Three proposals on the desk, three prices, no honest way to compare them. The first agency wants $4,000 a month, talks about journalists and data studies, and will not say how many links you get. The second wants $2,800 and promises eight placements a month on sites with a Domain Rating above 50. The third sells links at $180 each, any volume, starting Monday. All three sent a portfolio. All three said “white hat” without being asked.

You want someone to name the best link building agency of the three. Nobody honestly can, and the reason is more useful than the recommendation would have been.

Link building vendors differ far less by quality than by method, and the method decides your risk exposure. Two agencies running the same method produce roughly the same outcome and the same policy position; two agencies running different methods are not competitors at all, they are different products sharing a job title. The decision is not which link building agency to hire. It is which method you are willing to buy. Pick that first and the shortlist shrinks to something you can actually judge.

The five things link building agencies actually sell

Strip the decks away and nearly every link building service is one of these, or a bundle of two. Prices vary by agency. The economics and the policy position do not.

1. Digital PR and data-led campaigns

You are buying hours, not links. A researcher pulls or commissions a dataset, a writer turns it into something a journalist can use, someone with a contact list pitches it. Output is unpredictable by design: a campaign might land twelve pickups or two, and a meaningful share of coverage will be nofollow or an unlinked mention.

No value changes hands for the link, which keeps this outside Google’s link spam policy entirely. It is also the most expensive per link, sold as a retainer covering a team, and the most likely to miss in any given month. Which is why some agencies quietly buy placements to top the number up.

2. Genuine guest contribution

A real expert writes a real article for a publication with real readers, and the publication runs it because it is good. This exists. It does not scale, and the limiting resource is a credible author, usually someone at your own company. The tell is simple: if a vendor commits to a monthly quantity of guest posts, this is not the method they are running, because editorial decisions do not arrive on a schedule. They are running method 3 or 4 in method 2’s vocabulary.

3. Link insertions, sold as niche edits or curated links

Your link is added into an article that already exists on someone else’s site. No new content, no editorial process, a two-minute edit to a post published three years ago. It is the fastest-growing product in the category because the marginal cost of delivery is near zero.

It is also, essentially always, a payment. Nobody retrofits outbound links into old posts as a favour. Google Search Central defines link spam as “the practice of creating links to or from a site primarily for the purpose of manipulating search rankings”, and lists first among the examples “Buying or selling links for ranking purposes”, spelled out as “Exchanging money for links, or posts that contain links”. The policy covers value of any kind, including “Exchanging goods or services for links”. No exception exists for a link inserted rather than freshly published.

4. Paid placements on publisher networks

Sold as “premium placements”, “authority links”, or by naming recognisable mastheads. Real publications run content desks that accept paid third-party articles, usually through an intermediary. The piece goes live on the publisher’s domain and the link passes ranking credit unless someone qualifies it.

Two policies bite. The link spam policy names “Text advertisements or text links that don’t block ranking credit”, plus advertorials where payment is received for articles containing links that pass credit. Google’s site reputation policy separately covers third-party content “published on a host site mainly because of that host’s already-established ranking signals”, with an example as blunt as “An educational site hosting a page about sponsored reviews of payday loans written by a third-party”. The test there is whether there was “sufficient input, editorial oversight, or contribution from the host site”. A desk that publishes whatever you send within 48 hours for a fee is not providing that.

What makes a paid placement legitimate is qualification. Google says it “is not a violation of our policies to have such links as long as they are qualified with a rel="nofollow" or rel="sponsored" attribute value”, and its outbound-link guidance says to “Mark links that are advertisements or paid placements (commonly called paid links) with the sponsored value”. Buying advertising is fine. It simply will not do what the vendor is charging for, because Google states that links marked this way “will generally not be followed”. The entire premium in the price is the absence of that attribute.

5. Directories and citations

Two different things under one name. Local citations, meaning consistent name-address-phone listings on platforms people actually use, are cheap operational hygiene with some local value. General web directories built to host links are what Google’s policy calls “Low-quality directory or bookmark site links”. If the deliverable is 200 directory submissions, you are buying the named violation at volume, and the links were worthless before the policy question arose.

One note on cost, since every buyer wants a benchmark. Nearly all the published “average cost per link” figures come from companies that sell links, compiled from their own price lists and customers. That is marketing collateral with a chart on top. Read it as what the market charges, not as what anything is worth.

