Let me tell you something that won't surprise anyone who's been in marketing longer than a product cycle: the moment a new channel becomes valuable, someone figures out how to game it. We did it with Google in 2005. We did it with Facebook in 2012. And now, with AI-powered search funneling what McKinsey estimates at $750 billion in U.S. revenue, we're doing it again.
The playbook writes itself. New visibility mechanism emerges. Early adopters win legitimately. Late adopters panic. Shortcuts appear. Google (or OpenAI, or Anthropic) cracks down. Rinse, repeat, pretend we learned something.
Here's the thing: AI visibility isn't just another SEO update. It's a fundamentally different game with fundamentally familiar temptations.
The Recommendation Economy Changes the Cheat Codes
Traditional search ranked pages. AI search recommends brands. That distinction matters more than most CMOs realize.
When someone asks ChatGPT "what's the best email marketing tool for Shopify stores," the AI doesn't return ten blue links for the user to evaluate. It makes a choice. It names names. And according to Triple Whale's AI Visibility Playbook, that recommendation carries serious weight: visitors from AI platforms are three times more likely to convert than those from traditional search.
So what happens when the stakes shift from "get ranked" to "get recommended"? The manipulation tactics evolve accordingly.
Instead of keyword stuffing, we're seeing what I'd call "citation stuffing": flooding the web with third-party content designed to create the illusion of consensus. Instead of link farms, we're building what FancyAI's research calls "citation graph engineering": manufacturing the web of references that LLMs use to determine trustworthiness.
The goal isn't to trick an algorithm into ranking you higher. It's to trick an AI into believing you're the obvious answer.
The New Black-Hat Toolkit
Let's be specific about what's actually happening out there, because vague warnings don't help anyone.
Scaled content abuse is the most obvious offender. Some agencies are spinning up hundreds of AI-generated pages, each targeting a slightly different query variation, hoping that sheer volume will increase the odds of being cited. Index Lab's analysis calls this exactly what it is: a fast track to being filtered out entirely. Google's spam policies explicitly flag "using generative AI tools to generate many pages without adding value for users."
Synthetic review networks are the link farms of the AI era. If LLMs weight sentiment from reviews and forums, then flooding those channels with manufactured praise becomes the obvious play. The problem? AI models are getting better at detecting coordinated inauthentic behavior. And unlike a Google penalty, which you might recover from in six months, getting flagged as untrustworthy by an LLM can mean disappearing from recommendations entirely.
Entity manipulation is subtler and, frankly, more interesting. LLMs build understanding of brands through what's called "entity clarity": the consistency and specificity of how a brand is described across the web. Some operators are attempting to seed contradictory or misleading entity information about competitors, essentially trying to make rival brands harder for AI to understand and therefore less likely to recommend.
It's dirty. It's also happening.
Why This Time Isn't Different (But Also Is)
Here's where I'm supposed to tell you that AI search is fundamentally different and the old rules don't apply. But that's only half true.
The underlying dynamic is identical to every platform shift we've lived through: there's a window where manipulation works, followed by a crackdown that punishes everyone who took shortcuts. The old model focused on avoiding obvious red flags. The AI-era model focuses on reducing uncertainty for systems that are actively trying to assess trustworthiness.
What's different is the speed and severity of consequences.

Traditional SEO penalties were recoverable. You could disavow bad links, clean up thin content, wait out the sandbox. AI recommendation systems don't work that way. They're not indexing your site; they're forming an opinion about your brand based on the entire corpus of information available. Changing that opinion requires changing the corpus, which is exponentially harder than fixing your own domain.
The other difference? AI systems share training data and architectural approaches. Get flagged as manipulative by one major LLM, and there's a reasonable chance that signal propagates. We're not playing whack-a-mole with individual algorithms anymore. We're playing reputation management across an interconnected ecosystem.
The Uncomfortable Math for Marketing Leaders
Let me put this in terms that matter for budget conversations.
Triple Whale reports 59x growth in AI-attributed orders in 2025 versus 2024. That's not a rounding error. That's a channel that went from "interesting experiment" to "material revenue driver" in twelve months.
The temptation to accelerate that growth through aggressive tactics is real. I get it. Every CMO I know is being asked why competitors are showing up in ChatGPT recommendations and they're not.
But here's the uncomfortable math: the cost of recovery from AI visibility penalties isn't measured in months of lost traffic. It's measured in years of rebuilding trust signals across a web you don't control. The ROI on black-hat GEO isn't negative; it's catastrophically negative with a time delay that makes it look positive until it isn't.
What Actually Works (And Why It's Annoying)
I wish I had a clever hack to share. I don't. What works for AI visibility is what's always worked for building durable brands: genuine expertise, consistent messaging, and content that actually helps people.
The difference is that AI systems are better at detecting the gap between what you claim and what the broader web says about you. You can't just publish thought leadership; you need third parties citing that thought leadership. You can't just claim expertise; you need the structured data, the consistent entity information, and the corroborating mentions that let an AI verify the claim.
The four pillars that actually move the needle are boring: audit your current AI visibility, fix your site structure for machine readability, create content optimized for answer engines, and build genuine trust signals through legitimate third-party coverage.
None of that is fast. All of it compounds.
The DJ Metaphor, Revisited
I've said before that marketing is like being a DJ at a wedding: you've got to read the room, know when to drop a classic, and when to sneak in something experimental.
AI visibility is the same gig with a twist. The room is now full of robots taking notes on everything you play, comparing it to every other DJ they've ever heard, and deciding in real-time whether to recommend you for the next wedding.
You can try to fake the setlist. But the robots are getting better at spotting lip-syncing.
The brands that win the AI visibility game will be the ones that were already doing the work: building genuine authority, creating content worth citing, and treating every customer touchpoint as an opportunity to demonstrate expertise rather than manufacture it.
Everyone else is just running into more fire.