8 Strategies to Recover Your Website from a Google Penalty

A Google penalty is either a manual action (a human reviewer flagged your site and Search Console tells you so) or an algorithmic drop (a core or spam update re-scored your pages and nobody tells you anything). The recovery path is different for each, and the first job is working out which one you have. Below are the eight steps we follow when a client’s traffic falls off a cliff, in the order we run them.

Step 1: Confirm it is a penalty and not something else

Most “penalties” we get asked about are not penalties. Before you touch a single backlink, rule out the boring causes. Open Google Search Console and check the Pages report under Indexing for a jump in “Excluded” URLs. Check that nobody flipped the “Discourage search engines” box under Settings → Reading after a staging migration. Look at the robots.txt report and the Crawl Stats report for server errors.

Then compare dates. Pull the Performance report, set a 16-month range, and note the exact day clicks started falling. Match that against Google’s published update history on the Search Status Dashboard. If the drop lines up with a core update (May 2026) or a spam update (March and June 2026), you are dealing with an algorithmic shift. If it lines up with a theme change, a plugin update, a new CDN or a redirect rule, you are dealing with a technical regression, and that is good news because it is fixable in an afternoon.

Real scenario from our side: a LearnDash site lost 60% of organic traffic in a week. Everyone assumed a penalty. The cause was a caching plugin serving the 404 template with a 200 status on every course page. No penalty, no disavow, one setting.

Step 2: Read the Manual Actions report properly

In Search Console, go to Security & Manual Actions → Manual Actions. If the page says “No issues detected”, you do not have a manual penalty, full stop. If it lists something, Google tells you the type and usually whether it affects the whole site or specific URLs. The types Google currently lists include:

• Unnatural links to your site (with or without the “impacts links” qualifier)
• Unnatural links from your site
• Thin content with little or no added value
• Hidden text and/or keyword stuffing
• Cloaking and/or sneaky redirects, and sneaky mobile redirects
• User-generated spam, and site abused with third-party spam
• Site reputation abuse (parasite content hosted on a strong domain)
• Structured data issues
• Back button hijacking, spammy free host, cloaked images, major spam problems

Each type has its own remedy, and Google’s Manual Actions report documentation spells it out. Read the entry for your specific action before doing anything else. A “thin content” action will not be lifted by removing backlinks, and an “unnatural links” action will not be lifted by rewriting pages.

Step 3: Diagnose an algorithmic drop by content, not by guesswork

Algorithmic drops have no report and no review button. You recover by fixing what the system is scoring badly and then waiting for the next re-evaluation, which in practice means months, not days. The spam updates target named policy violations: scaled content abuse, doorway pages, expired domain abuse, keyword stuffing, cloaking. Core updates are broader and re-weigh helpfulness, expertise and page experience across the whole site.

Work through this in order:

1. In the Performance report, compare the 28 days after the drop with the 28 days before, filtered by Page. Sort by click loss. The pages at the top are your evidence.
2. Open each losing page and ask the uncomfortable question: would someone who landed here from search be glad they did? Pages that rank for a query they do not answer, listicles with no first-hand testing, and “ultimate guides” at 400 words are the usual suspects.
3. Count your templated pages. Hundreds of near-identical location, tag or “best X for Y” pages are what scaled content abuse looks like from Google’s side, whether a human or a script wrote them.
4. Check the site for a bolt-on section that has nothing to do with the main topic (coupon pages on a news site, casino reviews on a recipe blog). That is the site reputation abuse pattern and it is now enforced both manually and algorithmically.

If the losses are spread evenly across every page rather than clustered, the signal is site-wide. Thin pages drag the whole domain, so the fix is pruning, not polishing a handful of posts.

Step 4: Audit your backlink profile with the right yardstick

Only do this if you have an unnatural-links manual action, or you have clear evidence of a link scheme in your history (bought links, PBNs, mass guest posting from a previous agency). For everyone else, Google’s own advice is that its systems already ignore links it does not trust, and a disavow file is more likely to hurt than help.

Export links from three places so you are not relying on one crawler: Search Console (Links → External links → Export), plus two third-party indexes. Our round-up of backlink checker tools covers which ones are worth paying for. Put everything in one sheet, de-duplicate by referring domain, and classify each domain with a simple rule set:

Signal	Keep	Try to remove	Disavow
Anchor text	Brand or URL	Exact-match money keyword, many times	Same, from sites you never contacted
Site relevance	Same industry, real readers	Off-topic directory or “guest post” farm	Foreign-language spam, hacked pages
Placement	In-content, editorial	Sitewide footer or sidebar you paid for	Hidden, injected, or in comment spam
Volume	One or two links	Dozens from one domain	Hundreds from one network

Keep a second sheet recording every outreach email you send asking for removal, with dates. Google explicitly asks for this when you request a review, and reviewers do read it.

Step 5: Build the disavow file correctly

The tool lives at search.google.com/search-console/disavow-links and it is not linked from the main Search Console menu, which is deliberate. Google’s disavow documentation sets strict rules: one entry per line, a plain .txt file in UTF-8 or 7-bit ASCII, a maximum of 100,000 lines and 2MB, and comment lines starting with #. You can disavow a full URL or an entire domain with the domain: prefix, but not a subfolder.

