The real difference is not moral. It is whether the rankings you earn can be taken back. White hat means improving the site until it deserves to rank. Grey hat means finding a loophole that has not been closed yet — and every loophole closes eventually.
This covers where the line actually falls, how to tell what the agency you are paying is doing, and what to do if your site has already been through grey hat hands.
The textbook definition — white hat follows Google's policies, black hat violates them — helps nobody decide anything, because nobody reads the whole policy before each decision. The usable line is a single question.
If Google knew you were doing this, would you still do it?
Making the site faster, writing content that answers the question well, fixing the structure so Google can understand it — you actively want Google to notice. Buying links from a network built to sell links — you need it concealed. That is the answer.
A second question works just as well for links specifically: if that link were nofollow, would you still want it? If yes, because real people read that publication and some might become customers, it is a legitimate link. If no, you are buying a signal rather than an audience.
| Area | White hat | Grey / black hat |
|---|---|---|
| Links | Earned because people cite your work, PR with real substance, broken-link reclamation | Bought links, PBNs, systematic exchanges, comment spam |
| Content | Written from real experience, answering questions people actually ask | Unreviewed AI output at volume, spun copies, keyword stuffing |
| Pages | Visitors and Google see the same thing | Cloaking, text hidden against the background, doorway pages |
| Schema | Declares only what the page displays | Ratings that do not exist, features the site does not have |
| Durability | Compounds over time | Rises fast, then disappears all at once |
A reviewer at Google looked at the site and applied a penalty by hand. The upside is that you get a notice in Search Console saying what it was for. Fix it, file a reconsideration request, and there is a route back. Painful, but visible.
No notice, no explanation. Traffic falls and does not return. Far more common and far harder to fix, because you have to work out what is wrong yourself. Sites can spend a year finding it.
The common misreading is "there's no warning, so we must be fine." The opposite holds: no warning does not mean safe. It means that if you are hit, you will not be told why.
"Send me the list of links you built this month." A white hat agency sends it immediately and can explain where each came from. If the answer is that it is proprietary, or the list is full of domains with no discernible readership, you have your answer.
"If we stop working together, do these links stay?" Earned links stay. Rented ones vanish the moment payment stops. An evasive answer means the latter.
"Who wrote this month's content, and who reviewed it?" Using AI is not the problem; publishing without anyone knowledgeable checking it is. With no review step, you are paying to produce pages Google will classify as unhelpful.
"Can you guarantee rankings?" A trap question. If they say yes, be careful — nobody controls the algorithm. Guarantees usually rest on picking terms nobody searches, or on tactics carrying risk.
1. Check for a manual action first. Search Console, under Security & Manual Actions. If there is one, it states exactly what it is for.
2. Pull the full backlink list. Look for domains unrelated to your business, sites that exist only to host links, and large batches that appeared together in a short window.
3. Get them removed at the source. Contact the site owners directly. Google is explicit that it wants to see this attempt before you reach for disavow.
4. Disavow only the remainder. The tool tells Google to ignore those links. Use it carefully — disavowing good links alongside bad ones leaves you worse off than before. If unsure, have someone who has done it before look first.
5. Only then rebuild. Once the damage has stopped, invest in technical work and content that lasts. Doing both at once usually makes it impossible to tell which one worked.
White hat means genuinely improving the site in the ways Google wants: structure, speed, content that helps. Black hat means directly violating policy — bought links, PBNs, keyword stuffing, hidden text. Grey hat is the ambiguous ground between them, which tends to become black hat at the next policy update.
Yes, in two ways. A manual action means a person at Google reviewed the site and applied a penalty; you see a notice in Search Console explaining it. The other is algorithmic suppression, where there is no notice at all and traffic simply stops. The second is far more common and much harder to recover from, because you do not know what you are recovering from.
Sometimes, briefly, and that is exactly what makes it dangerous. You see the rankings rise first and watch them disappear together at the next sweep. The problem is not only losing positions — it is having built the business on a foundation that can be withdrawn at any time.
It depends on intent. Writing something genuinely worth reading for a publication with real readers, which happens to link back, is white hat. Paying for a link where the article is only a pretext is buying links. The dividing question: if that link were nofollow, would you still want it?
Start by auditing every backlink for anything anomalous. Where you find links from a purchased network, try to have them removed at the source first. Disavow only what cannot be removed. If there is a manual action, file a reconsideration request explaining what was fixed. The process usually takes months.
No, and the reason is not ethics but asymmetric risk. If they get penalised, they lose a site built to be disposable. If you get penalised, you lose a real business with staff and customers. The better move is to work out what else they are doing right, because there is almost always something beyond the links.
Send a URL and we will look for signs of grey hat work left behind. Free, no obligation, and if the site is already clean we will say exactly that.
Get a free check →Read next: what SEO is · SEO pricing · our services