Quick answer: Google released spam updates on 24 June 2026 and 18 August 2026, both global and covering all languages, and both rolled out in a few days. Google called the June release a normal spam update, which means a refresh of its automated spam detection with no new policies announced. The right response is to check your site against Google’s existing spam policies, not to look for a secret new rule.
The two updates at a glance
These were two of the four spam updates Google ran in 2026, between the March and September releases. According to Google’s Search Status Dashboard:
| Update | Started | Listed duration | Scope |
|---|---|---|---|
| June 2026 spam update | 24 June 2026 | about 2 days 1 hour | Global, all languages |
| August 2026 spam update | 18 August 2026 | about 2 days 16 hours | Global, all languages |
For August, Google’s dashboard entry says the update was released on 18 August and applies globally and to all languages, that it could take a few days, and then reports the rollout was complete as of 21 August 2026. Its timestamps are in US Pacific time, so other write-ups may show slightly different end dates.
What ‘normal spam update’ means
Google’s own page on spam updates explains the idea. Google’s automated spam detection is always running. A spam update is a notable improvement to those systems, with its AI-based system SpamBrain given as the example of something that gets refined over time. Google called the June release a normal spam update on LinkedIn, and used the same description for the March one.
So ‘normal’ means:
- No new spam policy was announced.
- No specific type of spam was named as the target.
- It is a routine improvement to detection that already enforces the existing rules.
Google gave limited detail for both updates, so we are not going to guess which categories were affected. Some SEO commentators have offered theories. We have not seen anything from Google that confirms them.
Spam updates versus core updates versus manual actions
These get confused, and the difference changes what you do.
- Spam update: automated detection improves. Violating content can rank lower or drop out of results.
- Core update: a broad reassessment of how helpful and reliable results are. It is not aimed at spam specifically. See our guide on recovering from a core update.
- Manual action: a human reviewer at Google applied a penalty. You are told in the Manual actions report and the Search Console message center, and you can submit a reconsideration request after fixing the issue.
If you have no manual action message and your traffic dropped on a spam update date, that suggests an automated demotion. The remedy is the same in principle: fix the problem and wait.
What Google says about recovery
From Google’s guidance: if you notice a change after a spam update, review the spam policies and bring your site into compliance. Sites that violate the policies may rank lower or not appear at all. After you make changes, a site may improve as Google’s automated systems learn over several months that it complies.
One important exception concerns links. Google says that when it removes the effect of spammy links, any ranking benefit those links gave is lost and cannot be regained. If you relied on bought or swapped links, the answer is not to wait for the benefit to return, but to build links that deserve to be there. Our link building service is based on that principle.
A spam policy checklist for small sites
Google’s spam policies list a set of practices. Here is how to turn that list into a practical self-check for a small business site.
Content practices
- Scaled content abuse. Have you published many pages, by AI, scraping or stitching other material together, mainly to rank? Ten original pages beat a thousand templated ones.
- Doorway abuse. Do you have many near-identical pages for different cities or queries that all funnel to the same place? Each location page needs genuinely local, useful information, or it should not exist.
- Keyword stuffing. Do any pages repeat keywords or lists of towns unnaturally? Read the page aloud.
- Thin affiliation and scraping. Is any content copied from manufacturers, suppliers or other sites with nothing added?
- Hidden text and links. Is anything invisible to visitors but present for crawlers: tiny text, off-screen text, white-on-white text?
Technical and deceptive practices
- Cloaking. Does the site show Googlebot something different from what visitors see?
- Sneaky redirects. Do any redirects send visitors, particularly from search or on mobile, somewhere unexpected?
- Hacked content. Look for injected pages, odd redirects or strange text. Check Search Console’s security issues report and search your site for unfamiliar pages.
- Misleading functionality and malicious practices. Does everything you promise actually work?
Site and link practices
- Link spam. Have you bought, sold or swapped links mainly to influence rankings, or left unqualified paid links in place?
- User-generated spam. Are comment sections, forums, profiles or uploads being used to post junk on your site?
- Expired domain abuse. Did you or a previous owner buy an old domain and put unrelated content on it?
- Site reputation abuse. Are you hosting third-party content, such as coupons or reviews you do not oversee, mainly to borrow your site’s ranking strength?
Most honest small business sites fail only a couple of these, and usually by accident: an old SEO vendor’s links, a plugin that was compromised, or a batch of town pages written years ago. A technical review through our technical SEO service can catch the hacked and cloaking issues, and a content SEO review handles the thin and duplicated pages.
If WordPress is your platform
Many hacked-content problems come from outdated plugins and themes. Keep WordPress core, plugins and themes updated, remove what you do not use, and use unique admin credentials with two-factor authentication. Our WordPress support for Oregon businesses covers maintenance and clean-up.
What not to do
- Do not assume a drop on those dates is spam. Check the dates, the pages affected and other causes first.
- Do not mass-disavow links on a hunch. Only act if you actually bought or built unnatural links.
- Do not delete a lot of useful content in a panic.
- Do not respond with more automated content. That is a spam policy risk in itself.
For earlier spam changes, our write-up of the August 2025 spam update and the full update timeline show how often these routine updates happen. The latest, in September, is covered in our September 2026 spam update post.
Frequently asked questions
When was the June 2026 spam update?
It started on 24 June 2026 and ran for about two days according to the Search Status Dashboard. Google said it applied globally and to all languages.
When was the August 2026 spam update?
Google released it on 18 August 2026 and reported the rollout complete as of 21 August 2026 on the dashboard, applying globally to all languages.
What is a normal spam update?
It is Google’s label for a routine improvement to its automated spam detection, with no new policies announced and no named target.
Can I recover from a spam update?
Often yes, if the cause is something you can fix. Google says that sites that comply with its spam policies may improve over several months. The exception is link spam, where lost link value generally does not return.
How do I know if I have a manual action?
Check the Manual actions report in Google Search Console and your message center. If there is nothing there, any demotion is likely automated.
Want someone to check your site against these policies? Request a free SEO audit.

Pingback: Google September 2026 Spam Update: Audit Guide