On September 24, 2026, around noon ET, Google started rolling out its September 2026 spam update. The rollout finished on October 8, after 13 days and 16 hours. That is very long for a spam update. The June 2026 spam update was done in about two days. During those two weeks, many site owners saw rankings move and could not tell whether the update was the cause, or seasonality, or a competitor.
Now that the rollout is over, you can run a proper diagnosis. This article covers what the update targeted, how to tell if your site was hit and what to fix to recover.
1. What the September 2026 spam update targets
Google made one point clear: this update does not target link spam. It targets pages that break its policies on content and on how domains are used. Four practices are in scope.
Scaled content abuse
This means publishing large numbers of pages mainly to rank, without real value for users. Google does not care how the pages are produced: by AI, by human writers or by both. Typical examples are mass-produced location pages (“plumber + 300 cities” with the same text) and automated “best of” lists with no real testing.
Site reputation abuse (parasite SEO)
A trusted domain hosts weak third-party content to profit from its authority. Examples include “coupon codes” or “casino” sections on a news site, and sponsored articles published without editorial review.
Expired domain abuse
This means buying a lapsed domain with history and filling it with thin content or content unrelated to its old topic, hoping to keep its standing.
Cloaking
Cloaking means showing Googlebot one page and visitors another. This includes conditional redirects and pages that change depending on the user-agent.
2. Why a two-week rollout changes your analysis
When an update rolls out in 48 hours, a sudden drop is easy to see in your charts. Over 14 days, the impact can come in steps and mix with other changes. Adjust your method:
- Compare matching periods: take the 14 days before September 24 and the 14 days after October 8, and leave the rollout window out.
- Look at groups of pages: a drop across the whole site often points to a site-wide issue (content quality or domain reputation). A drop limited to one folder (/blog/, /locations/, /deals/) usually points to the pages causing the problem.
- Rule out other causes: a technical issue, a migration, seasonality or changes to the results page (AI Overviews, new features) can look like a penalty.
3. How to check whether your site was hit
Step 1: Search Console
In the Performance report, compare impressions and clicks for the two periods, filtered by folder. Also open the Manual actions report. An algorithmic update does not send a message, but you should rule out a manual action before any other analysis.
Step 2: the pages that lost the most
Export the 50 URLs that lost the most clicks. Check whether they share something: the same page template, the same production date, the same author or the same agency. If they do, you have very likely found the cause.
Step 3: review the pages the way a Google rater would
For each suspect group, ask one simple question: does this page offer something that ten other pages don’t already offer? If the honest answer is no, the page is at risk, even if a person wrote it by hand.
4. A 5-step fix plan
- Remove or merge mass-produced pages that add no value. Use a 301 redirect to a pillar page where it makes sense, or return a 410 when the page has no equivalent.
- Improve the pages you keep: add data from your own business, real photos, local examples and verifiable reviews. Reworded generic content is no longer enough.
- Take back editorial control of third-party content: remove partner sections that are unrelated to your topic, set them to
noindexor delete them. - Check that your domain is consistent: if you bought an expired domain, your content should continue its old topic, or you should accept that you are starting over.
- Test rendering with the URL Inspection tool to make sure Googlebot sees the same page as your visitors. Pay close attention to ad scripts and mobile redirects.
5. How long does recovery take?
To be honest, there is no instant recovery. Google says a site recovers when its systems reassess it and find that it now follows the policies, which takes months. Future updates, whether spam or core, are when improvements usually show up. If you fix things now, you will be ready for the next reassessment.
Avoid the opposite mistake too: deleting half your site in a panic. Mass deletion without analysis can remove pages that were performing well and were never the problem. Work one group of pages at a time and start with the data.
Conclusion: a reminder about quality
The September 2026 spam update does not add a new rule. It enforces existing rules more strictly: on scaled content, parasite SEO, expired domains and cloaking. For a legitimate site, the main risk is pages produced in bulk that add nothing new. Now that the rollout is over, compare your data, find your weakest page groups and fix them before the next update.
Want to know if your site is at risk? seoforge.io can help with a full SEO audit, a page-by-page content quality review and hands-on support to put your site back on solid footing.
