// SEO plans from €35/hour or €395/month// from €35/hr · €395/mo Free SEO checker[email protected]+31 6 4555 9353
Free SEO audit

Negative SEO: How Attacks Work, How to Spot Them and How to Recover

negative seo & reputation

A sudden ranking drop, a wave of fake reviews or a strange article about your business can feel like sabotage. Sometimes it is. This guide explains every common type of negative SEO attack, how to check whether you've really been hit, and the exact steps to clean up and recover. If a fake page is already hurting you, you can ask me to remove it right below.

Remove a page from Google
  • free removal assessment
  • 13 attack types explained
  • white-hat recovery only
attack-monitor · yoursite.comlive
attackrecovery wk 1wk 6wk 12
  • [links]+4,812 links from 212 domains · anchor "casino"ignored
  • [dmca]fake notice filed against /services/countered
  • [reviews]9 one-star reviews in 48h from new accountsreported
  • [hack]412 spam pages injected under /?p=cleaned · 410
  • [smear]"yourbrand scam" post ranks #3removed
status: recoveringtraffic: 112% of baseline
// example attack timeline. every case is different
remove a page from google

Remove Unwanted Pages From Google

A fake article, fake reviews, a copied website or a smear post ranking for your name? Tell me the keywords it shows up for and the URL. You get a free assessment, honest odds and a fixed quote. There are no packages, because every case is different.

Send the pagethe keywords it ranks for and the URL
Free assessmentwhere it's hosted, which routes apply, honest odds
Removal or suppressionworked in order until it's gone or out of sight

Request a page removal

Fill in what you know. Nothing is sent until you choose WhatsApp or email.

content_type
removal-request.txt
Send by email
// confidential. your request only goes to me
ONLINE REPUTATION MANAGEMENT

Fake Pages, Fake News and Smear Campaigns: How They Get Removed

Some negative SEO isn't about rankings at all. It's a fake article, an "is this company a scam?" post, fake complaint pages or a copied website that shows up when customers search your name. That's a reputation attack, and it needs online reputation management, not just SEO.

When you send a request, I check where the page is hosted, who controls it, what it claims and which rules it breaks. Then I work through the removal routes below in order. The aim is simple: when someone searches your name, they should only see pages that are true.

Removal from Google hides a result in search. Removal at the source deletes the page itself, so that's always the first route I try.

// what I never do
No fake copyright claims, no fake reviews and no tricks that abuse Google's processes. Those are negative SEO tactics themselves, and they can backfire on you. Every request uses legitimate routes only, and I tell you upfront if removal isn't realistic.
// example brand search. results and timing differ per case

// removal routes, tried in this order

start a request →

Removal at the source

I contact the website owner, publisher, host or platform and ask for the page to be taken down or corrected, with clear evidence of why it's false or breaks their rules.

// best result: gone from the web, not just Google

Google policy removal

Google removes some content even when the site won't, such as personal contact details, doxxing, non-consensual images, impersonation and pages that break its spam policies.

// for content that breaks Google's own rules

Legal removal requests

Defamation, court orders, copyright and, in the EU and UK, outdated personal data under the right to be forgotten. I prepare the evidence; anything that needs legal advice goes through your lawyer.

// for false, unlawful or copied content

Outdated result refresh

When the page has been deleted or edited but Google still shows the old title or snippet, I ask Google to refresh or drop the outdated result.

// fast once the source has changed

Suppression with real pages

If removal isn't possible, I build and rank strong, genuine pages you control (your site, profiles, articles and reviews) so the unwanted result drops out of sight.

// the fallback when removal is refused
THE BASICS

What Is Negative SEO?

Negative SEO is the use of unethical tactics to damage another website's search rankings or online reputation. Instead of improving their own site, the attacker tries to make yours look spammy, unsafe or untrustworthy to Google and to customers.

Classic negative SEO meant pointing thousands of bad links at a competitor. Today the attacks are wider. Someone can hack your website, file a fake copyright complaint, flood your Google Business Profile with fake reviews, or publish smear content that ranks for your brand name.

