Updated March 06, 2026
TL;DR: Bad link building triggers Google manual actions, wipes out organic traffic, and destroys your brand's ability to get cited by ChatGPT and Perplexity. Five red flags disqualify vendors immediately: guaranteed rankings or DA scores, refusal to disclose link sources, suspiciously low pricing, reliance on Private Blog Networks, and self-owned placement networks. The sustainable path forward is earning authority through transparent, third-party validated content, not buying it from vendors who control the sites they link from.
Your CEO forwards a screenshot. Three competitors appear in ChatGPT's answer to "best [category] for [use case]." Your brand is missing. Again. The question lands in your inbox: "What are we paying that SEO agency for?"
Hiring the wrong link building vendor doesn't just waste budget. It actively destroys the entity authority your brand needs to appear in AI answers, and when a penalty hits, you lose organic traffic overnight with no clear recovery timeline. That's the conversation you'll be having with your board if you don't screen vendors correctly.
This guide covers the five red flags that disqualify a link building vendor immediately, a five-question litmus test to run before signing anything, and why the real goal isn't links at all. It's the kind of authority that earns citations from both Google and AI platforms.
Why bad link building is a silent budget killer
You're already explaining declining MQL-to-opportunity conversion rates to your CEO. The last thing your quarterly board review needs is a manual action that drops pipeline because a vendor you trusted was running a private link network.
Google penalizes link schemes in two distinct ways. A human reviewer at Google issues a Manual Action, and you see it directly in your Search Console. Google cites unnatural inbound links as the most frequent Manual Action violation. Google either demotes specific pages or deindexes them completely, and the impact ranges from barely noticeable traffic loss to total visibility loss overnight. The second type is algorithmic, where Google's Penguin algorithm, now running in real time as part of the core ranking system, quietly strips ranking power from domains associated with link schemes with no notification at all.
Recovery from either scenario follows the same process: audit your full link profile, remove or disavow offending links, submit a reconsideration request, and wait. That's weeks of your team's time spent on cleanup rather than pipeline.
The financial math makes the risk clear: white-hat link acquisition costs between $500 and $2,000 per link when you factor in content creation, outreach labor, and placement coordination, while cheap bulk links run $50 or less per unit because they're automated, farmed, or placed on networks with no real audience. You're not buying an asset. You're buying a liability on a payment plan.
5 critical red flags in link building proposals
Run every vendor proposal through this filter before you sign anything. These aren't minor concerns or negotiating points. They're disqualifying signals that indicate incompetence, dishonesty, or both.
Red flag #1: Guaranteed rankings or specific Domain Authority scores
Any agency that guarantees a first-page ranking or a specific DA score is either uninformed or planning to cheat. Google's own guidance is explicit: no one can guarantee rankings on their platform, and Google's SEO Starter Guide states directly, "If they guarantee you that their changes will give you first place in search results, find someone else." Rankings depend on hundreds of variables, including competitor activity, algorithm updates, and technical health factors no vendor controls.
Domain Authority is a separate problem. Moz created the DA metric and states clearly it "is not a metric used by Google in determining search rankings and has no effect on the SERPs." It's also easy to manipulate: freelancers sell DA inflation as a service for around $80 using bulk spammy link tactics. A vendor leading with DA guarantees optimizes for a vanity metric Google doesn't use, while selling you the illusion of progress.
When you see either guarantee in a proposal, stop the conversation. It won't improve from there.
Red flag #2: Refusal to disclose link sources or methodology
If an agency describes their approach as a "proprietary outreach network" but won't show you where your links actually live, that opacity exists for a reason. Transparent providers share outreach templates, target site lists, and live placement examples as standard practice. The deliverable should include the exact live URL, anchor text used, and the Domain Rating and organic traffic of the linking domain at placement time.
"Secret sauce" in link building almost always means PBNs, link farms, or a paid placement network the agency owns. Ask directly: "Do you own any of the websites you acquire links from?" per vetting guidance from practitioners. A clear "no, we focus on editorial outreach" is the only acceptable answer.
Red flag #3: Pricing that seems too good to be true
Genuine white-hat link acquisition requires prospecting, personalized outreach, relationship-building, content creation, and editorial negotiation. Buzzstream research puts the average guest post cost at $220 and DR 50+ placements at around $600. For outreach-driven campaigns in competitive niches, the per-link average runs $1,000 to $2,000.
When a vendor offers 20 links per month for $500 total, the math only works two ways: automated outreach at scale (which creates spam footprints Google targets) or placement on sites they control (which is a PBN, covered in the next section). Less reputable vendors promise cheap links and use spammy techniques to game Google's algorithm, producing low-quality links with no ranking value that may actively harm your domain. Either way, you're buying a liability.
