Strategy 10 min read
Black Hat vs White Hat SEO: What Google Penalizes, and What Works Instead
Every black hat tactic has a name in Google's spam policies, and Google says sites that break them may rank lower or disappear. Here's each one in plain English, with the white hat version that gets the same result without the risk.
Founder, SEO·AEO·GEO
Builds SEO·AEO·GEO and writes the crawler, schema, and citation research published here.
Key takeaways
- Black hat SEO means tactics meant to manipulate search rankings in ways that break search engines' rules. White hat SEO means improving your site within those rules.
- Google lists the black hat tactics in its spam policies: cloaking, doorway abuse, expired domain abuse, hidden text, keyword stuffing, link spam, scaled content abuse, scraping, site reputation abuse, sneaky redirects and more.
- Google says sites that violate the policies may rank lower or not appear in results at all, through automated systems or a manual action after human review.
- Buying links for rankings, mass-produced pages and "parasite" pages on other sites' domains are the tactics most often sold as shortcuts.
- Every black hat tactic has a white hat equivalent that aims at the same goal: links you earn, pages that answer the query, and content written for readers.
Black hat SEO is trying to rank by tricking search engines; white hat SEO is ranking by making your site genuinely easy to crawl and useful to read. The line between them isn't a matter of opinion: Google publishes it as its spam policies.
Google says sites that violate those policies may rank lower in results or not appear in results at all. Violations are found by automated systems and, where needed, by human reviewers, who can issue a manual action.
Black hat tactics, as Google defines them
| Tactic | What it is (Google's spam policies) | White hat alternative |
|---|---|---|
| Cloaking | Showing search engines different content from what visitors see, to manipulate rankings or mislead users | Serve the same HTML to everyone; if JavaScript builds the page, render it on the server |
| Doorway abuse | Many sites or pages targeting near-identical queries that funnel visitors to a less useful page | One strong page per real service or location |
| Expired domain abuse | Buying a lapsed domain and reusing it mainly to rank low-value content | Build authority on your own domain |
| Hidden text and links | Text or links people can't easily see, placed only for search engines | Visible, useful copy and navigation |
| Keyword stuffing | Unnatural lists or repetitions of keywords, numbers or locations | Write naturally; use the words customers use, once, where they fit |
| Link spam | Links made mainly to manipulate rankings: buying or selling them, excessive exchanges, automated link creation | Earn links with useful resources, data and real relationships; mark paid links as sponsored |
| Scaled content abuse | Mass-producing largely unoriginal pages, by AI, scraping or stitching, mainly to rank | Fewer pages, each with original information or experience |
| Scraping | Republishing others' content without adding value | Quote briefly, credit the source and add your own analysis |
| Site reputation abuse | Third-party content hosted on a site mainly to borrow the host's ranking signals | Publish on your own site, or as a genuine contributor under editorial control |
| Sneaky redirects | Sending users or search engines somewhere different from what they asked for | Redirect only moved pages, to their real replacements |
| Thin affiliation | Affiliate pages with copied product descriptions and nothing added | Original reviews, tests and comparisons |
The policies also cover hacked content, machine-generated traffic, malware, misleading functionality and user-generated spam. Google also demotes sites that try to get around the rules with new subdomains or sites, and blocks scam and impersonation sites.
The three shortcuts most often sold
Buying backlinks
Packages of "high-DA backlinks", private blog networks, link exchanges and automated submission tools are link spam under Google's policy. A paid link is fine only if it's qualified with rel="sponsored" or rel="nofollow", which tells Google not to count it for ranking. See toxic backlinks and link building for what works instead.
Parasite SEO
Parasite SEO is the industry name for placing pages on a strong third-party domain (a news site's coupon section, a forum, a hosted platform) to rank on that domain's reputation. Google's site reputation abuse policy targets exactly this. Google notes that outside the EEA, affected pages may get a manual action; inside the EEA, they may be categorized separately from the main domain. See parasite SEO.
Mass-produced pages
Generating thousands of near-identical pages, whether with AI, templates or scraped text, is scaled content abuse when the main purpose is ranking rather than helping people. Programmatic pages can be legitimate when each page carries unique, useful data; see programmatic SEO. The test is simple: would the page be worth publishing if search engines didn't exist?
What happens if you're caught
- Algorithmic demotion: automated systems lower or remove the pages, with no notice.
- Manual action: a reviewer applies an action that appears in Search Console's Manual actions report, affecting some pages or the whole site.
- Recovery: fix the issue everywhere, then request a review in Search Console. Algorithmic demotions lift as systems reprocess the site, which can take months.
What white hat SEO looks like
- Make every important page crawlable and indexable, with the content in the HTML.
- Give each page one clear purpose, a unique title and a direct answer near the top.
- Write from real knowledge: data, examples, photos and experience others don't have.
- Link your own pages together with descriptive anchor text.
- Earn mentions and links by publishing things others want to cite, such as original data, tools and guides.
- Keep pages up to date and remove or merge thin ones.
None of this is fast, which is why shortcuts sell. But white hat work compounds, while a penalty can undo years of growth. If you're hiring help, how to choose an SEO agency lists the warning signs Google itself gives.
FAQ
What is black hat SEO?+
Black hat SEO is any tactic that tries to improve rankings by deceiving search engines or users, against the search engine's rules. Google's spam policies list these tactics, from cloaking and hidden text to buying links and mass-producing low-value pages.
What is white hat SEO?+
White hat SEO improves rankings by making a site easier to crawl and more useful to readers, within Google Search Essentials: technical fixes, helpful content, clear titles and links earned on merit.
What happens if Google catches black hat SEO?+
Google says sites that violate its spam policies may rank lower in results or not appear at all. Detection is automated, with human review where needed, which can lead to a manual action shown in Search Console.
Is buying backlinks illegal?+
It isn't usually a legal matter, but buying or selling links for ranking purposes breaks Google's link spam policy. Paid links are allowed only when marked with rel="sponsored" or rel="nofollow", so they don't pass ranking credit.
What is grey hat SEO?+
An informal label for tactics in between, often aggressive versions of legitimate practices. Google's policies don't use the term; a tactic either breaks a spam policy or it doesn't, so check it against the policy text.
How do I recover from a manual action?+
Open the Manual actions report in Search Console, fix every issue it names on all affected pages, then request a review explaining what you changed. Google reviews the request and lifts the action if the problem is resolved.
Sources
- Spam policies for Google web search — Google Search Central (2026-08-28)
- Google Search Essentials — Google Search Central
- Qualify your outbound links to Google — Google Search Central
- Manual actions report — Search Console Help
Run it on your domain
See this lens as a finding, not a lecture.
Free technical GEO audit. Evidence-traced scores, LLM-ready export, no login.
Audit your website
