Google Spam Update September 2026: What UK Businesses Should Check If Rankings Dropped

If your organic enquiries have gone quiet since late September, you are not imagining it, and you are not alone. Google's September 2026 spam update started on 24 September and finished on 8 October, and it took almost two weeks to roll out. Since then, search forums have filled up with site owners asking whether a second, unannounced Google update is running in October.

This guide explains what the Google spam update actually did, how to tell whether it hit your site, which spam policies UK businesses most often trip over, and what to fix first. The aim is to protect the enquiries and sales organic search brings in, not to chase every wobble in a rank tracker.

At BlackFire Marketing, this is the checklist we work through when a client's traffic drops.

What the Google spam update in September 2026 actually was

Google posted the update on its Search Status Dashboard on 24 September 2026, saying it "applies globally and to all languages" and that the rollout "may take up to two weeks to complete". It confirmed the rollout was complete as of 8 October 2026. The dashboard lists the total duration as 13 days and 16 hours.

A few details matter for how you read your own data:

• It was a normal spam update. Google described it as a regular spam update, with nothing specifically new beyond running its systems again. It was not a core update and not a link spam update.
• It was long for a spam update. The June and August 2026 spam updates each took under three days. This one ran for nearly two weeks, so any impact could have landed on different days for different sites.
• Volatility came in waves. Search Engine Land reported volatility on 25 September and that weekend, a blip around 30 September and a final burst between 4 and 7 October.
• It is the fourth spam update of 2026. The dashboard lists spam updates in March, June, August and September 2026. The last confirmed core update was the May 2026 core update, which started on 21 May.

Google says sites that violate its spam policies "may rank lower in results or not appear in results at all".

Is there a Google update in October 2026?

Not one that Google has confirmed. As of 19 October 2026, Search Engine Watch reported that the latest ranking entry on the Search Status Dashboard was still the September spam update, despite a growing number of forum posts predicting a core update.

The complaints are mixed. Site owners on WebmasterWorld have described erratic Discover traffic since late August, Google News showing old stories and Search Console data running days behind, while others reported traffic going up. Search Engine Watch pointed out that Discover and Google News run on separate systems from core web ranking, and that many of the problems were dated to late August, a month before the spam update began.

The dashboard only lists updates Google chooses to announce, so a quiet dashboard does not prove nothing changed. It does mean you should rule out everything else before blaming an "October update".

Spam update, core update or something else?

Before you change anything on your site, work out what actually happened. Many drops turn out to be something other than a penalty.

Signs the spam update is the likely cause

• The drop started between 24 September and 8 October, often sharply, rather than as a slow slide.
• It is concentrated on pages or sections that rely on tactics covered by Google's spam policies, such as mass-produced pages, bought links or third-party content.
• Rankings fell across many queries for those pages, not just one or two terms.
• The drop shows in Google web search in Search Console, not only in Discover or Google News.

Signs something else is going on

• Clicks fell but rankings held. That points to changes on the results page, such as more AI Overviews, ads or local results above you. Our guide to the Search Console AI performance report shows how to see where AI features are taking clicks.
• Only Discover or News dropped. Those are separate surfaces with separate systems. Filter Search Console by Search, Discover and News before drawing conclusions.
• Analytics and Search Console disagree. Bot traffic and scraper filtering can distort analytics. Check server logs and bot rules before assuming you lost real visitors.
• You changed the site recently. A redesign, migration, new CMS or broken redirects often line up with update dates by coincidence. See our guide to website redesigns and SEO if you have relaunched this year.
• It is seasonal. Compare with the same weeks last year, not just the previous month.

Which Google spam policies UK businesses most often trip over

For most UK small and medium businesses, a handful of Google's spam policies cause the problems, usually because an agency, freelancer or plugin did something on their behalf.

Scaled content and AI pages

Google defines scaled content abuse as creating many pages "for the primary purpose of manipulating search rankings and not helping users", no matter how the content is made. Its examples include using generative AI tools to produce many pages without adding value, and stitching content together from other pages. AI is not the problem in itself. Hundreds of near-identical blog posts or service pages with nothing original in them are. Our post on Google's guidance on AI content covers where the line sits.

Bought links, gifted links and guest posts

Link spam includes paying for links, exchanging goods or services for links, and "sending someone a product in exchange for them writing about it and including a link". Paid placements are fine for advertising, but Google expects those links to carry rel="sponsored" or rel="nofollow". If you have bought guest posts or sent products to bloggers for links, check how those links are marked. Our guide to gifted collaborations covers the advertising labelling side of gifting.

