Links you didn’t earn can be switched off
Structure and markup refreshed for current answer engines; the original analysis is preserved.
Google’s link spam update finished rolling out in late August. The detail that matters is the mechanism: it does not punish your site for the bad links pointing at it — it nullifies them, switching off their ranking power. That is the whole case for earned authority over bought. A link you paid for is an asset that can evaporate in a single update; a link you earned cannot.
the short answer
Google’s link spam update finished rolling out in late August 2021. It nullifies manipulated links — switching off their ranking power — rather than penalising the receiving page. The penalty risk is on your outbound commercial links if left unqualified (affiliate, sponsored, guest). The lesson: bought links can be switched off overnight; earned links cannot.
key takeaways
- Google’s link spam update finished rolling out in late August 2021 (announced 26 July, confirmed complete 24 August), identifying and nullifying link spam more broadly across multiple languages.
- The mechanism is nullification, not punishment: manipulated links pointing to a site have their ranking power switched off, rather than the receiving page being demoted for having received them.
- The penalty risk is on the outbound side: unqualified affiliate links and excessive sponsored or guest posting without the right rel tags can draw algorithmic or manual action.
- You do not need to migrate existing nofollow links to sponsored — Google said so. Use the fitting attribute on new links: sponsored for paid, ugc for user content, nofollow otherwise.
- The real lesson is fragility: links you bought or schemed can be devalued overnight, while links you earned editorially cannot — earned authority is the only profile that survives an update.
earned vs switched off
The left column is the only one an update like this leaves alone, because there is nothing manipulative to detect in a link a site chose to give you. The right column is borrowed strength: useful until the day it is switched off, and acquired cheaply enough that switching it off is cheap too.
The update, in four parts
What rolled out through August; why the mechanism is nullification rather than punishment; how to qualify the links you place; and why earned authority is the only durable kind. Open each part.
01 What rolled out through August
On 26 July 2021, in a blog post titled as a reminder on qualifying links, Google announced what it called the link spam update, an algorithm change it said would roll out over about two weeks and be more effective at identifying and nullifying link spam more broadly, across multiple languages. The rollout took longer than the fortnight implied: Google noted on 9 August that it was not yet done, and confirmed it complete around 24 August, so the change everyone began reacting to in late July only fully settled at the end of the month. The substance is a continuation of a fight Google has been waging for two decades, the lineage running back through the Penguin updates to the original effort to stop manipulated links from deciding rankings. What the update does, in Google’s own framing, is re-assess the links pointing at sites and nullify the ones it identifies as spam — switching off their contribution rather than letting ill-gotten links keep lending rank. The announcement put unusual emphasis on links of a commercial nature: affiliate links, sponsored content, and guest posts, the three most common ways a site monetises and, not coincidentally, the three most common vehicles for links that were paid for rather than earned. None of these are forbidden — Google was explicit that affiliate links, sponsored posts, and guest posts are all fine to use — but it wants them qualified honestly with the right attributes, so its systems can tell a commercial link from a freely given endorsement. The headline for site owners was blunt enough that the forums lit up with it: links you did not earn, and especially links you paid for without disclosing, were about to stop counting.
02 Nullified, not punished
The single most important thing to understand about this update is the mechanism, because it changes how you should react. Google said it would nullify link spam, and nullify is a precise word: the manipulated links are re-assessed and have their ranking power set to nothing, switched off, rather than the page that received them being demoted as a punishment. That distinction is not pedantry. A system that penalised pages for the links pointing at them would be trivially abusable — you could bury a competitor by aiming spammy links at their site — which is why Google has said for years that it tries to simply discount or ignore links it does not trust rather than holding the receiving site responsible for them. So if this update cost you ground, the honest reading is that links which had been quietly lending you rank were identified and switched off, and the rankings they were propping up settled back to where your earned signals actually place you. That feels like a penalty from the inside, but it is the withdrawal of borrowed strength, not a punitive strike. The asymmetry worth holding is that the punishment risk lives on the other side of your links. The same announcement was clear that sites which publish or acquire commercial links without proper tagging — unqualified affiliate links, campaigns of sponsored or guest posts done purely to pass rank — can face algorithmic actions and even manual actions. So incoming spam tends to be devalued and switched off, while your own outbound commercial links, left unqualified, are the ones that can actually draw a penalty against you. Read correctly, the update asks you to do two different things: stop relying on incoming links you did not earn, because they can vanish, and qualify your outgoing commercial links honestly, because those can be held against you.
