If you've been burned by an SEO agency, this is why…

Backlinks, Domain Authority, Domain Rating, Authority Score: what these terms actually mean, what Google actually does with them, and why a room full of business owners nodded when someone said SEO is a scam.

A speaker at a recent event described being burned by SEO agencies. Money spent, nothing to show for it. The whole room nodded. The whispers suggested nobody trusted SEO anymore. Most people had written the whole topic off as a waste of money.

My client sitting next to me turned and smiled. Because we both know the truth: search visibility is real, it matters more than ever, and it works. Just not the way most agencies are selling it.

Here is what is actually going on.

What SEO actually means

Search engine optimisation is the work of making your business genuinely findable and genuinely trustworthy to the people searching for what you offer. Done properly, it includes technical website work, content strategy, user experience, structured data, local presence, and the kind of real-world credibility that search engines and AI tools can independently verify.

The confusion is not about SEO itself. It is about what gets sold under the name.

Domain Authority, Domain Rating, Authority Score: three different names for what agencies will sell you and Google doesn't use

Most SEO retainers centre on one of these three scores. They sound official. They look like meaningful progress on a report. They are not Google metrics. They have never been Google metrics. Google's own representatives have confirmed this consistently for years.

Here is what each one actually is.

Domain Authority is a score from 0 to 100 created by a software company called Moz. It attempts to estimate how well a website might rank by looking at the quantity and relative strength of sites linking to it, according to Moz's own data and formula.

Authority Score is Semrush's equivalent, calculated using Semrush's own datasets and methodology. A different number for the same website from a different company.

Domain Rating is Ahrefs' version. It measures the strength of a backlink profile by counting how many other sites link to a domain, and how many sites link to those sites in turn. Critically, it does not assess whether any of those linking sites have real audiences, whether Google trusts them, or whether a link from them will actually help a business rank. A network of sites built to link to each other inflates Domain Rating because the calculation sees many links from sites that also have many links, without asking whether any of it represents genuine editorial credibility.

These tools can be useful as rough directional indicators. They help compare relative authority in a general sense. The problem is treating them as the goal itself, or assuming that a rising score means Google's view of the website is improving. These are external approximations built from third-party data. When Google crawls and ranks a website, it is not referencing any of them.

There is an idea from economics called Goodhart's Law: when a measure becomes a target, it stops being a good measure. These software metrics are not inherently useless. Used carefully, they can be diagnostic tools for strategists. The problem starts when an agency turns them into a KPI. When an agency is financially incentivised to make an arbitrary third-party graph go up, they stop doing the hard work of making a business genuinely trustworthy, and start doing the cheap, automated work required to manipulate a private scoreboard.

So when an agency shows you one of these scores climbing month after month, something is happening inside their software. Whether Google's view of the website has changed is a completely separate question. One that rarely appears in the report.

What a backlink is, and why independence is everything

A backlink is a link from another website pointing to yours. Links remain a real and meaningful signal in how Google assesses credibility. A link from a genuinely independent, trusted source still carries real weight, because it represents an editorial decision made by someone with no financial reason to give it.

That independence is what makes a link valuable. And relevance matters as much as prestige. A respected industry publication read by your actual customers can carry more meaningful value than a massive but unrelated website. A well-regarded local business directory matters more for a local business than coverage in a national publication with no local audience.

Think of it like a friend recommending a restaurant. You trust it. Then you find out they receive a referral fee for every booking they send. You discount it and do your own research. The friend might genuinely love the restaurant. But the recommendation is no longer a reliable independent signal.

Google's systems work the same way. Links that appear to exist because money changed hands, whether openly or through patterns its systems have learned to identify, may be heavily discounted or ignored altogether. The link stays on the page. The Domain Rating reflects it. Google's ranking of the website may not move at all.

How Google identifies paid link networks

Google's spam detection systems are trained to identify behavioural patterns associated with paid link schemes, without needing to trace individual transactions.

A site that publishes articles about gaming software, herbal supplements, tree services and real estate within the span of a few days is not a real editorial publication. It is a private blog network built to sell placements to any agency willing to pay. A blog post on healthy morning routines containing a keyword-rich link to an insurance broker signals a mismatch that is recognisable to an algorithm. A site with a prominent Write For Us page advertising paid submission is leaving a clear footprint.

