tool/">SEMrush Backlink Audit tool </a>.

We talked to <a href="https://seybold.de/">Ralf Seybold </a>, an expert in tackling negative SEO campaigns, and here is what he said about the issue.

Q. Judging from your experience, what is a typical case of a really efficient negative SEO campaign? What does it usually include?

A. There are a few patterns that work quite well.

The "easiest" is image theft/hotlinking from a massive amount of domains with TLDs "from very far away". For example, your site is domain.de and the domains linking to it come from .gq, .tk, .cc, and so on.

Also, "The Globe" and similar-looking patterns (webhostlist.in) reduce rankings.

NOTE: The Globe (theglobe.net) is a spam website posting toxic links. It has been in operation since 2006.

Content theft and mixing content with porn, casino, or medical stuff combined with canonicals pointing to the original website is very typical patterns of negative SEO.

Redirects from bad websites to a very good website are also very effective.

Q. On average, how many cases of negative SEO do you come across annually?

A. I see a lot of image theft/hotlinking and links from sites like “The Globe”. I also see redirects quite often. The canonicals are less frequent, I come across them 2-3 times a year.

What Is Negative SEO? (And How To Tackle It)

Mindfulness and Internet

Related collections

Other curated ideas on this topic: