"Toxic" is a vendor word, not a Google one
No SEO tool can see what Google thinks of a link. Every "toxicity score" is a vendor's own estimate, built from signals it can observe — the linking site's traffic, its outbound link patterns, its topic, its country, whether it looks automated.
Those estimates are sometimes useful and frequently wrong. A legitimate niche directory with little traffic can score badly. A well-built private blog network can score well.
So treat a toxicity score as a prompt to look, never as a verdict. The judgement is yours; the score just sorts the queue.
Google ignores most bad links already
This is the part that changes what you should do.
Google's position for years has been that it ignores the vast majority of spam links rather than penalising sites for them. Link spam is common, it is cheap, and any system that punished sites for incoming links would be trivially abusable — anyone could damage a competitor by pointing rubbish at them.
Two practical consequences:
Most link profiles need no action. If your rankings are stable and you have no manual action, a page of red toxicity scores is usually a tool selling a subscription rather than a problem needing work.
Negative SEO is largely ineffective. It is the fear that sells disavow services, and the reason it rarely works is the same reason Google ignores the links in the first place.
When disavowing is actually warranted
Two situations, and they are narrower than the tools imply.
1 · You have a manual action for unnatural links. Check Search Console → Security & Manual Actions. If there is a message there, this is real, it is specific, and Google has told you so. Disavowing is part of the reconsideration process.
2 · You know links were built badly, and rankings reflect it. An agency bought links, or a previous owner did. You know the campaign happened, you can identify the links, and performance is not what the site otherwise merits. This is a judgement call, and honest practitioners disagree about how often it is the real cause.
Outside those two, the default is to do nothing. That is not laziness — it is the lower-risk choice, for the reason below.
The disavow tool can cost you
Disavow tells Google to ignore links. It is a blunt instrument and there is no undo in any meaningful sense: re-including a link means Google has to re-crawl and re-evaluate it, which takes time you cannot control.
The expensive mistake is disavowing at domain level to be thorough. A supplier's site, an industry directory, a local news mention and a genuinely useful link can all sit on domains that a tool flagged. Remove them and you have thrown away real authority to solve a problem you may not have had.
If you are not confident a link is harming you, leaving it is the safer bet. Google ignoring a link costs you nothing. You disavowing a good link costs you its value.
How to review a link profile properly
- Check for a manual action first. Search Console → Security & Manual Actions. This single check decides whether you have a defined problem or a hypothetical one.
- Export your links from Search Console — that is Google's own view — plus a third-party tool for coverage, since no crawler sees everything.
- Group by domain, not by URL. One site linking 400 times is one decision, not 400.
- Sort by what you would actually worry about: obvious link networks, irrelevant foreign-language sites with sitewide footer links, hacked-page links, anything with commercial anchor text you did not earn.
- Look at the actual pages. Open them. A tool's score is an estimate; the page tells you whether a human would call it spam.
- Disavow only what you would defend deleting to someone auditing your decision afterwards.
Step 5 is the one that gets skipped when the list is long, and it is the one that prevents disavowing good links.
If you do have a manual action
Different situation, different urgency. Manual actions are specific: Search Console names the problem, and there is a defined path back.
The sequence is to identify the offending links, attempt removal where you realistically can, disavow the rest, and submit a reconsideration request documenting what you did and why. Reviewers are looking for evidence of genuine effort, not a large disavow file.
This is one of the few situations where the disavow tool is unambiguously the right instrument.
Frequently asked questions
Do toxic backlinks hurt my rankings?
Usually not. Google ignores most spam links rather than penalising the sites they point at, because incoming links are not something a site controls. The clear exception is a manual action in Search Console, which names the problem explicitly.
Should I disavow links a tool flagged as toxic?
Not on the score alone. Toxicity scores are vendor estimates, not Google's assessment, and they misclassify in both directions. Disavow only where you have a manual action or you know links were built badly and performance reflects it.
Can competitors hurt me with bad backlinks?
Negative SEO through links is largely ineffective, for the same reason most spam links are ignored: a system that punished sites for incoming links would be trivially abusable. Monitor, but do not assume every new spam link needs action.
Is disavowing risky?
It can be. Disavowing at domain level to be thorough frequently removes genuine links — supplier sites, directories, local press — sitting on domains a tool flagged. Google ignoring a bad link costs nothing; you disavowing a good one costs its value.
Find out whether your links are actually a problem
Most link profiles look alarming in a tool and need no action at all. The two questions worth answering are whether you have a manual action, and whether anything in the profile would genuinely concern a person who looked at the pages.
If you want that judged rather than scored, the Backlink & Risk Audit reviews the profile and says plainly what, if anything, warrants action — $97, one-off, no retainer.