Disavow links only in specific scenarios: you've received a manual unnatural links penalty in Google Search Console, you're recovering from a negative SEO attack with thousands of obviously spam domains, or you inherited a site with a documented history of buying links and see ranking suppression. For the vast majority of sites, the disavow tool is unnecessary and risky. Google's algorithm has improved dramatically at ignoring low-quality links on its own. A few dozen spammy forum profiles or directory links won't trigger a penalty—Google just won't count them. The real danger is disavowing legitimate links by mistake, especially if you're aggressive about labeling anything with modest metrics as toxic. We've seen clients disavow regional news mentions or niche industry directories that were actually valuable, then lose 15–20% of their organic traffic. When we audit link profiles at Ottawa SEO, we look for clear patterns: sudden spikes of exact-match anchor text from foreign gambling or pharma sites, hundreds of sitewide footer links from hacked WordPress blogs, or links you know you paid for in 2015. If the links correlate with a traffic drop or a manual action notice, then disavow makes sense. Even then, we disavow at the domain level only for obvious spam networks, and we keep the file minimal—usually under 50 domains unless it's a severe attack. If you're just seeing random low-quality links trickle in, ignore them. If you're worried about a competitor sending spam, monitor your link growth in Ahrefs or Semrush for unusual spikes, but don't preemptively disavow. Google's John Mueller has said multiple times that most sites don't need the tool. The exception is if you're preparing to file a reconsideration request after cleaning up paid links—then a targeted disavow file supports your case. In 12 years and 500+ domains, we've used the disavow tool on fewer than 10 sites. Each time it was because of a manual penalty or a documented negative SEO campaign with thousands of toxic links appearing in days. For everyone else, focus on earning good links instead of obsessing over bad ones. If you've confirmed you're in one of the legitimate disavow scenarios, execute it correctly, because the file format is unforgiving. Create a plain text file (UTF-8, .txt) with one entry per line. Use domain-level syntax (a line reading domain:spamsite.com) for anything that's clearly a spam operation, and individual URLs only for the rare mixed-quality site where one page links spammily but the domain is otherwise fine. Lines starting with # are comments; use them to date and document why each block was added, since you or a successor will revisit this file years later with no context. Upload through Google's disavow tool, which lives outside the main Search Console navigation and requires selecting the correct property (URL-prefix properties only; domain properties need a workaround). Two things surprise people after submission: nothing confirms it worked beyond the upload receipt, and nothing happens quickly. Google applies the disavow as it recrawls each disavowed link, meaning effects phase in over weeks to months. For a penalty recovery, you submit the disavow first, then file the reconsideration request referencing the cleanup. A disavow is reversible: upload a new file with entries removed and the links regain their normal treatment on recrawl. Keep every version of the file archived. One sequencing note for manual penalty cases: Google's reviewers want to see removal effort, not just a disavow file. Document outreach attempts to the linking sites (even though most ignore you) before disavowing the remainder. And if you're not under penalty, revisit the core advice: since Google devalues rather than penalizes garden-variety spam links, the highest-ROI move is usually to close the tab and spend the afternoon earning one good link instead.