Google's September 2026 Spam Update Is Complete: How to Tell If Your Site Was Hit

Google has confirmed that the September 2026 spam update finished rolling out on 8 October. The update started on 24 September, and Google's own ranking update history records the rollout at 13 days and 16 hours. That is almost the full two-week window Google warned about at launch, and a very long run by recent standards.

This is the fourth spam update Google has shipped this year, and the previous three were quick. The March update wrapped up in under 20 hours, June took about two days, and August was done in under three. So when a so-called normal spam update needs two weeks and keeps shaking rankings in waves, site owners are right to pay attention.

In this post we go through what Google said, what the early data shows, how to check whether your site was caught, and what to do about it if it was. Let's sink in!

What Google Actually Announced

The announcement itself was short. Google's Search Status Dashboard said it released the September 2026 spam update, which applies globally and to all languages, and warned that the rollout may take up to two weeks to complete. On 8 October the dashboard got a single new line: the rollout was complete as of October 8, 2026.

Google described it as a normal spam update, meaning a refresh of its automated spam detection systems rather than a new policy. The official documentation calls these updates a notable improvement to the automated systems for detecting spam. There was no detail about what those systems now catch better, and no explanation of why this one needed so much more time than the March, June and August rounds.

That silence is typical for spam updates. Google rarely says what they target, which leaves site owners reading the data instead.

A Two-Week Rollout That Came in Waves

The length of the rollout matters because the impact did not arrive all at once. Tracking tools and site owners reported three distinct waves of volatility: the first around 25 to 27 September, a second around 30 September, and a final burst between 4 and 7 October.

The second wave drew the most comments. Search marketer Glenn Gabe said he believed a specific change happened on 30 September, and that he received emails from site owners reporting large drops that day. On WebmasterWorld, several users described Google Discover and News traffic vanishing on the same date, with Discover swinging between active and nearly dead within a single day.

Barry Schwartz at Search Engine Roundtable, who tracked the update from day one, had warned that a two-week rollout would likely mean several impact cycles rather than one. That is exactly how it played out. It also means a site could look fine in week one and still get hit in week two, so a quick check you did in late September does not settle the question.

What Early Data Shows About the September 2026 Spam Update

The most concrete numbers so far come from Diib, which analysed 32,569 sites with connected Google Analytics. Comparing 24 to 26 September against the same days a week earlier, the median share of unpaid Google search visits fell from 34% to 31%. More telling, the share of sites that lost half or more of their Google traffic doubled, from 5% to 10%.

Diib was careful to call this an early read rather than a verdict, and its data cannot show which sites Google actually flagged as spam. Still, a doubling of heavy losers within days of the launch fits what forums and comment sections were reporting at the time.

One curious detail: Gabe noted that Reddit's AI-translated pages are surging again in Italy, Germany, Brazil, France and other countries, after declining through the May core update and the June spam update. Google has said AI translation is acceptable when the content is high quality, so it is hard to say whether this is a deliberate outcome or a side effect.

How to Tell If Your Site Was Hit

Start with Search Console, not with your rank tracker. SEOmonitor reported that many rank trackers showed sudden ranking changes from 26 September that real searchers never saw, apparently because Google was returning incomplete or incorrect results to automated rank-checking queries. A scary chart in a tracking tool is not proof of anything on its own.

In Search Console, compare clicks and impressions for the 24 September to 8 October window against the two weeks before it, and ideally against the same period last year to rule out seasonality. A drop that lasts several days and shows up in both impressions and clicks is a much stronger signal than a one-day dip or a tracker alert.

Also look at the shape of the drop. A spam update tends to hit on specific dates rather than eroding traffic slowly, so check for a step change around 25 to 27 September, 30 September, or 4 to 7 October. If your traffic stepped down on one of those dates and stayed down, the update is the likely cause.

What to Do If You Were Affected

There is no form to fill in and no reconsideration request, because spam updates are fully automated. Google's advice is to review its spam policies and fix anything that might trip them: scaled content produced mainly for rankings, doorway-style pages, expired-domain abuse, thin affiliate pages, or content published on a site purely to borrow its reputation.

Be honest with yourself here. Many of the sites complaining about this update leaned heavily on mass-produced content, programmatic pages or aggressive syndication. If a meaningful share of your pages would embarrass you in front of a customer, that is the place to start cutting.

Recovery is slow by design. Google says its systems need to recognise the improvements over a period of months, and in practice recovery often lines up with a future spam update rather than following your fixes right away. What you should not do is panic-delete large sections of the site without a clear reason, or chase every theory circulating in the forums.

And if nothing in your data moved during the two weeks, you are most likely fine. Clean sites do sometimes get caught in spam updates, but the sensible response to this one is a check, not a rebuild.

Takeaways for Businesses Building Digital Products

For product and website owners, this update is less about spam tricks and more about the direction of travel. Google is now willing to run its spam systems for two full weeks, in several passes, across all languages at once. The cost of being on the wrong side of that line keeps going up.

If content is part of your product, say a marketplace with thousands of listing pages, a SaaS with programmatic landing pages, or a publisher relying on AI-assisted articles, treat content quality as an engineering constraint rather than a marketing afterthought. Set a quality bar for generated pages, keep the ones that fail it out of the index, and keep a human in the loop for anything customer-facing.

It also makes sense to reduce dependency on a single channel. Between spam updates, core updates and AI Overviews taking a growing share of clicks, organic Google traffic is simply more volatile than it was two years ago. Email lists, direct relationships and other discovery channels will not replace Google, but they soften exactly this kind of hit.

Finally, build monitoring into your routine. A monthly look at Search Console, with alerts for sharp drops, means you learn about an update from your own data rather than from a client or a quarterly report.

Final Notes

The September 2026 spam update is done, but its effects are only now settling. The sensible sequence is simple: check Search Console against the rollout dates, separate tracker noise from real traffic changes, and only then decide whether you have a cleanup project on your hands.

At Davydov Consulting we help businesses audit their sites after Google updates and build content and SEO setups that hold up to them. If your traffic moved in the last two weeks and you are not sure why, it is worth finding out before the next update lands.