Black hat reputation management risks for buyers
Black hat reputation management risks for buyers: spot paid links, fake reviews and false claims in a pitch, and know what each one costs you.
Black hat reputation management means changing what people see about you by breaking a rule of a search engine, platform or regulator: paid or networked links, fake reviews, fake profiles, mass-produced pages or false takedown claims. The risks fall on you as the buyer, because search engines, platforms and regulators act on the name that benefits: ranking penalties on the sites involved, platform bans on your accounts, and, for reviews, exposure under the US Federal Trade Commission rule on consumer reviews.
This guide is written for the person signing the contract, not the person doing the work. It explains how to recognize these tactics in a proposal, which rule each one breaks, what the sources say happens next, and how to refuse them. Every policy point below comes from a page read for this guide and is described as that page reads, so check the page itself before you rely on it.
These tactics are not victimless. A fake review misleads a customer who is deciding where to spend money, and a takedown claim built on a false statement can silence a writer who did nothing wrong.
- A vendor who sells you links, reviews, profiles, bulk pages or takedowns with no named, checkable source is asking you to carry their risk.
- Search engines can lower or remove pages that break their spam policies, and a manual action can hide some or all of a site until the problem is fixed and reviewed.
- The FTC rule on reviews names intermediaries such as reputation managers: they are not immune from liability under the rule.
- Ask every vendor for a written method, the source of every link, review and page, and what they will do if a platform objects. A vague answer is the answer.
What counts as a rule-breaking tactic, and what does not
Rule-breaking work is any tactic that depends on a search engine, platform or reader being misled about where a link, review, profile or claim came from. The test is not whether the tactic is clever or whether many agencies use it. The test is whether it would survive being described openly to the platform it targets.
Legitimate work can look similar from the outside. A published interview, a personal website and a profile on a platform you actually use all create new results about you. What separates them from the tactics in this guide is honesty about origin: the interview was given, the site is yours. Lawful push-down of unwanted results by better, accurate content is called suppression, and it is a different practice.
Related readSuppress negative results for a company nameThe tactics a buyer meets most often fall into five groups:
- Paid or networked links. Links bought, traded or placed through sets of sites built to pass ranking credit.
- Fake reviews and ratings. Reviews written, bought or arranged by the business or on its behalf, plus paid or bulk deletion schemes for real ones.
- Fake profiles. Accounts, personas or pages that present a business-controlled voice as independent.
- Mass-generated content. Large numbers of pages produced mainly to occupy search results.
- False takedown claims. Legal or policy complaints filed on grounds the filer knows are untrue, aimed at content that is accurate.
Paid and networked links: what the policy says and how a pitch gives them away
Google's spam policies define link spam as creating links to or from a site primarily to manipulate search rankings. The examples include buying or selling links for ranking purposes, exchanging money for links or for posts that contain links, excessive link exchanges ("link to me and I'll link to you") and partner pages built only for cross-linking, using automated programs or services to create links to your site, and low-quality directory or bookmark site links. The same page says it is not a violation to have such links as long as they are qualified with a rel="nofollow" or rel="sponsored" attribute. A disclosed, qualified paid placement is therefore not the problem. A placement sold as a ranking lever is.
What this looks like in a proposal is rarely the word "link." Watch for these phrases and behaviors:
- A monthly number of "high-authority placements" with no list of where they will appear before you pay.
- Sites the vendor "has access to" or "manages," offered as a group, that publish on any topic.
- A promise that a negative result will fall by a stated date as a consequence of placements.
- A refusal to say whether paid placements will carry the sponsored qualifier.
- Any wording that treats the sites involved as interchangeable.
What a link scheme does to you
The page states the general consequence: sites that violate the policies may rank lower in results or not appear in results at all, and violations are detected through automated systems and human review. For your own site, Google's manual actions help page describes two relevant types: unnatural links to your site, and unnatural links from your site. It says a manual action means a human reviewer determined that pages on the site are not compliant with the spam policies, and that if a site has one, some or all of that site will not be shown in Google search results.
Recovery is slow and work-heavy. The help page says that fixing the issue on just some pages will not earn a partial return, that most reconsideration reviews can take several days or weeks, and that link-related requests may take longer. For unnatural links it advises asking site owners to remove them first, and warns that simply disavowing all backlinks without attempting to remove them might lead to rejection. A vendor who built the links is rarely there to remove them.
