How to Find a Google Penalty, Fix It, and Recover Your Rankings

If your organic traffic just fell off a cliff and you’re scrambling to figure out why, you need to know how to find a Google penalty before you can do anything about it. I’ve seen this play out dozens of times with Singapore businesses. One week they’re ranking on page one for their target keywords, the next week they’ve vanished. The panic is real, and I get it.

But here’s the thing most guides won’t tell you upfront: not every traffic drop is a penalty. Sometimes it’s a competitor outworking you. Sometimes it’s a core algorithm update that simply reshuffled the deck. And sometimes, yes, Google has taken direct action against your site.

The difference matters enormously because the recovery path for each scenario is completely different. In this guide, I’ll walk you through exactly how to diagnose what happened, what type of penalty (or non-penalty) you’re dealing with, and the specific steps to fix it and get your rankings back.

Google Penalties Are Not All the Same Thing

The term “Google penalty” gets thrown around loosely in the SEO world. A client once told me, “Jim, I think Google penalised me because I dropped from position 3 to position 8.” That’s not a penalty. That’s a ranking fluctuation. Understanding the distinction will save you weeks of chasing the wrong problem.

There are really three categories of negative ranking events, and each one requires a different diagnostic approach and recovery strategy.

Manual Actions: Google’s Human Reviewers Flagged Your Site

A manual action is the only true “penalty” in the technical sense. It means a real person at Google reviewed your site, determined it violates Google’s spam policies, and applied a specific suppression to your rankings. You’ll receive a notification in Google Search Console, and the action will be documented in the Manual Actions report.

Manual actions are relatively rare. In my experience working with Singapore SMEs, maybe 1 in 20 clients who think they have a penalty actually have a manual action. The rest are dealing with algorithmic changes or technical issues they haven’t identified yet.

Common triggers for manual actions include unnatural inbound links (someone ran a dodgy link-building campaign), thin or auto-generated content, cloaking, sneaky redirects, and pure spam. Google is quite specific in the notification about what the violation is and which pages or sections are affected.

Algorithmic Demotions: Your Site No Longer Meets the Bar

This is what most people actually experience. Google rolls out a core update, a spam update, or a specific system update (like the helpful content system), and your site’s rankings drop because your content or link profile no longer meets the updated quality threshold.

There’s no notification for this. No email, no Search Console alert. Your traffic just drops, and you’re left piecing together what happened. The recovery process is fundamentally different from a manual action because there’s no reconsideration request to submit. You improve your site, and you wait for Google to re-evaluate.

Technical Issues Masquerading as Penalties

I cannot overstate how often this happens. A developer pushes a code change that accidentally adds noindex tags to key pages. A server migration goes wrong and creates thousands of 404 errors. Someone updates the robots.txt file and blocks Googlebot from crawling half the site.

These aren’t penalties at all. They’re self-inflicted technical wounds. But the traffic drop looks identical to a penalty from the outside. This is why proper diagnosis comes before any recovery work.

How to Find a Google Penalty: The Diagnostic Process

Before you fix anything, you need to confirm what you’re dealing with. Here’s the exact process I follow when a client comes to me with a sudden traffic drop.

Step 1: Check Google Search Console for Manual Actions

This is always the first thing to do. Log into Google Search Console, navigate to “Security & Manual Actions” in the left sidebar, and click “Manual actions.” If the page says “No issues detected,” you do not have a manual penalty. Full stop.

If there is a manual action listed, GSC will tell you:

• The type of violation (e.g., “Unnatural links to your site,” “Thin content with no added value”)
• Whether it affects your entire site or specific pages/sections
• A brief description of what Google found

Screenshot this immediately. Document the date you first noticed it and the date the action was applied (if visible). You’ll need this information for your recovery plan.

Step 2: Check the Security Issues Report

While you’re in Search Console, also check “Security issues” under the same section. If your site was hacked and Google detected malware, phishing pages, or injected spam, it will show here. This is separate from a manual action but can also tank your rankings and trigger warning interstitials for users trying to visit your site.

