Google started rolling out its September 2026 spam update on September 24, 2026 at 09:15 Pacific time. It applies globally, in every language, and Google says the rollout may take up to two weeks to complete — an outer limit of about October 8.
If your site follows Google’s published spam policies, the most likely outcome is that nothing happens to you. If your rankings moved sharply over the weekend of September 25–27, you’re in the group that noticed. And there’s a good chance the cause is content produced at scale — often with AI — to rank rather than to help anyone.
That’s the short answer. Here’s what Google actually said, what the SEO industry is seeing, and what a business owner should do about it.
What did Google actually announce?
The official communication is deliberately thin. Google posted an incident on its Search Status Dashboard at 09:15 PDT and described it on LinkedIn as “a normal spam update” that “will roll out for all languages and locations.”
The confirmed facts:
- Name: September 2026 spam update
- Started: September 24, 2026, 09:15 PDT
- Scope: Global, all languages
- Rollout: Up to two weeks (roughly through October 8)
- New policies: None
- Link spam: Not targeted
- Mechanism: SpamBrain, Google’s AI-based spam-detection system
That last point matters. A spam update is not a new set of rules. It’s Google making its existing automated systems better at catching violations of rules that were already published. Google’s own documentation puts it plainly: spam updates improve the systems that “help ensure it catches new types of spam,” and sites that violate the policies “may rank lower in results or not appear in results at all.”
This is the fourth spam update of 2026, after March, June, and August. The cadence is the story — Google is now re-checking its enforcement roughly every other month.
Sources: Google Search Spam Updates (last updated December 10, 2025); Google Search Status Dashboard.
Why is this one different from the earlier 2026 updates?
Two things stand out.
The rollout window. Every earlier spam update this year was expected to take “a few days,” and each finished inside about three days. March took roughly 19.5 hours — the fastest on record. June took about two days. August took two days and 16 hours. September is the first to carry a two-week window, the kind of language Google usually reserves for core updates.
When Search Engine Roundtable asked whether the two-week estimate was a typo, Google’s John Mueller confirmed it was intentional: “Yes, it’s likely to take longer than some of the previous ones.”
The policy context. September is the first spam update since two earlier 2026 policy changes settled in:
- On May 15, 2026, Google clarified that its spam policies cover “attempting to manipulate generative AI responses” in Search, which brings AI Overviews and AI Mode inside the same rules.
- On August 30, 2026, Google changed how it enforces its site reputation abuse policy inside the European Economic Area, separating affected sections so they can rank independently of the host domain.
Sources: Search Engine Roundtable, September 24, 2026; Search Engine Journal, September 24, 2026; Google Search Central blog, August 28, 2026.
What is the SEO community saying?
The impact showed up fast. Ranking volatility spiked across tracking tools starting Friday, September 25, was heavier on Saturday the 26th, and ran through Sunday the 27th — all within the first few days of a rollout Google says may last two weeks.
Barry Schwartz, who has tracked every confirmed Google update for years, wrote that the weekend was “pretty heated” and that “it does feel like these spam updates are having more of an impact than the older spam updates from years ago.”
Three reactions keep coming up:
- Steep, self-reported drops. Site owners posting to forums described losses like “very big drop since yesterday (-80%). We do NOT SPAM.” Treat these as texture, not measurement — people who saw no change have no reason to post. Some collateral movement on borderline pages is normal for any spam update.
- A focus on scaled and AI-generated content. Analyst Glenn Gabe flagged AI-generated sites losing visibility during the window, including Grokipedia. Industry discussion kept landing on the same idea: the update looks less anti-AI than anti-empty. Pages with a clear purpose, a real source, and original value held up better than thousands of interchangeable pages.
- Google’s silence on targets. Google has named no specific spam policy for this release. Any claim that September targets one exact tactic is inference, not fact.
Source: Search Engine Roundtable, September 28, 2026.
For scale, look at the August 2026 update. Analysis of 100,000 US keywords found that 16.71% of top-10 URLs fell past position 100 during that rollout, versus 9.2% in a comparable quiet week — roughly 1.8 times more likely to lose top-10 placement. September’s window is longer, so early numbers may not tell the full story.
Source: Search Engine Land analysis of SE Ranking data, August 27, 2026.
How could this affect your business?
The practical question isn’t “did Google target me?” It’s “does my site do the thing Google is enforcing against?”