Related readSuppress Outdated News After a Resolved CaseSources: FTC Q&A on the consumer reviews and testimonials rule; Google Search Console Help on manual actions.
Fake reviews and fake social proof: the FTC rule and platform policies
The most direct legal exposure in this field comes from reviews. The FTC's final rule on consumer reviews and testimonials took effect on October 21, 2024. According to the FTC's own materials, it prohibits fake or false reviews and testimonials, including writing, selling or buying them; buying reviews tied to a particular sentiment; undisclosed insider reviews; misrepresenting a business-controlled website as independent; review suppression through groundless legal threats, intimidation or false public accusations; and misuse of fake indicators of social media influence, such as bot-generated followers or views.
Three points matter most to a buyer.
Intermediaries are named. The FTC Q&A on the rule says that agencies, PR firms, review brokers and reputation managers are "not immune from liability under the rule." Hiring a vendor does not move the responsibility to the vendor alone.
Warning signs count. The Q&A says the rule does not impose a general duty to investigate every review, but that failing to investigate may still lead to liability where there are clear warning signs, such as reviews appearing very quickly after a purchase, an unusual burst of reviews in a short period, or reviews that refer to the wrong product. A vendor delivering a sudden burst of reviews is handing you warning signs.
Penalties are for courts to set. The FTC pages read for this guide say the rule authorizes courts to impose civil penalties for knowing violations. They do not state a per-violation amount, and this guide does not give one. The FTC also states that its staff guidance is not definitive and gives no safe harbor.
Related readDoes search suppression work? An honest testThe rule is American. If you operate elsewhere, consumer law there may differ, and no source for another jurisdiction was read for this guide. Ask your own counsel.
What platforms do on their own
Platforms enforce their own terms regardless of any regulator. Google's policy on fake engagement for contributed content says fake engagement is not allowed and will be removed, and lists reviews posted from multiple accounts by or at the request of one person. Its rating-manipulation rules state that incentivized or biased reviews are not allowed and will be removed from Maps, and that merchants may not offer incentives such as payment, discounts or free goods or services in exchange for reviews or for removing a negative review. For serious or repeated harmful behavior, the policy says Google may take actions ranging from suspending account privileges to account termination.
For a business that depends on a profile, the practical risk is not a fine but the loss of the reviews, and sometimes the accounts, that took years to build honestly.
Paid deletion of real reviews
Some vendors sell the opposite service: removing genuine reviews for a fee, by methods they decline to describe. The FTC provision on review suppression covers false accusations against a reviewer made knowingly or with reckless disregard, and says a response should not use physical threats or intimidation to get a review removed or changed. The Q&A adds that ordering reviews so that negative ones are hard to find could violate Section 5 of the FTC Act. If a vendor will not tell you how a removal is achieved, assume the method would not survive the description.
Related readCommon name reputation search results: a planFake profiles and impersonated independence
A profile that presents a business-controlled voice as an independent one misleads readers about who is speaking. The FTC rule addresses two nearby behaviors: insiders writing reviews without clearly disclosing their relationship, and misrepresenting that a website or entity the business controls provides independent reviews. The FTC Q&A says insiders such as employees and relatives must clearly and conspicuously disclose the relationship.
In a proposal, the warning signs are:
- A promise to "create" a bench of voices, personas or experts that will speak about you.
- Profile networks described as "assets" the vendor already owns.
- A refusal to say who the named individuals are.
- A plan in which every positive voice lives on a site the vendor or you control.
A legitimate version exists and looks different: profiles on platforms you use, in your own name, with accurate information, that you can open and run yourself.
Mass-generated content: what scaled content abuse means
Google's spam policies define scaled content abuse as many pages generated for the primary purpose of manipulating search rankings, typically focused on creating large amounts of unoriginal content. Its examples include using generative AI tools or other similar tools to generate many pages without adding value, scraping feeds or search results to generate pages, stitching content together, creating multiple sites to hide the scale, and producing pages that make little sense to a reader but contain search keywords.
A close relative is the site reputation policy. The page describes it as third-party content published on a host site mainly because of that host's already-established ranking signals. Another is expired domain abuse, where an expired domain is purchased and repurposed primarily to manipulate rankings. If a vendor proposes hosting your material on someone else's established site because that site ranks, or reviving old domains to carry it, the proposal is describing these policies.
