Somewhere in your Search Console, a domain you've never heard of has linked to your site 4,000 times. The anchor text is "cheap loans online." You sell B2B payroll software. Do you reach for the disavow tool?
Most people do. And most of the time, that's the wrong instinct. I've watched site owners panic after running a third-party audit and blasting a disavow file at Google within the hour—only to spend the next quarter firing off reconsideration requests for a penalty that never existed in the first place. If you want to know how to disavow toxic backlinks safely, the first lesson is almost always the same: don't disavow at all until you've actually confirmed there's a problem.
Here's the thing that the panic skips over. Modern search engines are extremely good at ignoring junk links on their own. The risk of over-disavowing—of telling Google to ignore links that were quietly helping you—is far more real than the risk of a single spammy domain dragging you down.
Key Takeaways
- Toxic backlinks are links from spammy, irrelevant, or manipulated sources—link farms, private blog networks (PBNs), hacked sites, low-quality directories.
- What matters is the share of low-quality links in your profile, not any single link.
- Third-party toxicity scores are built on automated heuristics and generate a lot of false positives. A red score does not mean you have a penalty.
- Disavow only when there's a manual penalty or a clear, documented risk—not because a tool told you to.
- Always try to get links removed at the source first, then use the disavow file as a last resort.
What makes a backlink toxic?
A backlink is toxic when it comes from a spammy, irrelevant, or manipulated source. That's the definition. The patterns you'll see again and again: link farms, private blog networks, low-quality directories, hacked sites, irrelevant foreign-language sites, and pages with no editorial substance at all—thin content stuffed with outbound links like a phone book nobody reads.
But here's where most people get it wrong, and it took me a while to internalize it myself. Toxicity isn't about any single link. It's about what proportion of your profile is low-quality. A handful of junk links in a profile of 8,000 is noise. A profile where 40% of inbound links point to the same anchor from sites that all launched last month? That's a pattern worth your attention.
The signals tools actually flag
When you run a backlink audit, the automated heuristics usually look at three things: the spam score of the linking domain, the anchor text pattern, and link velocity—how fast links appeared. All three generate false positives. I've seen an internal staff blog flagged as a "toxic domain" simply because it sat on a subdomain with no other outbound links.
So before you act on a single red badge, ask:
- Is the domain actually relevant to your topic, or just irrelevant?
- Does the linking page have real content, or is it a link dump?
- Is the same anchor text repeated across dozens of domains?
- Are the links coming from a known PBN footprint—same host, same template, same registration pattern?
One of those alone rarely means anything. Three together is a story.
How to check toxic backlinks?
With an audit, not a panic button. The workflow I settled on after too many false alarms is straightforward, and it starts with Search Console.
Start with Search Console
Open the Links report. You'll see your top linked pages and top linking sites. This is Google's own view of your backlink profile—no third-party heuristics involved. Look for anything that doesn't belong: domains you don't recognize, anchors that don't match your brand, sudden spikes in linking domains.
Search Console won't give you a tOxicity score. That's the point. It shows you reality, not a guess.
Cross-check with a third-party tool
Then pull the same profile into a third-party tool—Ahrefs, Semrush, or whatever you already pay for. These give you spam scores and anchor distribution. Treat the scores as hints, not verdicts. Anything the tool flags as toxic, verify by hand before it touches your disavow file.
The distinction nobody talks about
Here's the real skill: separating toxic links from weak links. Weak links—unrelated but legitimate sites, low-authority blogs, old directories that still exist—are not toxic. They're just not helping much. You leave them alone. Disavowing weak links does nothing except add noise to your file.
| Signal | Toxic? | Action |
|---|---|---|
| Link from a PBN with the same template across 50 domains | Yes | Try removal, then disavow |
| Exact-match anchor repeated across unrelated sites | Yes | Investigate pattern, disavow if confirmed |
| Link from a low-authority but genuine blog | No | Leave it |
| Link from a local news site that mentioned you once | No | Leave it |
| Thousands of links from a hacked site | Yes | Notify site owner, then disavow |
That table is the whole method, compressed. Everything else is execution.
How to get rid of backlinks
You have two tools, and the order matters enormously. Removal is first. Disavow is second. Skipping straight to disavow is the mistake I made early on—and it cost me months of wasted effort.
Step one: request removal at the source
Find the contact on the linking site. Send a short, polite email: identify the URL, explain that you'd like the link removed, and don't threaten. Most webmasters ignore you. Some comply. Keep a log of every outreach—Google likes to see the effort if you ever file a reconsideration request.
Realistically, maybe a quarter of your outreach gets a response. That's normal. The ones that comply reduce your disavow workload.
Step two: build the disavow file
Now you build the file. Format is simple: one URL or one domain per line. To disavow an entire domain, prefix it with domain: — for example, domain:spamsite.example. To disavow a single page, list the full URL. You can add comments with a # at the start of a line.
Order of preference when you're unsure:
- Disavow the specific URL if only one page is the problem
- Disavow the whole domain if the entire site is a link farm or PBN
- Disavow nothing if you can't explain why the link is harmful
That third item is not filler. If you can't articulate the reason in one sentence, the link stays out of the file.
Step three: upload and wait
Upload through the disavow tool in Google Search Console—the same login you use for everything else in GSC. Once submitted, changes can take weeks to be reflected. Don't resubmit daily. Don't add links in a panic after a bad ranking day. Set a calendar reminder for a month out and leave it alone.
What about getting links removed from Semrush?
Semrush doesn't remove links from the web—it just displays them. If you're looking at toxic links in Semrush, you're seeing data sourced from its crawler. To actually remove a link, you have to contact the site owner. Semrush can export the list for you, but the removal itself happens elsewhere.
When to skip the whole thing
If you don't have a manual action in Search Console—a penalty message telling you Google detected unnatural links—and your rankings are stable, you likely don't need to disavow at all. I'll say that louder for the people in the back: no manual action, no disavow needed. The tool exists for the cases that warrant it, not for every red flag a tool waves at you.
Are backlinks still relevant in 2026?
Yes, but the conversation has shifted. Link quality matters more than link quantity, and Google has gotten very good at simply ignoring the junk without your help. That's why aggressive cleanup is less necessary than third-party tools want you to believe—their business model depends on you seeing problems.
What still moves the needle: relevant, editorially-given links from sites with real audiences. What doesn't: 500 links from a network of sites that all launched on the same Tuesday.
So the honest answer to the disavow question in 2026 is this: most sites never need to use the tool at all, and the ones that do usually have a specific, documented reason—a manual action, a known paid link campaign they once ran, a hacked property pumping links at them.
If you're staring at a toxic-link report right now and your gut says panic, sit with it for a day. Open Search Console first. Check for a manual action. Check your rankings. Then decide. Nine times out of ten, the right move is to close the tab and do nothing. And the one time it isn't, you'll know—because Google told you, not a spam score.