Google’s spam policies are the checklist. The categories most exposed:
- Scaled content abuse — large volumes of pages generated primarily to rank, not to help users. Google says this is spam “no matter how it’s created,” and names generating many pages with AI “without adding value for users” as the first example.
- Doorway and near-duplicate pages — the same service page repeated across city names or keyword variations with only the location swapped.
- Expired-domain abuse — buying a domain for its old authority and filling it with unrelated content.
- Thin affiliate content — repeating merchant descriptions with a link and no first-hand value.
- Cloaking and sneaky redirects — showing users something different from what you show Googlebot, or pushing visitors to another domain.
The test Google describes is purpose, scale, and added value — not whether AI was involved. A page written with AI that adds a real answer to a real question is inside the rules. Ten thousand pages written to catch keyword variations are not.
If that doesn’t describe your site, the odds are this update isn’t your problem. It’s also worth knowing that a spam update is algorithmic, not a manual action. There is no Search Console notice and no reconsideration request. Recovery is measured in months, and it depends on Google’s systems learning over time that the site now complies.
What should you do about the September 2026 spam update?
Do less than you think, and do it in the right order.
Don’t make large changes while the rollout is running. Google says the update may take up to two weeks. Rebuilding pages mid-rollout layers your changes on top of Google’s, and you’ll never know which one moved the needle.
Rule out the boring causes first. Before blaming a spam update, check for a technical problem (crawl errors, an accidental noindex, a broken redirect), seasonality, and any confirmed core update. In Search Console, compare clicks and impressions against a pre-update baseline before September 24.
Check the named reports. Search Console’s Manual actions and Security issues reports are the only places Google names a problem. If something shows up there, it isn’t this update — it’s a manual action with its own process.
Audit against the policies, not the rumors. Go page by page against Google’s spam policies. Mark every paid or sponsored link rel="sponsored". Look for clusters of pages that answer nearly identical questions, content built from the same template, and sections that exist mainly to capture search traffic.
Cut rather than tweak. If a section exists mainly to rank, consolidating or removing it changes what the system sees. Rewriting intros on tens of thousands of generated pages does not.
Wait for the completion notice. Google says it will update its ranking release history page when the rollout finishes. Until that number appears, any impact analysis is provisional.
Why this matters to us
We’ve written before about why we don’t publish AI slop. This update is that principle being enforced from the outside.
For years, the cheapest way to “do SEO” was to generate pages at a volume no real editorial process could sustain. That approach is now the exact profile Google’s systems are built to find and demote. The tactic that looked like an edge is turning into a liability — and it’s being re-checked roughly every other month.
What holds up is the unglamorous version: one clear page for each real service, written for the person who lands on it, with a named author and a reason to exist. When every page has a purpose, a spam update has nothing to take away.
That’s not a philosophical stance. It’s the safer strategy now. Content that sounds like you, answers a real question, and earns trust does two jobs at once — it ranks, and it survives the next enforcement cycle.
If you’re not sure whether your site’s content would hold up under that test, that’s exactly the kind of audit we do.
Frequently asked questions
Is the September 2026 spam update finished?
Not as of late September 2026. Google released it on September 24 with a rollout of up to two weeks, which points to completion around October 8. The Search Status Dashboard posts the completion notice. Until it appears, treat any change as provisional.
Did this update target AI-generated content?
Google has not said so. It named no targets for this release. The policies it enforces cover scaled content abuse regardless of how the content was created — the problem is generating many pages primarily to manipulate rankings without adding value, not using AI itself.
Should I delete pages while the update is still rolling out?
Only if a page clearly violates a published policy or gives no value to a visitor. Deleting useful pages mid-rollout makes it impossible to tell what actually caused your rankings to move.
Is this a penalty I can appeal?
No. A spam update is algorithmic. Penalties in the strict sense are manual actions, applied by a human reviewer, listed in Search Console, and open to a reconsideration request. A spam update has no reviewer and no appeal path — only patterns to fix.
How long does recovery take?
Months, in most documented cases. Google says improvements may appear only after its systems learn over a period of months that the site complies with the spam policies. Anyone promising fast recovery from an algorithmic spam hit is selling something the system doesn’t offer.
The bottom line
Google’s September 2026 spam update is routine enforcement, not a rule change — but it’s the fourth this year, and the longest rollout window yet. If your content is genuinely useful and original, it likely passed you by. If you’ve been buying volume instead of building authority, the margin for that just got smaller.
There’s no shortcut back. There’s only content worth ranking.