When Google identifies these patterns, its systems appear to heavily discount or ignore the value of the links involved. This is not always immediate, and Google is deliberately vague about the precise mechanics. But the practical outcome is consistent: a business can receive links from sites with high Domain Ratings and see no improvement in rankings, because the metric measured something different from what Google was looking for.

What a real audit looks like

A business recently shared their monthly SEO report with us. All identifying details have been removed.

The links created that month had Domain Ratings of 38, 70 and 71 according to Ahrefs. Three links from what the report described as high-value referring domains. Here is what those three domains actually are.

Domain 1: A private blog network posing as a grammar site While its About Us page claims the site is dedicated to English grammar and metaphors, its actual content tells a different story. In the span of a few days it published articles on Kratom drinks, FiveM gaming communities, Power BI techniques, tree services in Burlington, and Australian real estate. This is the defining fingerprint of a Private Blog Network: a site with no real editorial purpose, built solely to sell link placements to any agency willing to pay. Google's AI systems are specifically trained to identify this pattern. Links from sites with no topical focus carry no ranking power. Google's verdict: avoid.

Domain 2: A pharmaceutical spam domain The domain name itself is the name of a specific antibiotic medication used to treat stomach infections. Domains using exact medication names are heavily targeted by international pharmaceutical spam networks and are flagged by Google's YMYL (Your Money Your Life) filters, which apply heightened scrutiny to any site touching medical or health topics. Unless the linking site is a legitimate medical publication, a link from a domain like this is not just irrelevant, it risks passing negative signals. Google's verdict: avoid.

Domain 3: A parked gaming domain with no live content This domain originally belonged to a Unity game development UI asset. It is now either a dead domain bought out to host low-quality ads, or a scraped shell with no real content or audience. It has zero topical relevance to any real business category and zero ability to signal credibility to Google about anything. Google's verdict: no benefit.

All three assessed in under ten minutes using free, publicly available tools.

The business receiving these links had its own Domain Rating of 28. Two of the sites linking to it had ratings of 70 and 71. High Domain Rating does not mean Google trusts a site. It means the site has accumulated links, often from others in the same network. It says nothing about real audiences, genuine editorial standards, or whether Google considers these credible sources of anything.

Are you being sold a service to remove bad backlinks? Read this first

If an agency has presented a report showing dozens or hundreds of toxic or harmful backlinks pointing to your website, and offered to clean them up for a fee, it is worth understanding what that service actually involves before paying for it.

Every website on the internet naturally accumulates random links from scrapers, bots, spam directories and unrelated overseas blogs. Google expects this and handles it automatically. Its systems are designed to identify these links and ignore them. They do not pass credit to your website, but in the vast majority of cases they do not harm it either. Google has specifically confirmed this, noting that its algorithms are built to ignore junk links rather than penalise the sites receiving them, precisely because businesses should not be penalised for links they did not choose.

The tool an agency uses to generate a toxic link report is not a Google tool. It is a third-party software product applying its own scoring criteria to flag links as potentially harmful. The list it produces includes many links that Google's own systems have already assessed and ignored. Paying an agency to then file a disavow request with Google is paying to tell Google to ignore something it is already ignoring.

The one scenario where link-related action is genuinely warranted is a Manual Action. This is a formal notification from Google, delivered directly to the site owner inside Google Search Console under Security and Manual Actions, stating that a human reviewer has identified a violation. It is specific, it is serious, and Google tells you about it directly. It does not arrive as a line item in a third-party agency report.

If you want to know whether your website has a genuine link-related penalty, log into Google Search Console and check that section yourself. If it says no issues detected, there is no manual penalty. If an agency is charging you to remove toxic links without this notification being present, ask them to explain precisely what problem they are solving that Google has not already solved for free.

