Did the September 2026 spam update hit your site? How to tell from Search Console

KEY TAKEAWAYS

1. Google has named no target for the September 2026 spam update. Everything said about targets is observation, mostly of templated and AI-generated pages at scale.
2. A drop on a rollout date is weak evidence. Normal churn, demand changes and falling click-through produce drops in the same weeks.
3. The strongest signal is concentration. One template losing most of its traffic while the rest of the site holds points to a policy problem in that template.
4. Do not measure until the rollout completes, and do not use a baseline that the August update had already damaged.

Google started its September 2026 spam update on 24 September at 09:15 Pacific time. As of 4 October the Search Status Dashboard shows no completion entry. If your organic traffic fell in that window, the update is one possible cause among several, and the fixes for each cause are different. Some of them make things worse when applied to the wrong problem. The decision in front of you is not what to fix. It is what happened.

This is the fourth spam update of 2026, and the slow one

The dashboard lists four spam updates this year. March took 19 hours and 30 minutes. June took 2 days and 1 hour. August started on 18 August and finished on 21 August, 2 days and 16 hours later. September is different. Google's note reads: "The rollout may take up to two weeks to complete." Search Engine Roundtable reported John Mueller confirming it would probably run longer than the earlier ones.

Two consequences follow. First, the latest finish is around 8 October, so any reading taken now is a reading of a moving target. Second, the September update began 37 days after the August one started. A site that was hit in August is comparing September against a baseline that was already damaged.

The last confirmed core update on the dashboard is May 2026. No core update is listed for August, September or early October. If someone tells you a core update hit you last week, the dashboard does not support it.

What the update hits is observed, not announced

Google has named no target. Search Engine Journal's report says so plainly, and the dashboard entry mentions only that the update is global and covers all languages.

What we have is observation. Lily Ray reported early drops on sites with heavily templated, programmatic pages, such as one page for every phone area code. Glenn Gabe reported several AI content sites falling. Search Engine Roundtable, citing Gabe, described a second wave on 30 September, when several site owners saw sharp drops on that exact date.

Gabe's case studies from the August update show the shape of a clear hit. One site lost rankings for more than 200,000 queries. An affiliate site lost more than 14,000. A third had over 1.5 million URLs indexed, about 85% of them in programmatic sections. A fourth had scaled to more than 250,000 URLs and dropped for close to 25,000 queries. These are not borderline cases.

There is a disagreement about links. Launchcodex describes the update as enforcing every spam policy, link spam included. Gabe's position is that link spam updates are named separately, so a plain spam update is about content. Neither can be confirmed from Google's own note. The documented cases are all content at scale, so that is where the evidence sits. Search Engine Journal also covered a Google research paper on a detection system called SAFE, which looks for coordinated networks of synthetic content. The article notes that its use in Search is not confirmed. Treat it as context, not as an explanation.

A drop on the right date proves very little

Two other things produce drops in the same weeks.

Movement with no update behind it. Rankings shift between updates as well as during them. Search Engine Roundtable recorded heavy ranking volatility around 26 August, five days after the August update had finished. Google confirmed nothing. A site that slipped that week had no update to blame, and nothing suggests that kind of movement pauses during a rollout.

Fewer clicks for the same rankings. Search Engine Journal covered Chartbeat's 2026 publisher report, which found the year-on-year decline in Google Search traffic to its network had steepened. That network skews to news publishers, so the size will not transfer to a service business. The direction is the point. Traffic can fall while rankings hold.

Tracker charts do not settle it either. They show that results moved across the web. They say nothing about why your pages moved.

Each cause leaves a different signature

A diagnosis method for the next two weeks

1. Change nothing during the rollout. Edits made now cannot be told apart from the update's own effects later.
2. Export your data today. Performance report, web search type, by page and by query, for the last 90 days.
3. Open Manual Actions and Security Issues. A spam update leaves no message. Clean reports remove two causes from the table.
4. Check August first. Look at 18 to 21 August. If the site stepped down then, your baseline must come from before 18 August.
5. Wait for the completion entry, then one full week. Compare 14 days after with 14 days before 24 September, matched by weekday, and with the same weeks last year.
6. Keep search types apart. Roundtable's reports include sites losing Discover traffic entirely. Discover and web search need separate readings.
7. Group pages by template. Service pages, articles, location pages, product pages. Work out each group's share of the total loss.
8. Split lost queries from slipped queries. A query that no longer shows any impressions is a different event from one that fell from position 3 to 5.
9. Find the step date for each group. Then read the table.

A worked example, with hypothetical numbers

This is an invented site, used to show the arithmetic. It is not a real business or a real result.

A regional home services firm has 40 service pages, 60 articles and 900 city pages built from one template. In the 14 days before 24 September it had 4,200 clicks from web search. In the 14 days after completion it had 2,730. That is a 35% fall.

By group, service pages went from 1,500 clicks to 1,470, down 2%. Articles went from 900 to 860, down 4%. City pages went from 1,800 to 400, down 78%. The city template accounts for 1,400 of the 1,470 lost clicks, which is 95% of the loss. Most of its queries show no impressions at all. The step is on 30 September. Manual Actions is clean, and last year shows no dip in these weeks.

