Your Link Vendor's Footprint Is Now Your Footprint

A backlink is a public record of who vouched for you, and in a regulated industry the company you keep in that record matters. I run a corporate and fiduciary services business, which means our site sits in the “your money or your life” category where Google looks harder at trust signals than it does for a recipe blog. That changed how I think about link acquisition. The question stopped being “how many links can we get this quarter” and became “what would this link profile look like to someone reading it cold?”

Two episodes shaped that view. One was a link vendor. The other was an attack.

The vendor problem

When I audited our link-building at Astra Trust (https://astra-trust.com), one vendor stood out, and not in a good way. The placements they had delivered weren’t individually terrible. Each article was on-topic enough, readable enough, sitting on a domain with passable metrics. The problem only appeared when you looked at them together. The same vendor was clearly operating at scale across a spread of unrelated domains, and the content on those domains followed the same AI-generated template: the same structure, the same rhythm, the same kind of filler introduction before the link, whatever the site was supposedly about.

Any single one of those links would pass a spot check. Collectively they form a footprint, and footprints are exactly what search engines are built to find. If a vendor is publishing templated content across a network of sites, your link is one data point in a pattern that includes everyone else who bought from them. You don’t control what the other customers are selling, how aggressive their anchors are, or when that network gets noticed. The risk is cumulative, and it lands on you whether or not your own placements were the problem.

So my test for a vendor now has nothing to do with Domain Rating. I open a batch of their placements side by side, on different sites, and read them as a set. If I can predict the shape of the next article before I click it, I don’t want the link. A vendor who can’t show you placements that look like they were written by different people for different audiences is selling you a footprint with a metric attached.

This is also where I’d push back on the usual advice to “diversify your vendors”. Diversifying across three suppliers who all run the same kind of templated network doesn’t reduce risk. It triples the number of patterns you’re part of.

The attack

The second episode was less subtle. One of our Bahamas company formation pages was hit with a negative SEO campaign: a wave of junk links pointed at a single commercial page, clearly not something we or any vendor had arranged. The page mattered to us, so we built a disavow file for it.

I want to be careful here, because disavowing has become a reflex for some people and it shouldn’t be. Google’s own Search Console guidance says to disavow only when you have a considerable number of spammy, artificial or low-quality links pointing at your site and those links have caused, or likely will cause, a manual action. It also says most sites will never need the tool, because Google can usually work out which links to ignore. That is why, when another influx of spam links arrived later in the year, we decided not to disavow it. A targeted campaign against one money page was worth acting on. Background noise wasn’t, and a disavow file built in a panic can do more harm than the links it’s meant to neutralise.

The distinction I draw is intent and concentration. Scattered spam across the whole site is the weather; every visible site gets some. A concentrated burst aimed at one commercial URL, with anchors that look designed to make that page appear manipulative, is closer to someone trying to manufacture evidence against you. That deserves a response. The weather doesn’t.

What I’d do differently from the start

If I were building a link profile for a professional services firm from nothing, I’d treat every link as something I might have to explain to a regulator, a bank’s compliance team or a sceptical prospective client, because in our business all three sometimes look. That rules out most of what’s sold as “link building” and leaves a much shorter list: being quoted or published where practitioners actually read, being cited by people who used your material, and writing pages good enough that other sites link to them without being paid to.

It is slower. It also doesn’t produce a footprint, because there’s no pattern to find, only a record of other people finding you useful. For a firm whose whole product is trust, that is the only kind of link profile worth having.

Cheap links are only cheap until someone reads them all at once.