Black hat link building: techniques, risks and what Google does about it

By Matija Konjić

Black hat link building is any method of acquiring links that works by manufacturing them at scale, without a human editor deciding to link and without real readers on the page that carries the link. It is the part of the industry that sells “500 backlinks for 20 dollars”, builds private blog networks, injects links into hacked sites and automates comment spam. Google’s spam policies call this link spam and describe most of the techniques by name.

This guide explains how each technique works, what Google does with those links in 2026, what they cost the sites that buy them, and how to tell a spam offer from a legitimate paid placement, because the two are routinely confused and the confusion is expensive in both directions.

What black hat link building is

The useful definition has three parts. A black hat link is placed without editorial judgment: nobody at the linking site decided your page deserved the reference. It sits on a page with no real audience, built for search engines rather than for people. And it exists in volume, because the economics only work when the same tactic is repeated thousands of times. Private blog networks, link farms, automated comment and forum spam, hacked links and bulk link packages all meet that description.

What the definition does not include matters just as much. A guest post on a trade publication that real practitioners read, a link added to an established article because it helps the reader, or a digital PR campaign that earns coverage from journalists are all editorial links, whether or not money, content or effort changed hands to get them. Google’s own line in its policies is about links intended to manipulate rankings; the practical test for a buyer is simpler: would this link exist on a page a human reads, chosen by someone who could have said no?

The reason the distinction gets blurred is that both sides use the same vocabulary. Spam sellers call their networks “guest posts” and “niche edits”, and nervous marketers conclude that guest posts and niche edits are spam. They are techniques; the sites and the scale decide which side of the line a link falls on.

Nine black hat link building techniques

Most black hat link building is a combination of a few repeatable techniques, usually sold together in a package. Knowing what each one looks like is the quickest way to recognize an offer for what it is.

Private blog networks

A private blog network, or PBN, is a group of websites owned or controlled by one operator and used to link to client sites. The domains are usually bought after expiring with some history behind them, filled with thin or spun articles, and hidden behind different hosting and registration details to avoid looking connected. Buyers see a list of “DR 40 to 60 sites”; what they are getting is pages nobody reads, on domains whose history has nothing to do with the topic.

Link farms and automated directories

Link farms are sites that exist to link out, often to hundreds of unrelated businesses from the same page. Free-for-all directories, article directories and “submit your site” lists fall into the same category. The giveaway is the outbound link count: a page linking to a plumber, a casino, a law firm and a crypto exchange is not an editorial page.

Comment and forum spam

Automated tools post comments, forum replies and profile pages containing links at a rate of thousands per day. Almost every platform now marks these links nofollow or ugc, and the ones that do not are typically abandoned sites. These links are the bottom tier of the pyramids sold in bulk packages, and they have been ignored by Google for well over a decade.

Hacked and injected links

Some operators compromise legitimate sites, usually through outdated WordPress plugins, and inject hidden links into existing pages or publish new pages the owner never sees. This is the one category that is a crime rather than a policy violation, and buying links from a seller who cannot explain where the pages came from makes you part of it.

Hidden links and cloaking

Links hidden with CSS, placed in white text on a white background, tucked into off-screen elements, or served only to Googlebot while visitors see a different page. Google has detected the common versions of this for years, and the pages that carry them tend to be removed from the index when found.

Expired domain redirects

Buying an expired domain with a link profile and redirecting it wholesale to a client site, or rebuilding it as a thin shell that links out, is expired domain abuse under Google’s spam policies since the March 2024 update. The old links pointed at a different site about a different subject, and treating them as if they endorsed yours is the manipulation the policy describes.

Mass link exchanges

“Link to me and I will link to you” at scale, including three-way swaps designed to hide the reciprocity, and private exchange groups where dozens of sites insert links to each other in rotation. A single relevant reciprocal link between two real businesses is ordinary web behavior; a spreadsheet of fifty exchanges is a scheme.

Widget and footer links at scale

Free widgets, themes, counters and badges that carry a keyword-rich link back to the provider, embedded across thousands of sites whose owners never chose the anchor text. Google has long treated these as unnatural links, and the same applies to sitewide footer links sold by the month.

Forum-sold link packages

Much of the above is bought on black hat forums and freelance marketplaces, where sellers list packages such as “100 high DA backlinks” or “tier two campaign” for a few dollars. The question people search for, which black hat forum has the best link building offers, has a consistent answer: the packages are the same everywhere, built from the tiers in the diagram above, and the reviews come from other sellers. What the buyer receives is a spreadsheet of URLs that Google has already learned to ignore.

Each of these techniques shares the three traits from the definition: no editor, no audience, and volume as the whole point. That shared signature is what makes them detectable.

How Google handles link spam in 2026

The mental model most people carry is ten years out of date. In the Penguin era, link spam was caught in periodic updates and sites were demoted until the next one. That changed in September 2016, when Google announced that Penguin became part of the core algorithm, running in real time and devaluing spam links rather than demoting whole sites.