How to test “we have relationships with these sites”

Every vendor says this. Occasionally it means a PR lead has cultivated journalists over years. Usually it means a spreadsheet of sites that accept payment, with a rate column, and the relationship is that the vendor pays promptly. Twenty minutes tells you which.

• Ask what happens when a site says no. Real editorial relationships produce rejections constantly. If they simply move to the next site on the list, there is no editorial gate to be rejected by.
• Ask in writing whether any fee, commission, product or service goes to the publishing site or an intermediary. Keep the reply. Genuine PR answers “no” instantly. Everyone else writes a paragraph about industry-standard contribution fees, and the paragraph is the answer.
• Look for the price list yourself. Try /write-for-us, /advertise, /contribute, /sponsored-post, and a site search for “guest post guidelines”.
• Email a site from their sample from an address that is not obviously yours, asking for a rate card. A quote within a day means your agency did not earn that placement.
• Ask who the human contact is at two named outlets. Not the outlet. The person. PR people know names; brokers know order forms.

The metrics they sell on, and what each hides

Domain Rating and Domain Authority are third-party scores built by Ahrefs and Moz from their own crawls. Google does not publish them, does not reference them in its documentation, and no Google ranking system uses them. Fine as a rough sort. Catastrophic as an acceptance criterion, for a mechanical reason.

Ahrefs describes DR as representing “the strength of the website’s backlink profile on a logarithmic scale from 0 to 100”, calculated from the number of referring domains, the DR of those domains, and how many sites each links out to, with nofollow excluded and the formula undisclosed. Notice what is absent: traffic, rankings, relevance, whether a human has ever visited. DR is computed from links and nothing else, so it can be raised by acquiring links and nothing else. An industry exists to do exactly that, pointing links at empty domains until the number clears whatever threshold buyers write into briefs. A DR 62 site with no rankings and no readers is not an anomaly here. It is the product.

Traffic estimates fail differently. Tool traffic is modelled, not measured: the tool sees which keywords a site ranks for, applies a click-through curve, multiplies. A site ranking for its own brand name, or for easy terms in a language unrelated to its stated niche, posts a healthy estimate while receiving no commercially relevant visits. Ask for a screenshot of the site’s own Search Console and see what arrives. Referring domain counts, meanwhile, describe volume only: ten links from trade publications your buyers read and 400 from recycled expired domains can produce identical dashboards.

What to inspect in a sample link report

Ask every shortlisted vendor for five live links they built in the last six months, for a client in any industry. Not a slide of logos. URLs. Then spend fifteen minutes on each:

• Does the page rank for anything? Check any rank tool, or search a distinctive sentence in quotes. A page ranking for nothing passes on very little.
• Does the page get traffic? Published, indexed and visited are three different states. Most bought placements manage the first two.
• Does the site publish things unrelated to its stated niche? Scroll the blog index. A home improvement blog carrying posts on CBD, offshore casinos, crypto and visa services is link inventory with a theme.
• Is the author a real person? Search the byline for a profile that predates the article, other writing under that name, a headshot that does not appear on twelve other sites. Invented authors are standard equipment on link farms.
• Count the do-follow outbound links per post. Editorial writing links out where it helps the reader, usually a handful, mostly to sources. Five do-follow links to five unrelated commercial sites in a 900-word post is a page built to sell slots.
• Check publication dates against the link. Your client’s link sitting in a 2021 article edited last month is a link insertion, whatever the proposal called it.
• Read the other outbound anchors. Exact-match commercial anchors throughout (“best personal injury lawyer in Dallas”) are the fingerprint of paid placement, because that is what buyers ask for.

A vendor whose five samples pass all seven is doing something real. Most shortlists collapse at item three.

Contract structure is the risk model

Per-link pricing feels safest, because you only pay for output. It is the most dangerous structure available, because it creates exactly one incentive: deliver the cheapest thing that clears the acceptance criterion. Set that criterion at DR 50 and the vendor’s whole problem becomes sourcing DR 50 cheaply, and the cheapest DR 50 in existence is a domain inflated for the purpose. You did not buy links. You wrote a specification for a link farm and paid someone to fulfil it.

A retainer buys a team’s time, with output described rather than guaranteed. Right for digital PR, wrong for anything you cannot audit, because it removes delivery pressure without adding quality. Retainers work when you review the actual work monthly. They fail silently when you review a dashboard.

A campaign or project is defined work with a defined output: one study, researched, written, designed and pitched to a named list, with reporting on pickups. If you have never bought links before, start here. You can judge the asset even when the coverage disappoints. A bad study is visible immediately; a bad link is invisible for months.