The disavow tool, which allows site owners to ask Google to ignore specific links, still exists. Google's own guidance now states it should only be used in response to a confirmed Manual Action, or by sites that have knowingly engaged in manipulative link schemes and want to proactively clean up. Google Search Central representatives have gone further, describing managing a disavow file for standard sites as a billable waste of time, and indicating the tool is likely to be deprecated entirely in the near future, in the same way Microsoft's Bing has already removed theirs. The reasoning is straightforward: Google's AI systems are already ignoring junk links automatically. Paying an agency to manually file a disavow request is paying to do something Google has already done for free. For most businesses receiving the toxic link removal pitch, neither the Manual Action condition nor the link scheme condition applies.

What Google Search Console actually tells you

Google Search Console is free and it comes from the source. It shows directly from Google's systems how many real people are finding a website through search and clicking through to it. It tracks which pages are ranking, for which searches, and how that changes over time.

It is the one measurement that does not rely on a third-party approximation of what Google might think. And it is the one tool that a report focused on Domain Authority scores rarely leads with.

If your agency is not showing you Google Search Console data as the primary measure of progress, it is worth asking why.

How people interact with your business also matters

Modern search increasingly reflects not just what links point to a website, but how people behave when they find it.

Do users click through from search results and stay? Do they search for the business by name after encountering it elsewhere? Do they engage with reviews, read content, and return? Do they find answers on the page or immediately go back to search for something else?

These behavioural signals appear to play a growing role in how Google assesses whether a business is genuinely useful and genuinely trusted. A business with strong reviews, high engagement, real branded search volume, and content that actually satisfies what people are looking for is demonstrating credibility in ways that a link from a pharmaceutical spam domain simply cannot replicate.

Why this matters even more as AI search grows

Traditional search returned a list of links. AI search tools increasingly summarise, recommend and cite specific businesses directly. When someone asks an AI tool which physiotherapist to use, which accountant to trust, or which agency to hire, the answer is not assembled from link scores. It is assembled more like a background check.

AI tools cross-reference the web looking for brand mentions across credible sources, active and consistent business information, executive and team presence on professional platforms, genuine customer reviews, and structured content that clearly communicates what the business does and who it serves. They are trying to determine whether a business is a real, trustworthy entity, the kind a person would feel confident recommending.

A high Domain Rating does not appear in that background check. A link from a pharmaceutical spam domain does not help it. What does help is the same thing that has always built genuine trust: being real, being consistent, and being recognised by sources that have no financial reason to mention you.

What actually builds real search visibility

The technical foundation matters. A website that loads quickly, works properly on a phone, is structured so Google can understand each page, and uses structured data to communicate clearly with search engines is the baseline everything else builds on.

Content that genuinely answers the questions real customers are searching for matters. Not content stuffed with keywords, but content written by someone who actually understands the subject.

Google Business Profile, reviews, and consistent accurate information across directories and platforms matter. These are the local signals that determine whether a business appears in map results and local searches, and they are the signals AI tools draw on when forming recommendations.

And the backlinks that actually carry weight, the ones from sources with real audiences and real editorial standards, are a byproduct of genuine PR work, not a link-building package. A real journalist covering a business because it is genuinely interesting, a real publication mentioning it because it is worth mentioning, these produce the kind of independent signal Google is designed to value. That is PR, done by people who understand how to build that kind of presence. It is a different discipline from technical SEO, and it is not something a monthly link quota produces.

None of this creates a dramatic Domain Rating chart. All of it compounds. And none of it disappears the moment you stop paying for it.

Ultimately, the scoreboard is not the game. A business cannot pay wages with a high Domain Rating. A rising Authority Score will not fix a broken user experience or bring in a single qualified customer. Google does not check Semrush's dashboard before deciding where to rank a website. It looks at whether real people are finding what they are looking for when they arrive.

Real visibility is a byproduct of real business credibility.

SEO is not a scam. Being genuinely findable by the right people is one of the most valuable investments a business can make. The question worth asking is whether the work being done on its behalf is building something real, or reporting on numbers that Google has never seen.

If you want to understand what genuinely effective search visibility looks like for your business, that is exactly what we do.

Everything in this article is general in nature. The audit described is drawn from a real report shared with Grove Seven, with all identifying details removed. For advice specific to your business, the decisions are always yours to make.