We Fired the Excuse Before We Fired the SEO Agency

A business based in Dubai Marina came to us a few months ago.

The ranking problem didn’t make sense on paper. They had hired an agency. For the first two or three months, it worked. Rankings moved up. Traffic climbed. Everyone was happy.

Then it reversed.

Traffic dropped. A few key pages disappeared from page one. The agency’s explanation was a Google algorithm update.

It wasn’t.

We didn’t recommend firing the agency on day one. We recommended firing the excuse first. Checking what was actually happening. Letting the evidence decide the rest.

The business itself had done nothing wrong. Good product. Real reputation. Decent PR history.

The agency was the problem. They started ethically, then leaned into volume once the client wanted faster results. Volume is exactly what Google has spent the last fifteen years learning to detect.

This isn’t 2010. A pile of cheap directory links doesn’t nudge a site up the page anymore while nobody checks where they came from. Google reads brand signals now. It reads PR coverage. It reads consistency, and whether the links pointing at you make sense given what your business actually is.

When we pulled the account’s backlink report, it told the whole story. Roughly 830 linking domains. Maybe twelve worth anything.

This post covers what a spam backlink profile actually looks like, why agencies keep blaming algorithm updates for damage they caused, where AI and automation fit into the pitch, and how to tell the difference between an agency worth keeping and one you need to let go.

What a spam backlink profile actually looks like

Not every bad link looks bad at first glance.

A few patterns show up again and again once you know what to search for.

• Article farm networks. Dozens of near-identical sites built for one purpose, dumping links onto client pages at scale. The naming convention usually gives it away once you’ve seen a few.
• Geographic and topical mismatch. A heating contractor on another continent. A dental clinic in a country you’ve never sold to. A tourism blog with no connection to your industry. None of them have a reason to link to a UAE business, so the link was bought or injected, not earned.
• Scraper and tool artifacts. The same domain linking to seven different pages on your site, each with its own separate mention. That isn’t a person writing about you seven times. That’s an SEO tool crawling your site and showing up in someone’s report as if it were a real citation.
• One-off junk domains. Sites with randomly generated names, holding exactly one link to you and nothing else notable. These usually exist to pad a “links delivered” number in a monthly report.
• Unrelated or adult commercial sites. This is the one that should worry a business owner most. These links don’t help rankings. They damage trust signals with Google. They can pull a clean site down with them.

None of this requires expensive software to spot. A spreadsheet and twenty minutes with your linking domains list surfaces most of it.

Why agencies still do this

Buying or building spam links is fast.

It produces a number an agency can put in a report. Fifty new backlinks this month reads well in a WhatsApp update. Real outreach, PR relationships, and coverage take months. They rarely compress into a single line item.

So the incentive runs toward the shortcut. Especially with clients who judge performance by counting links instead of asking what those links are worth.

That’s what happened in Dubai Marina. Two or three months of upward movement bought enough trust that nobody asked what was actually being built underneath it.

The business owner rarely sees the damage until later. Rankings drop. Organic traffic falls. The agency responsible has usually moved on to the next account, or already has an explanation ready.

The algorithm update excuse

When the Dubai Marina account started dropping, the agency’s answer was a Google algorithm update.

That’s the go-to explanation. It sounds credible, and it’s hard for a business owner to check on their own. Google updates its algorithm constantly, so there’s always one to point at.

But an update doesn’t create a ranking drop out of nothing. It exposes what was already there.

Google’s core and spam updates exist specifically to catch manipulation that used to slip through. Geographic mismatch. Scraper-generated links. Bulk article farm placements. The exact pattern sitting in this account’s backlink report.

The agency wasn’t unlucky. They got caught.

This distinction matters. “The algorithm changed” and “your links got flagged” produce the same drop in traffic, but they call for completely different responses. One means wait it out. The other means audit the backlink profile immediately and start removing or disavowing links before more damage accumulates.

An agency with something to hide will always reach for the first explanation. It asks nothing of them.

Google’s detection has also gotten faster. Tricks that worked quietly for six months a few years ago now get flagged within weeks. Whatever advanced manipulation an agency believes is undetectable is usually just detectable on a longer timeline than they’re used to.

They are still, at that point, playing with your backlinks. Hoping the timeline holds.

