Google’s September 2026 spam update started on September 24 and, per Search Engine Roundtable, finished rolling out on October 8. Now that the rollout is over, you can finally measure it cleanly. Compare the full window against the period before September 23, fix anything that breaks Google’s spam policies, and expect recovery to take months, not days.
The update is over, so the guessing can stop
For two weeks, every ranking swing came with the same question: is this the update, or is this noise? That question gets easier to answer this week. The rollout started on September 24, hit a heavy weekend on September 28, a second phase on September 30, and a third burst between October 4 and 6. Search Engine Roundtable reported it finished on October 8. If you missed the build-up, our posts on the September 2026 spam update and the final phase of the rollout cover the timeline.
What Google has said, and what it has not
Google called this a normal spam update. It applies to all languages and locations and targets sites that violate its spam policies, and Google did not announce any policy changes alongside it. It is the fourth spam update of 2026, after March, June, and August. Google also would not say what share of queries were affected.
The part that matters most is the recovery guidance. Google says that if you were hit, reviewing the spam policies and fixing issues can help, but its systems may need months to learn that your site now complies. That means a finished rollout is the start of your recovery clock, not the end of the story.
How to read your data now
Use a clean before-and-after window. Compare the two weeks before September 23 against September 24 through October 8, and look at clicks and impressions by page and by query group. A site-wide drop usually points to a policy problem, while a drop on a handful of pages points to page-level quality. Check two or three direct competitors as well, because a move that shows up across your whole niche is the SERP shifting, not a verdict on your site.
Do not stop at Google rankings. AI Overviews and answer engines pull from the pages Google trusts, so a spam hit tends to show up in citations too. Open the Search Console AI report next to your normal Performance report to see whether visibility moved in both places.
Where SEO, AEO, and GEO meet
Spam signals are shared signals. The same trust problems that cost a page its ranking, such as fabricated bylines or unreviewed AI drafts, also reduce its odds of being cited in an AI answer. That is why we treat the three as one framework, not three services. Google has already called fake author profiles deception in our fake author warning post, and expects a human to check AI output, covered in the AI content fact-check rule. Fixing those once helps rankings, answer boxes, and AI citations together.
Your first 7 days after the rollout
- Day 1: Export your comparison. Pull Search Console data for September 9 to 22 and September 24 to October 8, for your top 20 pages and top 50 queries.
- Day 2: Segment the change. Sort pages into gained, flat, and lost. Note whether losses cluster by template, topic, or content type.
- Day 3: Check the SERP, not just your site. Search your five biggest queries and see which competitors moved up or down, and whether AI Overviews changed what is shown.
- Day 4: Audit against the spam policies. Look for hidden text, cloaking, scaled auto-generated filler, doorway pages, expired-domain tricks, and manipulative user-generated content. Rewrite or remove what fails.
- Day 5: Fix trust signals. Replace any invented author names, add real bylines and credentials, and make sure a human has fact-checked every AI-assisted page.
- Day 6: Log every change with a date. A simple change log lets you connect later movement to a specific fix.
- Day 7: Set a review rhythm. Re-check your data every two weeks, not daily, and do not undo good fixes because of a short dip.
The bottom line
The rollout is done, so this is the moment to replace guesswork with a clean comparison. Fix what breaks the spam policies, strengthen the trust signals that AI answers also reward, and give recovery the months Google says it can take. Sites with real, reviewed content have the least to worry about before the next update.
If you lost traffic and want to know whether this update caused it, our SEO services include a post-update diagnosis alongside rankings and AI visibility work. You can also see how we run SEO, AEO, and GEO as one strategy on our homepage, or browse more articles by topic.
When did Google’s September 2026 spam update finish?
Search Engine Roundtable reported on October 8, 2026 that the rollout had finished. It began on September 24, so it ran for about two weeks.
How long does it take to recover from a spam update?
Google says its systems can take months to learn that a site now complies with its spam policies, so recovery is not immediate even after you fix issues.
Should I make big site changes right after the update ends?
Fix clear policy problems, but avoid broad rewrites based on one week of data. Compare the full rollout window first, then change what the data supports.