Google today marked its September 2026 spam update as complete, 13 days and 16 hours after the rollout opened on September 24, according to the Google Search Status Dashboard. No other spam update this year ran for more than about three days.

In Short

Google today said that a big clean-up of its search results, aimed at websites that break its anti-spam rules, has finished after running for just under two weeks in every country and language. It matters to anyone whose business gets visitors from Google search, because sites caught breaking the rules can be pushed down the list or dropped from it, and Google did not say which sites or how many searches were touched. From here, the update's stated rollout window is shut, so the ranking moves seen over the past fortnight are on the record while Google keeps its list of targets to itself.

What the dashboard shows

According to the Google Search Status Dashboard, the incident affecting Ranking began at 09:15 US/Pacific time on September 24. That is 16:15 UTC and 18:15 in Central European Summer Time. The opening note described an update that applied worldwide and to every language, with a rollout that might take up to two weeks. The closing entry, stamped 01:37 PDT today, is shorter: "The rollout was complete as of October 8, 2026."

The page carries two slightly different end times. Its header puts the close of the incident at 01:00 on October 8, while the completion note is logged at 01:37. Search Engine Roundtable, in its report on the completion, gives 4:37 am Eastern, which is the same instant as the later stamp. Measured to the header, the run lasted 13 days, 15 hours and 45 minutes; measured to the note, 13 days, 16 hours and 22 minutes. This article uses the second figure. The start also differs by a few minutes between the two sources, since Search Engine Roundtable says about 12:00 pm Eastern whereas 09:15 PDT converts to 12:15 pm.

On LinkedIn, Google Search Central described the release as "a normal spam update" covering all languages and locations, according to Search Engine Roundtable. Barry Schwartz, who wrote that report, said he was unsure why the label suits a rollout of two weeks rather than two days. Nothing in the dashboard entry or in the posts he reproduced gives a reason for the longer window.

How the run compares

Four spam updates have run in 2026. The table sets them beside the long 2025 cycle, using dates from Search Engine Roundtable's running list of spam updates.

Spam updateOpenedClosedRun time
March 2026March 24March 25about 19.5 hours
June 2026June 24June 26about 2 days
August 2026August 18August 21about 3 days
September 2026September 24October 813 days, 16 hours
August 2025 (reference)August 26, 2025September 22, 202527 days

March's update finished in about 19.5 hours, the fastest spam rollout on record. September's ran roughly 17 times as long. The June and August updates closed in two and three days, whereas the September dashboard entry allowed up to two weeks, and the rollout used about 98 percent of that allowance. Until now the year's pattern had held at three days or less; the autumn run broke it.

Against the longer record the run is lengthy but not unprecedented. Search Engine Roundtable's list holds 15 documented spam updates since June 2021, and five of them ran longer: the July 2021 link spam update at 29 days, the August 2025 update at 27 days, the December 2022 link spam update at 19 days, and the October 2023 and March 2024 updates at 15 days each. By that list, September 2026 ranks sixth for duration.

Google's own staff have been giving a different figure. A recap of internal timing data that Gary Illyes put on screen at an October talk listed spam update rollouts at one to two days, as PPC Land reported; the September run lasted almost seven times the upper end of that range.

Length has also been a poor guide to effect. During the 27-day cycle in 2025, SISTRIX measured ranking changes below typical daily fluctuation. Search Engine Roundtable's early read of the September run points the other way, as the section on tracker data below describes.

What Google disclosed, and what it left out

Google's disclosures were confined to the dashboard entries and its posts on LinkedIn and X. According to Search Engine Roundtable, Google would not say what share of queries or searches the update touched, and it named no policy. That publication's own summary lists the target as sites breaking some of the spam policies, says the update does not aim at link spam, and adds that Google mentioned no changes to the policies themselves. It also records that Google said periodic refreshes of the update will follow and that recovery can take many months.

The mechanics sit in Google's documentation, which Search Engine Roundtable reproduced. The systems that detect search spam run constantly, and "spam update" is the label Google gives to notable improvements in how they work. The documentation names SpamBrain, its "AI-based spam-prevention system", as an example of a component that is refined from time to time to catch new kinds of spam. Google has never published the system's architecture, training data or thresholds. Sites in breach of the policies can be placed lower in results or dropped from them entirely. Improvement is possible if the automated systems learn over a period of months that a site complies, but in a link spam update any ranking benefit that spammy links once produced is lost permanently.

The enforcement route matters. Unlike a manual action, which arrives as a notice in Search Console and can be appealed, a lower placement produced by these systems comes without notification. Sites affected learn of it from their traffic, or from third-party trackers.

No new policy accompanied the release, so the update applies rules already published. PPC Land's account at the time of the release listed expired domain abuse, scaled content abuse, site reputation abuse, doorway abuse, back button hijacking and fake or undisclosed incentivized reviews among the rules in force; Google itself named none of them for this cycle. One addition is recent. On May 15, 2026, Google stated that its spam policies apply to generative AI responses in Search, including AI Overviews and AI Mode. The September run is the third spam update since that clarification, after those of June and August.