If your rankings drop and the explanation is a named or unnamed algorithm update with no specifics, ask a direct follow-up. Which update. What did it target. Why does your backlink profile fall outside what it targeted.

A transparent agency answers that in a sentence or two. One that says “we have the experts, we’ll take care of it” without addressing the actual question isn’t reassuring you.

They’re stalling. That stall is usually the first real signal, before you’ve even opened a backlink report.

The AI automation pitch

There’s a newer version of the same excuse now, and it comes dressed up as a selling point instead of a defense.

More agencies are pitching automation as the reason they can move fast. AI will find the opportunities. AI will do the outreach. AI will build the links while you sleep. It sounds efficient. Sometimes it is.

AI genuinely helps with research. It helps draft outreach emails. It can scan a backlink report and flag patterns faster than a person scrolling a spreadsheet. None of that is the problem.

The problem starts when speed becomes the whole pitch, and nobody is asked who is checking the output.

A tool that builds links at scale is still building links at scale. Automation doesn’t fix a geographic mismatch. It doesn’t fix a link from a site with nothing to do with your industry. It just produces the same spam pattern faster, with fewer humans involved to notice it’s spam before it lands on your domain.

Here’s the question worth asking directly. If an agency automates outreach or placement, who reviews each link before it goes live. Who decides whether a specific site is actually relevant to your business, in your market, for your audience.

“The AI checks it” is not an answer. That’s not oversight. That’s the same volume problem wearing a new label.

Expertise still has to sit somewhere in this process. AI can do the finding and the drafting fast. It cannot be the one accountable for what ends up pointing at your domain. That still has to be a person who understands your business, reviews what’s being built, and is willing to put their name on the decision.

If nobody can tell you who that person is, you already have your answer.

When it’s time to fire your SEO agency

Firing an agency shouldn’t be a reaction to one bad month.

It should follow a pattern, and the pattern is usually visible before the rankings drop, not after.

• They can’t explain a ranking drop without naming a specific update, or they name one that doesn’t match your industry or page type.
• Monthly reports show a link count with no accompanying list of live URLs you can check yourself.
• They resist giving you or a second consultant admin-level access to your own Search Console and Analytics.
• The “strategy” behind their link building has never been described in a sentence more specific than “outreach and PR,” or lately, “our AI handles it.”
• You’ve asked for three example links built for a past client and gotten a vague answer, a delay, or nothing.

One of these on its own might have an innocent explanation.

Two or three together, especially after a ranking drop, is the pattern that ended the Dubai Marina relationship. The excuse gets fired first, because it’s the fastest thing to test. What the audit finds underneath decides whether the agency follows.

What to ask before hiring the next one

A few direct questions up front save you from repeating this cycle with the next agency.

1. How do you plan to build links, specifically? “We do outreach and PR” isn’t an answer on its own.
2. If AI or automation is part of your process, who reviews and approves each link before it goes live?
3. Can you show three links you built for a past client, and where do those links live today?
4. Who holds admin access to my Google Search Console and Analytics? If an agency resists giving you access under your own account, that’s worth noticing.
5. What does my current backlink profile look like before you touch anything? A responsible agency runs this as step one, not as a fix after something breaks.

Any agency that treats these questions as unusual is telling you something before the contract is even signed.

Watch it yourself; don’t wait for the report

Most business owners only see performance through whatever the agency chooses to send.

A monthly PDF. A screenshot. A summary slide with a few green arrows.

That’s not access. That’s a curated version of the truth, and it’s curated by the same people whose job depends on the numbers looking good.

Google Search Console gives you the real thing, for free, in real time. Not an export somebody prepared for you. The actual performance report, live, whenever you want to open it.

Inside it you can see exactly which keywords are bringing in clicks, and which ones dropped. Which pages are gaining visibility, and which ones are losing it. Which locations are performing well, and which ones have gone flat.

You can compare this month against last month. Or the last three months against the three before that. Or six months against six months. The trend lines don’t lie the way a slide can.

This isn’t about learning SEO. It’s about not needing to trust a summary when the source is sitting right there, free, under your own login.

Ask your agency for admin access to your own Search Console property, if you don’t already have it. Then check it yourself once a month, even for five minutes. You’ll know within a quarter whether the story in their report matches what Google is actually showing.