Step 3: Correlate Your Traffic Drop with Known Algorithm Updates

If there’s no manual action, your next step is to determine whether an algorithm update caused the decline. Open Google Search Console’s Performance report and set the date range to the last 6 months. Switch to the “Search results” view and look at total clicks and impressions over time.

Look for a sharp, sudden drop rather than a gradual decline. A gradual decline over weeks or months usually points to content decay, increased competition, or slow-building technical issues. A sharp drop within a 1-3 day window almost always correlates with either an algorithm update or a technical change on your site.

Now cross-reference the date of the drop with known Google algorithm updates. Here are reliable sources for update tracking:

• Google’s own Search Status Dashboard (status.search.google.com)
• Google SearchLiaison on X (formerly Twitter), which announces confirmed updates
• Search Engine Roundtable’s Google algorithm update timeline
• Semrush Sensor, which tracks daily SERP volatility

If your traffic drop aligns within 1-2 days of a confirmed update, you’re very likely dealing with an algorithmic demotion.

Step 4: Rule Out Technical Issues

This step is critical, and I’ve seen too many site owners skip it because they’re convinced it must be a penalty. Run through this checklist:

Indexing status: In Search Console, go to “Pages” (under Indexing) and check if the number of indexed pages has dropped significantly. If pages that were indexed are now showing as “Excluded” or “Not indexed,” you have a technical problem, not a penalty.

Robots.txt: Use the URL Inspection tool in Search Console to check whether Googlebot can access your key pages. Also manually review your robots.txt file (yourdomain.com/robots.txt) for any recently added Disallow directives.

Noindex tags: Inspect your page source or use a crawler like Screaming Frog to check if noindex meta tags or X-Robots-Tag headers have been added to important pages.

Server errors: Check your server logs or Search Console’s crawl stats for spikes in 5xx errors. If Googlebot keeps hitting server errors when trying to crawl your site, your rankings will drop.

Redirect chains and loops: A site migration or URL restructure that creates redirect chains (A → B → C → D) or loops (A → B → A) will cause crawling and indexing problems.

If you find technical issues, fix those first. In many cases, that’s all you need to do, and your rankings will recover within 1-4 weeks after Google recrawls the affected pages.

Step 5: Analyse Which Pages and Queries Were Hit

Whether you’re dealing with a manual action or an algorithmic demotion, you need to understand the scope of the damage. In Search Console’s Performance report, compare the period after the drop to the equivalent period before.

Filter by pages to see which URLs lost the most clicks and impressions. Filter by queries to see which search terms you’ve lost visibility for. This tells you whether the impact is site-wide or concentrated on specific sections or content types.

For example, if only your blog posts dropped but your service pages are fine, the issue is likely content quality related. If your entire site dropped uniformly, it could be a site-wide link penalty or a domain-level quality issue.

Penalty Checker Tools Worth Using

Beyond Google Search Console, several third-party tools can help you diagnose and understand the impact. Here’s how I use each one in practice.

Semrush Sensor

Semrush Sensor tracks daily SERP volatility across thousands of keywords, broken down by category and country. The “Personal Score” feature is particularly useful if you’re already tracking your domain in Semrush’s Position Tracking tool. It shows volatility specific to your tracked keywords rather than the market average.

I check Semrush Sensor first when a client reports a traffic drop. If the sensor score for Singapore SERPs spiked on the same day as the client’s drop, it confirms broad algorithmic activity. If the sensor was calm but the client’s traffic still dropped, I look harder at site-specific issues.

Panguin Tool

Panguin (by Barracuda Digital) overlays confirmed Google algorithm update dates directly onto your Google Analytics organic traffic graph. It’s free and gives you a visual correlation that’s hard to miss. Connect your GA account, and you’ll immediately see vertical lines marking each update against your traffic trend.

This tool is especially helpful when you’re trying to trace a traffic decline that happened months ago and you’re not sure which update triggered it.