Some of these tactics target Google's algorithms. Others target people: the customers who search your name and read what comes up. Both can cost you calls, sales and trust, so this guide covers both.

// key_takeaways
  • Most spammy link attacks are ignored by Google, so don't panic over strange backlinks.
  • The attacks that really hurt are hacking, fake DMCA notices, review bombing and smear content.
  • Most ranking drops are not attacks. Check the evidence before you react.
  • Recovery means removing the cause, then asking Google to review the fix where needed.
// tap any attack to jump to its explanation
reality check

Does Negative SEO Still Work?

Google says it works hard to make sure that actions on other websites don't harm yours, and its spam systems neutralise most bad links without you doing anything. That's why a negative SEO attack built only on links usually fails. But attacks that change your site, your Google listing or what people read about you can do real damage.

attackwhat really happensimpact
Spammy link blastsGoogle's systems ignore most spammy links automatically, so rankings rarely change.rarely works
Scraped or copied contentGoogle usually recognises the original, especially on an established site with good internal links.rarely works
Fake link removal emailsCan cost you a few good links if site owners believe the email.some damage
Hacking and spam injectionCan add warnings to your results, get spam indexed on your domain and drop rankings fast.serious
Fake DMCA takedownsCan remove a key page from Google until you file a counter-notice.serious
Review bombing and profile editsCan lower trust, calls and local map rankings while fake reviews or edits stay live.serious
Smear content for your brandCan sit on page one for your brand name and shape what people and AI assistants say about you.serious

// impact is a general guide, based on how Google's systems and policies work today

attack library

13 Types of Negative SEO Attacks

Every negative SEO attack falls into one of three groups: off-site attacks that happen on other websites, on-site attacks that change your own site or server, and reputation attacks that use Google's tools, review platforms and your brand name against you. Here's how each one works, how to spot it and how to fix it.

01off-sitedamage

Toxic link blasts

+4,812 links · 212 new domains · 9 days

The attacker points thousands of spammy links at your site from link farms, hacked pages, comment spam and auto-generated sites. The hope is that Google decides you bought them and lowers your rankings.

// warning_signs
A sudden jump in linking domains in Search Console or your backlink tool, mostly from unrelated, low-quality or foreign-language sites.
// how_to_fix
Record the dates and keep watching. Google is built to ignore most of these links, so usually no action is needed. Use the disavow tool only if you get a manual action for unnatural links, or the attack is huge and clearly matches a ranking drop.
02off-sitedamage

Anchor text bombing

anchor: "buy cheap pills" ×1,206

A variation of the link blast. The links use exact-match money keywords, or adult, gambling and pharma words, to make your link profile look manipulated or to tie your brand to spam topics.

// warning_signs
Your anchor text report fills up with keywords you never targeted or with off-topic adult and gambling terms.
// how_to_fix
The same as link blasts: document, monitor Search Console for a manual action, and disavow whole domains only in extreme, clearly harmful cases.
03off-sitedamage

Content scraping and duplication

"your exact sentence" → found on 14 domains

Bots copy your pages and republish them on other sites, sometimes within minutes. The goal is to make Google see the copy first, or so often that your original looks like the duplicate.

// warning_signs
Exact sentences from your pages show up in Google on other domains, or copies appear right after you publish.
// how_to_fix
Use self-referencing canonical tags, a clean sitemap and strong internal links so Google finds your version first. If a copy outranks you, send a copyright (DMCA) removal request with links to both versions.
04reputationdamage

Fake DMCA takedowns

notice: /services/ removed · claimant: unknown

Someone files a false copyright complaint claiming your page copied theirs, often using a backdated copy of your own text. Google may remove the URL from search while the claim is reviewed, so a key page can vanish overnight.

