Content revised 20 October 2026.
A traffic drop doesn't prove negative SEO. Protect the website, keep useful records and investigate the evidence before blaming an outside attack.
Start with access and change control
Keep administrator access limited to the people who need it. Maintain appropriate updates, backups and a record of significant site changes. If several agencies can change the same site, agree who approves releases and who can investigate a problem. Basic operational discipline makes an incident easier to diagnose.
Check the timeline before the backlink count
Note when the decline started and compare it with deployments, redirects, tracking changes and indexing reports. An accidental noindex setting can look dramatic in a traffic chart. A broken analytics tag can make visits appear to vanish even when search clicks have not changed.
Separate the evidence
- For an access compromise, involve the responsible technical or security team.
- For suspicious backlinks, review their context and your own link-building history.
- For an indexing problem, inspect the affected URL and crawl response.
- For a manual action, read the notice and address the issue it identifies.
Choose a sensible next step
Preserve examples, dates and affected URLs. Avoid making sweeping changes to content or disavowing every unfamiliar domain while the cause is still unclear. A useful recovery plan explains the confirmed problem, the corrective action and how the result will be checked. It should not promise a ranking recovery simply because an attack was suspected.
Official guidance: Google’s cautions about disavowing links.