Ahrefs Site Explorer

While not a “penalty checker” per se, Ahrefs is invaluable for diagnosing link-related penalties. Use the Backlink Profile report to identify toxic or spammy links pointing to your site. The “Referring domains” graph over time can also reveal if someone ran a negative SEO campaign against you by building thousands of junk links in a short period.

Screaming Frog

For technical diagnosis, nothing beats a full Screaming Frog crawl of your site. It will surface noindex tags, broken internal links, redirect chains, duplicate content, missing canonical tags, and dozens of other issues that could be causing your ranking drop. I run this on every penalty investigation before drawing any conclusions.

Types of Google Penalties and How to Fix Each One

Now let’s get into the specific penalty types, what causes them, and the exact steps to recover. I’m organising these by the manual action categories Google uses, followed by the major algorithmic systems that commonly cause ranking drops.

Unnatural Links to Your Site (Manual Action)

This is the most common manual action I encounter with Singapore businesses. It typically happens when a previous SEO agency built low-quality backlinks through link farms, PBNs (private blog networks), paid links on irrelevant sites, or mass directory submissions.

How to fix it:

1. Export your full backlink profile from Google Search Console (Links → External links → Export) and from Ahrefs or Semrush for a more complete picture.
2. Audit every linking domain. Flag links that are clearly spammy: sites in foreign languages unrelated to your business, sites with thousands of outbound links, PBN-style sites with thin content, and paid link placements on irrelevant blogs.
3. Attempt to get the spammy links removed. Email the webmasters of the linking sites and request removal. Document every outreach attempt, including dates, email addresses, and responses (or lack thereof).
4. For links you cannot get removed, compile a disavow file. Format it correctly (one domain per line, prefixed with “domain:” to disavow at the domain level) and submit it through Google’s Disavow Links tool.
5. Submit a reconsideration request through Search Console. In your request, be specific about what you found, what you did to fix it, and what processes you’ve put in place to prevent it from happening again.

A typical timeline for this process is 2-4 weeks for the audit and outreach, then 1-4 weeks for Google to review your reconsideration request. I’ve seen requests approved in as little as 5 days and as long as 6 weeks.

Unnatural Links from Your Site (Manual Action)

This penalty targets outbound links from your site that appear to be selling PageRank or participating in link schemes. If you’re running sponsored content, advertorials, or guest posts with followed links, and those links aren’t marked with rel=”sponsored” or rel=”nofollow,” you’re at risk.

How to fix it:

1. Audit all outbound links on your site. Identify any that were placed as part of a paid arrangement, link exchange, or sponsorship.
2. Add rel=”nofollow” or rel=”sponsored” attributes to all paid or sponsored links.
3. Remove any outbound links to low-quality or irrelevant sites that you wouldn’t naturally recommend to your readers.
4. Submit a reconsideration request documenting the changes.

Thin Content with No Added Value (Manual Action)

Google applies this manual action when it finds pages on your site that are auto-generated, scraped from other sources, or so shallow that they provide no real value to users. I see this frequently with Singapore e-commerce sites that have hundreds of product pages with manufacturer-copied descriptions and no unique content.

How to fix it:

1. Identify all thin pages on your site. Use Screaming Frog to find pages with low word counts (under 300 words is a useful starting threshold, though word count alone isn’t the issue).
2. For each thin page, decide: improve it, consolidate it with another page, or remove it entirely. There’s no point keeping a page that adds nothing.
3. For pages you keep, add substantial original content. Product pages should include unique descriptions, original photos, usage tips, comparison information, or customer reviews. Blog posts should be comprehensive and genuinely helpful.
4. For pages you remove, set up 301 redirects to the most relevant remaining page, or return a 410 (Gone) status code if there’s no relevant destination.
5. Submit a reconsideration request once you’ve completed the cleanup.

One Singapore client I worked with had 1,200 product pages, of which 800 had fewer than 50 words of unique content. We consolidated those into 200 well-written category and product pages. The reconsideration request was approved within 10 days, and organic traffic increased by 340% over the following 3 months.

Cloaking and Sneaky Redirects (Manual Action)

Cloaking means serving different content to Googlebot than what users see. Sneaky redirects send users to a different URL than the one they clicked on in search results. Both are serious violations.