// warning_signs
A "Notice of DMCA removal" email or Search Console message, an important page missing from Google, or a complaint about your URL in the Lumen database.
// how_to_fix
File a counter-notice through Google's form with proof that the content is yours. If the claimant doesn't start a lawsuit, the page is normally restored after the legal waiting period of about 10 to 14 business days.
05on-sitedamage

Hacking and spam injection

+412 pages /?p=cheap-* · lang: ja

The attacker gets in through an outdated plugin, a weak password or a vulnerable theme. Then they add hidden links, create thousands of spam pages, or show spam only to Googlebot (cloaking) so you don't notice.

// warning_signs
"This site may be hacked" under your result, a warning in the Security issues report, pages in a site: search that you never created, unknown admin users or a sudden jump in indexed pages.
// how_to_fix
Clean every infected file, update and patch, change all passwords and remove unknown users. Return 410 or 404 for the spam URLs, then request a review in Search Console. Reviews for hacked spam can take several weeks.
06on-sitedamage

Malware and sneaky redirects

mobile + google referrer → 302 → scam-site

Injected code sends some visitors, often only mobile users or people coming from Google, to scam, adult or malware sites. Google and browsers then warn people away from your site.

// warning_signs
A red browser warning page, a malware or social engineering notice in the Security issues report, or customers saying your site sends them somewhere else.
// how_to_fix
Remove the malicious code and its back door, scan the whole server, harden logins and request a review. Malware reviews usually take a few days once the site is fully clean.
07off-sitedamage

Fake link removal requests

from: [email protected] · "please remove our link"

The attacker emails websites that link to you, pretends to be you, and asks them to remove your best backlinks. It's quiet, cheap and hard to spot.

// warning_signs
Strong backlinks disappear without explanation, or a site owner mentions the request you supposedly sent.
// how_to_fix
Track your most valuable links, always contact partners from your own domain email, and let key sites know you'll never ask them to remove a link from a free email address.
08reputationdamage

Review bombing

★1 ×9 · 48 hours · 7 brand-new accounts

A wave of fake one-star reviews hits your Google Business Profile, Trustpilot or other review sites, often written with AI so each one looks different. It hurts trust, clicks and local rankings.

// warning_signs
Several low ratings in a short time from new or empty accounts, with no matching customer, booking or invoice, and similar wording.
// how_to_fix
Reply calmly, report each review under Google's fake engagement policy, keep a record of the pattern and escalate to Business Profile support. Keep genuine reviews coming from real customers.
09reputationdamage

Google Business Profile sabotage

suggested edit: status → "Permanently closed"

Anyone can suggest edits to a Business Profile. Attackers mark you as closed, change your phone number, hours, website or category, create duplicate listings, or report your profile so it gets suspended.

// warning_signs
Your profile suddenly shows the wrong details, says you're closed, has a pending "Google update" or is suspended.
// how_to_fix
Check your profile every week, reject wrong updates straight away, keep it verified and appeal any suspension with proof such as signage photos and business documents.
10reputationdamage

Smear campaigns and fake news

"yourbrand scam" → forum post ranks #3

Fake articles, "Is this company a scam?" posts, fake complaint pages and AI-written listicles are published and pushed up for your brand name, so customers and AI assistants find them first.

// warning_signs
New negative results when you search your brand name, AI answers repeating claims you've never seen, or fewer branded clicks and calls.
// how_to_fix
Work through the removal routes: the site owner, the platform's own policies and legal routes where the content is false. Where removal isn't possible, push it down with stronger pages you control. See the removal service.
11reputationdamage

Impersonation and lookalike domains

yourbrand-official.shop · registered 3 days ago

Fake social profiles or a cloned website on a lookalike domain use your name and logo to scam your customers or steal your branded traffic.

// warning_signs
Customers ask about orders or messages you never sent, or profiles appear with your logo and photos.
// how_to_fix
Report impersonation to each platform, send abuse reports to the registrar and host, and ask a lawyer about a domain dispute (UDRP) where you own the trademark.
12on-sitedamage

Bot floods and server overload

requests: 48k/min · 503 errors ↑

Fake traffic or a DDoS attack makes your server slow or unavailable. Googlebot meets errors, crawls less, and your analytics fill with junk visits.

