Link Removal Extortion

If the email just arrived: the next hour

Do these four things before you do anything else.

1. Do not pay. Payment marks your address as responsive, funds the next campaign, and buys nothing you can enforce. There is no public case of a payer obtaining verified removal.
2. Do not reply from the business address - not to negotiate, not to argue, not to demand proof. A reply confirms a live human is reading, and it creates a record the sender controls and you do not.
3. Do not delete anything. The message is the evidence. Panic-deleting the email is the single most common irreversible mistake on this vector, and it is made in the first ten minutes.
4. Preserve the message with its full headers. In Gmail that is Show original; in Outlook, the internet headers. Headers carry the sending address path, the originating IP and the authentication results - the material any law-enforcement referral will be judged on. Export it to a file rather than leaving it in a mailbox that auto-purges.

Then, and only then, open Search Console and look at Security and Manual Actions. A manual action is a penalty applied by a human reviewer at Google and shown to the site owner there. If that report says no issues detected, no penalty exists, whatever the email claims. That check takes a minute and it resolves most of the fear in the message.

What link removal extortion is

Extortion is the obtaining of money or property through a threat - to person, property or reputation. Link removal extortion is that crime wearing search-engine clothing: a demand for payment backed by a threat to a website's visibility in Google.

It arrives in two shapes, and the difference decides how much of it is even real. In the retrospective shape, someone points a volume of junk links at a site - forum profiles, comment spam, scraped directory listings, auto-generated pages - then emails the owner claiming responsibility and asking for money to take them down. In the prospective shape, the email arrives before any links exist: the sender says they are about to aim tens of thousands of links at you and will stop for a fee. Frequently nothing has been built at all, and the message was mailed to a scraped list of addresses in the hope that a handful of recipients panic.

A close cousin carries far more law behind it: pay-to-remove content extortion, in which a site publishes damaging material about a person or business, makes sure it ranks, and then charges to take it down. The mugshot-removal industry - sites that republish arrest photographs and then sell their removal - is the documented version, and it is the one prosecutors have moved against.

The signal the sender claims to be attacking is Google's link-based ranking. The signal they are actually attacking is your nerve.

The threat is mostly hollow. The crime is not.

Two questions get collapsed into one here, and the evidence points opposite ways: does the underlying link attack work, and does the extortion work.

On the first, Google's own disavow documentation says that in most cases it can assess which links to trust without additional guidance, so most sites will never need the tool, and warns that "if used incorrectly, this feature can potentially harm your site's performance in Google Search results". The December 2022 link spam update described machine learning being used to neutralize link spam - the stated behavior is to discount the links, not to demote the site they point at. Since Penguin 4.0 in September 2016, Google's stated model has been devaluation rather than demotion.

When a mass extortion campaign circulated in 2014 - near-identical emails demanding roughly 1,500 dollars by wire, threatening 20,000 forum-profile backlinks, with a 24 to 48 hour deadline - Google's response was that its algorithms are designed to prevent these kinds of activities from causing problems for webmasters, and that it was unclear how credible the threat really was. No public case has since shown a target who refused to pay one of those emails losing rankings to the threatened links.

The honest caveat: sources disagree. Individual practitioners report drops after refusing; Google says the algorithms prevent it; nobody has published a methodologically disclosed test either way. What is not in dispute is the second question. The extortion works commercially whether the links work or not, and it works best against owners with no backlink monitoring and no way to verify the claim, sites already carrying an unnatural-links manual action that read the email as confirmation, and single-location businesses where any movement in a thin market feels causal. The 2026 extortion email is selling a 2013 product to people who have no way to check the expiry date.

The case that put an SEO in federal prison

United States v. William Laurence Stanley (N.D. Tex.) is the documented federal prosecution on this subject, and the one worth knowing by name.

Stanley - described in the Justice Department's own press release as a self-described "black hat search engine optimizer" - ran an SEO business and extorted victims by threatening to publish fraudulent negative comments and build damaging websites about them unless they paid. A federal grand jury indicted him and his sister on 27 March 2014 on Hobbs Act extortion and interstate-threat counts. The Hobbs Act, 18 U.S.C. section 1951, is the federal statute covering extortion affecting interstate commerce; it carries a maximum of 20 years on a single count. The victim, a mergers-and-acquisitions firm, had already paid to end the relationship and then sent four further money-transfer payments abroad.

Stanley pleaded guilty to one Hobbs Act extortion count on 22 December 2015; the government estimated 40 to 45 victims and losses above 230,000 dollars. On 5 January 2016 he was sentenced to 37 months in federal prison and 174,888 dollars in restitution. His sister was arrested in Sweden, extradited, and pleaded guilty in July 2015 to receiving extortion proceeds.

