Every link buyer eventually asks: is this placement safe? Every publisher asks the mirror image: will accepting this post hurt my site? "White hat" and "black hat" are not a clean binary. Most real-world link building sits in a grey zone, and the risk depends less on the label than on how the tactic is executed.
This guide gives you working definitions, a tactic-by-tactic comparison against Google's spam policies, the difference between a manual action and algorithmic suppression, how to recover if you are hit, and how to buy placements that stay on the right side of the line.
Definitions that hold up
White hat means tactics Google's guidelines permit or encourage: publishing content people want to link to, earning editorial coverage, fixing technical issues, labeling anything paid. The tactic would still make sense if search engines did not exist.
Black hat means tactics Google's spam policies name as violations: cloaking, hidden text, doorway pages, link schemes, scaled content built to manipulate rankings. They exist purely to game the algorithm and invite manual actions.
Grey hat is everything in between: tactics not named as violations but that are fine in one form and a violation in another. Most paid guest posts and link insertions live here, and execution decides which side they fall on.
The question is never "is this tactic allowed?" It is "would this page and this link exist in this form if rankings were not the goal?"
Tactic-by-tactic comparison
| Tactic | Hat | What Google's policy says, in plain words | Practical risk |
|---|---|---|---|
| Guest post with publisher editorial control | White / grey | Fine when the host publishes on merit. If money changes hands, the link should carry rel="sponsored" or rel="nofollow". | Low |
| Link insertion in an existing article | Grey | Same rule: paid links passing PageRank without a qualifying attribute are a link scheme. | Low to medium |
| Private blog networks (PBNs) | Black | Networks of sites built to link to each other or to clients are link spam. | High; whole networks get deindexed |
| Cloaking | Black | Showing Googlebot different content than users see is prohibited. | High |
| Doorway pages | Black | Pages built to rank for specific queries and funnel users elsewhere are spam. | High |
| Scaled AI or spun content | Black | Many pages produced primarily to manipulate rankings is spam, whatever the method. | High; site-wide demotion |
| Expired-domain redirects to unrelated content | Black | Expired domain abuse: buying a domain for its history to boost unrelated content. | High |
| Paid links without rel="sponsored" | Black | Buying or selling links that pass ranking credit is a link scheme. | Medium to high |
| Hidden text or links | Black | Text invisible to users but visible to crawlers is prohibited. | High |
| Excessive link exchanges | Grey / black | Occasional reciprocal links are natural; "link to me and I'll link to you" at scale is a link scheme. | Medium |
The two tactics most link buyers actually use, guest posts and link insertions, are not banned. What Google objects to is payment plus a followed link plus no disclosure. Relevance and editorial quality decide whether the placement helps or hurts.
Manual actions vs algorithmic suppression
Manual actions
A manual action is a human reviewer at Google deciding your site or specific pages violate the spam policies. You get a notice in Search Console under "Manual actions" naming the violation (for example "unnatural links to your site"), and affected pages can be demoted or removed from results. You must fix the issue and file a reconsideration request to get it lifted.
Algorithmic suppression
Algorithmic suppression is Google's ranking systems, including spam detection and the helpful-content signals, quietly discounting or demoting your pages. There is no notice. You see a traffic drop, often aligned with a core or spam update, and nothing in Search Console explains it. There is no reconsideration request; recovery means fixing the cause and waiting for the systems to reassess, which can take months.
Most sites that "got penalized" never had a manual action. They were algorithmically discounted and the links they bought simply stopped counting: not a penalty, but wasted money.
Recovery, step by step
If you have a manual action for unnatural links, or a drop you can trace to your link profile, work through this in order.
- Export your full backlink profile from Search Console and at least one third-party tool.
- Classify every referring domain. Flag PBNs, sites with no real traffic, irrelevant niches, and anchor text that reads like a keyword list (the anchor text guide shows what unnatural looks like).
- Request removal first. Ask publishers to remove the link or add rel="nofollow" or rel="sponsored". Keep a dated log; reviewers want to see effort.
- Disavow what you cannot remove. Upload a disavow file in Search Console, using domain-level entries for clearly spammy sites. Do not disavow good links out of panic.
- File a reconsideration request (manual actions only). Be specific: what you found, removed and disavowed, and what you changed so it does not recur. Generic apologies get rejected.
- For algorithmic drops, skip reconsideration. Clean up the profile, fix thin content, and build a few genuinely good links while you wait.
One warning: disavow is for sites with a real problem, not a maintenance task. Google has said it is for people who have a manual action or expect one. Blanket disavowing every low-DA link on a healthy site can remove links that were quietly helping.
How to buy placements safely
You can buy placements without crossing into black hat. Three filters do most of the work.
Editorial fit
The host site should already cover your topic. A site that has published on your subject for years is plausible; a general "business blog" that publishes anything for a fee is a pattern Google's systems recognize. If the last ten posts are all obviously paid pieces on unrelated topics, walk away.
Real traffic
Organic traffic means Google trusts the site enough to rank it, which is the best proxy for whether a link will count. Moz DA and Ahrefs DR are third-party 0–100 estimates that spam can inflate; traffic estimates are harder to fake. On BacklinkCAT you can filter listings by Semrush traffic, spam score and niche before DA or DR, and the "ownership verified" badge confirms the seller controls the domain rather than reselling access.
Disclosure
If you paid for the link, rel="sponsored" is the honest attribute, and it does not make the placement worthless: you still get referral traffic, brand exposure and the entity signals covered in the SEO trends that matter. A followed link on a site with real editorial standards is worth more, but a followed link on a site that sells them to anyone is a liability. Treat do-follow as a bonus, not a requirement.
Other checks
- Insist on publisher editorial control. If they publish anything you send, so will spammers. Publishers: the same rule protects your rankings; see the guest posting guide for publishers.
- Use branded and natural anchors on paid placements; exact-match anchors on paid links are the easiest pattern to spot.
- Diversify: ten links from ten relevant sites beat ten from one network.
- Check outbound links. Followed links to casinos, payday loans and unrelated tools in every post is a red flag.
- Pace it. A site that gains fifty links in a month after a year of none looks like what it is.
Key takeaways
- White, grey and black hat are defined by intent and execution, not tactic name.
- Guest posts and link insertions are grey hat; relevance, editorial control and disclosure decide which way they fall.
- PBNs, cloaking, doorway pages, hidden text, scaled content and expired-domain abuse are named violations. Do not touch them.
- Manual actions come with a notice and a reconsideration path; algorithmic suppression comes with neither.
- Recover in order: export, classify, request removal, disavow, reconsideration.
- Buy on editorial fit, real traffic and honest disclosure; treat do-follow as a bonus.