The manual actions help page states the same consequence as for links: some or all of the site may not be shown in results. For the site reputation policy, it adds that moving a page to a subdomain or subdirectory may be viewed as an attempt to circumvent the policy. The spam policies page also lists using new subdomains, subdirectories or sites to keep violating the policies as circumvention, and says Google may take broader action in that case. The sites a vendor builds for you, and the pages they carry about you, are the ones that carry the risk.
Related readSuppress negative results for a unique nameFalse takedown claims: the shortcut that is a legal risk
A takedown claim is a complaint asking a platform or search engine to remove something. Real ones are legitimate, and the routes they rely on are covered elsewhere. A false one is a different matter. In the US copyright system, the statute on notices and counter-notices, 17 U.S.C. 512(f), says that any person who knowingly materially misrepresents that material or activity is infringing, or that material was removed or disabled by mistake or misidentification, is liable for any damages, including costs and attorneys' fees. The statute lists three possible claimants: the alleged infringer, a copyright owner or licensee, and the service provider injured by relying on the misrepresentation.
In other words, a copyright notice filed for content the filer does not own, simply because the content is damaging, is exposure for whoever signed it. That signature may be yours. The harm to others is plain: an accurate article, a critical review or an archived page disappears because someone lied to a platform.
Google's spam policies page adds a related point: where it receives a significant volume of valid copyright removal requests involving a site, it may demote other content from that site in its results. Even honest requests have side effects, and dishonest ones should not be added to the pile.
Red flags in a pitch include a vendor who offers removal of accurate news or reviews by "legal means" without naming the legal ground, who asks you to sign notices they drafted without explaining the basis, or who calls the claims "templates." A claim is only as good as the ownership or legal ground behind it. If neither exists, there is nothing to file.
Related readSuppress negative review site results: a planA decision table for a vendor proposal
Use this table on any proposal. If a line item sits in the right-hand column, the answer is to decline it in writing and ask for the alternative.
| Line in the proposal | Ask this | Acceptable answer | Decline if |
|---|---|---|---|
| "Link building" or "placements" | Which sites, before payment, and are they qualified as sponsored? | Named publications, editorial content, disclosed where paid | Sites are undisclosed, or the aim is a ranking lever |
| "Review generation" | Who writes each review, and how are customers asked? | Real customers asked to review honestly, with no sentiment condition | The vendor writes or arranges reviews, or a burst is promised |
| "Profile creation" | In whose name, on whose account? | Accounts in your real name that you control | Personas, borrowed names or unnamed experts |
| "Content at scale" | Who checks each page, and why does it exist? | A short plan of pages with a reason and a named editor | The page count is the selling point |
| "Legal removal" | Which legal ground, and who signs? | A named ground your lawyer can assess | A template, or an unnamed ground for accurate content |
| "Guaranteed results" | What happens if a platform objects? | An honest range, with the limits stated | A fixed date or ranking is promised |
A vendor audit checklist you can use before signing
Run these checks in order. Each one is a request for a document or an answer, not a technical test, and you can do all of them without any search expertise.
- Ask for the method in writingRequest a plain description of what will be built or filed, where, and under whose name. Methods described only as "proprietary" are a refusal to be audited.
- Ask for the source of every itemFor each link, review, profile or page, ask who produced it and where it will live. Anything that cannot be named before payment cannot be defended afterward.
- Ask what happens if a platform objectsA sound vendor can describe the response to a rejected request or a lowered ranking. A weak one changes the subject or points to the guarantee.
- Ask who owns what at the endAccounts, domains and pages should sit in your name or be handed over at the end. An arrangement where everything stays with the vendor is a dependency, not an asset.
- Check the claims against the policiesTake the proposal and read the Google spam policies, the FTC reviews Q&A and the relevant platform policy side by side. Anything that contradicts one of them goes back to the vendor in writing.
- Have your lawyer read the clausesAsk counsel to read the indemnity, the scope and any clause on filing notices on your behalf. Law and tax are information here, never advice.
What it looks like in practice: an invented scenario and timeline
The following scenario is invented, with generic parties, to show how the risk arrives. It does not describe a real engagement.
A business owner finds three unflattering results on page one for the company name. A vendor proposes a package: a monthly set of "authority placements," a batch of five-star reviews from "satisfied users," several new profiles in the founder's name, and a legal notice to remove one article. The monthly fee is attractive and the vendor promises that page one will change within a set number of weeks.
