Google began rolling out its September 2026 spam update on September 24, 2026, and said the rollout could take up to two weeks. If your search traffic jumped or dropped in the last few days, this update is one possible reason, but it may be too early to know. This guide covers what Google has actually said, what it has not said, and a step-by-step way to check your own site without making rash changes.
The short version: the update applies globally and to all languages, Google has published no list of what it targets, and the sensible response while it is still rolling out is to measure, not rewrite.
What Google Has Confirmed About the September 2026 Spam Update
| Detail | What is known |
|---|---|
| Start | September 24, 2026, about 9:15 a.m. Pacific, per the Google Search Status Dashboard as reported by industry outlets |
| Scope | Applies globally and to all languages |
| Duration | “May take up to two weeks to complete,” which points to roughly October 8 |
| Targets | Not specified by Google |
| Recovery guidance | None published for this update |
Industry reports say the rollout is the longest Google has given a spam update so far. PPC Land reported that earlier 2026 spam updates were much shorter: about 19.5 hours in March, about 48 hours in June, and about three days in August. Search Engine Roundtable also reported a second phase of this update on September 30. Treat that “phase two” label as community reporting rather than an official Google statement.
What Is Not Known (and Why It Matters)
Google has not said which spam policies this update focuses on, how many queries it affects, or whether it changes any rules. Some commentators have suggested it enforces existing policies such as scaled content abuse, site reputation abuse, or expired domain abuse. That is an informed guess, not something Google has confirmed. Be careful with any article, including this one, that claims to know exactly what was targeted.
What you can rely on is Google’s own published list of spam policies. In Google Search Central’s documentation, these include cloaking, doorway abuse, expired domain abuse, hacked content, hidden text and links, keyword stuffing, link spam, machine-generated traffic, malicious practices, misleading functionality, scaled content abuse, scraping, site reputation abuse, sneaky redirects, thin affiliation, and user-generated spam. Google says it detects violations through automated systems and, when needed, human review that can lead to a manual action. Sites that violate the policies “may rank lower in results or not appear in results at all.”
How to Check Whether the Update Affected Your Site
- Wait for the rollout to finish. Rankings can move up and down while an update is live. Google said up to two weeks from September 24, so judge results after about October 8, and ideally compare a full week afterward.
- Open Google Search Console. In the Performance report, compare clicks and impressions for the 7 days before September 24 with the 7 days after the rollout ends. Use the same days of the week for both periods to avoid weekend distortion.
- Segment the change. Check by page, query, country, and device. A drop concentrated on one folder or page type points to a content issue, while a sitewide drop suggests something broader.
- Check Manual Actions and Security Issues. If you have a manual action, it appears in Search Console. A spam update is typically algorithmic, so no manual action does not mean you were unaffected.
- Rule out other causes. Look for site changes, tracking errors, seasonality, a core update, or AI features changing click behavior. Our breakdown of what AI Overviews did to clicks explains why impressions can hold steady while clicks fall.
A Practical Self-Audit Against Google’s Spam Policies
If your traffic fell and the timing matches, review the areas where publishers most often run into trouble. This table is a checklist built from Google’s policy list, not a diagnosis of what this update targeted.
| Area to review | Questions to ask |
|---|---|
| Scaled content | Did you publish many pages quickly, by AI or templates, mainly to capture search traffic? Does each page add something a reader cannot get elsewhere? |
| Affiliate pages | Do product pages add original testing, photos, or opinion, or do they repeat manufacturer descriptions? |
| Third-party content | Do you host sponsored or partner content that has little to do with your site’s main topic? |
| Links | Have you bought links, joined link exchanges, or used automated link building? |
| User-generated areas | Are comments, forums, or profiles full of spam you have not removed? |
| Redirects and ads | Do any pages send users somewhere unexpected or trap the back button? |
| Hacked content | Are there pages or links you did not create, especially in the footer or hidden areas? |
If you find real problems, fix them for readers’ sake. Remove or consolidate thin pages, add original value to the ones that matter, clean up spam comments, and disavow nothing unless you have a clear reason. Avoid sweeping site changes while the rollout is still in progress, since they make it harder to tell what caused a change in traffic.
What Not to Do
- Do not panic-delete content. A one-week dip during a two-week rollout is not a verdict.
- Do not chase rumors about “the fix.” Google published no recovery steps for this update.
- Do not submit a reconsideration request without a manual action. Reconsideration is for manual actions listed in Search Console, not for algorithmic ranking changes.
- Do not buy links or traffic to compensate. That is exactly what spam policies are meant to catch, and it can put an AdSense account at risk as well.
What This Means for Publishers Who Rely on Ad Revenue
Spam updates matter more to ad-supported sites than the traffic number suggests, because lost pageviews also reduce ad revenue, and sites that lean on low-value pages can lose both ranking and ad quality signals. The most durable response is boring: useful pages written for a clear reader need, original information, honest affiliate disclosure, and a clean site. The same principle applies to paid search, where Google’s automation keeps changing too. See our guide to Google’s AI Max upgrade for Search campaigns for the advertiser side, and our holiday ecommerce forecast if you are planning Q4 traffic around peak shopping dates.
FAQ
When did the Google September 2026 spam update start?
September 24, 2026, at about 9:15 a.m. Pacific time.
How long does the update take to roll out?
Google said it may take up to two weeks, which means it could run until about October 8, 2026.
What does the September 2026 spam update target?
Google has not said. It applies globally and to all languages, and Google has published no list of targeted policies for this update.
Can I recover if my traffic dropped?
Google has not published recovery steps for this update. The practical approach is to wait for the rollout to finish, check Search Console, and fix any real violations of Google’s spam policies. Ranking changes from spam systems may be reversed when the underlying issues are fixed, but Google gives no timeline.
Is a spam update the same as a core update?
No. Spam updates improve how Google’s systems detect content that violates its spam policies. Core updates are broader changes to how Google assesses relevance and quality across search results.
Conclusion
The September 2026 spam update is still rolling out, and Google has been light on details. Track Search Console, compare equal date ranges after the rollout ends, audit your site against Google’s published spam policies, and fix real problems instead of guessing at the algorithm. If your pages exist to help readers, this is a good moment to confirm they still do.
Last updated: October 5, 2026. The rollout was still in progress when this was written, so details may change. Sources: Google Search Central spam policies documentation; Google Search Status Dashboard as reported by PPC Land and ALM Corp; Search Engine Roundtable.
