TLDR
Google's September 2026 spam update began rolling out on 24 September, with a two-week completion window that makes it the longest spam update rollout of the year. Australian site owners reporting traffic losses should review Google's spam policies and plan for a recovery measured in weeks, not days.
KEY TAKEAWAYS
A two-week window signals a more complex sweep
At 9:15am Pacific time on 24 September 2026, Google's Search Status Dashboard posted a single notice: the September 2026 spam update had begun rolling out globally, across all languages, with a completion window of up to two weeks.[1] No blog post accompanied it, and no figure on the share of queries affected was published. That is standard practice for spam updates, which Google routes through its status dashboard rather than detailed policy announcements.
The rollout window is the number worth watching. March's spam update wrapped in 19 hours and 30 minutes, June's in just over two days, and August's in under three days.[2] A window stretching to 14 days is a material step up from any of those. Whether that reflects a larger index sweep, greater complexity in SpamBrain's enforcement logic, or a more cautious rollout cadence is not said in the dashboard entry.
What SpamBrain is targeting
SpamBrain is Google's AI-based spam-prevention engine, and its enforcement covers six policy areas: expired domain abuse, scaled content abuse, site reputation abuse, cloaking, sneaky redirects and fake incentivised reviews. Back button hijacking also appears in operator reports of affected behaviour. The dashboard entry classifies the update at severity "low" with a status impact of SERVICE_INFORMATION, meaning Google regards it as routine maintenance rather than an incident requiring remediation.[2]
Site owners experiencing ranking shifts will find that classification cold comfort. Operators on WebmasterWorld reported Discover traffic down 70 per cent and advertising revenue halved in the days before the update officially launched, suggesting ranking adjustments had already begun or that an earlier signal change was propagating through the index. Recovery from spam updates typically takes weeks, and where a site has received a manual action, the owner must submit a reconsideration request after correcting the identified issue.
A concurrent EEA carve-out changes enforcement geography
A separate but related change is already live. From 30 August 2026, manual actions applied under Google's site reputation abuse policy no longer affect search results for users inside the European Economic Area.[3] Denisha Vachhani of Google Search Central said that beginning 30 August, manual actions applied under the site reputation policy would have a different effect for those searching in the EEA than outside of it.
That geographic split has practical consequences for publishers with European audiences. A site carrying a site reputation manual action can still surface normally in EEA results while being suppressed everywhere else. For Australian publishers with any EEA traffic, that asymmetry is worth understanding before drawing conclusions from analytics dashboards during the rollout window.
Search Console adds multimodal reporting on the same day
On the same morning the spam update began, Google published a separate announcement from Product Manager Leads Harsh Kharbanda and Moshe Samet confirming that Search Console now splits web performance data into text-based and multimodal categories.[4] Kharbanda and Samet said Google was introducing Search Console reporting for web multimodal search, covering both the performance on Search results report and the Generative AI features report.
That split matters for diagnosing traffic changes during the rollout. If a site's impressions fall in the text-based category but hold steady in multimodal, the cause is more likely a spam signal than a change in how Google indexes image-led content. Site owners investigating traffic shifts over the next fortnight have that filter available in Search Console from 24 September 2026.
SOURCES & CITATIONS
FREQUENTLY ASKED QUESTIONS
When did Google's September 2026 spam update start and how long will it run?
What types of spam does the September 2026 update target?
Why do site reputation manual actions no longer affect European users?
How should Australian site owners respond to traffic drops during the rollout?
Zara Kincaid writes about artificial intelligence and search. Her focus is what happens to businesses when the front page of the internet stops being a list of links and starts being an answer.
