What Is Spam in SEO?

Common webspam techniques include keyword stuffing, cloaking, link spam, and comment spam. Most fall under black hat SEO: tactics that break search engine rules to push a site up the SERPs instead of earning the position with useful content.

Common types of search spam

Google's spam policies, part of its Search Essentials documentation, define spam as "techniques used to deceive users or manipulate our Search systems into featuring content prominently." That covers attempts to manipulate the AI-generated responses in Google Search, not just the classic ranked results. The policy page carries the complete list with examples; the named violations include:

• Cloaking: showing search engines different content than human visitors see.
• Doorway abuse: publishing many near-duplicate pages that funnel searchers to one destination.
• Expired domain abuse: buying a lapsed domain and trading on its old reputation to rank low-value content.
• Hacked content: spam injected into a legitimate site through a security hole.
• Hidden text and link abuse: text or links that crawlers can read but people can't see.
• Keyword stuffing: cramming a page with repeated search terms.
• Link spam: buying, selling, or mass-producing links to manipulate rankings.
• Misleading functionality: promising a tool or service the site doesn't actually deliver.
• Scaled content abuse: generating many pages that add no value for users, whether by AI, automation, or people.
• Scraped content: republishing content copied from other sites without adding anything.
• Site reputation abuse: publishing third-party content on an established site to trade on its ranking signals.
• User-generated spam: spammy comments, forum posts, and profiles that spammers add to someone else's site.

Two of these reach ordinary site owners most often. User-generated spam is spammy content that spammers, often bots, add through open channels on someone else's site: comment sections, forum threads, and user profiles, usually linking to unrelated or malicious pages. Link spam runs the other way. Instead of gradually earning natural backlinks, a site owner buys links or publishes large numbers of guest posts to manipulate search engines.

How Google penalizes spam

Google detects violations with automated systems and, where needed, human review. A site that breaks the spam policies may rank lower or drop out of results entirely. Google also releases periodic spam updates; the most recent, the June 2026 spam update, rolled out globally to all languages between June 24 and June 26, 2026.

When a human reviewer confirms a violation, Google issues a manual action and reports it in Google Search Console, naming the policy involved. The road back is defined: fix the violation, then submit a reconsideration request. So if your traffic collapses overnight, check the manual actions report in Search Console before you change anything else.

How to protect your site from spam

Protection splits into separate jobs: staying compliant yourself, and keeping other people's spam out.

To stay compliant, don't publish pages at scale that add no value for users. Google's scaled content abuse policy applies whether the pages come from AI, automation, or people; its guidance on generative AI says the tool is fine for researching a topic or structuring original content, and the violation is mass-producing pages that help no one. And don't buy links: buying them puts your own rankings at risk, and search engines may ignore manipulative links or take action against participating sites.

To keep spammers out, hold comments for moderation so comment spam never goes live, and add a filter that catches it automatically. Our guide to stopping WordPress comment spam with Akismet walks through the setup.