Recover From Black Hat SEO: The Order of Work After a Shortcut Goes Wrong

Week one: stop digging, and do not start deleting

A traffic drop makes people busy. Busy is dangerous here. The worst recoveries we can imagine begin with a frantic owner deleting half a site, uploading every backlink to the disavow tool and buying a new domain, all before lunch. Each of those moves can make things worse, and none of them can be explained afterward. So the first week is deliberately dull.

1. 1

   Stop the tactic

   Cancel the link package, pause the content feed, turn off the plugin. In writing, today. Nothing else you do counts while it is still running.

2. 2

   Save the evidence

   Export Search Console's Performance data and links, screenshot any notice, and collect invoices and vendor emails. If the past work is still a mystery, that audit is now the first job.

3. 3

   Take control of your accounts

   You cannot fix a site, or file a request, from accounts somebody else holds. Domain, Search Console, Business Profile, hosting.

4. 4

   Leave the disavow tool alone

   Google's disavow help, read November 7, 2026, calls it "an advanced feature" that used incorrectly can potentially harm a site's performance. Our page on bad links covers when it applies.

5. 5

   Do not move house

   Moving the same behavior to a new subdomain, subdirectory or site is what Google's spam policies, last updated August 28, 2026, call policy circumvention. They say it may cost features such as Top Stories and Discover, or more sections of the site.

Name the cause before you pay to treat it

Not every drop is a penalty. Plenty of them are a stray noindex tag, a redesign that lost its redirects, or a site that was simply out-written. Google's debugging guide for traffic drops, last updated December 10, 2025, says to review the spam policies and check the Manual actions report if the drop may be a spam issue. Do that first, then work down the table. Our traffic drop diagnosis goes through the non-spam causes in detail.

For dates, use Google's Search Status Dashboard. As read on November 7, 2026, it lists 2026 spam updates starting March 24, June 24, August 18 and September 24, and core updates starting March 27 and May 21. The list may have grown since. A matching date is a lead, not a conviction: traffic falls for many reasons, and two things can happen in the same month.

Manual or automated: how the job changes in practice

"Algorithmic penalty" is trade language. Google's current documents speak of manual actions, and of sites ranking lower or being demoted. The distinction matters to you for one reason: one of them has a person at the other end, and the other does not. Our guide to Google's spam rules covers each notice in the Manual actions report and how to write the request, so we will not repeat it here.

In both, the repair is the same in spirit: remove what the policies describe, on every affected page. Google's Manual actions help, read November 7, 2026, says fixing only some pages will not earn a partial return. Someone who bought a site that broke the rules before they owned it should fix it and say so in the request.

Undo it fully: each shortcut has its own exit

Work from whatever the notice or the evidence names. Where a business has been through a full-service shortcut, several rows may apply at once. The right column is the one that nobody selling recovery tends to lead with. Where it mentions credit lost for good, that is from Google. The other entries are our reading of what to expect.

The hard part is keeping going after the obvious items. Google's spam updates page offers no shortcut through this and neither do we. Bring in someone from outside for a reread once you are done, because the person who has stared at the site for three weeks stops seeing it. Google's content guidance, last updated October 5, 2026, suggests the same: ask people you trust, who are unaffiliated with the site, for an honest assessment.

The only clock on offer is Google's, and it is vague on purpose

People ask how long this takes. We have no figure for you, and no primary source gives one. What exists is Google's own wording, gathered below from its pages as read November 7, 2026. Note how little of it is a promise. Anyone who gives you a firmer number than this has no way of knowing it, unless they happen to work for Google, and then they would not be emailing you.

Note the gap between the first row and everything else. A review decision can arrive in days or weeks. Your traffic is a separate matter. Lifting a manual action removes the action. It does not hand back rankings that were resting on links Google no longer counts. Plan the cash flow accordingly. If the phone has gone quiet, paid search can bring in calls while the organic work happens, and ad spend goes to the ad platform directly. It does not affect organic rankings: Google says its advertising has no effect on search results.

Where you land is roughly what the site has honestly earned

Recovery rarely means getting back what the shortcut bought. It means rising to what the business has actually earned, then earning more.

That sentence is why a clean recovery can feel like a disappointment. If the old rankings were held up by bought links, the old rankings were never yours. Take a hypothetical roofer whose top position rested on placed links. Once those stop counting, the honest level might be page two. Getting beyond that takes what it would have taken all along: pages that answer what customers ask, links someone chose to give, a true Business Profile and reviews from real jobs.

• Pick the pages that sell. Rewrite your top service pages before the blog. Google's content questions make a good editing list, and our content page turns them into a working edit.
• Write down what you will no longer do. Put it in the next vendor's contract. Our hiring page has the clauses.
• Check monthly. Manual actions, Security issues, new links, new users in Search Console. It takes ten minutes, and it is how you catch the next problem small.
• Do not judge by one month. Use the same period last year, non-brand clicks and calls. Our page on reading a report explains why.

Should you start over on a new domain? Sometimes people do, but we would be slow to say yes. A new domain starts with no standing at all, and you would give up every honest link and mention along with the bad ones. Google is explicit that using a new site to continue the same behavior is circumvention. Moving to escape the past while keeping the past's habits gets you nowhere. If your current site is beyond saving technically, that is a different conversation, and a rebuild has a fixed price.

Do it yourself, or pay someone, and how to tell

Google publishes the steps, and the tools are free. A small site with a short list of bought links and an owner with time can do this work without us or anyone else. Google's hiring page says a small local business can probably do much of the work itself, and its help pages say what a good request contains: the exact issue, the steps taken and the outcome.

Pay when the site is large, when the link list runs to thousands of rows, when you cannot tell which row of the table you are in, or when your time is worth more on the jobs that are still coming in. DataCram's SEO visibility recovery work starts with diagnosis: indexing, manual actions, migration damage and the timing of the drop against updates. Recovery work has no published price and is quoted after a look at the site. We make no guarantee of penalty removal, rankings or recovery times, because Google does not offer one to anybody.

Afterward, ongoing white hat SEO starts from $575 a month, depending on complexity, setup and budget, with no long contract. If the rebuild is the right call, websites are fixed by page count from $1,500 for up to 10 pages, and financing is available at 0% with 25% down, up to 12 months. Start with the free site audit, or tell us what happened. We sell this work, so hold what we tell you to the same standard as this page.