Red flag #4: Reliance on Private Blog Networks (PBNs) and link farms
A PBN, as Search Engine Land explains, is a collection of websites created solely to link out to a target site and pass artificial authority. Google has actively detected and neutralized them for over a decade. The tell-tale footprints include sites on the same or similar IP addresses, shared WHOIS registration data, thin or duplicated content, and cross-site link patterns where the same domains link to each other in suspicious clusters.
The core problem is timing. You may see a short-term ranking lift before the network is detected. When Google's spam algorithms identify the network (and they eventually do), Google devalues it and your investment disappears. The vendor still got paid. You're left filing a disavow list and explaining the traffic drop to your board.
Red flag #5: "Proprietary" networks that lack third-party validation
Some agencies present a curated network of partner sites as a premium offering. If the agency owns or controls those sites, the links lack genuine editorial endorsement. You didn't earn the placement because a publisher found your content valuable. You rented space on a billboard that nobody reads.
A white-hat link lives in editorial content, adds value to the reader, comes from a real site with genuine human traffic, and exists because the publisher chose to link to your resource. That distinction matters for Google's algorithm and for AI systems that use off-site reputation signals to determine whether to cite you at all.
The hidden cost: how toxic links damage AI visibility
Bad links don't just risk a Google penalty. They undermine your brand's ability to appear in AI search results, and that's where your buyers now conduct vendor research. According to our research, 48% of B2B buyers use AI tools for vendor research. These buyers aren't scrolling ten blue links. They're asking ChatGPT or Perplexity for vendor recommendations, and the AI returns a short list of names it trusts.
AI platforms use Retrieval-Augmented Generation (RAG). They retrieve relevant content, rank it using trust filters, then compose an answer. Your backlink profile is one of those trust filters. AI models build an internal entity representation of your site, assessing what topics you're associated with, how consistent your claims are, and how other reputable sources reference you.
A backlink profile filled with PBN links, spam directories, and zero-traffic sites does not look like a reputable entity. As we detail in our guide to AI citation patterns, being cited in AI answers is less about aggressive keyword targeting and more about being the safest, clearest, most trustworthy explainer in the index. A toxic backlink profile works directly against that goal.
Google rankings and AI citations use different signals entirely, which is why you can rank on page one for 40+ keywords but still be invisible to ChatGPT. We explain how these systems diverge in our AEO definition guide and Google AI Overviews breakdown.
How to vet a link building agency (the litmus test)
You don't have time to waste on three discovery calls with vendors who can't deliver. Run this five-question filter first.
- Ask for three recent live placements with the URL, anchor text, and the organic traffic of the linking domain at placement time. A legitimate agency has this ready within 24 hours. "We'll send examples after you sign" is disqualifying.
- Ask: "Do you own any sites you link from?" The only acceptable answer is a clear no. Any agency sourcing placements from proprietary networks should be pressed on whether those sites have genuine audiences and independent editorial standards.
- Check their own backlink profile. If they claim to build editorial links but you see directory spam and forum profiles pointing to their own site, they don't practice what they pitch. Link quality audit tools are freely available and this step takes five minutes.
- Ask for a reporting sample before you commit. A complete report includes the live linking URL, your target URL, the exact anchor text used, and domain metrics at publication time. A DA score table with no live links means walk away.
- Ask about their link replacement policy. A transparent partner offers a clear guarantee to replace links that go offline within a defined window. If they frame this as an unusual request, they lack confidence in the longevity of their placements.
Run a competitive technical SEO audit to benchmark your current backlink profile before any new vendor engagement. It gives you a baseline to measure against and surfaces existing risks before you add more.
Moving from link building to authority building
The fundamental problem with traditional link building is the premise: you can purchase a shortcut to authority. You can't. Google's Penguin update killed link volume tactics over a decade ago, but many vendors still sell the old playbook with new branding.
A white-hat link exists because a publisher found your content valuable enough to cite it. That editorial signal is also what AI systems look for when they decide whether to recommend your brand to a buyer, making authority-building the strategy that serves both channels simultaneously.
This is why we built the CITABLE framework. Unlike traditional link building agencies that sell placements by the unit, Discovered Labs engineers content specifically to earn citations from both editorial publishers and AI platforms. CITABLE is our proprietary seven-part methodology, developed from testing hundreds of queries across ChatGPT, Claude, and Perplexity, designed to make your brand the most trustworthy answer AI systems can cite:
- C - Clear entity & structure: 2-3 sentence BLUF opening that defines what you do and who you serve.
- I - Intent architecture: Answer the main query plus adjacent questions buyers ask before and after.