03 How to qualify links honestly
The practical compliance question is narrow and answerable: match the rel attribute to the real relationship behind each link. Google has offered, since 2019, a more specific vocabulary than the original rel="nofollow" introduced back in 2005 — adding rel="sponsored" for paid or commercial links and rel="ugc" for user-generated content — and the update is essentially a push to use it where it applies. For affiliate links, the product-review and shopping-guide links that pay a commission, Google asks for rel="sponsored", whether those links were placed by hand or generated dynamically by an affiliate platform; the commercial nature is what matters, not how the link was created. For genuinely paid placements and sponsored articles, rel="sponsored" again, because value changed hands. For guest posts, the guidance is rel="nofollow", since guest posting at scale purely to acquire links is a classic scheme. For links your users place rather than you — comments, forum threads — rel="ugc". And nofollow remains the sensible catch-all when none of the others fit but you still do not want to pass an endorsement. Crucially, Google’s own people defused the panic that this all required a frantic site-wide migration: both Mueller and Illyes said there is no need to rebuild existing nofollow links into sponsored ones, and that simply using the better-fitting attribute on new links is enough. So the work is not a rewrite of your link history; it is a habit going forward — tag commercial links for what they are — plus an audit of any large, obviously unqualified affiliate or sponsored footprint you already have. Get that right and your compliant, honestly-tagged links sit untouched while the manipulative ones around the web lose their power.
04 Why earned authority is the only durable kind
Step back from the mechanics and the update makes a single, larger point that outlasts this particular algorithm change: an authority profile built on links you did not earn is a fragile asset, and one built on links you did is not. Every link this update switched off had something in common — it was acquired rather than earned, bought or schemed or traded into existence, which is exactly why it could be identified and nullified at scale. The links it left untouched also had something in common: they were given freely by other sites because the content deserved citing, and there is no footprint to detect in an editorial link offered on the merits. That is the whole case for earned authority stated as a risk position rather than a platitude. Bought links are a liability dressed as an asset; they lend you rank until the update that switches them off, and because they were quick and cheap to acquire, they are quick and cheap for Google to devalue. Earned links are slower and harder to come by — they require content genuinely worth referencing — but that difficulty is the source of their durability, because what cannot be cheaply manufactured cannot be cheaply discounted. The recovery path for a site hit by this update is the same as the prevention path for one that was not: build things worth linking to, earn citations on their merits, and qualify whatever commercial links you place so they never become the liability that draws an action. Rebuilding an authority profile out of earned links takes patience, but it is the only profile that walks through an update like this one unharmed — which is the durable, un-switchable kind of authority the AC Group has helped sites build for 27 years.
Why this reframes link building
The update quietly redraws what a backlink is worth as a strategy. For years, link building could be run as procurement: decide how many links you wanted, find places that would sell or trade them, and acquire them at scale. This update does not outlaw that, but it changes its economics, because the links that are cheapest to acquire are precisely the ones Google is now best at identifying and switching off. A backlink profile bought or traded into existence is therefore not the durable asset it looks like on a dashboard; it is a balance that can be zeroed in the next update, leaving you to discover how much of your ranking was borrowed. That is a different way to think about the work — not how many links can I get, but how many of my links would survive a re-assessment.
Framed that way, the strategy that looks slow is actually the safe one. Earning a link means making something another site chooses to reference on its own merits, which is harder and less predictable than buying placement — but the difficulty is the point, because a link that cannot be cheaply manufactured cannot be cheaply detected and discounted. The teams that came through this update unscathed were the ones whose authority was built on citations they had earned, and the ones scrambling were those who had treated links as a commodity to be purchased. Building the first kind of profile — authority that an algorithm cannot switch off because there is nothing artificial in it to find — is the patient, durable work the AC Group has done for 27 years.
What to do with this
First, audit your outbound commercial links, because that is where the actual penalty risk sits. Find your affiliate links, your sponsored placements, and your guest-post links, and qualify them honestly: rel="sponsored" for paid and affiliate links whether placed by hand or generated by a platform, rel="ugc" for user-generated content, and rel="nofollow" for guest posts and anything else where you do not want to pass an endorsement. You do not need to rebuild your existing nofollow links into sponsored ones — Google said as much — so focus on large, obviously unqualified footprints and on tagging new links correctly from here on.
Second, treat any ranking you lost to this update as evaporation, not punishment, and respond accordingly. There is no tag to edit that brings switched-off links back, because their power was set to zero rather than penalised into a reversible state; the only route back is to earn replacement authority. So put the effort you might have spent acquiring links into making content worth citing, and let the links come on their merits — slower, but durable. Over time, a profile of earned links is the one that walks through the next update like this one without flinching. Building that kind of un-switchable authority, link by earned link, is the work the AC Group has done for 27 years.
The link spam update, plainly: quick answers
Does the link spam update penalise my site for bad links pointing to it?
