Guide · Black hat, white hat, negative SEO
Black Hat, White Hat, Negative SEO: Where the Line Runs
White hat follows the rules, black hat deliberately breaks them
White hat SEO works within Google’s guidelines, black hat deliberately violates them – with techniques from purchased links to mass-generated AI pages, which Google has explicitly classified as “scaled content abuse” since 2024. Negative SEO, the attack by third parties, is real, but rarer than feared: Google automatically ignores most spam links. Panic is the wrong reaction, a checking plan the right one.
The terms in one paragraph each
White hat means: content, technology and linking follow the Google Search Essentials. Slower, but the result is yours permanently.
Black hat means: deliberate violation of the spam policies – cloaking, doorway pages, purchased links, keyword stuffing, hidden text. The deal is always the same: a short-term effect against the risk of losing visibility through an algorithm or manual action.
Grey hat is the excuse term in between – usually black hat with better marketing.
Negative SEO means: someone applies black hat techniques against your website – spam links to your domain, copied content, fake reviews.
Mass AI content is the new black hat
The classic techniques are known and reliably detected. How reliably is shown by Google’s own numbers: in 2022, SpamBrain detected five times more spam websites than the year before and 200 times more than in 2018 – 99 percent of visits from Google search remained spam-free (Google Webspam Report 2022).
| Period | Detected spam websites compared | Share of spam-free search visits |
|---|---|---|
| 2018 | Reference value | – |
| 2021 | Basis for the 2022 comparison value | – |
| 2022 | 5 times more than 2021, 200 times more than 2018 | 99 % |
Source: Google Webspam Report 2022.
Today’s relevant grey area is a different one: hundreds or thousands of AI-generated pages without their own substance, produced solely for rankings. With the March 2024 spam update, Google created its own category for this: “scaled content abuse” – and explicitly classifies not the tool, but the purpose. Writing with AI assistance is allowed; rolling out masses of pages without added value is not.
This is the point where it’s decided today whether a service provider works cleanly. Anyone promising you “500 pages in a week” is selling you a risk. How I work with AI instead – automating the routine, approval before every change, substance from your knowledge – is described under MCP SEO.
The borderline cases, sorted by risk
Between clearly clean and clearly black hat lie a few practices where the classification depends on the implementation – not the tool.
| Practice | Classification | Risk |
|---|---|---|
| Guest posts with editorial value | White hat | none |
| AI draft, human-refined, with own substance | White hat | none |
| Reviving expired domains for links | Spam policy (“expired domain abuse”) | high |
| Purchased links without rel=”sponsored” | Black hat | high |
| Masses of AI pages without added value | Black hat (“scaled content abuse”) | high |
Negative SEO: the sober checking plan
The fear of link attacks is bigger than the danger: Google has explained for years that spam links are largely devalued automatically – which is why, according to Google’s own documentation, the disavow tool is intended for one case only: when a manual action for unnatural links exists or realistically looms. Anyone submitting a disavow for every odd backlink is fighting a problem Google solved long ago.
If you suspect an attack, check in this order:
- Search Console → Manual actions: if nothing is listed there, there’s no acute penalty problem.
- Date the ranking loss: does it coincide with a Google update? Then the cause usually lies with your own site, not the competitor.
- Look at the backlink profile (Ahrefs/Semrush): a sudden surge of identical anchor texts from spam domains is conspicuous – document, monitor.
- Check for content theft: have copied content on third-party domains removed via a DMCA report if necessary.
- Disavow only in case of a manual action – then targeted, with documentation.
How I handle suspected cases
When rankings drop, the first question is almost always: did someone attack us? I then go through exactly the checking plan above before a disavow is even discussed. In the vast majority of cases I accompany across my currently around 15 client projects, there is no manual action in the Search Console – instead, the drop coincides with a Google update or an own technical change. A disavow without this check would repair nothing that’s broken, but cost a lot of time.
For AI texts, the same rule applies with me as with the checking plan: nothing goes live without approval, and substance comes from what the client actually knows – not from generic volume. That’s exactly what separates the permissible use of AI in my work from the scaled content abuse Google has explicitly sanctioned since 2024.
Common mistakes with black hat, white hat and negative SEO
Disavow as a hygiene ritual
Without a manual action, mostly ineffective to harmful.
“The competitor did it” as the default explanation
In most cases, the cause is an update or an own technical problem.
Recognising black hat providers by the guarantee, not the price
“Position 1 guaranteed” is the most reliable warning signal.
Considering AI clean or dirty across the board
What counts is the purpose: substance or mass.
Frequently asked questions about black hat, white hat and negative SEO
Is black hat SEO illegal?
Usually not in the criminal sense – but it violates Google’s guidelines and can also become legally relevant in cases of deception or reputational damage (negative SEO). The practical punishment is the loss of visibility.
Can negative SEO really harm me?
Rarely. Google’s systems devalue spam links predominantly automatically. More dangerous are content theft and fake reviews – both can be reported.
How do I recognise a dubious SEO provider?
By three signals: ranking guarantees, no information about methods, extremely high page or link numbers in a short time.
Is AI content black hat?
No – not per se. Google evaluates whether content benefits people. Mass production without added value has been its own spam category since March 2024.
Viktor Pásztor
Viktor Pásztor is an SEO freelancer in Berlin, has been in digital marketing for over 15 years and manages around 15 client projects in parallel, mostly e-commerce and B2B. He has been working 100 % remotely for more than five years – with WordPress, Shopify, Shopware and TYPO3. More about Viktor Pásztor
Keep reading
What is SEO
The basics, before it’s about borderline cases.
Off-page & link building
What clean link building looks like in practice.
SEO vs. GEO vs. MCP SEO
How the disciplines differ and complement each other.
Unsure whether your SEO is clean?
Unsure whether your previous provider worked cleanly? In a free initial call, we’ll look at your link profile together.
→ Book a call now