Whatever you sign, add three clauses: no link placed without your written approval of the specific URL, no anchor text without approval, and a named person owning the account. Be specific about method too, in writing: no paid placement without rel="sponsored", no link insertions, no private blog networks, no automated link creation. Vendors who intend to broker links push back, usually by explaining that publisher relationships make pre-approval impractical. That pushback is your answer.

Why your site type changes the answer completely

An established business with fifteen years of history, a brand people search by name, and revenue attached to organic traffic should not touch methods 3, 4 or 5. Not only for policy reasons, though those are real, but because the downside is asymmetric and the upside small. Links are one input among many for a site that already carries trust signals, and a demotion is a measurable hole in revenue.

A two-month-old affiliate site sits somewhere else entirely, and it is worth being honest about that. It has no brand and no history, so its link profile is close to the whole of the evidence about it, which also makes an artificial profile easier to classify. Google says it detects violations “both through automated systems and, as needed, human review that can result in a manual action”, and that violating sites “may rank lower in results or not appear in results at all”. Operators buy links for sites like this anyway, clear-eyed, because the domain is disposable. That is a gamble, not a strategy. If you take it, take it on a domain carrying nothing you would mind losing, never the one with your company’s name on it, and never on a client’s site without telling them in writing which method you are using.

If you inherited a profile full of bought links

Start in Search Console, not a toxicity tool. Open the Manual Actions report. If it is empty, you do not have a manual action, and the “toxic score” you are staring at was invented by a company that sells link removal.

Then leave the disavow file alone. Google’s guidance is unusually direct: “This is an advanced feature and should only be used with caution. If used incorrectly, this feature can potentially harm your site’s performance in Google Search results”, and “In most cases, Google can assess which links to trust without additional guidance, so most sites will not need to use this tool.” Two conditions should both hold before you disavow: a considerable number of spammy, artificial or low-quality links pointing at your site, and those links having caused a manual action or being likely to. Google also notes it can take a few weeks for a submitted list to be incorporated as pages are recrawled. So: check for a manual action, stop paying whoever is still building, ask the sites you can reach to remove links, and move the budget onto the site itself. Disavow against a real manual action, after removal attempts, and not before.

The slower thing that compounds

The honest alternative is not a tactic, and it is genuinely harder, which is why the market for bought links exists at all. Links get earned when you publish something other people need to reference: original data nobody else holds, a free tool that solves a small annoying problem, documented expertise from having done the work. Google’s helpful content guidance asks whether content “provide[s] original information, reporting, research, or analysis” and whether it “clearly demonstrate[s] first-hand expertise and a depth of knowledge”.

The catch is real. You probably already own the raw material, in pricing data, support tickets, field notes or three years of project outcomes, and converting it into something citable takes weeks of a senior person’s attention rather than a purchase order. The first attempt often lands nothing. What is different is that an asset which works keeps accruing links for years at no further cost, carries no policy exposure, and cannot be taken away when a vendor changes suppliers. If you have budget and no patience, buy one campaign built on something true about your business, and judge the vendor on the asset rather than the count.

Common follow-up questions

An agency guarantees DR 50+ links or my money back. Reassuring? The opposite. Guaranteeing a metric threshold is only possible when the vendor controls supply, and controlling supply means owning or buying inventory. Nobody can guarantee a journalist will link to you.

Is a digital PR agency automatically safe? No. Ask how pickups are secured, whether paid syndication is involved, and what share of last quarter’s links came from each route. Some agencies run genuine outreach and top the monthly number up with purchased placements when a campaign underperforms. The blended report looks the same either way.

How many links do I need? Unanswerable as asked, and anyone answering with a number is quoting rather than advising. The useful version is comparative: look at the specific pages outranking you for the terms that matter and what those pages have that yours does not. Often it is not links.

If you would rather build the asset than rent the links, that is the work AB7 Solutions does on the SEO, AEO and GEO side: turning data you already hold into research, tools and pages that earn citations from readers and from AI answer engines, plus an independent read on a link report before you sign anything. Call +1 321 341 7733, email ab@ab7solutions.com or director@ab7solutions.com, or start at www.ab7solutions.com.

Sources: Google Search Central, Spam policies for Google web search (link spam, site reputation abuse, enforcement); Google Search Central, Qualify your outbound links to Google; Google Search Central, Creating helpful, reliable, people-first content; Google Search Console Help, Disavow links to your site and Manual Actions report; Ahrefs, Domain Rating.