Link building in 2026: what still works and what is now risk

Links have not stopped mattering. Google's ranking systems still use them to discover pages, to understand what a page is about and to judge whether anyone outside your marketing department finds your content worth citing. What changed is the weight and the tolerance. Twenty years of manipulation taught the search engine to discount whole categories of links rather than penalise every site that owns them, so reality is quieter: most bought, swapped or mass-produced links now do nothing at all. They are not catastrophic, simply inert, and you paid for them.

It helps to ask what a link is evidence of. A genuine editorial link is a decision made by someone who has something to lose: a publisher who risks their credibility, an association vouching for a member, a practitioner citing a source in front of their own audience. That decision carries information no on-page optimisation can fake. The same logic now extends beyond classic search, because the assistants that summarise the web lean heavily on which sources other credible sources reference when they decide whom to cite in an answer.

The consequence for a buyer is uncomfortable but simple. One link from a publication your customers actually read is worth more than fifty from sites that exist to sell links, and the two are not on the same scale. Any provider whose pricing is expressed as a number of links per month is telling you which of the two they intend to deliver. Before you sign anything, read our guidance on how to choose an SEO agency, because link practices are where the gap between competent and careless is widest.

Digital PR is the discipline of giving journalists, analysts and industry publications a reason to mention you. The link is a by-product of the coverage, not the product itself, and that inversion is exactly why it survives each new guideline update: nothing was exchanged, so there is nothing to discount. In practice it means building something genuinely quotable, then doing the unglamorous and largely manual work of finding the twenty or thirty people who actually cover that beat, and pitching them individually with a subject line that respects their time.

The assets that earn coverage are narrower than most agencies pretend. Original data from your own operations is the strongest, because nobody else can publish it. Expert commentary works when a real named practitioner in your company can speak to a live story within a day. Free tools and calculators earn links for years because they solve a recurring problem. Partnerships, sponsorships of real events, and contributions to industry bodies produce fewer links but the most durable ones. Everything else in the digital PR brochure is a variation on these five.

Set expectations before commissioning any of it. Earned links arrive irregularly, in bursts tied to a campaign or news cycle, and a strong quarter may produce a handful of placements, not a predictable monthly number. The cost per link is high once you count research, production and outreach, and a campaign can land nothing. That variance is the price of the only method whose output is not discounted. Providers who run it well also run your content marketing, and the agency leaderboard ranks them on verified data, not claimed link counts.

Be clear about the facts here rather than the moralising. Google's spam policies state that exchanging money, goods or services for links that pass ranking signals is a link scheme, and that such links should be marked with a sponsored or nofollow attribute. Marking them removes the violation and, in the same move, removes the ranking value that made them attractive. There is no version of paid links that is both compliant and effective for rankings, and any provider who tells you otherwise is describing a preference, not a policy.

The risk, though, is usually misdescribed. Manual penalties exist but are not the common outcome; far more often the links are simply neutralised, silently, and the money is gone. Risk concentrates where footprints are obvious: marketplaces that resell the same inventory to hundreds of buyers, sitewide footer placements, exact-match commercial anchors repeated at unnatural rates, and sites whose only purpose is hosting paid articles. A few sponsored placements on real publications sit at one end of that spectrum. An automated package of eighty links a month sits at the other.

What matters for you as a buyer is knowing which one you are financing, because you own the domain and therefore the consequences. Ask directly whether any money or free product changes hands for placements, ask how those placements are disclosed, and put the answer in writing: a clause stating that no paid placement will be acquired without your prior written approval costs nothing to add and settles the question for good. Our list of contract red flags covers the surrounding clauses, including who keeps the links if the relationship ends.

Guest posting is not one tactic, it is two activities that share a name. The defensible version is contributing an article to a publication that has its own audience, its own editor and its own reasons to say no. You pitch an idea, it gets rejected or reshaped by that editor, a named author from your own company writes it, and the link appears where it genuinely belongs in the argument. That link is earned by the same mechanism as press coverage, and it behaves the same way over time.

