Google's September 2026 spam update began on 24 September 2026 and may take up to two weeks to finish, according to the Google Search Status Dashboard. A small site should not react daily. It should run a structured 30-day audit: rule out other causes, sort pages by risk, fix or remove the weakest, then measure after the rollout ends. This plan is written for sites with roughly 20 to 500 pages and no in-house SEO team.
Verified as of 30 September 2026. Not legal advice. Google has not named a specific policy for this update, so anything about its targets is inference.
Key Takeaways
- Don't change anything for the first few days of a rollout. Rankings move while systems are still updating.
- Compare the two weeks after completion with the two weeks before the start, not day-to-day noise.
- Rule out technical faults, manual actions and seasonality before blaming the update.
- Audit three areas first: scaled content, third-party content on your domain, and acquired domains.
- Prune with evidence. Deleting pages in a panic can make things worse.
What We Know About This Update
Google's status dashboard lists a "September 2026 spam update" in the ranking section, starting 24 September 2026. It is labelled as service information, not an incident. Secondary reporting, such as Digital Applied's rollout write-up, says it began at 9:15am Pacific and may take up to two weeks. The same source notes earlier 2026 spam updates finished faster and that Google has not said what this one targets.
Google's general spam policies list the categories it acts against, including scaled content abuse, site reputation abuse, expired domain abuse, cloaking, hidden text and link spam. Those are the sensible places to look, without pretending we know which one applies.
Week 1 (Days 1-7): Observe and Rule Out
Snapshot your baseline
Export Search Console performance data: clicks, impressions, average position by page and by query, for the 28 days before 24 September and for the current period. Save it. Without a baseline every later judgement is a guess.
Rule out other causes
Before you blame a spam update, check:
- Indexing and crawl reports for new errors, server issues or noindex tags added by a plugin.
- Manual actions in Search Console. If there is one, that is a separate process with its own reconsideration path.
- Seasonality. Compare year over year. A back-to-school dip is not a penalty.
- Tracking. Confirm analytics still fires. I have seen a consent-banner change halve reported traffic overnight.
- Recent site changes such as migrations, redirects, template edits or a theme update.
Do not edit yet
The dashboard says rollout can take up to two weeks. Changing many pages mid-rollout muddies your ability to tell what helped. Fix genuine technical errors, and leave content alone.
Week 2 (Days 8-14): Triage Your Pages
Once the rollout completes (check the dashboard for an end date), sort every indexable URL into four buckets.
| Bucket | Definition | Default action |
|---|---|---|
| A: Earners | Steady clicks, conversions or links | Protect; refresh lightly |
| B: Solid but quiet | Useful, low traffic | Improve or merge |
| C: Thin or duplicate | Repeats other pages, no unique value | Merge, noindex or remove |
| D: Risky | Matches a spam policy pattern | Fix urgently or remove |
How to find Bucket D
Ask these questions of each page:
- Was it produced at volume with a template and minimal editing?
- Does it exist mainly to catch a keyword rather than to help someone?
- Is it written by someone with no real link to the site, published because of your domain's authority? (Google's site reputation abuse policy concerns third-party content published to exploit a host site's ranking signals.)
- Did you buy or inherit a domain and put unrelated content on it?
- Does it include hidden text, doorway pages or cloaking?
Be honest here. A common small-site pattern is 80 near-identical "[service] in [city]" pages. If each has a real local detail, keep them. If only the city name changes, that is a problem regardless of any update.
Week 3 (Days 15-21): Fix, Merge, Remove
Improve Bucket B
Add what is missing: a real example, first-hand experience, current data with a date, a clear answer near the top. Google's helpful content guidance asks whether content shows first-hand expertise and gives substantial value beyond the obvious. Use that as your editing checklist.
Merge Bucket C
If three pages cover the same topic, pick the strongest URL, fold the best passages of the others into it, and 301 redirect the rest. Update internal links so you don't leave redirect chains.
Deal with Bucket D
- Scaled thin pages: remove or rewrite by hand. Rewriting with a tool and pasting the output does not change the underlying issue.
- Third-party or sponsored content sections: either bring them under real editorial oversight with a genuine connection to your site, or remove them. Get legal or policy advice for anything commercial.
- Expired domain content: if unrelated to the site's real purpose, remove it.
- Link schemes: disavow is rarely needed; stop buying links and let old ones age out.
Deletion rules
Delete only when a page has no traffic, no links and no purpose. Otherwise redirect or improve. Return a proper 404 or 410 for removed pages with nothing to redirect to.
Week 4 (Days 22-30): Measure and Decide
Compare the two weeks after completion with the two weeks before the start. Digital Applied recommends the same window, and it is sensible because it dodges rollout volatility.
Reading the result
- Stable or up: you were not the target, or your fixes helped. Keep improving.
- Down across many pages: look at the pattern. Is it one directory, one template, one author?
- Down on a handful of pages: check for a competitor improvement or a genuine intent change before assuming a penalty.
Google does not send a message for algorithmic changes. If you lost traffic and made real improvements, recovery usually appears over later updates, not overnight. I would not promise a timeline.
A Realistic Small-Site Example
A 60-page consultancy blog I reviewed had 14 posts with near-identical structure, written quickly with AI assistance and lightly edited. Two earned traffic; twelve had none in a year. The triage put those twelve in Bucket C. We merged them into four substantial guides with the owner's own client examples, redirected the rest and removed three off-topic posts. I don't claim that caused any ranking change. The site simply became something the owner was proud to link to, which is a better test than any update.
A Simple Log to Keep
Throughout the 30 days, keep one dated log with four columns: date, change made, pages affected, and reason. When results arrive you will know exactly what you touched. It also protects you from the common trap of crediting a recovery to whatever you did last. If you changed forty things in one afternoon, you will never know which mattered, so batch changes by bucket and record each batch separately.
What Not to Do
- Don't mass-delete based on a traffic dip.
- Don't rewrite everything with a new AI prompt.
- Don't chase weekly ranking moves during rollout.
- Don't blame the update for a technical issue.
- Don't panic-buy links or "recovery" services with guarantees.
FAQ
How long does the September 2026 spam update take?
Google said it may take up to two weeks to complete, from 24 September 2026. Check the Search Status Dashboard for the end date before judging results.
Is this a core update?
No. It is a spam update. Google's most recently confirmed core updates this year were March and May 2026, as reported by industry outlets.
Which spam policy does this update target?
Google has not said. Any specific claim is inference. Auditing scaled content, site reputation abuse and expired domains is sensible, but not confirmed as the target.
Should I delete AI-generated pages?
Not automatically. Google's guidance focuses on value, not how content was produced. Remove pages that are thin, repetitive or made at scale with no added value. Keep and improve those that genuinely help.
How soon can I recover?
There is no fixed timeline. After real improvements, changes may show over subsequent updates. Anyone guaranteeing a date is guessing.
Do I need a paid tool?
No. Search Console, a crawl export and a spreadsheet are enough for a small site.
Should I disavow links?
Rarely. Disavow is for clear link scheme problems you can't remove. Most small sites don't need it.
What if I have a manual action?
That is separate. Follow the instructions in Search Console, fix the issue and submit a reconsideration request.
What if my traffic did not change?
Keep going. The audit still leaves the site stronger for the next update.
Need Help Running the Audit?
If you'd like a practical second opinion on your content, you can see my work at younusfardeen.in and reach me through the contact form. I have 4+ years of marketing experience across SEO, AEO and content strategy, and I'm glad to review a small site with you.