Carry the case accurately or not at all: Stanley's conduct was reputation extortion, not backlink extortion. He threatened disparaging content and fake reviews rather than spam links. It is the closest documented federal prosecution of an SEO practitioner for extorting a business over its online presence, and it is the right case to cite - but it is not a link case, and anyone who tells you a court has ruled on backlink threats is telling you something no source supports.

What happened to the company that reported him

This is the part a frightened reader most needs, and it is usually left out.

While on home confinement in September and October 2016, after his conviction, Stanley retaliated against the company that had reported him to the FBI. He posted derogatory content about it across social networks, employer-review and consumer-complaint sites, added titles and photographs to worsen the portrayal, and encouraged others to duplicate the posts. He was indicted for witness retaliation on 7 December 2016 and convicted by a federal jury on 19 April 2017. Retaliation against a person who gives information to a federal law-enforcement officer is itself a felony - a crime punishable by more than a year in prison - carrying a maximum of ten years.

Two things follow from that, and they point the same way. Retaliation after a report is a real, documented risk, so plan for it: keep monitoring your brand searches, review profiles and backlink data after you file, and keep preserving. And retaliation is separately prosecutable, which means the second wave is not a reason to stay quiet - it is additional evidence in a file that already exists. The reason there is a conviction to cite at all is that one company reported rather than paid.

Telling a real campaign from a bluff

Most of these messages are unverifiable by design. Verify anyway, because the answer changes what you do next.

• Ask what the sender can actually show. A sender who cannot produce links that exist is bluffing. Compare any domain list in the message against Search Console, under Links then Top linking sites, and against a backlink index - used here as a measuring instrument, not a remedy. A third-party index usually sees new links before Search Console does.
• Watch the referring-domain growth curve, not the raw count. A vertical step from a standing start is the signature of a campaign. A slow drift is the ordinary noise of a scraped web.
• Check whether anything moved, and against what date. Compare organic sessions and impressions with the published algorithm update calendar before treating the email and the drop as cause and effect.
• Read the payment channel. Wire transfer, cryptocurrency, gift cards or money transfer, with a short deadline, is the tell that this is extortion rather than an unwelcome commercial approach.

One thing it is genuinely mistaken for: a legitimate link-removal request from a site cleaning up its own profile after its own penalty. Those ask you to remove a link you placed on their site, and a few of them charge an administrative fee. That is obnoxious, and it is not the same thing as a threat to your rankings.

Where to report, and what the law reaches

Report to the FBI's Internet Crime Complaint Center, to the Federal Trade Commission, and to your state attorney general's consumer-protection division. Attach the preserved headers. That is the documented remedy on this page.

The statutes worth knowing: the Hobbs Act, 18 U.S.C. section 1951, which produced the conviction above; and 18 U.S.C. section 875(d), which makes it an offense to transmit in interstate commerce, with intent to extort, a threat to injure the property or reputation of another. An emailed demand backed by a threat to a business's search visibility sits squarely inside that language. Whether a prosecutor takes it is a separate question, and small-dollar demands often are not charged - which is an argument for reporting anyway, since a pattern across many complaints is what makes a case.

State prosecutors move on the pay-to-remove variant. In May 2018 the California Attorney General announced criminal charges against four operators of a mugshot pay-to-removal scheme for extortion, money laundering and identity theft, saying the scheme "attempts to profit off of someone else's humiliation." Charges are allegations, and no outcome is stated here.

On the civil side, be blunt: no decided civil case arising from link removal extortion is cited here. Counsel will reach for Lanham Act false advertising, tortious interference with business relations, and state civil-extortion statutes, with standing under Lexmark Int'l, Inc. v. Static Control Components, Inc., 572 U.S. 118 (2014). None of those has been carried to judgment on this fact pattern. Where the extortion runs through reviews rather than links, the FTC's 2024 rule on consumer reviews and testimonials is also in play: it reaches paying for reviews of a particular sentiment and the use of unfounded legal threats or intimidation to suppress a negative review. And there is no Google process that arbitrates an extortion demand - the spam report form exists for the spam, not the crime.

What people get wrong

Paying, or negotiating. Both are read as confirmation that the method works, and the second demand follows the first.

Mass-disavowing on suspicion. A disavow is the last step and a narrow one - warranted only where the links are real, numerous, clearly artificial, and attached to an actual manual action. Filed on suspicion it can strip out legitimate links and, on Google's own warning, harm the performance the owner was trying to protect. This is how a non-event becomes a real traffic loss.

Filing a reconsideration request with no manual action outstanding. There is nothing to reconsider. It produces no reply and no effect, and it consumes the week you should have spent preserving evidence.

Naming the suspected sender publicly. It converts a criminal matter in which you are the victim into a defamation exposure in which you are the defendant.

Assuming the drop proves the threat. The email arriving in the same week as a ranking loss is a coincidence until the update calendar says otherwise.

Frequently asked questions