September 2026 Spam Update: What to Do if Traffic Dropped

According to the ranking updates history on Google's search status dashboard, the September 2026 spam update began on 24 September 2026 and lasted 13 days 16 hours. Times on the dashboard are US Pacific. Search Engine Journal, citing the same dashboard, reported the end date as 8 October 2026.

At the start, Google said the update was global, covered all languages and could take up to two weeks. It did not separately say what it targeted. Any comment that says a certain type of site was hit is therefore a guess. The only solid frame we have is the spam policies Google has published.

Google's same history list shows the other updates of 2026. Spam updates and core updates appear in it as separate types.

The September update is the longest of the spam updates on that list. As of October 2026 there is no announced core update; the last one was in May 2026.

• March 2026 spam update: 24 March, 19 hours 30 minutes
• March 2026 core update: 27 March, 12 days 4 hours
• May 2026 core update: 21 May, 11 days 21 hours
• June 2026 spam update: 24 June, 2 days 1 hour
• August 2026 spam update: 18 August, 2 days 16 hours

Look at the date first. Did the drop begin after 24 September, or before? Compare the periods before and after the update in the Search Console performance report. If the fall began before the update, the cause lies elsewhere.

According to SEOmonitor, some rank tracking tools showed sudden changes from 26 September that real users did not see, the stated cause being Google returning incomplete or wrong data to automated tools. A swing in a rank tracker is therefore not a real traffic drop. Look at the actual clicks and impressions in Search Console before you decide anything.

• Find the day the drop began in Search Console
• Separate whether only a few pages fell or the whole site
• Compare your rank tracker's data with Search Console
• Note any technical changes you made to the site in the same period

Google's spam policies page describes spam as techniques used to deceive users, and says sites that violate the policies may rank lower in results or not appear in results at all. The page was last updated on 28 August 2026, when the site reputation policy was changed.

The policy headings are: cloaking, doorway abuse, expired domain abuse, hacked content, hidden text and link abuse, keyword stuffing, link spam, machine-generated traffic, malicious practices, misleading functionality, scaled content abuse, scraping, site reputation policy, sneaky redirects, thin affiliation and user-generated spam. Read each definition on Google's page; the questions below are only an order in which to start reading. For the possibility of hacked content you can also use the rabbitclip security check.

• Is there text or a link on the pages that visitors cannot see?
• Is the same keyword repeated to an unnatural degree?
• Were many pages mass-produced without adding value for readers?
• Is there content or a redirect on the site that you did not add?
• Has spam piled up in comment and forum areas?
• Are there redirects that take users somewhere different?

According to Search Engine Journal, Google's Gary Illyes shared 'typical' ranges at Search Central Live in Barcelona on 2 October: one to three months for a site move, three to six months for recovery after a core update, and six months to a year in the slowest cases. This is an event note, with no detail on sample or definition. Do not read it as a firm rule, and do not tie it to the recovery time of a spam update. It gives only a sense of scale: we are talking months, not days.

The mistakes that prolong the process are usually the same ones. What they share is acting before knowing the cause.

• Interpreting the drop in the first week and deleting old pages wholesale
• Deciding on the basis of a swing in a rank tracker
• Making many large changes at once and not seeing which one worked
• Rewriting the entire site without reading the policies

If your traffic did not change meaningfully between 24 September and 8 October and you publish content that follows the policies, there is nothing urgent to do for this update. The best preparation for updates that arrive a few times a year is regular upkeep: reviewing pages now and then and clearing out broken links and stale content. If you like, the rabbitclip SEO audit shows a first round of that upkeep quickly.

If the drop appears only in a rank tracking tool, there may be no real loss. Because Google has not explained what the update targeted, a firm diagnosis from outside is not possible either; what can be done is to compare your site against the policies one by one.