In Singapore, I’ve seen this happen unintentionally with aggressive geo-targeting setups. A site detects that Googlebot is crawling from the US and serves the English version, while Singapore users get redirected to a different page. If the content differs significantly, Google may flag it as cloaking.

How to fix it:

1. Use Google’s URL Inspection tool to see exactly what Googlebot sees when it crawls your pages. Compare this to what you see in a browser.
2. Remove any server-side logic that serves different content based on user agent detection.
3. If you need to serve different content to different regions, use hreflang tags and separate URLs rather than user-agent-based switching.
4. Check for any JavaScript redirects that might be sending users to different pages than what’s indexed.
5. Submit a reconsideration request.

User-Generated Spam (Manual Action)

If your site has forums, comment sections, or user profile pages, spammers may have filled them with junk content and links. Google holds you responsible for content on your domain, regardless of who posted it.

How to fix it:

1. Audit all user-generated content on your site. Look for spam comments, fake user profiles with link-stuffed bios, and forum posts with irrelevant promotional content.
2. Delete all spam content.
3. Implement moderation systems: require approval before comments or forum posts go live, add CAPTCHA to submission forms, and use automated spam filters.
4. Add rel=”nofollow” or rel=”ugc” to all links in user-generated content areas.
5. Submit a reconsideration request.

Hacked Site (Manual Action / Security Issue)

A hacked site is an emergency. Google will show warning interstitials to users trying to visit your site, and your rankings will drop immediately. In Singapore, I’ve seen small business sites hacked through outdated WordPress plugins more times than I can count.

How to fix it:

1. Take your site offline temporarily if the hack is actively serving malware or redirecting users.
2. Identify the attack vector. Check for outdated CMS versions, plugins, or themes. Review server access logs for suspicious activity.
3. Clean the infection. Remove all injected code, spam pages, and backdoors. If you’re not confident doing this yourself, hire a security specialist. A half-cleaned hack will just get re-exploited.
4. Update all software, change all passwords (CMS admin, FTP, database, hosting panel), and implement two-factor authentication.
5. Use Search Console’s URL Inspection tool to verify that cleaned pages are now serving correct content.
6. Request a security review through Search Console’s Security Issues section.

Google typically processes security reviews within 72 hours, which is faster than manual action reconsideration requests.

Recovering from Algorithmic Demotions

Algorithmic demotions don’t have a reconsideration request process. You improve your site, and you wait. But “improve your site” is vague advice, so let me break down the specific recovery strategies for the major algorithm systems.

Recovering from a Core Update Hit

Google’s broad core updates re-evaluate the overall quality and relevance of content across the web. If your site dropped after a core update, Google is essentially saying that other sites now better serve the queries you were ranking for.

Recovery approach:

Start with Google’s own guidance on core updates, which revolves around the E-E-A-T framework (Experience, Expertise, Authoritativeness, Trustworthiness). Ask yourself honestly:

• Does your content demonstrate first-hand experience with the topic?
• Is the author a genuine expert, and is that expertise visible on the page (author bio, credentials, links to other published work)?
• Is your site recognised as an authority in your niche? Do other reputable sites link to you and cite you?
• Does your site inspire trust? Is there clear contact information, a physical address (especially important for Singapore local businesses), and transparent business information?

Audit your content against competitors who gained rankings. Search for the queries you lost visibility on and study the pages now ranking above you. What are they doing that you’re not? Are they more comprehensive? More current? Better structured? Do they include original data, images, or insights?

Improve your weakest content first. Focus on pages that lost the most traffic and have the highest commercial value to your business. Don’t just add more words. Add more value.

Recovering from a Helpful Content System Hit

Google’s helpful content system evaluates whether your content was written primarily for people or primarily to attract search engine traffic. If your site was hit by this system, it’s a signal that Google perceives a significant portion of your content as search-engine-first rather than user-first.

This is a site-wide classifier, which means even your good content can be suppressed if enough of your site is deemed unhelpful.