Google also says that when a link spam update removes the effect of spammy links, any ranking benefit they gave you "cannot be regained". Worth knowing before you spend money on links.

City and town doorway pages

Google's doorway abuse examples include "multiple domain names or pages targeted at specific regions or cities that funnel users to one page". Many UK service businesses have a set of near-identical "plumber in Leeds", "plumber in Bradford" pages with the town name swapped. If those pages say nothing specific about the area, your work there or how to reach you, they are a risk. Real local relevance usually comes from your Google Business Profile and genuine local content. Our Google Business Profile SEO guide explains how to build that properly.

Hacked content, user spam and expired domains

Some sites are hit for spam they did not create, such as hacked pages, injected links and spammy comments. Expired domain abuse, where an old domain is bought mainly to rank low-value content, is also covered. Check Search Console's Security issues report and look for pages you do not recognise.

Trying to game AI answers

Google's spam policies now describe spam as including attempts to manipulate "generative AI responses in Google Search". If someone has sold you a quick trick for getting into AI Overviews, treat it with suspicion. Our guide to GEO and AEO for UK SMEs covers the legitimate ways to earn visibility in AI answers.

How to check whether your site was hit

Work through this in order.

1. Check Manual actions in Search Console. A manual action is a human review, not an algorithm update, and Search Console will say so if one applies. If there is one, the fix and the reconsideration request come first.
2. Mark the dates. In the Performance report, compare 24 September to 8 October with the weeks before, and with the same period last year.
3. Split by surface. Look at Search, Discover and Google News separately.
4. Split by page. Sort pages by lost clicks. A spam issue usually clusters in one section or template, such as location pages, a blog section or a directory.
5. Check queries. If impressions held and clicks fell, look at the results page for those queries before touching your content.
6. Check your backlinks and recent work. Ask anyone who has worked on your SEO what links they built, what content they published and what tools they used.
7. Check the money. Compare enquiries, calls, form fills and sales with traffic. A traffic drop that has not touched leads is a lower priority than one that has.

How to recover from a Google spam update

There is no quick button. Google says that making changes "may help a site improve if our automated systems learn over a period of months that the site complies with our spam policies". In practice, that means:

• Fix the cause, not the symptom. Remove or rewrite thin scaled pages, merge near-duplicate location pages into fewer useful ones, and mark paid links as sponsored.
• Clean up hacked or user spam. Remove it, close the hole and tighten comment and account settings.
• Do not churn the site. Rewriting everything at once hides what worked. Start with the pages that bring in enquiries.
• Give it time. Recovery can take months, so plan your lead flow around that.

What to do if you were not hit

If your rankings and leads held steady, use the quiet to audit before the next one. There have been four spam updates this year alone. Check:

• Any content produced in bulk, especially with AI tools.
• Links built by previous agencies or freelancers.
• Location and service area pages.
• Third-party content hosted on your domain.

It is cheaper to fix these on your own timetable than after a drop.

Judge it on leads, not rankings

Ranking reports are not the business. What matters is whether organic search still sends you qualified enquiries and sales. If it does, a few lost positions on low-value terms are not an emergency. If it does not, act quickly on the pages that make money.

While organic recovers, paid search can protect lead flow on your most important terms. Our paid media service and our guide to SEO vs paid ads for lead generation explain how to balance the two. It is also worth reading our post on lead quality vs quantity, because the right measure after an update is the enquiries you keep, not the visits you lost.

FAQ

When was the Google spam update in 2026?

The latest was the September 2026 spam update. It started on 24 September 2026 and finished on 8 October 2026, a rollout of 13 days and 16 hours. Google also ran spam updates in March, June and August 2026.

Is Google running an update in October 2026?

Google has not confirmed one. As of 19 October 2026, the Search Status Dashboard listed the September spam update as the latest ranking update, although forum reports suggest some site owners are still seeing volatility.

How do I know if the Google spam update hit my site?

Check Search Console for manual actions, then compare web search clicks for 24 September to 8 October with earlier weeks. A sharp drop clustered on pages that use tactics in Google's spam policies is the clearest sign.

How long does it take to recover from a Google spam update?

Google says sites that fix spam policy issues may improve as its systems learn over a period of months. Removing a problem does not bring rankings back overnight.

Next step

If your Google traffic or enquiries dropped this autumn and you want a straight answer on why, our SEO team can audit your site against Google's spam policies and tell you what to fix first. Book a call or email hello@blackfiremarketing.co.uk with your website address and roughly when the drop started.