White hat SEO improves rankings with tactics Google explicitly endorses: original content, earned links, clean technical work, and a site built for the people using it. Black hat SEO manipulates rankings with tactics Google prohibits: keyword stuffing, bought links, cloaking, and injected links on hacked sites. The first approach compounds for years. The second can work for a while and then vanish overnight when an update or a manual reviewer catches up. This post lays out the tactics on each side, the penalties that enforce the line, and what link injection looks like from both ends of the attack.
The short version
- White hat follows Google Search Essentials and builds rankings that last.
- Black hat can win short term and risks demotion or full deindexing.
- Gray hat tactics sit in between and tend to become black hat over time.
- Link injection is black hat plus hacking: links planted on compromised sites.
What white hat SEO is
White hat SEO is the practice of earning rankings by making the site genuinely better: content that answers the query in depth, links other sites give you because the content deserves them, fast pages, and clean markup. It follows Google Search Essentials, the policy set that replaced the old Webmaster Guidelines in 2022. It carries no penalty risk, and it is slow by design: three to twelve months before results show, because you are building real value rather than exploiting a gap.
- Original, in-depth content matched to search intent
- Links earned through content, digital PR, and real relationships
- On-page work: titles, headings, internal links, schema markup
- Site speed, mobile experience, and Core Web Vitals
- Regular updates that keep pages accurate
What black hat SEO is
Black hat SEO manipulates rankings with tactics that violate Google spam policies. The point is never to make the site better for a visitor; it is to trick the algorithm into ranking a page it would otherwise skip. We explain these tactics so you can recognize them in an agency pitch or a competitor audit, not so you can run them.
- Keyword stuffing, in visible copy or hidden text
- Buying links that pass PageRank, including paid guest posts and link farms
- Cloaking, which shows Googlebot different content than visitors see
- Private blog networks built solely to link to a money site
- Doorway pages and scraped or spun content at scale
- Link injection on hacked sites, covered next
Link injection is black hat SEO at its worst
Link injection is the tactic where an attacker compromises someone else's website and plants outbound links in it, pointing at the site they want to rank. The links hide in old posts, footers, or blocks of hidden text, and the injected pages often push pharma, gambling, or counterfeit-goods terms. It combines two violations in one move: a link scheme for the beneficiary and a hacked-content problem for the victim.
Most injections arrive through outdated CMS plugins and themes, stolen passwords, or malware that rewrites templates so every page on the site sprouts spam links. The victim usually finds out when Google flags the site in Search Console with a hacked-content notice, or when rankings slide because the site now links to a bad neighborhood.
If it happens to your site, the cleanup order matters:
-
Find the injected content
Search Console security issues, a site: search for terms you never wrote, and a crawl of your own pages surface the planted links and pages.
-
Close the hole
Update the CMS, plugins, and themes, rotate every credential, and remove unfamiliar admin accounts. Removing links without fixing the entry point invites round two.
-
Remove the spam and request review
Delete injected pages and links, restore clean templates from backup, then request a security review in Search Console so the hacked-site flag comes off.
And if you are ever offered links that come from "our private network of established sites" at suspiciously low prices, this is often what you are actually buying. When the network is cleaned up, your links evaporate and your site sits in the penalized blast radius.
Gray hat sits in the middle and drifts darker
Gray hat covers tactics that are not explicitly banned but exist to manipulate: guest posting purely for the link, aggressive exact-match anchors, expired-domain redirects bought for their backlinks, tiered link building. The pattern across two decades of updates is consistent: gray hat tactics that spread get reclassified as spam. If a tactic only makes sense because of what it does to the algorithm, treat it as black hat with a delay timer.
How Google enforces the line
| Enforcement | How it arrives | How it lifts |
|---|---|---|
| Manual action | A human reviewer flags the violation; notice appears in Search Console | Fix everything, file a reconsideration request, wait for review |
| Algorithmic demotion | Systems like SpamBrain devalue the spam automatically, no notice | Remove the spam and wait for recrawls and updates |
| Partial penalty | Specific pages or sections drop | Clean the affected content |
| Site-wide penalty | The whole domain loses visibility, up to full deindexing | Full cleanup; some sites never fully return |
A penalty is not the same thing as a core update loss, and the recovery paths differ. Our post on recovering from a Google core algorithm update covers the no-penalty case, where there is nothing to confess and everything to improve.
Where Egochi stands
Egochi practices white hat SEO only. Our SEO services build rankings from content, earned links, and technical work we would happily walk any Google reviewer through, because rankings a client cannot keep are not results. If an agency pitch leans on secret networks, guaranteed positions, or links nobody can show you, you now know which hat they are wearing.
Questions people ask about white hat and black hat SEO
Is black hat SEO illegal?
Not criminally, with narrow exceptions like hacking a site to inject links. Keyword stuffing and link schemes break Google policy, not the law. The punishment is commercial: Google can demote your pages or remove the site from results entirely.
How do I know if my SEO is white hat?
Apply one test: would you comfortably explain every tactic to a Google employee? If a tactic only works while hidden, it is not white hat. Google Search Essentials spells out what is acceptable, and everything in it targets users rather than tricks.
Does black hat SEO still work?
Sometimes, briefly. Sites still spike with PBN links or scaled spun content, and then updates or manual reviews erase the gains. For a disposable affiliate domain that math can pencil out. For a business that needs its brand and rankings next year, it never does.
Can you recover from a Google penalty?
Usually, with work. A manual action requires removing every violation and filing a reconsideration request, which can take months to review. Algorithmic demotions lift as Google recrawls the cleaned-up site. Some sites never regain their old positions, which is the real cost.
What is negative SEO?
Black hat tactics aimed at a competitor: pointing spam links at their site, scraping their content, or hacking them to inject links. Google says its systems ignore most such attacks, and the disavow tool covers link-based ones. Monitoring your backlink profile catches the rest.
