SEO Fundamentals
Black hat SEO is the family of techniques that manipulate rankings in ways search engines explicitly prohibit — and this guide catalogues them not as a menu but as a hazard map. Every technique below shares one lifecycle: it works for a while, detection catches up, and the sites using it get repriced — sometimes gradually, sometimes overnight, occasionally by manual penalty with a recovery bill that dwarfs whatever the shortcut saved. Knowing the catalogue matters even if you'd never touch it: you'll recognise it in competitors, in "too cheap to be true" SEO offers, and occasionally in your own site's inherited history.
The content schemes
- Keyword stuffing — the ancestral technique: cramming target phrases until prose becomes inventory. Dead as a tactic since the statistical-language era; survives only as a beginner's accident that makes pages worse at the relevance job they're attempting.
- Cloaking — serving one page to Googlebot and another to humans. Unambiguous, aggressively policed, and the fastest route to severe action because it's deception of the referee by definition.
- Doorway pages — grids of near-identical pages targeting every city/keyword permutation, funnelling to one destination. The mass-produced cousin of honest duplication problems, and a named target of multiple updates.
- Scraped and spun content — republishing others' work, machine-shuffled or not. The rater guidelines' lowest-quality definitions read like a description of it; scaled versions get sites deindexed wholesale.
- Hidden text — white-on-white, off-screen CSS, zero-font-size keywords. Museum-grade primitive, still detected, still penalised.
The link schemes
The bigger family, because links are the heavyweight signal worth faking: buying links that pass PageRank (the paid-link calculus in its prohibited form), private blog networks — the industrial version, whole fake ecosystems built to vote; link farms and reciprocal rings; comment, forum and profile spam at scale; and hacked-site link injection — which crosses from policy violation into crime. Google's response evolved from penalising (Penguin's era) to largely ignoring manufactured links algorithmically — meaning the modern outcome of most link spam is wasted budget, with manual actions reserved for egregious footprints. The full risk inventory lives in our penalties series.
The bait-and-switch family
Sneaky redirects (rank one page, redirect users elsewhere), expired-domain abuse (buying authority to graft junk onto — the expired domain guide maps where legitimate ends and this begins), and parasite hosting — renting subdomains on trusted sites to launder rankings; a recent named enforcement target. All variations on one move: acquiring trust for one thing, spending it on another.
Why the trade is structurally bad
Not a morality argument — an expected-value one. The gains are temporary by construction (every technique's detection is a matter of when), the losses are step-functions (a spam update or manual action removes years of traffic in a day), recovery costs exceed the original shortcut's savings (link cleanup, content rebuilds, reconsideration cycles — sometimes domain abandonment), and the whole position is unsellable: acquirers audit link profiles now. Meanwhile the compounding curve of legitimate work — the honest timeline — keeps paying decades after every scheme of its era died. The people still profitably doing black hat are running churn-and-burn domains they expect to lose; if your domain is meant to live, the math never closes.
Frequently asked questions
My competitor uses these tricks and ranks fine. Why?
For now — detection is probabilistic and lag is real. Report it via the spam report form if you like, but the strategic answer is the analysis framework: their manufactured advantage is a liability you don't want; out-build them where it compounds.
What about "grey hat" — the stuff in between?
Grey hat is black hat with better marketing: tactics whose classification is pending, priced as if the pending never arrives. The useful test is disclosure: would the tactic survive being explained to Google, your client, or a journalist? Everything in this catalogue fails it.
I inherited a site with black hat history. What now?
Audit before building: the link audit for scheme footprints, a content review against the full audit checklist, and Search Console's manual actions report first of all. Clean-up is well-trodden — then the rebuild runs on the only stack that survives every enforcement wave: real content, real earned links (our kind), real time.