Google’s September 2026 spam update began on September 24 and hit a third phase between October 4 and 6. Search Engine Roundtable expects it to finish any day, though Google has not yet confirmed completion. Wait for the official end date before judging your traffic, then compare your results against the full window from before September 23 through the end of the rollout.
Where the update stands on October 7
The update was released on September 24 and applies worldwide, in all languages. It is the fourth spam update of 2026. Google said it could take up to two weeks, and John Mueller noted it would likely take longer than some previous ones. Search Engine Roundtable tracked the pattern: heavy volatility over the weekend of September 28, a second phase on September 30, and a third phase between October 4 and 6. Multiple ranking tools, including Semrush and AWR, showed a third spike in that last window.
Google has not officially said the rollout is finished. Barry Schwartz wrote that it should be done any day now, so treat today as the late stage of the update, not the end. If you want the background and the first-week checklist, start with our earlier post on the September 2026 spam update.
Why this one is harder to read than past spam updates
Earlier spam updates in 2026 were short. The March update ran about 19 hours, and the June and August updates each ran two to three days. A rollout of up to two weeks gives you a much wider window that overlaps with normal ranking noise, seasonal swings, and competitor changes. Semrush points out that this makes it harder to isolate what the update itself did to your site.
The practical fix is to stop looking at a single day. Compare clicks and impressions from the week before September 23 against the full rollout, check whether competitors in your space moved in the same window, and look at visibility beyond Google alone. Google says sites that fix problems may recover, but its automated systems can take months to learn that a site now complies. A quick bounce back is not guaranteed, and a drop does not always mean a penalty.
Where SEO, AEO, and GEO meet
A spam update is not only a ranking event. AI Overviews and answer engines draw from the same pool of pages Google trusts, so a site flagged for deceptive or auto-generated content tends to lose both rankings and citations. That is why we treat the three as one framework, not three services. Check the Search Console AI report alongside your normal performance report, because a gap between the two can show where trust is slipping.
The same quality signals keep showing up. Google recently called fabricated bylines deception, which we covered in our post on the fake author warning, and it now expects a human to review AI drafts, as explained in the AI content fact-check rule. Both sit close to the top of the ranking factors experts rate highest.
What to do this week
- Wait for Google’s official completion note. Do not make big changes while the rollout is still moving. Check the Search Status Dashboard for the end date.
- Export a before and after comparison. In Search Console, compare the period before September 23 with the full rollout window for your top 20 pages and top queries.
- Segment the drop. Look at which pages and query types fell. A site-wide drop points to a policy issue, while a drop on a few pages points to page-level quality.
- Check competitors and the wider SERP. If every site in your niche moved, the cause may be the SERP itself and not your pages.
- Audit against Google’s spam policies. Look for hidden text, cloaked pages, auto-generated filler, thin doorway pages, and link schemes. Remove or rewrite what fails.
- Document your fixes with dates. Because recovery can take months, a clear log of what changed and when helps you tie any later movement to a cause.
The bottom line
This update is stretching over two weeks, so the right move is patience and clean measurement, not panic edits. Read your traffic across the full window, separate site-wide problems from page-level ones, and fix anything that breaks Google’s spam policies. Sites built on real, reviewed, human-backed content are the ones least exposed to the next update.
If you saw a drop and want a clear read on whether it is spam-related, our SEO services include a post-update diagnosis alongside rankings and AI visibility work. You can also see how we approach SEO, AEO, and GEO as one strategy on our homepage, or browse more articles by topic.
Has Google confirmed the September 2026 spam update is finished?
Not as of October 7. Search Engine Roundtable reports a third phase between October 4 and 6 and expects completion any day, but check Google’s Search Status Dashboard for the official end date.
How long can recovery take after a spam update?
Google says that making changes may help if its automated systems learn, over a period of months, that your site complies with its spam policies. Recovery is not instant.
Does a traffic drop mean my site was hit by the spam update?
Not necessarily. The long rollout overlaps with normal volatility, so compare against competitors and the full window before concluding it was spam related.