For about a day, the September 2026 spam update looked like a non-event. Then the weekend arrived.
Rank trackers started climbing on Friday 25 September, jumped hardest on Saturday and eased off a little by Sunday 27 September. Barry Schwartz at Search Engine Roundtable described it as a heated weekend and said spam updates now seem to land harder than the ones from years ago. We’re only around five days into a rollout Google says could take two weeks, though. Whatever you’re looking at in Search Console right now is the first act.
Below is what’s confirmed, what the tracking tools and forum threads are showing, where the speculation starts, and what you should (and shouldn’t) do this week.
The quick facts
| Detail | What we know |
| Start | 24 September 2026, 9:15am PDT, per Google’s Search Status Dashboard |
| Expected length | Up to two weeks |
| Scope | Global, all languages |
| Stated target | None. Google called it “a normal spam update”. It isn’t a link spam update. |
| Position in 2026 | Fourth spam update this year, after March, June and August |
| Recovery | Google says it can take months for its systems to learn a site now complies |
What the weekend actually looked like
Pretty much every volatility tracker Search Engine Roundtable monitors showed a spike on Saturday 26 September. That includes Semrush Sensor, AccuRanker Grump, Mangools, Wincher, Zutrix, Mozcast and Sistrix. When that many independent datasets move on the same day, it’s rarely noise.
Glenn Gabe of G-Squared Interactive, who tracks these updates closer than almost anyone, has been posting running “Spam Update Notes” on X. His 28 September edition said the update started showing on Friday but really showed itself over the weekend, with big drops across multiple sites, verticals and countries.
Two patterns keep turning up in his notes. The first is what he calls “Mt. AI” and “Mt. Programmatic”: traffic graphs that shoot up on the back of AI-generated or template-built pages, then fall off a cliff. The second is Grokipedia, the AI-generated encyclopedia, which had already been swinging wildly and slid further with the mid-September volatility.
Why this rollout is different from the last three
Google’s 2026 spam updates have been fast. Very fast. Each of the first three was announced as taking “a few days” and none needed more than three.
| Update | Started | Rollout time |
| March 2026 | 24 March | 19 hours, 30 minutes |
| June 2026 | 24 June | About 2 days |
| August 2026 | 18 August | 2 days, 16 hours |
| September 2026 | 24 September | Up to 2 weeks (ongoing) |
The two-week window isn’t a typo. Schwartz checked with Google’s John Mueller, who confirmed on Bluesky that this one is likely to take longer than the earlier ones. Google hasn’t said why, but a longer rollout usually means more systems or more signals are involved.
The practical problem is attribution. As Semrush pointed out, a three-day rollout gave you a tight window to line your data up against. Two weeks will overlap with whatever else Google changes in that time. Rankings were also already moving before the announcement, around 22–23 September. Search Engine Roundtable noted that pre-announcement volatility wasn’t this update.
So what is it going after?
Officially, nobody knows. Google hasn’t named a policy or a tactic. It isn’t a link spam update. Semrush also flagged that this is the first spam update since Google revised its site reputation abuse policy on 28 August, although Google hasn’t linked the two.
The theory getting the most airtime is SAFE. On 25 September, Search Engine Journal reported that Google had deployed a new AI spam detection system described in a short research paper. According to PPC Land’s breakdown, SAFE uses several AI agents to mimic a human reviewer. It’s designed to catch content that breaks the intent of a policy even when it doesn’t trip any existing rule. SEJ floated that it could be part of this update. Gabe dated the paper to around June and called it the second system Google has identified this year aimed at AI slop.
Treat that as speculation. Google hasn’t confirmed SAFE has anything to do with this rollout.
Our read, for what it’s worth: the losers Gabe keeps posting look a lot like scaled content abuse. Mass AI pages, programmatic page farms, sites built to game AI search visibility. On launch day he posted on LinkedIn that plenty of companies are gaming AI search, and he’d be watching closely. That’s the most likely centre of gravity, though spam updates rarely target just one tactic.