That is the spam update signature, and it points at one template. The response is narrow. Keep the city pages for places the firm actually serves and can describe with real detail, such as staff, jobs done and local pricing. Merge or remove the rest. Leave the service pages and articles alone.

Now change one fact. Suppose all three groups fell by about 35%, positions held, and clicks fell faster than impressions. That is not a spam pattern. Rewriting or deleting content would cost time and fix nothing.

What not to do, and how long recovery takes

Kaspar Szymanski, writing in Search Engine Land in September 2026, lists the errors that slow recovery. Deleting content wholesale is one. Filing a reconsideration request before the problem is fixed is another. A reconsideration request also has no role when there is no manual action to reconsider.

On timing, the sources disagree. Google's guidance, as quoted by Search Engine Roundtable, is that its systems need to observe compliance over a period of months. Gabe says the same and cites one recovery that took five months. Against that, a Medium post from late September describes a site recovering in 21 days. The author discloses a commission on the recovery product involved, and the site is not named. Separately, Roundtable quoted one site owner who said the August update had reversed an earlier false positive.

These fit together. When Google corrects its own classification, a site can return at the next update. When a site cleans up a real violation, it waits for the systems to re-evaluate, and that takes months. Plan for the second case. Google's guidance, as quoted by Roundtable, adds a harder point on links: when the effect of spammy links is removed, the ranking benefit they gave does not come back.

If you were not hit, check whether you are exposed

Lily Ray's analysis of more than 220 sites and subfolders drawn from the customer case studies of AI content platforms, using Ahrefs and Sistrix estimates as of May 2026, found that 54% lost 30% or more of their peak organic traffic, 39% lost 50% or more, and 22% lost 75% or more. She is careful to say these are third-party estimates and that many factors could be involved. Still, the templates she flags are common on small business sites: location pages with little unique content, one question per URL, and comparison pages produced in bulk.

Search presence and organic authority are two of the five pillars of digital authority, and both rest on pages that would be worth publishing if search engines did not exist. Gabe also notes that a site caught by a spam update can lose visibility across Google's AI surfaces, which makes the same pages part of how AI engines choose which brands to name.

If you want a baseline before the next update, the free Digital Authority report is open by waitlist.

Questions

Is the September 2026 spam update finished?

Not as of 4 October 2026. Google's Search Status Dashboard shows a start entry for 24 September at 09:15 Pacific and no completion entry. Google said the rollout may take up to two weeks, which would put the latest finish around 8 October.

Does a spam update show up in the Manual Actions report?

No. A spam update is applied by automated systems and comes with no message. A manual action is a separate thing with a notice in Search Console. Check the report anyway, because a clean report rules that cause out.

How long does recovery from a spam update take?

Google says its systems need to see compliance over a period of months. Glenn Gabe's published cases point to several months, and one cited example took five. Claims of recovery in three weeks exist, but the one we found came from someone selling a recovery product and named no site.

Should I delete the pages that dropped?

Not in bulk, and not during the rollout. Find which template lost the traffic first. Then keep and improve the pages that describe something real, and merge or remove the ones that exist only to match a search phrase.

Sources

1. Google Search Status Dashboard, History for Ranking status.search.google.com
2. Google Search Status Dashboard, September 2026 spam update status.search.google.com
3. Google Search Status Dashboard, August 2026 spam update status.search.google.com
4. Google Search Status Dashboard, Summary status.search.google.com
5. GSQi (Glenn Gabe), Google's August 2026 Spam Update case studies gsqi.com
6. Lily Ray, It Works Until It Doesn't, AI Content Strategies That Backfire lilyraynyc.substack.com
7. Search Engine Journal, Google Rolls Out September 2026 Spam Update Globally searchenginejournal.com
8. Search Engine Journal, Google Finishes Rolling Out The August 2026 Spam Update searchenginejournal.com
9. Search Engine Journal, Google Has Deployed A New AI Spam Detector Called SAFE searchenginejournal.com
10. Search Engine Journal, Google Search Decline Steepened To 40% YoY For Publishers searchenginejournal.com
11. Search Engine Roundtable, Google September 2026 Spam Update Is Rolling Out seroundtable.com
12. Search Engine Roundtable, Google September 2026 Spam Update Weekend Impact seroundtable.com
13. Search Engine Roundtable, Phase Two Of The Google September 2026 Spam Update Hits On 9/30 seroundtable.com
14. Search Engine Roundtable, Google August 2026 Spam Update Is Done Rolling Out seroundtable.com
15. Search Engine Roundtable, Google Search Ranking Volatility Continues Post August Spam Update seroundtable.com
16. Search Engine Land (Kaspar Szymanski), Caught by Google's spam update, Don't make recovery harder searchengineland.com
17. Launchcodex, Google's September 2026 spam update, What it targets launchcodex.com
18. Digital Applied, Google's September 2026 Spam Update, What to Check First digitalapplied.com
19. Rentier Digital on Medium, Google Says Spam Update Recovery Takes Months, One Site Recovered in 21 Days medium.com

NEXT STEP

See where your brand stands.

Your Digital Authority Score, who AI recommends for your target questions, and the placements that close each gap. Your first report is free.

Get your free report →