Google's Search Status Dashboard logged a new ranking incident at 09:15 Pacific on September 24, 2026: the September 2026 spam update, applying globally and to all languages, with a rollout that "may take up to two weeks to complete". It is the fourth spam update of the year, and the first this year for which Google has given a two-week window. The three before it finished in under three days each.
Day one of a spam update is for diagnosis, not for changes. This post gives the facts as the dashboard states them, the year's history for context, Google's own method for telling an algorithmic drop from a technical or seasonal one, the three spam policies most worth auditing while the rollout runs, and the reason to wait for the completion notice before measuring anything.
- 01The update began September 24 at 09:15 Pacific and may run until about October 8.Google's dashboard entry: released the September 2026 spam update, which applies globally and to all languages; the rollout may take up to two weeks. The end date is our arithmetic from that statement.
- 02Two weeks is far longer than this year's earlier spam updates.The dashboard's history shows the March update complete in 19 hours 30 minutes, June in 2 days 1 hour, and August in 2 days 16 hours. Google has not said why this window is longer, and we make no claim about what it targets.
- 03Before blaming the update, rule out the other causes Google lists.Google's traffic-drop guide separates algorithmic updates from technical issues, spam-policy violations and manual actions, and seasonality. A spam update is one branch, and a manual action in Search Console is a different one.
- 04Audit scaled content, site reputation and expired-domain use first; measure after completion.Those three policies describe the patterns most sites can check in an afternoon. Rankings move during a rollout, so compare the two weeks after completion with the two weeks before the start.
01 — The factsThe dated facts, from the dashboard only
The incident page carries one entry at the time of writing, timestamped 24 Sep 2026 09:15 PDT: "Released the September 2026 spam update, which applies globally and to all languages. The rollout may take up to two weeks to complete." Google's ranking-updates list shows the entry with a duration of "Information", the dashboard's label for an incident still open.
That is the whole primary record. Google has not named a target, a language, a content type or a system. Anything more specific you read this week is inference, and the volatility trackers published by SEO tool vendors measure movement in their own keyword sets, not the update's scope. We will update this post when the dashboard marks the rollout complete.
02 — The contextFour spam updates in 2026, and one is not like the others
Google's list of ranking updates records each listed update with the duration the dashboard logged. The 2026 spam updates, read September 25, are below, with the two core updates of the year for scale.
Rollout durations logged by Google's dashboard, 2026
Google Search Central, list of ranking updates, read September 25, 2026. September 2026 shown at Google's stated maximum of 14 days; it is still open.The stated window puts this spam update in the same band as the year's core updates rather than its spam updates. Whether the rollout actually takes two weeks is unknown; "up to" is a ceiling. But it changes the operating advice: with a two-day update you can wait it out before looking; with a two-week one you will be asked what is happening long before the dashboard closes the incident. Our posts on the August update's first day and on what to measure once it completed are the two halves of that cycle for the last one.
03 — The diagnosisIs it the update, or something else?
Google's guide to debugging drops in Search traffic lists the causes it sees and how each one looks in Search Console. The router below is that guide applied to the week of a spam update. Work down it in order; a spam update is the explanation only when the others are ruled out.
04 — The auditWhat to audit first, from the spam policies
Google's spam policies page lists about twenty practices. Three describe patterns that grew with generative tools and cheap domains, and each can be checked against a site in an afternoon. The wording below paraphrases the policy; the examples are Google's.
Scaled content abuse
Google's definition: many pages generated primarily to manipulate rankings rather than help users, whatever the method. Its examples include generating many pages with AI tools without adding value, scraping or synonymising feeds and search results, stitching content from other pages, and spreading the output across several sites to hide the scale. Check: page-count growth by template, and whether a reader could tell the pages apart.
Site reputation policy
Applies where third-party content is published on a host mainly because of the host's established ranking signals. Google's examples: an education site hosting sponsored payday-loan reviews distributed to other sites; a medical site hosting an unrelated casino page. Wire services, syndicated news, forums, editorial columns and native advertising meant for readers are named as not inconsistent. Check: any section written by outside parties that would not exist without your domain.
Expired domain abuse
An expired domain purchased and repurposed primarily to manipulate rankings with content of little value. Google's examples: affiliate content on a former government site, commercial medical products on a former charity site, casino content on a former school site. Check: any domain in your portfolio acquired for its history rather than its use.
If a site hosts scaled content it did not intend to rank, Google's page points to one remedy: exclude it from Search. Our programmatic-pages audit is the step-by-step version of the first check. The site reputation policy also carries an August 2026 change worth reading if you publish in Europe: Google says it has made changes applicable to the policy in the European Economic Area, where affected pages may be ranked separately from the main domain rather than receive a manual action.
05 — The timingWhen to measure: after the dashboard says complete
Rankings move during a rollout and can move back. The comparison that means something is the two weeks after the dashboard marks the incident complete against the two weeks before September 24, on the same query set, in Search Console's Performance report. Anything measured in between describes the rollout, not the result.
Google's guide adds a second reason to wait before acting. It says that if you have made changes to your site it may take time to see an effect, from a few days to several months, and that it may take months before its systems determine that a site is producing helpful content in the long term. A fix made on day two of a two-week rollout will not show up inside the rollout.
"Google started a spam update on September 24 that may take up to two weeks. It applies to every site and every language; Google has not said what it targets. We have checked for technical errors and manual actions and found none. We will audit the three spam policies most likely to apply this week and compare the two weeks after completion with the two weeks before the start. Please do not change content in response to daily movement."
Our agentic SEO practice runs the three audits above as a standing check between updates, so the day-one answer is already in hand.
06 — ConclusionA two-week spam rollout changes the waiting, not the checklist
Rule out technical and manual causes first, audit scaled content, site reputation and expired domains this week, and measure only after the dashboard closes the incident
The facts fit on one dashboard line. The discipline is not to add to them until Google does.