What to do if you already have a spam problem

Pull your linking sites report from Search Console.

Sort by domains you don’t recognize. Cross-reference against your actual industry and market. Anything with zero relevance and no editorial reason to exist gets flagged.

Google built the disavow tool for one specific situation. A considerable number of spammy links pointing at your site that have caused, or are likely to cause, a manual action. It isn’t a routine cleanup step, and Google itself says most sites never need to touch it.

The correct first move is trying to get the link removed at the source, by contacting the site owner directly. Disavowing comes after that fails, or when the scale makes direct contact unrealistic.

• Log into Search Console, select the property, and open the Disavow Links tool.
• Upload a plain text file, one entry per line. Use domain:spamsite.com to disavow a whole domain, or the full URL to disavow a single page.
• Keep a master copy on your end. A new upload replaces whatever list already exists for that property.
• Expect a few weeks for Google to process the update.

Disavow something that was actually helping you, and you lose real ranking value for nothing. A proper audit has to come first, not a reflexive purge of every unfamiliar name.

Where real links actually come from

Suppliers, partners, sponsors, and people who already know your business will link to you without being asked, if you give them a reason to.

That’s the difference between earned links and bought ones.

• Supplier and partner mentions. A supplier lists you as a certified dealer, a sponsor names you on an event page. These happen because you did business with someone, not because you paid for placement.
• Guest posts in publications that matter. Writing for a real, relevant outlet in your industry earns a link and puts your name in front of an audience that already overlaps with your customers. A guest post on a site that accepts anything for a fee doesn’t carry the same weight, and Google can tell the difference over time even when a reader can’t.
• Answering real questions where your audience already looks. Forums, Quora, and tools like Answer the Public show you what people are actually asking. A genuinely useful answer with a link that fits naturally builds a small, real trail of relevance. A one-line answer with a link stapled on reads as spam and gets treated as spam.
• Brand mention reclamation. Someone may have already written your business name without linking to it. Find these mentions and ask the site to turn the mention into a link. It costs nothing, and the person already chose to talk about you.
• PR and local media coverage. Journalists are constantly looking for sources and local business angles. A mention in a piece about the UAE furniture market, or a quote on a trend a journalist is covering, earns a link from a domain with real authority.

None of this shows up in a spam backlink report. It’s slower. It’s also the only kind that survives an algorithm update, because it was never dependent on tricking one in the first place.

The number nobody wants to hear

I tell clients this on almost every first call now.

If your monthly SEO report leads with a link count and nothing else, ask to see the actual list of URLs. Not the number. A report that hides behind a total is usually hiding something. So is an explanation that hides behind an algorithm update nobody names specifically, or a process that hides behind “the AI handles it.”

The Dubai Marina case is the clearest version of this I’ve seen recently. It’s not rare.

What global SEO commentary doesn’t cover, because it isn’t built for it, is how normal this still is across UAE and GCC agencies specifically. A lot of local competition happens on price and turnaround speed rather than track record. A client who has never seen a raw backlink export has no way to catch a bad agency until rankings already dropped and an excuse was already on the table.

The mistake I see most is treating link building as something to outsource completely and never look at again.

You don’t need to become an SEO to catch this. You need to ask to see the raw list once a quarter, and spend twenty minutes checking whether the domains make sense for your business.

If you want a second opinion on an existing account, that’s exactly the kind of backlink audit we run before recommending anything.

What to do next

Most of this comes down to habits you can build into a quarterly routine rather than a one-time fix.

1. Export your current linking domains list from Search Console this week, before reading anything else about it.
2. Search your own business category and city on Google, and note which competitors show up with genuinely relevant backlinks versus generic directory links.
3. Flag any domain with no connection to your industry or your market and set it aside for review.
4. Contact site owners directly for removal before considering disavow.
5. If an agency ever blames a drop on an algorithm update, or leans on “AI handles it” as an answer to how links get built, ask them to be specific before accepting either explanation.

This takes an afternoon the first time and about twenty minutes after that.

Backlink spam isn’t unique to any one market. It moves faster through GCC accounts than most business owners realize, mainly because a WhatsApp update with a rising link count is treated as proof of work without anyone opening the actual file.

The businesses that avoid the mess aren’t the ones who never got spammed. They’re the ones who fired the excuse first, and let what they found decide the rest.