Recovery approach:

1. Identify content that was clearly created to target keywords rather than to help users. Common signs: the article doesn’t say anything a reader couldn’t find in the top 3 results already, it’s padded with filler, it covers a topic outside your site’s core expertise just because the keyword had search volume.
2. Either substantially rewrite this content to be genuinely useful, or remove it entirely. Removing unhelpful content can actually improve your entire site’s performance under this system.
3. Ensure your remaining content reflects genuine expertise. If you’re a Singapore accounting firm writing about SEO tips just to attract traffic, that’s exactly the kind of content this system targets.
4. Be patient. The helpful content system updates periodically, and recovery can take months. Some sites affected by the September 2023 helpful content update didn’t see recovery until the March 2026 core update.

Recovering from a Link Spam Update Hit

Google’s SpamBrain system (which powers link spam updates) identifies and neutralises manipulative links. Unlike a manual action for unnatural links, an algorithmic link spam hit won’t show up in Search Console. You’ll just see your rankings drop.

Recovery approach:

1. Conduct a thorough backlink audit using Ahrefs, Semrush, or Majestic. Look for patterns of unnatural links: same anchor text repeated across many domains, links from irrelevant foreign-language sites, links from known link networks.
2. Attempt outreach to remove the worst offenders.
3. Submit a disavow file for links you can’t remove. While Google says its systems are good at ignoring bad links automatically, I’ve seen disavow files make a measurable difference in recovery timelines, particularly for sites with heavily manipulated link profiles.
4. Shift your link-building strategy to earning links through genuinely valuable content, digital PR, and real business relationships. In Singapore, this might mean getting cited in The Straits Times, contributing expert commentary to industry publications, or creating original research that others want to reference.

The Reconsideration Request: How to Write One That Gets Approved

If you’re dealing with a manual action, the reconsideration request is your formal appeal to Google. I’ve written and submitted dozens of these over the years. Here’s what works.

What Google Wants to See

Honesty about what happened. Don’t pretend you didn’t know about the spammy links or thin content. If a previous agency did it, say so. If you did it yourself, own it. Google’s reviewers are experienced, and deflection doesn’t help your case.

Specific documentation of what you fixed. Don’t say “we removed bad links.” Say “we identified 847 spammy referring domains, successfully removed links from 312 through direct outreach, and disavowed the remaining 535. Here is a spreadsheet documenting our outreach efforts.”

Evidence of preventive measures. Google wants to know this won’t happen again. Explain the processes you’ve put in place: regular backlink monitoring, content quality guidelines for your team, security measures for your CMS.

Common Mistakes That Get Requests Rejected

• Submitting too early before you’ve actually fixed the issues. If Google reviews your site and still finds violations, your request will be rejected, and you’ll have to start the waiting period again.
• Being vague. “We cleaned up our site” tells Google nothing. Be specific with numbers, dates, and examples.
• Blaming others without taking responsibility. Yes, your old SEO agency may have built those spammy links. But it’s your site, and Google holds you accountable.
• Not addressing all the issues. If Google flagged thin content across your site and you only fixed 60% of the affected pages, expect a rejection.

After Submission: What to Expect

Google typically responds to reconsideration requests within 1-4 weeks. You’ll receive a message in Search Console indicating whether the manual action has been revoked or if further work is needed.

If your request is approved, don’t expect an immediate traffic recovery. It can take several weeks for Google to recrawl and re-evaluate your pages. I typically tell clients to expect 4-8 weeks before they see meaningful traffic recovery after a successful reconsideration.

If your request is rejected, read Google’s response carefully. They usually indicate what issues remain. Fix those, and resubmit. I’ve had cases where it took three rounds of reconsideration requests before the manual action was lifted, usually because the initial cleanup wasn’t thorough enough.

Preventing Future Google Penalties

Recovery is painful and time-consuming. Prevention is far more efficient. Here’s what I recommend to every client after we’ve completed a penalty recovery.

