Google’s Link Spam Policies for Link Buyers

Anyone buying backlinks should know where Google draws the line, because the line runs straight through the link-buying business. This guide summarises Google’s published policies as they stand in October 2026, with links to the source pages. Policies change; the sources are the final word.

What Google calls link spam

Google’s spam policies define link spam as “creating links to or from a site primarily for the purpose of manipulating search rankings.” The examples Google lists include:

• buying or selling links for ranking purposes, whether for money, goods or services, including sending a free product in exchange for a write-up with a link;
• excessive link exchanges, or partner pages that exist only for cross-linking;
• automated programs or services that create links;
• requiring a link as part of terms of service or a contract, without letting the site owner qualify it;
• paid advertorials or native ads with links that pass ranking credit, or links with optimized anchor text in articles, guest posts or press releases distributed on other sites;
• low-quality directory or bookmark links, keyword-rich links hidden in widgets, links spread across the footers or templates of many sites, and forum comments with optimized links.

The same page says what makes paid links acceptable: qualifying them with rel="nofollow" or rel="sponsored".

How to qualify a paid link

Google’s guidance on qualifying outbound links names three values:

• rel="sponsored" for ads, sponsorships and other paid placements. nofollow is still acceptable for these, but sponsored is preferred.
• rel="ugc" for user-generated content such as comments and forum posts.
• rel="nofollow" for cases where the others don’t apply and the site would rather not be associated with the linked page.

Since 2019 Google has treated all three as hints rather than strict commands. In plain terms, a qualified link is the compliant way to buy visibility, and it is not designed to pass ranking credit.

Site reputation policy

This policy was rewritten on 28 August 2026, and it matters most to guest posting. It targets situations “where third-party content is published on a host site mainly because of that host’s already-established ranking signals, which it has earned primarily from its first-party content.”

What that means:

• Third-party content means content from users, freelancers, white-label services and others who aren’t part of the host site’s own team. Hosting it is not a violation in itself.
• The question is whether the content was “created with sufficient input, editorial oversight, or contribution from the host site to be considered fully integrated”. Google looks at things like presentation, quality, authorship, and whether the same content appears on other sites.
• Google announced that enforcement differs by region from 30 August 2026: manual actions outside the EEA, while inside the EEA the affected pages are treated separately from the rest of the site.

For buyers, a high-authority site that publishes paid articles on any topic, with little editorial involvement, is exactly the situation the policy describes. A guest post the host site’s editors genuinely shaped, on a topic the site actually covers, is not.

Expired domain abuse

Google defines this as when “an expired domain name is purchased and repurposed primarily to manipulate search rankings by hosting content that provides little to no value to users.” Its examples include affiliate content on a former government site and casino content on a former school site.

This is why we never treat domain age as a quality signal on its own. An old registration date says nothing about whether the current site has anything to do with the one that earned the links.

What this means if you buy links

Google’s policies are clear that buying links to manipulate rankings is link spam. Many SEO professionals still buy placements, and it is your call to make. Make it with clear eyes:

• The compliant path is a paid placement marked rel="sponsored", valued for its audience, referral traffic and brand exposure rather than ranking credit.
• Risk rises with keyword-stuffed anchors, sites that sell to every niche, content written only to carry a link, and placements on sites whose authority comes from a different topic.
• Relevance and editorial quality are both risk reducers and value drivers. A placement a genuine editor would publish anyway, on a site your audience reads, is the best case on both counts.

Our analyses state these risks for each site, and the evaluation checklist shows how to spot them yourself.

Do Google’s policies mention DA or DR?

No. Google’s documentation doesn’t use third-party metrics, and Google’s John Mueller has said Google doesn’t use Domain Authority “at all” in crawling, indexing or ranking. A high DA or DR doesn’t make a paid link compliant, or valuable.