Google's September 2026 Spam Update: What Google Confirmed and What It Left Out

Google began rolling out its September 2026 spam update on September 24. It applies globally, covers all languages, and may take up to two weeks to finish. 

It's the fourth spam update of 2026, and it arrived with almost no explanation. 

Google didn't say what it targets, how many searches it affects, or whether any policy changed. So instead of guessing, this post separates what's confirmed from what isn't, then walks through what to check on your own site.

What Is a Spam Update, and How Is It Different From a Core Update?

Google's automated spam-detection systems run all the time. 

Every so often, Google makes notable improvements to them, and it calls that a spam update. SpamBrain, Google's AI-based spam-prevention system, is one example, and Google improves it from time to time to catch new types of spam.

The effect is straightforward: sites that break Google's spam policies can rank lower or stop appearing in results altogether.

That's what separates it from a core update. 

A core update changes how Google judges quality broadly, while a spam update goes after policy violations.

Why Google Gave This Spam Update Its Longest Rollout Window of 2026

With the basics covered, here's what makes this update unusual: the rollout window (how long Google takes to release an update to all search results) is far longer than anything Google gave earlier this year.

Google described each of the first three as taking "a few days." For September, it said up to two weeks.

That's a maximum, not a promise, so the update could finish sooner. 

Still, the gap was big enough that Search Engine Roundtable's Barry Schwartz asked Google's John Mueller whether "two weeks" was a typo. Mueller replied: "Yes, it's likely to take longer than some of the previous ones." 

Five Things Google Has Confirmed About the September 2026 Spam Update

Here are the 5 things that Google has covered:

• Start: September 24, 2026, 9:15 a.m. PDT.
• Scope: global, all languages.
• Type: a "normal spam update."
• Link spam: it doesn't target link spam, and it doesn't cover every spam policy, according to Search Engine Roundtable.
• Recovery: Google says it can take months, and it will run periodic refreshes.

Three Things Google Still Hasn't Told Us (Including What It Targets)

The gaps matter just as much as the confirmed facts:

• The target. Google hasn't named a specific spam policy or tactic.
• The impact. Google wouldn't tell Search Engine Roundtable what percentage of queries were affected.
• Any policy changes. None were announced with this update.

You'll find posts claiming this update targets AI content or templated pages. Those are guesses. Until Google says otherwise, treat any claim about the target as speculation.

Why Your Traffic Drop Might Not Be the Spam Update at All

Google hasn't said what this update targets, so if your traffic changes, it's hard to know why. Two things make it even harder.

1. Google's results were already shifting before the update.

Tools like Semrush, Mozcast, and Sistrix track how much Google's search results are moving around. This is called ranking volatility. When it's high, many pages are changing position at once.

• September 22-24: ranking volatility was high. This was before Google announced the update.
• Search Engine Roundtable says this early movement was not the spam update itself.
• September 25, the day after the update started: ranking volatility jumped again.

A high volatility reading doesn't mean your site was hit. It only shows that results were shifting across the web.

What this means for you: if your rankings changed on September 23, the update probably isn't the cause. If they changed after September 24, it might be.

2. Search Console started counting a new type of search.

Google now splits the Performance report into two types:

• Text searches: people typing in the search box.
• Photo searches: people using Google Lens or Circle to Search.

Photo searches were never counted before. Now they are, and they're added on top of your old numbers. PPC Land reports Google isn't adding them back to earlier dates.

What this means for you: your impressions may rise in late September even if nothing changed on your site.

The simple rule: before you blame the update, check two things. Did the change happen after September 24? And is it still there when you look at text searches only?

What to Do During the Rollout: Five Checks Before You Change Anything

Given all that, the smartest move is patience followed by careful checking. Here's the order to work in:

1. Wait for the rollout to finish. Early data may not show the full effect, so avoid big changes until Google marks the update complete.

2. Match your dates. In Search Console, compare the dates of any ranking or traffic change against the rollout window.

3. Compare page groups, not just totals. Split your pages into types, such as blog posts, product pages, and location pages. A drop in one type tells you more than a dip in overall traffic.

4. Review your content against Google's spam policies. This is Google's own advice for any site that sees a change after a spam update.

5. Check your money pages. These checks are practical, not Google rules:

• Does the target keyword appear in the title, URL, H1 and first sentence?
• Does the page answer the search intent right away?
• Is the page useful and different from your other pages, or is it a near-copy with a few words swapped?

Why Recovery From a Google Spam Update Can Take Months

If you do find problems, fix them, then give it time. 

Google says its systems may need months to learn that a site now complies, and periodic refreshes mean improvement can show up later rather than right away.

If your traffic didn't change, you're fine for now. 

Even so, sites that don't spam can occasionally get caught in a spam update, which is one more reason to keep watching.

The Short Version: Wait, Check Your Data, and Keep Your Pages Original

The September 2026 spam update is a global rollout that may last up to two weeks, longer than any spam update Google ran earlier this year. 

Google hasn't said what it targets. The safest response is to wait for the rollout to end, check your data by page group, and make sure your pages are useful and original