- Month 1, signingThe owner signs, gives access to the business profile and approves the notice. Nothing is audited.
- Months 1 to 3, early movementNew pages appear. The owner sees activity and assumes progress. The burst of reviews is visible to customers and to the platform at the same time.
- Months 3 to 9, the objectionA platform may remove the reviews or restrict the account, and a search engine may lower the sites carrying the placements. The notice may be disputed by the publisher with a counter-notice.
- Months 6 to 12, the billThe original article is still there. The vendor is unreachable or points to the contract. The owner now has a thinner review history, accounts in the founder's name that are hard to claim back, and a record of the attempt.
The timings illustrate the order of events, not a prediction: a platform may act within days or never. The visible activity comes first and the consequences arrive later, usually after the vendor has been paid.
What to do instead: lawful routes that survive scrutiny
Refusing a shortcut does not mean accepting the problem. Legitimate routes exist for each need, and each is slower in the short term and safer in the long term.
- For a result you cannot remove, build accurate pages that you own and can defend, and earn coverage you did not pay for.
- For reviews, ask real customers to review honestly, without conditions on the content, and respond to criticism in public.
- For a fake or unlawful review, report it to the platform with evidence, on the platform's own terms.
- For content that is inaccurate or unlawful, use the platform's reporting route, a publisher request or, where a legal ground exists, your counsel.
- For visibility, publish real profiles in your own name on platforms you will actually use.
Reputation Partners publishes the standards it works to on the ethics page, and a vendor's proposal is a normal thing to bring to a second reader before you sign.
If you have already paid for tactics like these
If a past vendor used any of the tactics above, the aim is to stop the damage spreading and to document it. Collect the contract, the invoices and the list of what was delivered. Log into every account the vendor created or touched and secure it. Stop any recurring payment for ongoing placements or reviews.
Related readSuppress negative social media posts in search resultsIf you receive a manual action notice in Search Console, the help page's path is the one to follow: fix the issue across all affected pages, make sure Google can reach them, and then submit a review request that explains the quality issue, the steps taken and the outcome. For unnatural links, the page tells you to try to have links removed before disavowing. For anything touching consumer reviews, or the signing of legal notices, ask counsel before you correct the record publicly, since a statement made in a hurry can add to the exposure.
Send us the proposal before you sign it. We will read it against the policies and the FTC rule described above and tell you which line items we would decline and what a lawful version looks like. Start with a private audit.
Questions people ask
Are banned reputation tactics illegal?
Not always, but some of it can be. Buying links is a breach of a search engine's rules, not of criminal law. Fake reviews fall under the FTC rule in the US, and knowingly false copyright notices carry statutory liability under 17 U.S.C. 512(f). Other countries differ, and no source for them was read here. Ask your own counsel before you proceed.
Can a vendor's fake reviews get my business penalized if I did not write them?
Possibly. The FTC Q&A says agencies and reputation managers are not immune, and that failing to investigate can lead to liability where there are clear warning signs. Signs it lists include an unusually large number of reviews in a very short period. A written instruction to the vendor not to use these tactics will not protect you if the signs were there.
How do I know if my site has been hit by a link penalty?
For Google, open the Manual Actions report in Search Console. A manual action is issued when a human reviewer decides pages are not compliant with the spam policies. Automated systems can also lower rankings with no notice. A report with no manual action does not prove that everything is fine, so ask a specialist to audit your links.
Is it acceptable to pay for links if they are labeled?
The spam policy page says paid links are not a violation if qualified with rel="nofollow" or rel="sponsored". The page does not say they will raise your ranking. A labeled placement can be advertising, with honest value as exposure. The problem is buying them as a way to pass ranking credit.
Can I just disavow bad links myself?
Only where the situation fits. Google's manual actions page says that simply disavowing all backlinks without attempting to remove them might lead to a rejected request. Ask a site owner to remove a link first, and use the disavow tool for those that cannot be removed. Doing it before an actual problem exists is a decision to make with an expert.
What if my competitor is using these tactics against me?
Document what you see and report it through the platform's own channel, rather than answering in kind. A reply using the same methods would put your business under the same rules. Fake reviews can be reported to the platform, and the FTC rule may apply to the business behind them. Keep screenshots and dates, and speak to counsel before taking legal action.
