White hat, grey hat and black hat link building explained
White hat link building stays inside Google's spam policies, black hat breaks them openly or breaks the law, and grey hat SEO is the wide middle where most paid placements sit. Here is how the three labels map to our R1 to R5 risk scale.
In short
- On this site's scale, white hat is R1, grey hat runs from R2 to R3 and black hat is R4 to R5.
- Google's spam policies, last updated in August 2026, allow paid links only when they carry a sponsored or nofollow attribute.
- In uSERP's September 2026 survey of 116 senior SEOs, 35.3% said they had paid for sponsored backlinks in the past 12 months.
- In Editorial.link's March 2026 survey of 518 SEOs, 91.9% said they believe their competitors buy links.
- With its March 2026 spam update, Google repeated that when spammy links are neutralised, the ranking benefit they gave is lost.
White hat link building stays inside Google’s spam policies. Black hat link building breaks them openly, and at the far end breaks the law. Grey hat SEO is everything between: tactics that Google’s policy forbids on paper and mostly ignores in practice. Most commercial link building in 2026 sits in that middle band.
The three labels are loose. Two people can use “grey hat” for very different things. This site uses a five-step risk scale, R1 to R5, on every tactic page, and this lesson maps the labels to it.
What each label means
White hat. The link would make sense if search engines did not exist. A journalist cites your data, a supplier lists you as a stockist, an editor fixes a dead link by pointing to your page. Nobody is paid for the link itself.
Grey hat. The link exists mainly for rankings, but it sits on a real site, reads naturally and hurts nobody. Paid guest posts, niche edits and arranged link swaps are the usual examples.
Black hat. The link comes from a system built only to manipulate rankings: private networks, automated posting, rented sitewide links, pages injected into compromised sites. The methods leave patterns, and the realistic outcomes include losing the site.
The line Google draws is narrower than the labels suggest. Its spam policies, last updated in August 2026, treat any link created mainly to manipulate rankings as link spam. Buying or selling links for advertising is allowed when the link carries a sponsored or nofollow attribute.
The R1 to R5 scale
| Band | Label on this site | What it means | Hat |
|---|---|---|---|
| R1 | Within guidelines | Fully inside Google’s spam policies | White |
| R2 | Low | Compliant if done sensibly, a pattern if done at scale | Grey, lighter end |
| R3 | Moderate | Breaks or skirts the link spam policy. Normally devalued, not penalised. A manual action is possible at scale | Grey |
| R4 | High | Clear violation with visible patterns. A realistic chance of neutralised links, a manual action or a lost asset | Black |
| R5 | Severe | Illegal, or close to certain to burn the site | Black |
Where each tactic sits
The risk bands below come from the same data as our tactics chart.
| Band | Tactics |
|---|---|
| R1 | Link reclamation, unlinked mentions, testimonials and partner links, local citations, journalist requests, linkable assets, broken link building, digital PR |
| R1 to R2 | Genuine guest posts |
| R2 | Sponsorships |
| R2 to R3 | Link exchanges |
| R3 | Paid guest posts, niche edits, link marketplaces |
| R2 to R4 | Expired domains and 301 redirects |
| R3 to R4 | Parasite pages |
| R4 | Private blog networks |
| R4 to R5 | Public networks and automation |
| R5 | Hacked links |
Several tactics span two bands because the same method can be done two ways. A guest post written for a trade publication is R1. The same article bought on a site that publishes anything for a fee is R3. Relaunching a defunct business’s domain on the same topic is R2. Pointing an unrelated dropped domain at a money page is R4.
Grey hat SEO is where the market is
Surveys show how common the middle band is. In Editorial.link’s March 2026 survey of 518 SEOs, 91.9% said they believe competitors buy links, and 56% said they believe Google cannot reliably identify paid links. In uSERP’s September 2026 survey of 116 senior SEOs, 35.3% said they had paid for sponsored backlinks in the past 12 months. Among digital PR specialists the picture is different: 80% said they never buy links in BuzzStream’s State of Digital PR 2026 survey, down from 87.3% a year earlier.
Some grey tactics are also ordinary web behaviour. Ahrefs data reported by BuzzStream found that 43.7% of top-ranking pages have some reciprocal links. Google’s policy objects to “excessive” exchanges, and it gives no number for excessive. That is why link exchanges sit at R2 between related sites and R3 at volume.
What separates grey from black
Three tests work better than the labels.
Would the site survive scrutiny? A grey link sits on a site with real readers. A black hat link sits on a site that exists to sell links or was built to host them. Private blog networks share hosting, owners and outbound targets, and those shared traits are how they are found.
Is the method legal? Policy risk and legal risk are different things. Links injected into compromised websites involve unauthorised access to someone else’s systems, which is a crime in practically every jurisdiction. We describe hacked links only so you can recognise and refuse them. Fake takedown notices and other link attacks on competitors fall in the same band.
Can you afford to lose the asset? Black hat operators plan for loss. They run many disposable domains and replace each one when it stops ranking. The high-risk markets hub explains that model and why it does not transfer to a licensed brand.
How enforcement treats each band
Google is reported to have said, when Penguin became part of its core systems in 2016, that it devalues spam links instead of demoting the whole site. So the usual result of an R3 link is silence: the link is ignored and the money is wasted. The research found no named link spam update since December 2022. In August 2026 Google said link spam is handled by separate systems from its general spam updates.
Two outcomes are worse than being ignored. A profile dominated by manipulative links can earn a manual action, which shows in Search Console and needs a reconsideration request. And with the March 2026 spam update Google repeated that once the effect of spammy links is removed, the benefit is lost and clean-up does not bring it back. Link penalties and recovery covers both paths.
Choosing a band for your site
No dataset tells you how much risk pays. A working method used in written link policies is to set the ceiling by asset type:
- A flagship brand domain: R1 to R2 only.
- A growth asset the business could rebuild: up to R3, with vetting and caps on paid placements.
- A test or disposable site: R4 allowed, kept fully separate from the others.
One rule of thumb covers all three: never apply a tactic to an asset whose loss you cannot afford, and never assume two assets are separate if they share hosting, analytics or link patterns. Our lesson on link buying policy and governance turns this into a written policy.
Where to go next
If you plan to work in the grey band, read how to buy backlinks safely before spending anything, and compare platforms in our link marketplaces guide. The glossary defines every term used here.
Common questions
What is grey hat SEO?
Grey hat SEO is work that breaks or skirts Google's guidelines without being illegal or openly abusive. In link building it mostly means paid guest posts, niche edits, marketplace placements and link exchanges at volume, which sit at R2 to R3 on our risk scale.
Is grey hat link building illegal?
No. It breaks a search engine's policy, not the law. Advertising disclosure law still applies to paid content, and hacked links are a criminal matter in practically every country.
What is the difference between white hat and black hat link building?
White hat links are earned or requested openly and would make sense if search engines did not exist. Black hat links come from networks, automation or compromised sites built only to move rankings, and they carry a realistic chance of losing the site.
Does black hat link building still work?
Sometimes, for a while. Operators in high-risk markets plan for the site to be lost and replaced. The model does not transfer to a brand or to any business that needs stable rankings.
Is buying links black hat?
Buying a followed link breaks Google's link spam policy, so it is not white hat. We class vetted paid placements as grey hat at R3, and public network links and automated packages as black hat at R4 to R5.
