Google's September 2026 spam update started on September 24 and finished on October 8, 2026. That's a rollout of 13 days and 16 hours according to Google's Search Status Dashboard, which makes it the longest ranking update of the year so far, and far longer than a typical spam update.
If your organic traffic moved between late September and early October, this is the first thing to check. Here's what Google confirmed, what we saw during the rollout, and a practical way to find out whether your site was affected.
The Key Facts
| Detail | September 2026 spam update |
|---|---|
| Started | September 24, 2026 |
| Completed | October 8, 2026 |
| Rollout length | 13 days, 16 hours (Search Status Dashboard) |
| Scope | Global, all languages |
| Type | Spam update (not a core update) |
| Policy changes announced | None |
Why This Spam Update Was Different
Spam updates are usually quick. Earlier in 2026, the March spam update finished in under a day, the June spam update in about two days and the August spam update in under three days. When Google announced the September update, it said the rollout may take up to two weeks, and it used nearly all of that time.
A spam update targets sites that break Google's spam policies; a core update re-evaluates content quality across the whole index. Google described September's rollout as a normal spam update, even though the ranking swings were large enough that some SEOs compared it to a core update.
What Did It Target?
Google did not announce any new spam policies with this update. Spam updates improve the automated systems that detect content and sites breaking Google's existing spam policies, including:
- Scaled content abuse: many pages produced mainly to rank, whether by AI, templates or people, without real value.
- Site reputation abuse: third-party content published on a strong site to borrow its ranking power.
- Expired domain abuse: buying an old domain to rank low-value content on its past reputation.
- Cloaking, doorway pages, hidden text and keyword stuffing.
- Thin affiliate pages that copy product descriptions without adding anything.
When Rankings Moved
Rank-tracking tools and industry reporting pointed to three main waves of movement during the rollout: September 25–27, September 30 and October 4–6. If your Search Console clicks dropped on one of those days and stayed down after October 8, the update is a likely cause. A drop that started before September 24 points somewhere else.
How to Check If Your Site Was Hit
1. Rule out a manual action first. Open Search Console and check Security & Manual Actions → Manual actions. A manual action is a different problem with a different fix (and a reconsideration request).
2. Line up the dates. In Search Console's Performance report, compare September 10–23 with October 9–22 and look for the day the drop started. Annotate the three volatility windows above.
3. Find the pages that dropped. Sort pages by click change. Spam updates usually hit a pattern (a section of templated pages, a sponsored subfolder, a cluster of thin pages) rather than one random page.
4. Review those pages against the spam policies honestly. If a section exists mainly to rank, improve it substantially, merge it or remove it.
5. Rule out everything else. Tracking changes, site migrations, robots.txt or noindex mistakes and seasonality can all look like an update. My guide to telling a Google update apart from other traffic drops walks through each check.
Recovery: Set the Right Expectations
Google says recovery from a spam update can take many months, because its systems need time to learn that a site now complies. Google also runs periodic refreshes of its spam systems. Fix the underlying policy issues properly, keep publishing genuinely useful content, and measure recovery over months, not days. For the bigger picture, see every Google ranking update in 2026 so far.