The industrial version replaces every one of those filters with a price list. Sites built to host contributions, pages advertising submission fees, publications whose article archive is an unrelated jumble of finance, casino, cosmetics and software topics, authors who exist only as a byline, and links inserted into a paragraph that was written backwards from the anchor text. These sites are easy to identify at scale, which is why their value keeps eroding. The tell is rarely the individual article; it is the pattern of what else the site publishes.

Before approving a placement, look at the destination the way a reader would. Does the publication have a real audience, an editorial line, and traffic that comes from somewhere other than search engines? Would you be pleased to see your brand there if links did not exist? The agencies doing this properly can answer those questions immediately for every target on their list, and will happily share the pitch before it is sent. A provider who cannot usually bought the placement through an intermediary and never spoke to the publication.

Directory submission earned its bad reputation honestly, through a decade of software that blasted the same listing into thousands of empty web catalogues. That practice is dead and cannot be revived. But the category itself never died, because a small number of directories are how humans and machines verify that a business exists: local citation sources feeding map results, professional registers, chambers of commerce, trade association member lists and vertical marketplaces where buyers genuinely shop. These are references, not links you bought, and they are read by more than crawlers.

The rule that replaces volume is relevance, and it has two distinct axes: topical and geographic. A listing on a trade association register in your own sector beats an unlimited number of generic web catalogues, and a local business register matters for map visibility in a way no international directory can substitute. If your customers sit in one market, a country catalogue such as agencies in France or agencies in Germany does something a global list will not, because relevance is contextual. Our local SEO guide covers citations in detail.

Judge any directory you are offered with three questions. Does a real person maintain it, meaning listings are reviewed or verified rather than accepted automatically? Does it send actual referral visits, confirmable in your analytics within a month? And would a buyer in your market use it to build a shortlist? Directories that pass all three tend to be the ones large language models surface when someone asks for recommendations, a practical reason to be listed accurately. Comparison and evaluation resources like SEO tool listings work on the same principle.

While everyone argues about external links, the form of linking you fully control is usually left half finished. Internal links cost nothing beyond the time to place them, need no outreach, no negotiation and no approval from a stranger, and can be changed the afternoon you decide to change them. They also do three jobs at once: they route authority from the pages that already have it to the pages that need it, they tell search engines which pages belong to which topic, and they carry anchor text you write yourself.

The pattern that works is unglamorous. Identify the pages that already attract links and impressions, then link from them, in the body text, to the commercial pages you actually want to rank. Connect articles on the same topic to each other so the cluster reads as a coherent body of work. Find orphan pages that nothing else references and either link them properly or remove them. Fix anchors that say read more or click here, since they waste the one place where you describe a destination in your own words.

This is also a quick way to test whether a provider thinks or executes a template. Ask what internal links they changed last month and why, and what happened afterwards. A serious SEO engagement treats internal linking as a monthly deliverable with a before-and-after view of the affected pages, tracked in the same reporting as everything else. If internal linking was covered in the initial audit and never revisited, you have found a gap that costs nothing to close and is usually worth more than the next three purchased links.

Link reporting is where vague deliverables hide most comfortably, so fix the format in month one, with your SEO reporting. You want a line per placement: the live URL of the page carrying the link, the destination page on your site, the exact anchor, the referring domain, the go-live date, the acquisition method and whether the link is followed or sponsored. A provider doing real work produces this in minutes: it is how they track their pipeline. A provider who resists is protecting a supplier list you are not meant to see.

Then verify a sample yourself, because reports describe intentions and pages describe reality. Open five placements at random and check that the link is still there, still followed, still in the body of an article and not an author box, and that the surrounding paragraph is about your subject. Look at the anchor distribution across the quarter: a natural profile is mostly brand names, bare URLs and descriptive phrases, with commercial anchors as a minority. Count unique referring domains rather than links, since ten links from one site is one relationship.

Finally, treat toxic-link cleanup claims with care. Google has said for years that it ignores the overwhelming majority of spam links automatically, and the toxicity scores sold by third-party tools are vendor inventions, not signals the search engine publishes or uses. Disavowing is a narrow instrument, appropriate mainly after a manual action or a known history of paid links you cannot get removed, and it can cause harm when a nervous provider uploads a broad file including legitimate domains. Anyone selling routine monthly disavow files sells a subscription to reassurance.