# Disavow file for example.com
# Prepared 2026-08-21 after unnatural links manual action
# Network of article directories, removal requests sent 2026-07-30, no reply
domain:cheap-seo-articles.example
domain:bestlinks4u.example
# Single injected page on an otherwise fine site
https://legit-blog.example/2019/03/hacked-post/

Disavow at the domain level for genuinely spammy sites. Disavowing individual URLs leaves the door open for the same domain to link again from a new page. Upload the file for the exact property (the https and www variants are separate properties), and remember that uploading a new file replaces the old one; it does not append.

Step 6: Fix on-page and technical violations

For content-based actions and algorithmic drops, the work is on the site itself. On a WordPress install this usually means:

• Thin content: merge overlapping posts with a 301 to the strongest URL, delete pages that have had zero impressions in twelve months, and rewrite the rest so they answer the query in full. Set low-value archives (tag pages, attachment pages, author archives on single-author sites) to noindex in Yoast or Rank Math rather than leaving thousands of empty archives in the index.
• Hidden text and keyword stuffing: search your theme and page-builder output for text hidden with CSS, off-screen positioning or font-size 0. Old page-builder templates are notorious for this.
• Cloaking and sneaky redirects: fetch key URLs with the URL Inspection tool and compare the rendered HTML with what a browser shows. If they differ, you have been hacked or a plugin is serving different content to Googlebot. Our piece on signs your WordPress site has been hacked covers what to look for.
• User-generated spam: close comments on posts older than 90 days under Settings → Discussion, require moderation for first-time commenters, and add CAPTCHA and profanity filtering to BuddyPress or bbPress registration and posting. Community sites are the most common victims of this action in our support queue.
• Structured data: remove schema that describes content the page does not have (review stars on pages with no reviews, recipe markup on non-recipes, fake FAQ markup). Validate with the Rich Results Test after fixing.

While you are in there, run a sweep of the WordPress SEO basics: canonical tags, one H1 per page, a clean XML sitemap with only indexable URLs, and sensible internal linking. None of these lift a penalty by themselves, but they stop you tripping over a second problem while recovering from the first.

Step 7: Write a reconsideration request that a reviewer can approve

Only manual actions get a review. On the Manual Actions report, click Request Review next to the action. Google’s guidance is that a good request does three things: explains the exact quality issue, describes the steps taken to fix it, and documents the outcome. In practice, the requests that get approved first time share a shape:

1. One paragraph owning the problem in plain language. “A previous agency bought sitewide footer links between 2021 and 2023” beats “we believe some links may have been flagged”.
2. A summary of the clean-up with numbers: domains contacted, links removed, domains disavowed, pages rewritten or removed.
3. A link to a shared Google Sheet with the full evidence (the outreach log from Step 4, before/after URLs for content fixes).
4. One sentence on what changed in the process so it will not recur (new editorial policy, comment moderation, agency dropped).

Do not send a second request before you have a decision on the first. Reviews take days to weeks and you get email updates. If the request is rejected, the rejection note usually hints at what was missed; fix that specific thing and resubmit with the new evidence added to the same sheet.

Step 8: Measure recovery and stop it happening again

Once a manual action is revoked, rankings often come back over two to six weeks, but not always to the same level. The links you disavowed may have been propping you up, and the content you removed may have been ranking. Treat the pre-penalty number as a ceiling, not a target.

Algorithmic recovery is slower. Google’s systems re-evaluate at the next update cycle at the earliest, and most sites we have watched needed two cycles (roughly three to six months) before the Performance report turned. During that window keep publishing at the new standard and resist the urge to undo the pruning when traffic does not jump immediately.

To keep it from recurring: set a monthly reminder to open the Manual Actions and Security Issues reports, turn on Search Console email alerts for the property owner, add a quarterly link profile review to your SEO retainer, and write down the content rules (no pages without a real query behind them, no bulk-generated templates, no off-topic sections for affiliate revenue). If you work with outside writers or an agency, make those rules part of the contract.

Frequently asked questions

How do I know whether I have a manual action or an algorithmic drop?

Open Search Console → Security & Manual Actions → Manual Actions. If it says “No issues detected”, there is no manual action and any drop is algorithmic or technical. Only manual actions have a Request Review button.

Should I disavow links after a core update?

No. Core updates are not link penalties. Google says most sites never need the disavow tool and that misuse can hurt. Use it for an unnatural-links manual action or a documented negative-SEO attack, nothing else.

How long does a reconsideration review take?

Google says several days to several weeks. In our experience two to three weeks is typical for link actions and a little faster for content actions, provided the request includes documentation.

Can AI-written content trigger a penalty?

Not because it is AI-written. Google’s spam policies judge the result, not the tool. Large volumes of low-value pages produced at scale (by a script or by a content farm) fall under scaled content abuse. Edited, accurate, useful content does not.

Will deleting pages hurt my rankings further?

Removing pages that earn no impressions costs you nothing and improves the site-wide quality signal. Redirect anything with backlinks or residual traffic to the closest relevant page instead of deleting outright.

Where to start

Open the Manual Actions report today. If it is clean, go to the Performance report, find the drop date, and match it to the update history before you change anything. If it is not clean, read Google’s entry for that action type and start the evidence sheet. If you would rather have a second pair of eyes on the diagnosis, our WordPress optimisation team does penalty audits as part of the same engagement, and most of them end with “this was not a penalty”, which is the best possible outcome.