// warning_signs
Server errors in the Crawl stats report, a slow or crashing site, and huge traffic spikes from one country or network with no engagement.
// how_to_fix
Put the site behind a CDN with a firewall, add rate limits, ask your host for help and filter bot traffic out of your analytics.
13on-sitedamage

Internal search and URL parameter spam

/?s=casino+bonus · indexed ×2,340

The attacker links to your internal search pages or URL parameters with spam words in them, so Google finds thousands of junk pages on your domain that show spam text.

// warning_signs
Indexed URLs with ?s= or odd parameters in the Pages report, often containing gambling, adult or pharma words.
// how_to_fix
Add noindex to internal search results, keep them out of your sitemap and never link to them. Once the junk has dropped out of Google, you can block the search path in robots.txt.

// damage = how much harm the attack can do if nobody acts. log lines are examples

diagnosis

How to Tell If You're Under a Negative SEO Attack

A real negative SEO attack leaves evidence: a notice, a warning, a spike in links, a wave of reviews or pages you didn't create. Tick what you've noticed and the checker shows which attacks fit and where to look first.

diagnose.sh

// where to check, and how often

where to checkwhat it showshow often
Search Console: Manual actionsWhether Google has penalised your site, for example for unnatural links or hacked spam.// weekly
Search Console: Security issuesHacked content, malware and social engineering warnings, with example URLs.// weekly
Search Console: Pages and LinksSudden jumps in indexed pages, odd URLs, new linking domains and spammy anchor text.// weekly
DMCA emails and Lumen databaseCopyright complaints filed against your URLs and who filed them.// monthly
Google Business ProfileFake reviews, suggested edits, wrong details and suspension notices.// weekly
Your brand name in GoogleNew negative results, fake profiles and what AI answers say about you.// monthly
Server logs and host panelBot floods, server errors and logins you don't recognise.// monthly

// it might not be an attack

Most ranking drops have a normal cause. Rule these out before you blame a competitor.

Google updatesA core update can move rankings for weeks without any attack.
Technical errorsA noindex tag, robots.txt rule or broken redirect can wipe out pages.
Lost linksReal backlinks disappear when sites close or pages change.
Better competitorsSomeone may simply have published a more helpful page.
SeasonalitySome searches rise and fall every year at the same time.
recovery

How to Recover From a Negative SEO Attack

Recovery follows the same order every time: prove what happened, stop it, clean it up, then ask Google to take another look. Skipping a step, like requesting a review before the site is fully clean, only makes the process slower.

Triage and collect evidence

I confirm what's really happening before touching anything: Search Console, server logs, backlinks, DMCA notices, reviews and your brand results. Every finding is dated and saved.

→ evidence logscreenshots, exports and a timeline of the attack

Contain the damage

If the site is compromised, I lock it down first: new passwords for everything, unknown users removed, two-factor login switched on and a firewall in front of the site.

→ attack stoppedno new spam, redirects or edits getting in

Clean up your site

Spam pages, injected links, malicious code and junk URLs are removed. Spam URLs return 410 or 404, internal search pages get noindex, and a clean sitemap is submitted.

→ clean siteonly your real pages left in Google

Counter the platform attacks

I file DMCA counter-notices, report fake reviews, reject false profile edits and start removal requests for smear content, each with the evidence attached.

→ requests filedevery case tracked with dates and status

Handle the links properly

I review the link attack and only build a disavow file if there's a manual action or clear harm. When it's needed, it disavows whole spam domains, not random URLs.

→ links revieweda disavow file only if it's justified

Ask Google to review

Once everything is clean, I request a security review or a reconsideration request in Search Console, describing exactly what was fixed.

→ review requestedwarnings and manual actions lifted

Rebuild and monitor

Recovery isn't finished when the warning disappears. I strengthen the site with fixes, content and genuine links, and set up alerts so a repeat attack is caught early.

→ protected sitemonthly monitoring and a clear report
~2–3 weeksto reverse a fake DMCA removal after a counter-notice
daysfor a malware review once the site is clean
up to weeksfor a hacked-spam review to be processed
1–3 monthsfor rankings and reputation to settle after clean-up

Need help? Negative SEO recovery services

I handle the full recovery for you, from evidence and clean-up to Google reviews and monitoring, with a fixed quote after a free check.

