Google's Spam Policies: The 4 That Hit Expired Domains

Google publishes its spam rules in one document, spam policies for Google web search. It names 17 practices. Four of them touch anyone who buys an expired domain or builds links: expired domain abuse, link spam, scaled content abuse, and the site reputation policy. The document is policy, not an algorithm. Google says it enforces the policies "both through automated systems and, as needed, human review that can result in a manual action". We screen all 12,137 listings in our directory against the first of those four, because it is the one written about the thing we do. This page quotes the live document, read on 16 September 2026, and says what each policy leaves out.

What are Google's spam policies?

They are a single page of named practices that make content ineligible to appear in Google web search. The document's own scope line is that content "shouldn't violate Google Search's overall policies or the spam policies listed on this page". The enforcement sentence is the one people skip:

We detect policy-violating practices both through automated systems and, as needed, human review that can result in a manual action.

Sites that violate our policies may rank lower in results or not appear in results at all.

Two mechanisms. An automated one you will never be told about, and a manual action that appears in Search Console with your name on it. Google also reserves the general case: "Google may act against any type of spam practices we detect."

The named practices, in the document's order: cloaking, doorway abuse, expired domain abuse, hacked content, hidden text and link abuse, keyword stuffing, link spam, machine-generated traffic, malicious practices, misleading functionality, scaled content abuse, scraping, the site reputation policy, sneaky redirects, thin affiliation, user-generated spam, and a closing section on other practices that can lead to demotion or removal.

Which policies apply to buying an expired domain?

One directly, three at the edges.

Expired domain abuse is the policy written about this exact transaction. The whole of it:

Expired domain abuse is where an expired domain name is purchased and repurposed primarily to manipulate search rankings by hosting content that provides little to no value to users. Illustrative examples include, but aren't limited to:

• Affiliate content on a site previously used by a government agency
• Commercial medical products being sold on a site previously used by a non-profit medical charity
• Casino-related content on a former elementary school site

Read the structure. Abuse needs a purchase, a repurposing, a primary purpose of manipulating rankings, and content of little or no value. All four. Every example pairs a subject mismatch with content nobody would want to find. None of them is "someone bought an old domain". Our full reading of that policy goes through Google's announcement post and the two-part test that falls out of it.

Link spam matters because the reason to buy an expired domain is the links already pointing at it. The policy covers "creating links to or from a site primarily for the purpose of manipulating search rankings". A link somebody else placed on their own site years before you existed was not created by you, and it is not in the enumerated list. That is the whole basis of the trade, and it is worth knowing precisely where the line sits.

Scaled content abuse matters the moment you decide what to publish on the domain. The definition is about volume and value, not about tooling:

Scaled content abuse is when many pages are generated for the primary purpose of manipulating search rankings and not helping users. This abusive practice is typically focused on creating large amounts of unoriginal content that provides little to no value to users, no matter how it's created.

The site reputation policy is the one most often cited at people buying domains, and it is usually the wrong one. It covers third-party content published on a host site to exploit ranking signals the host earned with its own first-party content. Buying a domain and publishing your own pages on it is not third-party content on somebody else's host. The policy that applies is expired domain abuse.

Is this policy or is it an algorithm?

Policy. The distinction decides what you can do about a problem.

A policy is a published rule with a name, and violating it can produce a manual action, which is visible in Search Console and can be appealed. Google's core-update guidance is explicit that broad ranking changes are a different thing: core updates "don't target specific sites or individual web pages", and there is nothing to appeal. If your traffic fell and you have no manual action, you are looking at ranking systems rather than enforcement. Core updates, explained covers that half.

Three of the four policies here arrived on the same day, 5 March 2024, announced alongside the March 2024 core update. Google named them together: "we're announcing three new spam policies against bad practices we've seen grow in popularity: expired domain abuse, scaled content abuse, and site reputation abuse." The site reputation one has since been renamed and changed twice, which is why an undated summary of it is worthless.

What do the policies not cover?

This is the half a content farm will not write.

Buying a domain is not named anywhere in the document. Nor is registering one that used to be something else, nor keeping its old URLs. Google's announcement says: "It's fine to use an old domain name for a new, original site that's designed to serve people first."

Using automation to write is not named. Google's position since February 2023 is "Appropriate use of AI or automation is not against our guidelines."

Having links you did not ask for is not named. The link spam policy is about creating links, not inheriting them.

Redirects are not named under expired domain abuse. The policy says "hosting content". A redirect can still fail the separate sneaky-redirects policy, which our guide to redirecting an aged domain covers.

What is left is a single question: does the site you are going to publish make sense to the people who linked to the old one.

Using the Revised directory for this

The directory exists to make the fit test answerable before you spend money, because after you own the domain the only lever left is what you build.

1. Open the directory. Set Basics to your TLD and, where our classifier has a code for it, your subject category. Category is known for 5,395 of the 12,137 live listings, so use it when it is there rather than relying on it.
2. In Quality, read the spam-screen band, published per listing. Right now 10,318 listings sit in the low band and 1,819 in the moderate one. Nothing above that reaches the directory, and 78 domains are blocked outright.
3. In History, read the archived-snapshot count and the era summaries. A domain with one subject held across years passes the mismatch half of the expired domain abuse test. A domain whose last two years were an unrelated affiliate site does not.
4. Read the Linked by column before you reveal anything. The subject those references were about is the subject you have to continue.
5. Check the name yourself with the expired domain checker for status and site history, and the backlink checker for who links to it.

Filtering and sorting are free without an account. Start from a source hub when the linking source matters more than the TLD: domains with .edu backlinks and .gov backlinks.

FAQ

Is buying expired domains against Google's policies? No. Nothing in the spam policies prohibits buying a domain. Expired domain abuse prohibits repurposing one "primarily to manipulate search rankings by hosting content that provides little to no value to users". Google's own announcement of the policy says it is fine to use an old domain for a new, original site.

How many spam policies does Google have? Seventeen named practices as of 16 September 2026, plus a closing section on other practices that can lead to demotion or removal, and an explicit reservation that Google may act on spam it has not named.

Which spam policy applies to expired domains? Expired domain abuse. The site reputation policy is frequently cited instead and does not apply to a domain you own and publish your own content on.

Are Google's spam policies the same as a penalty? No. A violation can produce a manual action, which is what people mean by a penalty, and it appears in Search Console. Most ranking movement is not enforcement and has nothing to appeal.

Does Google say how it detects spam policy violations? Only at this level of detail: "both through automated systems and, as needed, human review that can result in a manual action." It does not publish detection thresholds, and nobody outside Google can measure them.

How often do the spam policies change? Three of the four discussed here were added on 5 March 2024, and the site reputation policy was rewritten in November 2024 and changed again on 30 August 2026. Quote the document with a date, and re-read it before relying on an old quote.