Google September 2026 Spam Update: How to Tell If You Were Hit

The Google September 2026 spam update started on September 24, 2026 at 09:15 PDT. Google says it applies globally and to all languages, and that the rollout "may take up to two weeks to complete."¹ As of October 2, 2026, Google's Search Status Dashboard still shows it as ongoing, and site owners have reported two waves of drops.¹⁴

If your traffic fell in late September, the spam update is one of several suspects. This post shows how to tell a spam-update hit apart from the other things that moved in September, and what to do while the rollout is still running.

The short version

• Google started the September 2026 spam update on September 24, 2026 at 09:15 PDT. It is global, covers all languages, and "may take up to two weeks."¹
• The rollout is still running as of October 2, 2026. The dashboard's only entry is Google's September 24 release note, with no end time set. If Google holds to its own estimate, the rollout ends on or before October 8.¹
• That is far slower than the other three 2026 spam updates. March, June and August each finished in under three days, per Google's dashboard.²
• Search Engine Roundtable reported drops in two waves: September 25 to 27, then September 30 into October 1. Site owners also reported Discover and News losses. Google has not confirmed either wave.⁴
• There was no September 2026 core update. Google's list of ranking updates shows none, and the last core update started May 21.²
• Google has not said what this spam update targets. It called it "a normal spam update."³ Its spam policies page is the reference for what any spam update enforces.⁷
• Don't make big changes until the dashboard marks the rollout complete. Google says algorithmic recovery depends on its systems learning "over a period of months" that a site complies.⁸

What is the Google September 2026 spam update?

Google calls a notable improvement to its spam detection systems a spam update. Those systems include an AI-based system called SpamBrain, and Google lists each spam update in its ranking updates history.⁸¹² The systems enforce Google's spam policies, and Google says sites that see a change after a spam update "should review our spam policies."⁸

Google's dashboard announcement for the September 2026 spam update is two sentences: released globally, all languages, up to two weeks.¹ It names no policy and no type of site. Google's LinkedIn post, quoted by Search Engine Roundtable, called it "a normal spam update."³ Google's John Mueller told Search Engine Roundtable's Barry Schwartz the rollout is "likely to take longer than some of the previous ones."³ Schwartz also lists the update as not targeting link spam.³ That point is his reporting, not Google's wording.

Any post that says "this update targets X" without quoting Google is guessing.

Google's spam policies page, last updated August 28, 2026, lists 16 spam policies. They are cloaking, doorway abuse, expired domain abuse, hacked content, hidden text and link abuse, keyword stuffing, link spam, machine-generated traffic, malicious practices, misleading functionality, scaled content abuse, scraping, site reputation abuse, sneaky redirects, thin affiliation and user-generated spam.⁷ Google says sites that violate them "may rank lower in results or not appear in results at all."⁷

Our August 2026 spam update breakdown shows how to audit a site against the content policies, template by template. That audit works for any spam update because it starts from the policies, not from a guess about targets. What is new in September is the two-week rollout, the reported waves, and how much harder they make the diagnosis.

Was there a Google core update in September 2026?

No. Some SEO blogs claim a core update ran from September 12 to 26, 2026. Google's ranking updates history does not list one.² As of October 2, 2026, the only September entry is the September 2026 spam update.

Here is every 2026 ranking update on Google's dashboard:

Update	Started	Duration on Google's dashboard
February 2026 Discover update	February 5	21 days, 17 hours
March 2026 spam update	March 24	19 hours, 30 minutes
March 2026 core update	March 27	12 days, 4 hours
May 2026 core update	May 21	11 days, 21 hours
June 2026 spam update	June 24	2 days, 1 hour
August 2026 spam update	August 18	2 days, 16 hours
September 2026 spam update	September 24	Ongoing as of October 2

Source: Google Search Status Dashboard, ranking history.²

A core update reassesses how helpful and relevant your pages are. A spam update enforces specific policies. Diagnose the wrong one and you fix the wrong thing.

Earlier in September, Search Engine Roundtable reported a spike in ranking chatter on September 15, then volatility in tracking tools starting around September 23 (possibly September 22).⁵⁶ Google confirmed neither. When the spam update was announced, Schwartz wrote that the volatility seen before the announcement "was not it."³ Treat those dates as real movement with no named cause.