See recovery services
prevention

How to Protect Your Website From Negative SEO

You can't stop someone from trying, but you can make an attack fail fast. These eight habits block most attacks and help you catch the rest early.

// weekly

Check Search Console

Look at Manual actions, Security issues and the Pages report so problems are caught in days, not months.

// always

Keep WordPress updated

Update core, plugins and themes, and delete any you don't use. Outdated plugins are the most common way in.

// always

Lock your logins

Use strong passwords, two-factor login and as few admin accounts as possible.

// daily

Back up off-site

Keep automatic daily backups stored away from your server so you can restore a clean copy fast.

// always

Use a firewall and CDN

A web firewall blocks bad bots, brute-force logins and traffic floods before they reach your site.

// weekly

Watch your Business Profile

Turn on notifications, reply to reviews and reject wrong edits straight away.

// monthly

Monitor your brand name

Search your business name, set alerts and note any new negative results early.

// always

Keep growing

Genuine links, reviews and helpful content make your site much harder to knock down.

faq

Negative SEO FAQ

Short, direct answers to the questions people ask most about negative SEO attacks.

What is negative SEO?

Negative SEO is the use of unethical tactics to harm another website's rankings or reputation in search. Common examples are spammy link blasts, hacking, fake reviews, fake copyright complaints and smear content aimed at a brand name.

Is negative SEO still a real threat in 2026?

Yes, but not in the way most people think. Google ignores most spammy links on its own, so classic link attacks rarely work. The attacks that still cause real damage are hacking, fake DMCA takedowns, review bombing, Business Profile sabotage and smear content.

Can a competitor hurt my rankings with bad backlinks?

It is very unlikely. Google says it works hard to make sure actions on third-party sites don't harm a website, and its systems ignore most spammy links. Keep a record of the links and act only if you get a manual action or see a clear, matching drop.

How do I know if I'm under a negative SEO attack?

Check Search Console first: Manual actions, Security issues, the Pages report and the Links report. Then search your brand name, check your Google Business Profile and look for DMCA notices. An attack usually leaves evidence; a normal ranking drop usually doesn't.

Should I disavow links after a negative SEO attack?

Usually not. Google says most sites never need the disavow tool. Use it when you have a manual action for unnatural links, or when a large, clearly harmful link attack lines up with a real ranking drop, and disavow whole domains rather than random URLs.

How long does it take to recover from negative SEO?

It depends on the attack. A fake DMCA removal can be reversed in about two to three weeks after a counter-notice. A hacked site review can take several weeks after the clean-up. Reputation work and rankings recovery can take a few months.

Can you remove a fake article or page from Google?

Often, yes, but it depends on the content and where it is hosted. The best result is removal at the source. Otherwise Google may remove it under its personal information, impersonation or legal policies, and if none apply, stronger pages can push it out of sight.

Will Google remove a negative review or article just because it's unfair?

No. Google removes content that breaks its policies or the law, not content that is simply negative. Fake reviews, impersonation, personal information and proven defamation can be removed; honest criticism usually can't, so a calm public reply is the better answer.

Is negative SEO illegal?

Some of it is. Hacking, malware, impersonation, fake reviews and false copyright notices can break the law in many countries, while spammy links are mainly against Google's rules. If you're targeted, keep evidence and speak to a lawyer about your options.

How can I protect my website from negative SEO?

Keep WordPress, plugins and themes updated, use strong passwords with two-factor login, keep backups and a firewall, check Search Console weekly, watch your brand name and reviews, and keep earning genuine links and reviews so your site stays strong.

More questions about SEO? Read the complete SEO FAQ.

under attack?

Get a Free Negative SEO Check

Send me your website, what you've noticed and when it started. I'll check the evidence and tell you honestly whether it's an attack, what to do first and what it would cost to fix.

Recovery services
Scroll to Top