- T - Third-party validation: Reviews, community mentions, news citations, and UGC that reinforce trust.
- A - Answer grounding: Every claim backed by verifiable facts with sources.
- B - Block-structured for RAG: 200-400 word sections, tables, FAQs, ordered lists for easy extraction.
- L - Latest & consistent: Timestamps and unified facts across all owned and earned properties.
- E - Entity graph & schema: Explicit entity relationships in copy and structured data.
We built CITABLE specifically to solve the problem traditional link building can't: getting cited by AI platforms that don't care about your DA score or backlink count. They care about entity trust, content structure, and topical consistency, and that's what the framework builds systematically. You can see how it compares to other approaches in our CITABLE vs. Growthx breakdown, and explore the 15 AEO best practices that sit underneath it.
One client who made this shift put it directly: "Traditional SEO got us traffic, but AI visibility gets us qualified leads who've already been told we're a good fit." The conversion premium is measurable. AI-sourced traffic converts at 2.4x the rate of traditional organic, which means authority-building doesn't just reduce risk. It improves the economics of every lead you generate.
Protect your domain like you protect your budget. A spammy link profile is negative equity that compounds over time, and in an AI-first search environment, the cost is invisibility to the 48% of B2B buyers now using AI for vendor research. Screen every vendor against the five red flags above, run the litmus test before signing anything, and redirect that budget toward authority-building that earns both editorial links and AI citations within 90 days.
Don't let risky links undermine your AI visibility. Request a transparent AI Visibility Audit from Discovered Labs to see how your current backlink profile affects your citation rate in ChatGPT, Perplexity, and Google AI Overviews. We work month-to-month with no annual lock-in, and you'll see initial citation results within two weeks, not two quarters.
FAQs
Is buying backlinks illegal?
No, it's not illegal, but it directly violates Google's Spam Policies. Violations result in Manual Actions, algorithmic devaluation, or deindexing, all of which destroy organic traffic and take months to remediate.
How much should legitimate link building cost?
High-quality white-hat placements typically run $300 to $1,000+ for guest posts and editorial insertions, and $1,000 to $2,000 per link for outreach-driven campaigns in competitive niches when you factor in content creation, outreach labor, and vetting.
Can AI search engines detect bought links?
AI models build entity representations using signals that include your backlink profile, topical consistency, and off-site reputation, and a spammy link profile degrades those trust signals, making you less likely to appear in AI-generated answers even if your content is strong. Our Claude AI optimization guide explains how individual platforms weight these factors.
What is a Private Blog Network (PBN)?
A PBN is a collection of websites created solely to pass artificial ranking power to a target domain, which explicitly violates Google's guidelines. Google targets them through Penguin and manual review teams, and when a network is identified, any domain associated with it loses the ranking benefit.
How quickly can I tell if a vendor uses black-hat tactics?
Ask for three live placement examples with URLs, anchor text, and domain traffic metrics before signing. You can also review anchor text distribution from their previous work, since sites penalized by Penguin typically show exact-match commercial anchor text in 65% or more of inbound links.
How do I prove ROI to my CFO if I shift budget to authority building?
Track AI-referred traffic using UTM tags (utm_source=chatgpt, utm_source=perplexity) that flow into your Salesforce attribution model. AI-sourced traffic converts at 2.4x the rate of traditional organic, which means the ROI model improves even when volume starts lower than traditional link building.
Key terms glossary
Manual Action: A penalty issued by a human reviewer at Google after identifying a violation like unnatural inbound links, resulting in demotion or removal of affected pages from search results and requiring a formal reconsideration request to resolve.
Domain Authority (DA): A third-party score created by Moz that estimates ranking potential. It is not used by Google and can be inflated through bulk spammy link tactics, making it an unreliable proxy for genuine site quality.
Anchor Text: The clickable text in a hyperlink. Over-optimizing with exact-match keywords across a link profile is a primary signal targeted by Google's Penguin algorithm and a common indicator of manipulative link building.
Entity Authority: A measure of how trusted and recognizable a brand is as a distinct entity across topics and sources. Research shows AI citation decisions depend on multiple factors including content structure, topical consistency, recency, and off-site reputation, with no single signal dominating. Read more in our AEO definition guide.
Private Blog Network (PBN): A network of websites built to pass artificial link equity to a target domain. Explicitly against Google's guidelines and identifiable through hosting, WHOIS, and content footprints.
RAG (Retrieval-Augmented Generation): The process AI systems like ChatGPT and Perplexity use to retrieve relevant external content and compose accurate, cited answers. Trust signals from your entity graph and content structure influence whether your brand gets retrieved and cited.
