Google's September 2026 Spam Update Is Done. What to Check

Google finished its September 2026 spam update on October 8. The rollout took 13 days and 16 hours, according to Google's Search Status Dashboard and Search Engine Journal. No spam update this year came close to that.

Now that it is over, you can finally read your own numbers. Most small business sites came through fine. If yours did not, the fix is slow and plain, and it starts with the right comparison.

The Short Version

• The update started at 9:15 a.m. Pacific on September 24 and ended at 1:00 a.m. Pacific on October 8.
• It hit in waves, not all at once. Search Engine Roundtable tracked spikes on September 24 to 27, September 30 and October 4 to 6.
• Google has not said what this one targeted.
• Recovery takes months, by Google's own account. There is no quick switch to flip.
• The safe move this week is to compare clean dates in Search Console, then fix only the pages that actually lost ground.

How Long This One Took

Search Engine Journal pulled the durations from Google's ranking update history. Every other spam update in 2026 finished in under three days. This one ran about five times longer than the slowest of them.

A long rollout matters for one reason. Any drop you saw between September 24 and October 8 could have come from the update, or from anything else that happened in those two weeks. You could not tell while it was still moving. Now you can.

When we covered the start of this update on September 24, Google said it could take up to two weeks. It used nearly all of that time. Our first story on the rollout has the background.

It Came in Three Waves

Barry Schwartz at Search Engine Roundtable watched more than a dozen ranking trackers through the rollout. He saw the first wave from September 24 to 27, a quiet stretch, a second rise on September 30, and a third spike from October 4 to 6. He expected short bursts of one to three days with gaps in between, and that is what showed up.

That pattern is why a single bad morning told you little. A site could drop in one wave and come back in the next.

There was noise on top of the waves, too. Search Engine Journal reported that SEOmonitor saw many rank trackers record sudden moves starting September 26 that real searchers never saw. Google was returning incomplete results to automated checks. If a tracking tool scared you in late September, check it against Search Console before you trust it.

What the Early Data Showed

Search Engine Journal also reported an early read from Diib, published September 29. Diib looked at 32,569 websites with Google Analytics connected. It compared each site's share of visits from unpaid Google search on September 24 to 26 with the same days a week before.

• The median share dropped from 34% to 31%.
• The share of sites that lost half or more of that traffic doubled, from 5% to 10%.

Diib itself called it an early read, not a verdict. It covered the first wave only.

What We Saw in Our Own Search Console Data

We run and manage a few dozen small business websites, mostly local service companies and directories. On October 10, 2026, we pulled Search Console data for every one of them. We kept the 25 sites that had at least 200 search impressions in the two weeks before the update, September 10 to 23. Then we compared those with the 14 days of the rollout, September 24 to October 7.

So 21 of 25 held steady or grew. Four fell by more than a fifth. A few of the growing sites are new and were climbing before the update began, so growth here is not proof the update helped them. And a drop is not proof the update hurt. It is a starting point for a closer look, which is exactly how you should treat your own numbers.

Who Spam Updates Are Built to Catch

Spam updates feed Google's automated spam systems, including the one Google calls SpamBrain. Google's spam policies list what those systems look for. For a small business, these are the ones worth reading twice.

• Scaled content abuse. Making lots of pages mainly to rank. Google names using AI tools to churn out many pages that add nothing for the reader as one example.
• Doorway abuse. Pages built to rank for near-identical searches that then push the visitor somewhere else. A page per town with only the town name swapped is the classic version.
• Expired domain abuse. Buying an old domain and filling it with low-value pages to borrow its past rankings.
• Site reputation abuse. Hosting someone else's content mainly to ride your site's standing in search.
• Link spam. Buying links or trading them mainly to move rankings.

A normal local site with real service pages, real photos and honest reviews is not what these rules describe.

Google Also Updated Its AI Content Guidance

On October 1, in the middle of the rollout, Google updated its guide to using generative AI content. Its documentation log says the change added material from its Search Quality Raters guidelines.

The guide now points to two rater sections. One covers scaled content abuse. The other covers main content made with little to no effort, little to no originality and little to no added value. Google also says to fact check AI text before it goes live, including page titles, meta descriptions, structured data and image alt text.

Google is careful to say the rater guidelines are not a ranking manual. Still, the timing tells you what it wants owners thinking about.

A Checklist for This Week

1. Open Google Search Console and go to Performance, then Search results.
2. Set a custom date range for September 10 to 23. Compare it with October 8 onward once you have at least a week of data.
3. Look at clicks and impressions together. A drop in both that holds for several days is real. A one-day dip is noise.
4. Switch to the Pages tab and sort by the biggest loss. Write down the five pages that lost the most.
5. For each one, ask a plain question. Would a real customer be glad they landed here? If the page is a near copy of another page, thin, or made only to catch a search, improve it or remove it.
6. Check Security and Manual actions in Search Console. A spam update is automatic and will not show up there, but a manual action would, and it needs a different fix.
7. If you ever bought links, stop. Google says the boost from spammy links is lost once its systems discount them and cannot be won back.

How Long Recovery Takes

Google's spam updates page is blunt. Changes may help a site improve, but only after Google's systems learn over a period of months that the site follows the rules.

That means no trick fixes this by next week. Clean up the weak pages, keep publishing useful ones, and judge the result over the next few months, not the next few days.

Common Questions

What is the latest Google spam update?

As of October 10, 2026, it is the September 2026 spam update. It started on September 24 and Google marked it complete on October 8. It was the fourth spam update of 2026, after the March, June and August updates.

When did the September 2026 spam update finish?

Google's Search Status Dashboard lists the end as 1:00 a.m. Pacific time on October 8, 2026. The rollout ran 13 days and 16 hours.

How do I know if my site was hit by the spam update?

Open the Performance report in Google Search Console. Compare clicks and impressions for the two weeks before September 24 with the days after October 8. A drop that holds for several days in both clicks and impressions means more than a dip on a rank tracker chart.

How long does it take to recover from a Google spam update?

Google says changes may help, but only after its systems learn over a period of months that the site follows its spam policies. If the hit came from spammy links, the boost those links gave is gone for good.

Is AI written content spam to Google?

Not by itself. Google's spam policy targets making many pages mainly to rank, and it names using AI tools to churn out pages that add no value as one example. Its October 1 guidance also says to fact check AI text, titles, meta descriptions and alt text before you publish.