The sentence we hear most often from business owners watching their organic traffic drop is: 'Google penalized us.' It's such an ingrained assumption that almost every site owner who loses rankings assumes they've been penalized. The real picture is different: the only thing Google officially treats as a 'penalty' is a manual action, and manual actions are far rarer than most people think. The vast majority of traffic drops don't come from a penalty at all; they come from algorithm updates, technical bugs, stronger competitors, or shifts in search behavior.
This distinction isn't academic, because the diagnosis and the treatment for the two situations are completely different. With a manual action, a notice lands in Search Console; you fix the issue, file a reconsideration request, and close the case. With an algorithmic drop, there's no authority to appeal to; you have to improve the site holistically. A site owner who misdiagnoses the situation ends up fighting a penalty that doesn't exist for months, letting the real problem grow. In this guide we cover how to tell the two apart, how to come out clean from an actual manual action, and how to manage the whole process step by step.
What is a manual action, and how is it different from an algorithmic drop?
A manual action is a sanction applied by hand by a Google employee (a human reviewer) against a site judged to have violated Google's spam policies. The result is concrete: affected pages drop significantly in search results, or get removed from the index entirely. When a manual action is applied, it's logged in the Manual Actions report under 'Security & Manual Actions' in Search Console, and an email notice goes out to the property's verified users. In other words, a real penalty always comes with a written notice.
An algorithmic drop, by contrast, is entirely the work of automated systems. Core updates, spam updates, and systems like SpamBrain continuously re-evaluate your site. Since the helpful content system was folded into the core algorithm in 2024, content quality assessment has become part of this same continuous process too. These systems don't send you a notice, because there's no 'decision' involved, just a recalculated ranking. Let's spell out the differences:
- Notice: a manual action comes with a report and an email in Search Console; an algorithmic drop comes with no notice at all.
- Decision-maker: a manual action is applied by a human reviewer; algorithmic change is produced by automated systems.
- Path to appeal: a manual action lets you file a reconsideration request; there's no such mechanism for an algorithmic drop.
- Scope: a manual action can target the whole site or just specific pages (partial match); algorithmic effects are usually spread unevenly across queries and pages.
One more note: on link spam specifically, Google has largely shifted from a 'penalize' approach to a 'devalue' approach since Penguin 4.0 in 2016. That means most low-quality links don't get your site penalized, they just get ignored. Which also means the fear of 'a competitor built spam links to us, so we got penalized' is unfounded in most cases.
So who actually gets hit with a manual action? In a system where Google evaluates billions of pages with automated systems, human reviewers generally deal with cases flagged by automated detection or surfaced through spam reports. An ordinary small or midsize business site that follows the rules carefully has a low probability of ever encountering a manual action. The risk tends to accumulate in link packages bought in the past under a 'fast results' promise, in mass-produced unsupervised content, or in parts of a site the owner isn't even aware of, hacked pages, unmoderated user-generated content.
Diagnosis: pinpoint the source of the drop in five steps
When traffic drops, run a systematic diagnosis before reaching for a fix in a panic. Order matters here; you move from the most certain signal to the least certain:
- Open the Manual Actions report. In Search Console, go to 'Security & Manual Actions > Manual actions.' If the report says 'No issues detected,' you don't have a manual penalty, and that alone closes out half of the diagnosis. We cover this whole set of reports in detail in our Search Console guide.
- Check the Security Issues report. If your site has been hacked, or malware or phishing content has been detected, it shows up in this separate report. A security issue isn't technically a manual action, but it can drop search visibility just as severely and calls for a similar cleanup-and-review process.
- Match the drop date against the update timeline. The Google Search Status Dashboard lists the start and end dates of confirmed core and spam updates. If your drop lines up with an update window, the algorithmic scenario gets more likely. Our algorithm updates guide shows how to make this match.
- Question your own changes. A site migration, a theme change, a bad robots.txt rule, or an accidentally added noindex tag are the most common technical causes mistaken for a penalty. Our piece on organic traffic drop causes has the full checklist for this.