For links pointing to you, the update generally nullifies rather than penalises — and the distinction matters enormously. When Google announced the update it described it as identifying and nullifying link spam more broadly across multiple languages, which means the manipulated links are re-assessed and have their ranking power switched off, set to nothing, rather than the receiving page being demoted as punishment for them. That is deliberate, because otherwise anyone could harm a competitor by pointing spammy links at them; Google has long said it tries to simply discount links it does not trust. So if a chunk of your backlinks were the kind Google now nullifies, the effect is that they stop helping you, not that your site is actively penalised for having received them. The honest caveat is the other direction: the same announcement made clear that sites which publish or acquire links with improper tagging — unqualified affiliate links, excessive sponsored or guest posting without the right attributes — can face algorithmic or even manual actions on the outbound side. So the asymmetry to hold is this: incoming spam links tend to be devalued and switched off, while your own outbound commercial links, if left unqualified, are the ones that can draw a penalty. Audit what you link out to, and treat your incoming-link losses as evaporation rather than punishment.
Do I have to change all my nofollow links to rel="sponsored"?
No, and Google said so directly when people began to panic about it. After the announcement, both John Mueller and Gary Illyes pushed back on the idea that you now must switch every nofollow to sponsored: there is no need to rebuild your site to migrate existing nofollow links, and nofollow remains a valid way to tell Google not to associate your site with a link. The nuance is that since 2019 Google has offered more specific attributes — rel="sponsored" for paid or commercial links and rel="ugc" for user-generated content like comments — alongside the original rel="nofollow" that dates back to 2005, and using the more fitting variant on new links is a nice-to-have, not a mandate. So the sensible posture is: leave your existing nofollow links alone unless you have a reason to touch them, and when you add new commercial or paid links going forward, reach for the attribute that best describes the relationship — sponsored for paid placements, ugc for user content, nofollow when neither quite fits but you still do not want to pass endorsement. Rebuilding a whole site to chase the new tags is effort Google explicitly told you not to spend.
How should I qualify the links I do place?
Match the attribute to the real relationship, which is the entire point of qualifying a link. For affiliate links — the product-review and shopping-guide links that earn a commission — Google asks you to use rel="sponsored", regardless of whether the links were added by hand or generated dynamically by an affiliate system. For genuinely paid placements and sponsored content on another site, rel="sponsored" again, because money or value changed hands. For guest posts, where an article is published under one site’s name on another, the guidance is rel="nofollow", since these are a classic vehicle for link schemes when done at scale purely to gain links. For links inside user-generated content — blog comments, forum posts, anything your visitors rather than you placed — rel="ugc". And rel="nofollow" remains the catch-all for any case where the others do not fit but you do not want to pass an endorsement. The underlying principle is simple and is what Google is really enforcing: a link that exists because of a commercial arrangement should not silently pass the same ranking endorsement as a link freely given on the merits. Tag the commercial ones honestly, and you are compliant; the links that still carry full weight are the ones genuinely earned.
How do I recover if this update cost me rankings?
Slowly, and by replacing switched-off authority with earned authority — there is no fast fix, and that is the lesson rather than a complaint. If the update cost you ground, it is because links that were carrying part of your rankings have been re-assessed and nullified, so the power they were lending you is simply gone. You cannot restore it by editing a tag, because the links were not penalised into a state you can reverse; their ranking value was set to zero. The only durable path back is to build the kind of links the update does not touch: editorial links given freely by other sites because your content earned them. That is genuinely slower than buying or scheming your way to a backlink profile, which is precisely why the bought version was always fragile — anything acquired quickly and cheaply can be devalued quickly and cheaply. So the recovery plan is the same as the prevention plan: create content worth citing, earn links on the merits, and qualify any commercial links you place honestly so they never become a liability. Rebuilding an authority profile on earned links takes time, but it is the only profile that does not evaporate in the next update — the kind of durable authority the AC Group has helped sites build for 27 years.
A note on sources and timing
This is written in August 2021. We have described the link spam update as Google announced it on 26 July — identifying and nullifying link spam more broadly across multiple languages — and as it finished rolling out around 24 August, later than the two weeks first implied. We have leaned on Google’s own framing that the mechanism is nullification rather than penalty for incoming links, while unqualified outbound commercial links can draw algorithmic or manual action, and on Mueller and Illyes clarifying that existing nofollow links need not be migrated to sponsored. The rel attributes referenced — nofollow from 2005, sponsored and ugc from 2019 — and the lineage back through Penguin are as they stand now. The durable point survives whatever comes next: links you did not earn can be switched off, and the only authority an update cannot remove is the kind you earned — the authority the AC Group has helped sites build for 27 years.