The December 2022 link spam update extended that approach with SpamBrain, Google’s AI-based spam prevention system, which was trained to detect sites buying links and sites that exist to pass links, and to neutralize those links. The March 2024 spam policy update added expired domain abuse, scaled content abuse and site reputation abuse to the written policies, and the spam updates through 2025 and 2026 have concentrated on scaled content rather than on links.

Two consequences follow. First, the typical fate of a black hat link in 2026 is to be ignored: it passes nothing, and the site that bought it sees no change in either direction. Second, manual actions for unnatural links still exist, are uncommon, and are always reported in Search Console under Manual actions, so a site that has not received that notice has not been penalized, whatever a tool’s “toxicity score” says. That is also why we do not recommend the disavow tool except in response to an actual manual action; disavowing backlinks that Google is already ignoring changes nothing and occasionally removes links that were helping.

What black hat links cost you

The real cost of black hat link building is rarely the dramatic penalty people fear. It is the quieter list below, and the first item is the one that matters most.

• Money that buys nothing. Links Google neutralizes are links you paid for and did not get. A 500 dollar bulk package that produces zero counted links is more expensive than one relevant placement at the same price.
• Months of lost time. Teams that wait for a bulk campaign to work are not building the editorial links that would have moved the page in the same quarter.
• Brand exposure on spam sites. Your company name and product sit on pages next to pharmaceuticals and gambling affiliates, visible to any prospect or journalist who checks your backlinks.
• The uncommon manual action. When a pattern is egregious enough, a manual action removes the affected pages or the site from results until a reconsideration request is accepted, which takes weeks of cleanup.
• Dependence on the seller. PBN links disappear when the network is deindexed or the operator stops paying for hosting, so whatever benefit existed is rented rather than owned.

Set against that, the cost of doing it properly is well documented. The medium tier of the market runs 200 to 600 dollars per editorial link in the figures Minuttia published and we collected in our link building pricing breakdown, and those links keep counting for years.

Where the line sits between black, gray and white hat

The industry’s three-color vocabulary is less useful than it sounds, because it tempts people to sort by technique rather than by site. Guest posting, link insertions, digital PR and paid placements are all white hat on a relevant publication with real readers and an editor who could have said no. The same four techniques become gray hat on sites that publish anything for a fee and have a dwindling audience, and black hat on networks that exist only to sell links. The full white hat vs black hat link building comparison walks through the categories; the short version is in the figure below.

Payment is on both sides of that figure, which is the point. Publishers have charged for placement in one form or another for as long as there have been publishers, and Google’s systems are built to evaluate the page and the link, since they cannot see the invoice. What they can see is whether the page has visitors, whether the link fits the content, and whether the same site links out to five hundred unrelated businesses. The sites we place niche edits and guest posts on are chosen on exactly those criteria, which is why those links keep counting when network links stop.

How to check whether a link offer is black hat

Before paying for any link, run the offer through six checks. Each takes a minute, and any two failures together are enough to walk away.

• Organic traffic. Put the domain into any backlink tool’s free checker or a traffic estimator. A site with real readers shows hundreds or thousands of monthly organic visits; a network site shows a flat line.
• Authors and ownership. Real publications name their writers and their company. Network sites have generic bylines, no about page, and privacy-masked registration.
• Topical fit. Scan the last twenty posts. If a “finance blog” has published articles on CBD, casinos and roofing in the same month, it is a billboard.
• Outbound link pattern. Open three recent articles and count the external links with commercial anchor text. More than a couple per post, all to different industries, is the signature of a site that sells by the slot.
• Indexation. Search for the site with the site: operator and check that recent posts appear. Deindexed networks keep selling links on pages Google no longer stores.
• Price and volume. Legitimate placements are priced per link and the seller asks about your page and anchor text. Packages of fifty or a hundred links at a flat price are tiered junk by definition.

A seller who passes all six is offering a placement on a real site, and the conversation moves to whether that site is relevant enough to be worth the fee. A seller who refuses to name the sites before payment has already answered the question.

What to do instead

Everything that works in 2026 is some version of the same move: put a useful link on a page that real people read, chosen by someone who could have said no. In practice that means guest posts and link insertions on relevant publications, digital PR built on data journalists want, partner and integration links, and the reclamation of mentions that already exist. The ways to get backlinks that we use for clients are all built on that principle. The difference shows in the results: when we ran placements for Breeze, a project management tool, organic traffic rose 207% in six months on links that are still live and still counting.

The budget is also usually smaller than people assume. Ten relevant placements a quarter, placed on pages with traffic and pointed at the pages that need to rank, outperform a thousand network links at a fraction of the long-term cost, and nothing about them needs cleaning up later. That is the whole case for doing link building properly: the links you pay for are the links you get.