Expired Domain Abuse: Google’s Policy and How It Gets Enforced

Buying an expired domain for its existing authority is old enough as an SEO tactic to predate Google penalizing it by name. What’s changed since March 2024 is that Google has a formally documented policy specifically targeting it, with real examples published in its own guidance rather than left to community speculation. That specificity is worth walking through directly, because it’s more precise than most secondhand summaries of it.

What the Policy Actually Says

Google defines expired domain abuse as an expired domain name being purchased and repurposed primarily to manipulate search rankings, by hosting content that provides little to no value to users. The policy documentation illustrates this with three specific, named scenarios:

• Affiliate content hosted on a domain that previously belonged to a government agency.
• Commercial medical products sold on a domain that formerly belonged to a non-profit medical charity.
• Casino-related content hosted on a domain that used to belong to an elementary school.

Each example follows the same shape: a domain built its reputation serving one purpose, and that reputation gets borrowed to lend unearned credibility to something entirely unrelated and commercially motivated.

Where It Came From

Google announced the policy on March 5, 2024, as one of three new spam policies rolled out alongside that month’s core update — the others being scaled content abuse and, with enforcement following in May 2024, site reputation abuse. Google framed the combined push at the time as part of an effort to reduce low-value, unoriginal content across search results, describing a goal of cutting roughly 40% of the lowest-quality content it was seeing in its index.

How Enforcement Actually Works

Google hasn’t published detailed enforcement mechanics for expired domain abuse specifically, so some of this is reasonable inference rather than confirmed statement. What’s better documented is its sibling policy: enforcement of site reputation abuse began with manual actions on May 7, 2024, and reporting from SEO analysts Glenn Gabe and Marie Haynes, circulating into late 2025, indicated it had remained manual-action-only roughly eighteen months in — meaning a human reviewer has to flag a specific site before action is taken, rather than a fully automated algorithmic sweep across the index.

Expired domain abuse has a structural property that reputation abuse doesn’t: ownership transfer is a discrete, timestamped event, visible through WHOIS and registrar records, that can be cross-referenced against a sudden pivot in a domain’s content and purpose. That combination is inherently easier to detect at scale than judging whether hosted content is “reputation abuse” in a more subjective sense. I’d treat the degree to which Google has actually automated that detection as unconfirmed, since Google hasn’t said so publicly — but the technical shape of the problem makes a more algorithmic approach plausible here in a way it clearly hasn’t been for the reputation abuse policy.

The Tension for Legitimate Buyers

Buying an expired domain isn’t inherently against Google’s guidance — plenty of people acquire lapsed domains for genuinely relevant new projects with no intent to exploit residual authority. But reporting from within the SEO community has described legitimate buyers getting swept up anyway, apparently because a fast, wholesale content pivot immediately after acquisition reads as the practical trigger regardless of the buyer’s actual intent. The policy, as written, is about outcome and pattern rather than provable motive.

Anyone buying an expired domain deliberately, rather than inheriting one by accident, has a few practical ways to reduce that risk before committing to a purchase. Checking the domain’s history through the Wayback Machine shows what it was actually used for and how sharply any planned new content would diverge from that. A basic WHOIS history lookup shows the ownership timeline itself, which is the exact data point this policy is built around. And a quick check of the domain against Google’s own transparency report or a manual search for site:domain.com can surface whether the previous incarnation was already flagged or manually actioned before the sale went through — buying a domain that was already being penalized inherits that history along with the domain name.

Expired domain abuse is one of the few spam policies where the trigger event — a change of ownership — is a matter of public record before a single new page even goes live, which makes it a fundamentally easier pattern to flag than most of what Google’s spam systems are built to catch.

If you’re repurposing an expired domain for a legitimate reason, the practical takeaway from the pattern above is to keep the topical transition gradual and genuinely additive rather than an overnight wholesale swap — the abuse Google is describing is specifically about borrowing reputation for something unrelated, and a documented, incremental shift in purpose is a meaningfully different signal than a domain that changes hands and changes subject matter entirely within days.