Who is liable if an SEO agency gets your site penalised?

The clause that decides this, and what it is worth in rupees

Open your agency contract and find the paragraph headed *Limitation of Liability*. It usually runs to four lines, sits near the end next to the governing-law boilerplate, and it is the only part of the document that matters on the day something goes wrong.

The standard wording caps the agency's total liability at the fees you have paid — often only in the preceding three or six months — and separately excludes indirect and consequential loss. Your lost revenue is consequential loss. So the clause does two things at once: it sets a small ceiling on what you can recover, and it removes the category the real damage falls into.

What the cleanup actually costs, so you can see the gap

Nobody publishes a rate card for penalty cleanup, so here is the shape of the bill rather than a made-up total. Every line below is work somebody has to do after the damage lands, and under a standard contract every line is yours.

• Finding the links. A full backlink export, deduplicated across two tools, then a human read of every referring domain to sort bought from earned. On a profile with a few thousand referring domains that is days of work, not hours.
• Getting them taken down. Google asks you to try removal before disavowing, which means writing to sites that were paid to publish the link and have no reason to answer for free. Some will quote you a price to remove it.
• The disavow file, then the waiting. Disavowing is a slow signal, not a switch, and it is explicitly an advanced tool rather than a routine one.
• The reconsideration cycle. Reviews are done by people and take days to weeks. A rejected request means another full pass and another wait.
• Diagnosis, if you do not yet know which of the three things happened. Ours is a fixed ₹99,000, and most sites sent to us for penalty recovery turn out not to be penalised at all.
• The months of lost revenue while all of that happens — the largest line by a distance, and the one the contract already excluded.

Manual action or algorithmic decline: only one of them is arguable

This is the fork the whole liability question turns on, and it is why most "the agency destroyed my rankings" claims go nowhere.

A manual action is a document. A human reviewer at Google has decided pages on your site breach the spam policies, and the Manual Actions report in Search Console names it, dates it and describes the affected scope. *Unnatural links to your site* is one of the named types. That is evidence with a timestamp, and the timestamp usually falls inside somebody's engagement.

An algorithmic decline is a graph. Google's guidance on core updates is explicit that a drop does not mean your pages did something wrong — the updates are broad, they do not target individual sites, and other pages simply moved ahead of yours. You cannot build a breach claim on that. Not because the agency was necessarily blameless, but because there is no finding to point at and no date to attach it to.

So check the report before you instruct a lawyer. An empty Manual Actions report plus a slide that started the week of a core update means your argument is about competence, not liability — a cheaper conversation, and usually a reason to leave without losing your accounts rather than to sue.

Proving causation: what you need logged from month one

Liability arguments are won on records that existed before anyone was angry. Every item below is free to collect while the relationship is good and impossible to reconstruct afterwards.

1. A backlink export from day one, before the agency touches anything. Without it you cannot show which links are theirs, and their entire defence is that the profile already looked like that.
2. Monthly link reports with live URLs, not counts. "Built 14 links this month" proves nothing. Fourteen URLs on fourteen named domains is an exhibit.
3. Written approvals for whatever you signed off. The strongest agency defence is that you approved the tactic. If you approved a guest-posting programme and they bought placements on a link network, that distinction has to exist somewhere in writing.
4. The Search Console message centre, untouched. The penalty notification is dated and it is Google's record, not yours or theirs. Nobody should be deleting it.
5. Who held which account, and when. If the agency held admin on your properties it cuts both ways: it strengthens attribution, and it weakens any claim that you were supervising the work.
6. Invoices and scope documents. An invoice line reading *link building — 20 placements* is what ties the fees you paid to the act that caused the problem.

The wording that actually shifts the risk, and why agencies fight it

Two sentences do more than any amount of haggling over the cap. Neither is exotic and both are easier to add before signature than to argue after.

• A warranty. *The Agency warrants that it will not acquire links in exchange for payment, goods or services, participate in link schemes, or publish content on the Client's behalf in breach of Google's published spam policies.*
• A carve-out. *The limitation of liability shall not apply to a breach of the clause above, in respect of which the Agency shall bear the reasonable cost of remediation, including third-party fees, for twelve months following termination.*

What our own contract caps, stated plainly

A page arguing for carve-outs should show its own. Ours, without the hedging:

• We do not buy links. No paid placements, no link networks, no "our publisher relationships". It sits in the engagement letter as a warranty, not as a claim on a website.
• Our cap is the fees you have paid us in the preceding twelve months, not three.
• A breach of that warranty sits outside the cap. If we ever build a link that earns you a manual action, we do the removal outreach, the disavow file and the reconsideration requests at our cost, and you do not pay a retainer for the months it takes.
• We do not take on your lost revenue, and you should be wary of anyone who says they will on ₹75,000 a month. That promise is either unread or unmeant.
• Month to month after the first quarter, 30 days' notice, and you keep every asset — including, for the avoidance of any doubt, the accounts themselves.