A geographic split also applies. Since August 30, manual actions for site reputation abuse no longer affect rankings for searchers in the European Economic Area. The September cycle was the first confirmed ranking update after that change. The carve-out concerns manual enforcement and, as PPC Land noted at the release, leaves the behavior of the automated systems untouched, so a site with audiences inside and outside the region can hold different positions depending on where the searcher sits.

What the trackers recorded

Windows of volatility

Search Engine Roundtable documented three windows of ranking movement during the rollout: September 25 to 27, September 30, and October 4 to 6. Schwartz attached a caveat, which is that the dates assume Google made no other change during the period, something he said he could not know. His aggregate view draws on 14 tracking tools: AccuRanker, Algoroo, AWR, CognitiveSEO, DataForSEO, Mangools, Mozcast, Semrush, Serpstat, SimilarWeb, Sistrix, Wincher, Wireboard and Zutrix. Volatility seen before the release on September 24 was not the update, he wrote, although PPC Land logged elevated movement from around September 22.

Assessments of the effect differ. Some in the search community described the effect as closer to that of a core update, Schwartz reported, and he said he was unsure of that reading. A line at the foot of his report adds a forecast of sorts: he would not be surprised by a core update very soon.

Watching a rollout has also become more expensive. Google confirmed on August 26 that it routes result links through google.com/goto addresses, and Nozzle measured 500 to 1,000 requests to resolve a single five-page ranking. Google's own reporting leaves gaps too: the generative AI performance report that reached every Search Console property on August 31 shows impressions but neither clicks nor queries.

Anecdotal reports

Reader comments under the Roundtable report are unverified and cannot be matched to named sites. Two commenters said Discover traffic had collapsed in the final days, and one said a site lost about 25 percent of its traffic while still making sales. Two others said site reputation abuse and expired domain abuse remain visible in their sectors. PPC Land's coverage of the release carried comparable posts from site operators, including Discover declines of 70 percent, and noted that such reports could not be tied to the update rather than to the movement that preceded it or to ordinary noise.

Context for marketing teams

The rollout straddled the end of the third quarter. For companies reporting on a calendar year, September 30 closed Q3, and the same date is one of the three windows Search Engine Roundtable flagged. Organic sessions, affiliate revenue and lead volumes counted for the quarter therefore include part of the rollout, with the remainder falling into October. PPC Land made the same point when the update opened.

Paid media is connected to this enforcement through one narrow channel. Since December 2024, Google Ads has disapproved ads pointing to destinations removed from Search by manual action. The rule is tied to manual actions, so an algorithmic drop in rankings of the kind a spam update delivers would not by itself trigger a disapproval, a distinction PPC Land drew at the time of the release and one that tends to blur in the first days of commentary.

The larger theme is disclosure. Four spam updates have shipped in 2026 without a published target list or an affected-query share, and the instruments for inferring their effect have grown costlier and thinner at the same time. That leaves outside observers reconstructing the picture from tracker data, Search Console and anecdote, over a rollout that took more than 13 days rather than a few.

What comes next is open. Why two weeks now? Neither Google's entry nor its posts say. On core updates, John Mueller said in March that several ranking components are updated step by step, and PPC Land observed that, if comparable staging applies to spam systems, the September release may have bundled more than one enforcement change; Google has not confirmed that. The speculation about a core update has precedent behind it. In March, a core update arrived three days after the spam update began. SEO consultant Marie Haynes said in an October 2 video that she expects another core update soon, then hedged that it might not happen, as PPC Land reported on October 7. Google has published no schedule.

Google had said it would update its ranking release history page when the rollout ended. The dashboard entry now reads complete.

Timeline

Summary

Who: Google, through the Google Search Status Dashboard and its Search Central accounts, which closed the rollout. The update affects website owners, publishers, affiliates and search marketing teams in every market where Google Search operates, and indirectly the performance teams whose reporting depends on organic traffic.

What: The September 2026 spam update, the fourth of the year, was marked complete after 13 days and 16 hours. It applied globally and to all languages, enforced Google's existing spam policies through automated systems, and came with no named targets or affected-query figure. Search Engine Roundtable recorded volatility on September 25 to 27, September 30 and October 4 to 6.

When: The rollout opened at 09:15 PDT on September 24, 2026, and was marked complete at 01:37 PDT today, October 8, 2026. The dashboard header lists an end time of 01:00 for the same incident, a 37-minute discrepancy within the page.

Where: Worldwide across Google Search in all languages, with the status published on the Google Search Status Dashboard and the first completion report from Search Engine Roundtable.

Why: According to Google's documentation, spam updates mark notable improvements to systems that detect search spam continuously, and sites found in breach can be placed lower or removed, with recovery taking months. Google did not give a reason for the longer window, and no schedule for a possible core update has been published.