September 2026 spam update timeline

Date (2026)	What happened	Confirmed by Google?
September 15	Spike in ranking chatter and Discover complaints reported5	No
September 22 to 24	Volatility reported starting around September 23, possibly the 22nd6	No
September 24, 09:15 PDT	Google releases the September 2026 spam update, "up to two weeks"1	Yes
September 25 to 27	First wave of sites reported hit4	No
September 30 to October 1	Second wave of large drops; Discover and News losses reported by forum commenters4	No
October 2	Dashboard still shows the rollout as ongoing, with no completion update1	Yes
On or before October 8	End of Google's two-week estimate	Estimate only

The two waves come from one source, Search Engine Roundtable, based on tracking tools and reports from site owners.⁴ Schwartz wrote that "we may see two or three or maybe even more days of impact" during this rollout.⁴ If you held steady through the first wave, you are not in the clear yet.

How do I know if the September 2026 spam update hit my site?

You can run these checks in Google Search Console without a developer.

1. Check the Manual actions report. In Search Console, open the Manual actions report. A green check mark means no manual action.¹⁰ If an action is listed, a human reviewer flagged your site. That is a different problem with a different fix (see the recovery section below).

2. Check the Security issues report. Hacked content is one of Google's spam policies.⁷ If something is listed, clean up the hack before you do anything else.

3. Find the day the line broke. Open the Performance report, set the date range to the last 3 months, and look at daily clicks and impressions. Find the first day of the step down. A step on September 25 to 27, or September 30 to October 1, lines up with the reported waves.⁴ A step on September 15, or on September 22 or 23, came before the spam update started.¹⁵⁶

4. Compare periods. Google's own steps: choose the Date filter, open the Compare tab, and compare the last 3 months to the previous period, then year over year. Setting the date range to the last 16 months also shows yearly seasonality.⁹ The newest data can be preliminary and "might change in the next few hours," so don't judge on today's numbers alone.¹³

5. Split by search type and surface. Use the Search type filter to check Web and News separately.⁹ Discover has its own Performance report.¹¹ Google says Discover traffic is "somewhat less predictable than Search traffic," so a Discover dip on its own is weak evidence.¹¹

6. Look at which pages lost. In the Pages tab, sort by the click difference. If the losses cluster in one template or page type (location pages, programmatic posts, affiliate roundups, guest posts), that points to a policy pattern. If losses are spread thin across everything, it is more likely broad volatility or seasonality. That read is our practitioner judgment, not Google's guidance.

7. Check the queries. Run the drop queries through Google Trends. Google suggests this to see whether demand fell across the web or only for you.⁹

Spam update, volatility, seasonality, tracking or manual action: how to tell them apart

Google lists six main causes of traffic drops: algorithmic updates, technical issues, security issues, spam issues, seasonality and changing interests, and site moves and migrations.⁹ Here is how they tend to show up in your data. The patterns are our practitioner judgment, built on Google's diagnostic steps.

What you see	Most likely cause
Manual action listed in Search Console	Manual action. Fix and request review.
Security issue listed	Hacked content or malware. Clean up first.
Step down on September 25 to 27 or September 30 to October 1, clustered in one page type	Consistent with the September 2026 spam update
Step down on September 15 or September 22 to 23	Unconfirmed volatility before the spam update
Same dip at the same point last year, and Google Trends shows lower demand	Seasonality
Only Discover fell, Web search held	Discover variability, or a Discover-specific change
Analytics (GA4) dropped, but Search Console clicks held	A tracking problem, not Google rankings
Pages dropped out of the index, or URL Inspection shows errors	A technical issue, such as noindex, robots.txt or server errors
Drop started right after you moved domains or changed URLs	A site move or migration

Search Console counts clicks from Google's side. GA4 counts visits from your site's side. If GA4 fell and Search Console did not, look at your tag, your consent banner, and any recent site deploy before you blame an update.

Check position as well as clicks. Google says small fluctuations in position "can happen at any time" and recommends "avoiding making radical changes if your page is already performing well."⁹ A page sliding from position 3 to 5 needs a different response than a page falling off page one.

What not to do while the September 2026 spam update is still rolling out

• Don't call it early. The dashboard still shows the rollout as ongoing.¹ A reported second wave already followed a quieter stretch.⁴ Wait for Google to mark it complete, then measure.
• Don't file a reconsideration request for an algorithmic drop. Review requests belong to the Manual actions report, for sites with a listed manual action.¹⁰ No form exists for an algorithmic demotion.
• Don't mass-delete or mass-noindex pages. Deleting on a guess removes good pages along with weak ones. Decide after the rollout ends, with page-level data (practitioner judgment).
• Don't start a site migration or URL restructure. Changing URLs mid-rollout mixes two causes in your data, and you lose the ability to tell them apart (practitioner judgment).
• Don't panic-disavow links. Google's announcement doesn't mention links, and Search Engine Roundtable reports this is not a link spam update.¹³
• Don't trust posts that name a September core update. None is listed on Google's dashboard.²

How do you recover from the September 2026 spam update?

