There's a mistake I see on roughly half the sites we scan. Half. It's not a keyword thing. It's not a backlink thing. It's not even something most SEO blogs talk about, because it's not sexy and it doesn't sell a course.
I'll tell you what it is in a minute. First I want you to picture something.
Imagine a store with four front doors
You've got a physical store. Somebody built four front doors. Same door, same sign, same everything, but four of them, all leading to the same lobby. Customers get confused. Google Maps has no idea which door to pin. Half the reviews end up attached to door #2, half to door #4. You show up in search as four different stores, each one weaker than if it were one.
That's what's happening to your website. And you probably don't know it.
Duplicate URLs: the quietest traffic-killer on the internet
Here's the thing about modern websites. The same page can be reachable through multiple URLs without you realizing it:
yoursite.com/aboutwww.yoursite.com/abouthttps://yoursite.com/abouthttps://www.yoursite.com/aboutyoursite.com/about/(note the trailing slash)yoursite.com/About(some servers are case-insensitive)yoursite.com/about?ref=newsletter(UTM parameters)
To a human, those are obviously all the same page. To Google, they can look like seven separate pages competing with each other. Your "link juice" — the ranking authority built up by other sites linking to you — gets split across all of them.
Worst case? Google picks the wrong one to show in search results. The version with no backlinks. The version with tracking parameters in the URL. The version that looks sketchy.
How this happens without anyone touching the site
This isn't something you did wrong. It's usually the default behavior of your hosting setup, your WordPress install, or your theme. A few common ways it sneaks in:
- A theme update adds trailing slashes where there weren't any before.
- A migration from HTTP to HTTPS was done without setting up redirects.
- Somebody shared your link with
?utm_source=facebooktacked on, and Google indexed that version. - A plugin created a staging or archive URL and forgot to block it.
I've seen a site with 1,400 pages show up as 4,200 URLs in Google's index. Same content, three versions each. The owner had no idea.
The fix has two parts — and honestly, part one covers most sites
Part one: pick a canonical version and stick to it.
Decide which URL format is the "real" one. Usually it's https://yoursite.com/page (HTTPS, no www, no trailing slash — but any consistent choice is fine). Then:
- Set up 301 redirects from every other version to the canonical one. Most hosts have a one-click option for "force HTTPS" and "force non-www." Use them.
- Add a
<link rel="canonical">tag to every page pointing at the canonical URL. SEO plugins like Yoast and RankMath do this automatically if you just tell them which format to use.
Part two: clean up the parameter mess.
In Google Search Console, look at the Pages report. Filter for "Duplicate without user-selected canonical." If you see URLs with ?ref=, ?utm_, ?fbclid=, that's Facebook, email campaigns, and other traffic sources tagging your URL. Your canonical tag (from part one) should already handle this, but verify Google is actually picking up the clean version. (If Search Console's warnings read like a foreign language, I wrote a plain-English translator here.)
That's it. Most people can do this in a single evening. Most people never do.
Why I'm making a big deal about this
Because this is the kind of issue that's invisible. Nobody reports it to you. Your site still works. Visitors still show up. Analytics still tracks. But your rankings are quietly getting eaten by a problem you can't see without specifically looking for it.
And — I hate to be the one to say this — every "SEO expert" who offered you a content package and never once mentioned canonicalization was selling you extra work instead of fixing the foundation. Content is great. Content on a site with duplicate-URL issues is like pouring water into a bucket with a hole in it. (This is the same pattern I dig into here if you want the longer rant.)
The fastest way to know if this is hitting you
Run a scan at abbyseo.com. Plug in your homepage URL. In about 45 seconds you'll get a list of every page we can find, flagged for duplicate-content risk, missing canonicals, and redirect chains. No signup. Nothing to install. Just the findings.
If it's clean, you'll know and you can stop worrying about it. If it's not, the $8.99 guide walks you through exactly what to change — which redirect rules to add, which checkbox in Yoast to flip, what to paste into your .htaccess file.
I've seen sites recover 20-40% of their organic traffic in a month just from fixing this. Not because anything new happened — the traffic was always there, Google just couldn't figure out which door to send people to.
Open the one front door. Close the other three. That's it.