Google Disavow Tool in a manual-action cleanup
Most sites never need Google’s Disavow Tool. It is for the links behind an unnatural-links manual action, confirmed or clearly coming, that stayed up after you asked their sites to take them down.
Start from the confirmed link problem
Google's Disavow links documentation says most sites do not need the tool. Its stated threshold requires both a considerable number of spammy, artificial, or low-quality links and a manual action, or a likely manual action, caused by those links. A confirmed action belongs in the Google manual-action removal process; a scary score in a commercial crawler satisfies neither condition.
Start with provenance. Were the links bought, exchanged, automated, or created by a previous SEO to manipulate ranking? Does Search Console name unnatural links? Can the person or process that built them be identified and stopped? Proof of common control comes from those records, not from footprint clues.
A clean report and a falling graph belong in the broader Google ranking-loss investigation, not in a destructive upload.
Penguin and PBN links without a notice
Google’s Penguin update began in 2012 as a named link-spam system. In September 2016 Google made it part of the core algorithm and described it as real-time and granular, devaluing spam links rather than demoting a whole site. There is no current Penguin status to check and no Penguin recovery date to wait for.
A private blog network, or PBN, is a controlled group of sites built to create links that look independent. Google's link-spam policy covers it without the label. Prove it from acquisition records, not footprints: an invoice, placement sheet, login or explicit link plan is direct provenance; a repeated seller, author, analytics ID and planned anchors corroborate it; low metrics, a generic design or a shared host are only leads.
Without an unnatural-links manual action, stop any controlled acquisition, remove or qualify what you control with rel="sponsored" or nofollow, and change how links are commissioned and approved so the network is not replaced next month. Google's own guidance says most sites do not need to disavow; the file is for the qualifying remainder of a confirmed cleanup.
Document removals and the qualifying remainder
For a confirmed unnatural-links manual action, Google asks the site owner to make a good-faith effort to remove violating links first. Document contacts and outcomes. The disavow list covers questionable URLs or domains that cannot be removed; it does not erase the need to fix the acquisition practice. Those records become evidence for the Google reconsideration request after the repair is complete. The outreach, the records, the file and the request are one job, and it can be handed to an SEO penalty removal company whole.
Blindly feeding an exported backlink list into the tool is particularly weak. Link reports are samples, third-party databases disagree, and authority metrics are vendor models rather than Google's classification.
Prepare the qualifying remainder
The tool requires owner permission on the correct URL-prefix property; it does not accept a Domain property. The list is property-specific and also applies to child properties, so HTTP and HTTPS may require separate decisions. Export the currently applied file before doing anything: a successful new upload replaces it.
The file is plain text encoded as UTF-8 or 7-bit ASCII and ends in .txt. Put one URL or domain instruction per line. To disavow a whole domain or subdomain, use the domain: prefix; a subpath cannot be disavowed. Comments start with #. Google currently limits a file to 100,000 lines and 2MB, with a 2,048-character maximum URL length.
# Links that could not be removed after outreach
https://spam.example/page-with-link
domain:paid-network.example
Review the difference line by line. Shared hosting or a poor-looking site is not enough provenance for a domain-wide instruction.
Keep a line-by-line change register
For every exact URL or domain: instruction, record who created or controlled the link, the policy basis for including it, the date and result of any removal attempt, why URL-level or domain-level scope is necessary, and whether the instruction is being added, retained, or removed from the currently applied file.
This register forces the destructive choice to have evidence. It also makes a later correction possible when a legitimate link was included or the applied property was wrong.
Treat the upload as a consequential change
Google warns that incorrect use can harm Search performance. Processing also is not instant: the listed pages have to be recrawled and reprocessed, which can take weeks. Monitor the manual-action workflow and the affected query/page groups rather than watching a single sitewide visibility score.
Disavowed links can remain visible in the Links report because the tool asks Google to disregard them; it does not delete them.
The upload belongs near the end of a link-related manual-action repair, not at the beginning of a ranking-loss guess. Send the notice and the removal log.