Here we are again, when a particular kind of salesman shows up every time search sprouts a new shiny thing. Last year, this salesman was selling you an easy-to-get guaranteed seat on ChatGPT. New for this year, it’s a spot in Google's AI Overviews, sold for a monthly fee like a parking space. "We'll get you cited," he whispered in your ear and promised that they have a method.
Turns out, maybe this salesman did have a method and a scheme, but this May, Google officially classified these new schemes as exactly what the rest of us suspected.
Spam.
The hammer comes down
In the middle of May, Google updated its spam policy documentation. Its definition of spam, the one that has sat at the top of that page for years, used to talk only about manipulating Search into ranking content highly. The new version tacks a few quiet words onto the end: "attempting to manipulate generative AI responses in Google Search."
That is the whole bomb. No press release, just a clause slipped into a definition and a one-line changelog note, written with the enthusiasm of a man reading a phone book, explaining that the goal was to make the policies apply to all of Google Search, "including generative AI responses."
Now, Google did not say the words "bought citation." Google never says the loud part. But you and I can read. Manipulating AI answers is now spam. And the oldest, most thoroughly punished form of manipulation in the entire Google rulebook is paying for endorsements you did not earn. That is what a bought link is. That is also, in slightly newer clothes, what a bought citation is.
So here is the argument, and it is ours, not Google's, because somebody has to say the loud part out loud. If buying links to fake authority has gotten you penalized for fifteen years, and manipulating AI answers is now officially spam, then buying your way into an AI citation is just a bought backlink wearing a fake mustache. Same crime. New costume. Same trapdoor under the stage.
You have seen this movie before
If you have been in this business longer than a couple of news cycles, you are feeling déjà vu, and you should trust it. We watched this exact film in 2012. It was called Penguin. People had spent years buying links by the thousand, convinced they had found the cheat code. Then Google flipped a switch and the whole house of cards went into the woodchipper. Sites that bought their authority watched it evaporate in an afternoon. Sites that earned it sat there, sipping their coffee.
The hustlers did not learn. Hustlers never do. They waited for the next shiny thing to sell shortcuts into. AI answers became the prize, and a cottage industry sprang up overnight promising to "force citations" and manufacture "AI trust signals," which, scratched, turned out to be the same old trick. Scale. Repetition. Spam in a blazer.
There is no separate AI search to crack
This is the truth the shortcut sellers spent a year talking you out of. There is no secret side door, no special AI index, no parallel universe where the rules of earning trust stop applying. The content that ranks well in regular search is the content that gets pulled into AI answers. The authority that earns a top position is the authority that earns a citation. One system, two hats.
The data keeps proving it with almost rude consistency. A study of more than two million pages found the single biggest predictor of an AI citation is a site's authority, with high-authority sites pulling roughly three times the citations of weaker neighbors. Around three quarters of the URLs cited in Google's AI Overviews also rank in the top ten of regular search. The machine is not citing strangers. It is citing the sites it already trusts.
Which means the work that earns that trust did not get less important when AI arrived. It got more important. The prize just got bigger.
The citation is the new click
Yes, AI Overviews are eating clicks. They show up on about half of all tracked searches now, and when they appear, click-through to actual websites drops by roughly sixty percent. That is the stat that gets screenshotted into doom-posts by people who would like you to panic and then hire them.
Flip it over. When a brand actually earns its way into an AI Overview, it pulls something like a hundred and twenty percent more clicks per impression than the brands that did not. The clicks did not vanish. They concentrated. They flowed to whoever the machine decided to trust.
So the question was never "how do I get a click." It is the one it always quietly was: how do I become the source the system reaches for. And there is no version of that answer that involves a wire transfer to a man with a lanyard.
The slow road is the only road that goes anywhere
Earning authority is slow, unsexy, and does not fit into a thirty-day guarantee. It looks like real relationships with real publications and real editorial links that a real editor chose to give you. It is work. The kind that compounds quietly for years and then shows up as your brand sitting calmly inside an answer your competitor paid a fortune trying to fake.
Here is what the grifters can never replicate: earned authority survives the update. When Google moves the goalposts, and Google always moves the goalposts, the sites built on real authority barely feel it. The sites built on bought authority feel every tremor. The only thing that changed in May is that the woodchipper got a new intake valve, labeled "citations."
You cannot fake your way to authority. You can only earn it. That was true when the prize was a ranking; it is true now that the prize is a citation, and it will be true when the prize is whatever comes next. Earn the trust. The machine will find you. It is, after all, looking.