Regular Backlink Monitoring

Set up monthly backlink audits using Ahrefs or Semrush. Watch for sudden spikes in new referring domains, which could indicate a negative SEO attack or an old link-building campaign kicking in. In Singapore’s competitive SEO landscape, negative SEO (competitors building spammy links to your site) does happen, though it’s less common than people fear.

If you spot suspicious new links, disavow them proactively rather than waiting for them to cause problems.

Content Quality Standards

Create a content quality checklist for everyone who publishes on your site. At minimum, every piece of content should:

• Provide information or insights not easily found elsewhere
• Be written or reviewed by someone with genuine expertise in the topic
• Include proper attribution for any data, quotes, or claims
• Be formatted for readability (clear headings, short paragraphs, relevant images)
• Serve a clear user intent, not just target a keyword

Technical Health Monitoring

Set up automated monitoring for critical technical SEO elements. At minimum:

• Weekly crawls with Screaming Frog or Sitebulb to catch new technical issues
• Uptime monitoring to detect server outages that affect crawling
• Page speed monitoring, especially after any code deployments
• Search Console alerts for indexing issues, security problems, or manual actions

Think of it like maintaining a hawker stall. You don’t wait for NEA to come and shut you down before you clean your kitchen. You maintain hygiene standards every day because it’s the right thing to do, and it keeps the inspectors happy when they do show up.

Stay Informed About Algorithm Updates

Follow Google SearchLiaison on X and subscribe to Google’s Search Central Blog. When a confirmed update rolls out, check your traffic within 48-72 hours. Early detection means faster response.

Keep a log of every confirmed Google update alongside your traffic data. Over time, this gives you a clear picture of which types of updates affect your site and what patterns to watch for.

A Real Recovery Timeline: What to Realistically Expect

I want to set honest expectations because I’ve seen too many site owners get discouraged when recovery doesn’t happen overnight.

Manual action recovery: From the moment you start the cleanup to full traffic recovery, expect 2-4 months. The cleanup itself takes 2-4 weeks if you’re thorough. The reconsideration review takes 1-4 weeks. Traffic recovery after the manual action is lifted takes another 4-8 weeks.

Algorithmic recovery: This is harder to predict. For core update demotions, you may need to wait until the next core update for Google to fully re-evaluate your site. Google runs core updates roughly every 2-3 months, so you could be looking at a 3-6 month timeline even after making significant improvements.

Helpful content system recovery: This has been the slowest recovery I’ve observed. Some sites have waited 6-12 months. The system updates less frequently than core updates, and the site-wide classifier takes time to reassess.

The key insight is this: start fixing things immediately, but don’t obsess over daily ranking checks. Focus on making your site genuinely better for users, and the rankings will follow.

When to Handle Recovery Yourself vs. Getting Help

Some penalty situations are straightforward enough to handle on your own. If you received a manual action for user-generated spam and you just need to clean up your comments section, you can probably manage that.

But if you’re dealing with a complex link penalty involving thousands of toxic backlinks, or a site-wide algorithmic demotion that requires a comprehensive content audit, or a hacked site with deeply embedded malware, the cost of getting it wrong is high. A botched recovery attempt can extend your downtime by months.

For Singapore businesses where organic search drives a significant portion of revenue, the math usually favours getting expert help. Every week your rankings are suppressed is a week of lost leads, lost sales, and lost market share to competitors who are happy to take your spot.

Get Your Rankings Back

Finding and fixing a Google penalty is methodical work, not guesswork. Start with diagnosis in Search Console, correlate with algorithm update timelines, rule out technical issues, identify the specific penalty type, and then execute the appropriate recovery strategy.

If you’ve been hit by a penalty or a significant algorithmic demotion and you’re not sure where to start, I’m happy to take a look. We run a free initial site audit at bestseo.sg where we’ll check for manual actions, identify potential algorithmic issues, and give you a clear picture of what’s going on with your rankings. No obligation, no hard sell. Just a straightforward assessment from someone who’s recovered more Singapore sites than I can count.

Drop us a message through the contact form on bestseo.sg, or email me directly. The sooner you start the diagnostic process, the sooner you’ll be back on page one.