- Did rankings drop, or just clicks? If average position holds steady in Search Console while clicks erode, the problem may not be a penalty at all but a change to the results page itself. As of 2026, with AI Overviews spreading across many queries, you can hold your rankings and still lose clicks; that's an entirely different strategic conversation.
At the end of these five steps you'll have a clear diagnosis: manual action, security issue, algorithmic re-evaluation, or technical error. Everything after that is treatment matched to the diagnosis.
Types of manual action: what is the notice actually telling you?
If there's an entry in the Manual Actions report, the first job is reading the notice carefully. Google states the type of action, its rationale, and its scope (site-wide or partial match) explicitly. Sample affected URLs are often listed in the report too. Understanding the type correctly shapes your entire cleanup plan.
Link-based actions
An 'unnatural links to your site' notice means Google has detected a link profile built specifically to manipulate rankings: purchased links, link exchange networks, low-quality sponsored posts. 'Unnatural links from your site' targets links you're selling to other sites or providing as part of a scheme. This penalty type is often the bill for a 'guaranteed link package' service worked with in the past; we drew a detailed line between natural and manufactured links in our backlink guide.
Content-based actions
This group includes pure spam (automatically generated, meaningless content, scraped content), thin content that adds little value, and two headings added to the spam policies in 2024: scaled content abuse (mass-produced pages built for ranking purposes that don't add value for users) and site reputation abuse (a strong site hosting unrelated third-party content to borrow its authority). Regardless of production method, scale and intent are what determine the outcome, mass-produced worthless pages fall under the same policy whether they were written by hand or generated automatically.
Technical deception and structured data
Cloaking is showing different content to users versus Googlebot; sneaky redirects send the user somewhere other than expected. Hidden text and keyword stuffing sit in this group too. Improper structured data use (marking up fake review stars, for example) can also result in a narrower-scope manual action limited to losing rich results.
User-generated spam
Comment sections, forums, and user profiles left unmoderated can fill up with spam links and trigger a 'user-generated spam' manual action. Since this type comes from neglect rather than bad intent on the site owner's part, it's relatively easy to fix: cleaning out spam content, setting up moderation and spam filters, and adding the right attributes to user links (nofollow, ugc) is usually enough.
The clean exit: build your recovery plan step by step
Recovery has one golden rule: clean up the problem completely, not partially. Google's reviewers are experienced at spotting surface-level cosmetic fixes; reconsideration requests sent with an 80 percent cleanup are usually rejected and just drag the process out.
Cleanup for a link penalty
Start with a complete link inventory: Search Console's links report is your primary source; cross-check with third-party tools where possible. Sort every suspicious link into a table: source site, nature of the link, how it was acquired, action taken. Google's expected order is clear: request removal first (reach out to site owners, log dates and responses), then add whatever you couldn't get removed to a disavow file. Google offers the disavow tool specifically for this scenario: sites with an actual manual action or at genuine risk of one due to a manufactured link profile. Under normal conditions, low-quality links already get ignored automatically, so aggressive disavowing when there's no penalty at all is usually unnecessary, and can even hurt you if it disavows links that were actually helping.
Cleanup for a content penalty
Sort thin or mass-produced pages into three buckets: those that can be rewritten to actually answer a real search, those that can be merged, and those that carry no value at all. Don't hesitate to delete the third bucket; tens of thousands of worthless pages sitting in the index drags down the assessment of the pages you keep, too. Remove scraped or unauthorized copied content, and strip out cloaking and redirect tricks at the code level. As a worked scenario: on a classifieds site with 40,000 pages, if 32,000 are content-free, automatically generated combination pages, the recovery plan centers on removing or deindexing those pages, and strengthening the remaining 8,000 with real content.
Document every step
The record you keep during cleanup is the backbone of your reconsideration request: what issue you found and when, what you did on which URLs, who you reached out to, what response you got. Have this documentation ready as a shareable table; linking to it in your request form makes the review concrete.