The path depends on which kind of action hit you.

If you have a manual action: Google says to fix the issue on every affected page. Fixing "just some pages will not earn you a partial return."¹⁰ Then select Request Review and explain the problem, what you fixed, and the outcome. Google says most reviews take "several days or weeks."¹⁰

If the drop is algorithmic: there is no request to file. Google's guidance has three parts:

1. Review the spam policies and bring the site into compliance.⁸
2. Expect a slow return. Google says changes "may help a site improve if our automated systems learn over a period of months that the site complies."⁸
3. Expect no guarantee. Google says "there's no guarantee that changes you make to your website will result in noticeable impact."⁹

Links work differently. Google says when its systems remove the effect of spammy links, any ranking benefit they generated "cannot be regained."⁸ Recovery then means earning that ground back with new, legitimate signals.

For the policy-by-policy audit order (improve, consolidate, prune), use the playbook in our August post linked above. For the technical side, such as parameter URLs, faceted navigation and templates that multiply near-duplicate pages, a technical SEO pass cuts the number of thin, near-duplicate URLs that spam systems can misread.

Your September 2026 spam update checklist

Today

1. Open the Manual actions report and the Security issues report. Screenshot both results.¹⁰
2. Open Google's ranking updates history and confirm the September 2026 spam update is still listed as ongoing.²
3. In the Performance report, note the exact date your clicks stepped down, if they did.
4. Check GA4 against Search Console for the same days. If only GA4 fell, fix tracking first.
5. Write down every site change you shipped since September 1: deploys, plugin updates, redirects, content batches. You need this to separate your changes from Google's.

This week

1. Compare the period after your step down against the previous period and against last year.⁹
2. Split the comparison by search type (Web, News) and check the Discover report separately.⁹¹¹
3. Export the Pages tab and group losing URLs by template or page type.
4. Read each of Google's 16 spam policies against your worst-hit page type.⁷ Note any honest match.

After Google marks the rollout complete

1. Give your data at least a full week after the completion date, then rerun the comparisons (practitioner judgment).
2. If losses cluster in a page type that matches a policy, fix that template first, using the August playbook.
3. If losses are spread evenly and match last year, treat it as seasonality and keep publishing.
4. Log what you changed and when. Google says algorithmic recovery is measured in months, so you need a record to judge it against.⁸
5. Recheck after the next confirmed spam update on Google's dashboard.

If you want help

If your traffic broke in late September and you can't tell which cause it was, we can look at it with you. We have shipped 300+ websites since 2019, and traffic diagnosis is part of our SEO services work. Start with a free audit and we will tell you what your data shows.

Frequently asked questions

When did the Google September 2026 spam update start?

The Google September 2026 spam update started on September 24, 2026 at 09:15 PDT. Google said it applies globally, to all languages, and may take up to two weeks to complete. As of October 2, 2026, Google's Search Status Dashboard still lists it as ongoing.

Is the September 2026 spam update finished?

Not as of October 2, 2026. Google's Search Status Dashboard still shows the rollout as ongoing, and its only update is the September 24 release note. Google said it will update its ranking release history page when the rollout is complete. If Google holds to its two-week estimate, it should finish on or before October 8, 2026.

Was there a Google core update in September 2026?

No. Google's ranking updates history lists no September 2026 core update, and the most recent core update started May 21, 2026. Claims of a core update from September 12 to 26 are not backed by Google's dashboard. Search Engine Roundtable did report unconfirmed volatility on September 15 and from around September 23, possibly September 22.

What does the September 2026 spam update target?

Google has not said. Its announcement names no specific policy or type of site, and Google called it "a normal spam update." Google's spam policies page lists the 16 policies its spam systems enforce, including scaled content abuse, site reputation abuse, expired domain abuse and thin affiliation.

Why did my Discover traffic drop in late September 2026?

Site owners reported Discover and News losses around September 30, during what Search Engine Roundtable calls the second wave of the spam update. Google says Discover traffic is less predictable than Search traffic, so check whether Web search also fell. If only Discover dropped, the spam update is one possible cause, not a confirmed one.

How long does it take to recover from a Google spam update?

Google says its automated systems need to learn "over a period of months" that a site complies with its spam policies. There is no reconsideration request for algorithmic drops. A manual action is different: you fix every affected page, request a review, and Google says most reviews take several days or weeks.

Sources

Facts checked on October 2, 2026.