Link Building in 2026: What Works, What Costs You

Both halves of the link services market are selling against Google's published documentation. The acquisition half describes, almost word for word, practices Google's spam policy lists as examples of link spam. The cleanup half sells audits built on a tool Google says most sites should never touch.

That is a strong claim, so this guide makes it entirely out of quotes from the documents, and then covers what is left.

What Google names as link spam

Google's spam policies, last updated 28 August 2026, define the category:

"Link spam: the practice of creating links to or from a site primarily for the purpose of manipulating search rankings."

The examples it lists read like a catalogue of what gets sold monthly:

• buying or selling links for ranking purposes, including exchanges of money, goods or services
• excessive link exchanges between partner pages
• automated programs that create links
• links required in terms of service without a way to qualify them
• advertorials containing paid links with optimised anchor text
• low-quality directory links
• hidden, keyword-rich widget links distributed across sites
• footer or template links distributed widely

Read a link proposal against that list. If the deliverable is a number of links per month, ask where they come from, and match the answer to a line above.

The part that decides whether this matters to you: the links point at your domain. If an arrangement is judged manipulative, the consequences attach to the site being linked to, not to the vendor. They move on; the history stays on your domain. We put the same question into our agency selection guide for exactly this reason.

The cleanup side is selling against the docs too

The mirror business is "toxic backlink audits" and monthly disavow files. Google's own disavow documentation is unusually blunt about both the need and the risk:

"In most cases, Google can assess which links to trust without additional guidance, so most sites will not need to use this tool."

and

"This is an advanced feature and should only be used with caution. If used incorrectly, this feature can potentially harm your site's performance in Google Search results."

It also states the order of operations that monthly disavow services skip: "First and foremost, we recommend that you remove as many spammy or low-quality links from the web as possible."

The tool exists for sites with a manual action for unnatural links. A toxicity score from a third-party tool is not a manual action — it is a vendor's model, and disavowing on the strength of it means telling Google to ignore links it may have been counting in your favour. That is the mechanism by which the cleanup can cost more than the problem.

The check is free: open the Manual Actions report in Search Console. If it is empty, the case for a disavow file is close to non-existent.

What the documentation actually asks for

Google's link best practices, updated 10 December 2025, are short and mostly ignored.

Crawlability first. "Google can only crawl your link if it's an <a> HTML element with an href attribute." A card handled by a JavaScript click handler on a <div> is not a link, however it looks.

Anchor text carries meaning. It should be "descriptive, reasonably concise, and relevant to the page that it's on and to the page it links to." So "read more" contributes nothing, and a keyword-stuffed anchor is its own problem.

Three attributes, three jobs. nofollow is for links you do not vouch for — Google says to use it "only when you don't trust the source, and not for every external link on your site." sponsored is for links you were paid to include. ugc is for links added by users in forums and comments.

That last set is where honest sites go wrong in the safe direction: blanket-nofollowing every outbound link. It costs nothing in penalties and throws away the editorial signal you are meant to be sending — and it makes your site less useful to read.

What earns links without creating a liability

The honest list is shorter and slower than a package, and it has one property in common: someone links to it because it helps them, not because of an arrangement.

• Original measurement. A number nobody else has published, with the method attached. This is why we run our own figures rather than recycling other people's — it is also the only kind of content that gets cited rather than summarised.
• A tool that saves work. A calculator, a checker, a template. Utility gets linked long after the campaign ends.
• Documentation better than the vendor's. If an official page is thin, incomplete or client-rendered, the best explanation on the web becomes the reference.
• A defensible contrarian position. Not contrarian for its own sake — a place where the common advice does not survive checking, shown with the check.
• Being the source of a fact. Publish the primary figure and the citations arrive on their own timeline.

None of these produce a link count you can forecast, which is exactly why the packaged version sells. The trade is that these accumulate an asset and the packaged version accumulates a liability.

Where we say no

We do not sell link packages, and we do not quote a number of links per month. There is no version of that number that is both honest and predictable.

We do not run monthly disavow files. If a site has a manual action we will work through it; absent one, we would be acting on a vendor's score against Google's own written advice.

And we will say when links are not the constraint. A site whose category pages do not link to its products, or whose pages are not indexed, has an internal linking problem that no external campaign reaches — the order of operations is in our SEO audit guide, and our SEO services page sets out what we do instead.

A ten-minute audit of your own situation

1. Open Manual Actions in Search Console. Empty is the answer you want and usually the answer you get.
2. Read your last link invoice against the spam policy list. If a line matches, the risk is on your domain.
3. Check your internal anchor text for "read more" and "click here", which Google specifically advises against.
4. Look at whether outbound links are blanket-nofollowed. If they are, someone applied a rule that Google's guidance does not ask for.
5. Ask what on your site a stranger would link to. If the honest answer is nothing, that is the actual project.

If you would rather have someone tell you whether links are your constraint before you buy any, send us the domain and we will say what we find — including when the answer is that the money is better spent elsewhere.