What SEOs are saying in the forums
The most active thread is on BlackHatWorld. That’s a useful place to read, because those are the people most likely to be running whatever Google is targeting.
- The thread starter pointed out that the forum had already logged heavy turbulence from around 4 September, then fresh spikes on 15–16 September. He later noted many members had assumed those swings were the August update partly reversing.
- User sharifawan gave the most useful advice in the thread. Compare Google’s start time with the date your own drop actually began. If you were already sliding on the 4th or the 15th, it probably isn’t this update, and “chasing it will have you fixing the wrong thing.”
- Dollar argued for sitting still. With a two-week rollout, you can’t attribute any change you make now. If a site dropped, look first at links and content that were built recently.
- On the other side, a long-time member said his AI-only blogs with automated link building were doing fine, with a few casualties. We’d take that with a grain of salt. It was posted five days into a two-week rollout, and these claims have a habit of ageing badly.
- A fair bit of the thread was frustration aimed elsewhere. Several members joked that the update they actually want is one where Google stops keeping clicks inside AI Overviews and AI Mode. Others said they’re more focused on the next core update, since the last one was in May.
Over on WebmasterWorld, the chatter captured by Search Engine Roundtable in the days before the announcement was mostly about Google Discover. Publishers reported short-lived bursts followed by flat lines, and one claimed Discover was down 70%. That matters, because a Discover drop can look a lot like a spam hit in top-level traffic numbers when it’s a separate issue. The forum’s long-running monthly observations thread also keeps coming back to the same theme: informational sites losing clicks to AI answers, which some members see as a structural shift rather than another ranking cycle.
Don’t blame the update for everything
September has been messy. There was volatility around 4 September, again around 15–16 September, again on 22–23 September, reported Discover declines, and some third-party tools reporting data collection issues mid-month. If traffic fell this month, the spam update is only one suspect.
A rough way to sort it out:
| What you’re seeing | Most likely cause |
| Drop started before 24 September | Earlier volatility or something else. Not this update. |
| Only Discover traffic fell | A Discover change, not organic search |
| Message in the Manual Actions report | Manual penalty, which has its own reconsideration process |
| Same dip as this time last year | Seasonality |
| Site-wide fall from 24–25 September, and you run content that could breach spam policies | Plausibly the spam update |
What to do this week
- Don’t make big changes mid-rollout. You won’t be able to tell what worked. Wait for Google to mark the update complete on the Search Status Dashboard.
- Annotate 24 September in Search Console and GA4, then compare clicks and impressions by page type, not just site-wide.
- Check the Manual Actions report. It takes 30 seconds and rules out a completely different problem.
- Audit against the policies most likely in play: scaled content abuse, expired domain abuse and site reputation abuse. Start with anything published in bulk over the past year, especially AI-assisted or templated pages. Google’s spam policies page is the checklist.
- Look at who replaced you. If a competitor with thinner content took your spot, it may be a temporary shuffle. If a clearly better page did, that’s a content gap, not a penalty.
- If you were hit, fix it and be patient. Google’s spam update documentation says improvement can come as its systems learn over a period of months that a site complies. Any boost that came from spammy links won’t come back.
Our take
Four spam updates in seven months isn’t a series of one-off events anymore. It looks like continuous enforcement, and each round seems to cut deeper than the last. The shelf life of the “publish 500 AI pages and see what sticks” approach is getting shorter every quarter.
For most small and medium businesses publishing genuinely useful content, this update will probably pass without much drama. The businesses we’d worry about are the ones whose agency quietly spun up hundreds of near-identical suburb or service pages. Those deserve an honest look now, whether they dropped this week or not.
We’ll update this post once Google confirms the rollout is complete. If your numbers have moved and you want a second pair of eyes on your Search Console data, get in touch with the SearchEngineCore team.
Sanjeev Kumar is a digital marketing expert with over 14 years of experience in SEO, PPC, content marketing, and online growth strategies. He specializes in search engine optimization, AI-driven marketing, and digital strategy for businesses and agencies worldwide.