The reconsideration request: how to write it, what to expect
A reconsideration request is filed against the relevant entry in the Manual Actions report, and it's reviewed by a human again. A good request proves three things: that you genuinely understand the problem, that you cleaned it up completely, and that you've taken steps to prevent it from happening again.
A reconsideration request isn't an apology letter, it's a status report. What convinces a reviewer isn't remorseful language, it's dated, addressed, verifiable evidence of cleanup.
Structure your request like this: summarize the issue in your own words, explain honestly how it happened (if you discovered an agency you worked with in the past bought links, don't hide that), describe the cleanup you did with concrete numbers, and link to your documentation table. As a worked example: something along the lines of 'we identified unnatural links from 310 domains; we sent removal requests to 142 site owners, 67 removed the links, we added the remaining domains to our disavow file dated July 3rd; the process is visible domain by domain in the attached table' is far more convincing than generic apology language. Short, honest, and free of finger-pointing gets the best result. Google's stated review time can range from a few days to several weeks; extensive link cases can take longer to review. The outcome arrives as a Search Console message.
If the request is rejected, the notice usually still shares problematic examples. What's left to do is deepen the same loop: clean up what remains, document it, submit a new request. Rushing to submit request after request doesn't speed things up; each request needs to arrive with a demonstrably cleaner picture than the last. A realistic expectation to set: rankings don't automatically snap back to their pre-penalty level once the manual action is lifted. If your pre-penalty rankings were partly fed by manufactured links, since those links are now ignored, your 'clean' ranking may settle lower. The post-recovery period is when you build a genuine SEO strategy on top of the clean ground you've earned.
What if there's no penalty? A roadmap for an algorithmic drop
If your diagnostic steps show no manual action and the drop lines up with an update window, the job isn't writing an appeal, it's improving the site. On core updates, Google says there's 'no single fix that resolves a drop'; what's being assessed is the holistic quality, trustworthiness, and real user value of your content. Since the helpful content assessment is now part of the core system, recovery is less a one-time event and more a continuous re-evaluation process; noticeable improvement often only becomes visible with subsequent core updates.
In practice, this means: list your highest-traffic-loss pages, evaluate each one against the question 'does this page answer this search better than competitors do,' strengthen weak content, and clarify your expertise signals (author information, sources, recency). The same logic applies if you suspect you've been affected by automated spam systems: remove the violation and wait for the system to re-evaluate the site. This process takes patience and consistent measurement; we manage exactly this loop, from diagnosis to improvement plan, as part of our SEO services.
Conclusion: the right diagnosis wins, not panic
To sum up: not every traffic drop is a penalty, and a real penalty always comes with a written notice. The first place to look is Search Console's Manual Actions report. If there's a notice, the process is clear: understand the type, clean up the issue completely, document every step, file an honest reconsideration request, and wait patiently for the result. If there's no notice, spend your energy not fighting a ghost penalty, but on technical checks, matching against the update timeline, and raising content quality.
In the long run, the cheapest recovery is never getting penalized in the first place. The formula for that is simple too: stay well clear of offers promising a 'guaranteed first position' or bulk link packages, make sure every piece of content you add responds to a genuine user need, don't neglect moderation if you host user content, and monitor Search Console notices regularly. Penalty risk isn't a single stroke of bad luck, it's the outcome of accumulated shortcuts; sites that don't take shortcuts carry meaningfully lower risk.
The hardest part of this whole process isn't the technical steps, it's the level-headed diagnosis; panicked decisions, mass link deletion, hasty disavowing, request after request in quick succession, only delay recovery. As Welda's SEO team, we work with situations like this regularly: we diagnose the real source of the drop with data first, run the cleanup and reconsideration process with full documentation if there's a manual action, and if there isn't, build a prioritized improvement plan for lasting recovery. If you're not sure which scenario applies to your site, get in touch; let's look at the current picture together and give you a clear roadmap.