So Many Spam Updates: Where Google Actually Stands in 2026
Seven confirmed spam updates since October 2023. Three brand-new spam policies. One EU investigation. And as of May 2026, a rulebook that covers AI answers too.
Here is the full timeline, what people at Google actually said at every step, and how the industry rebuilt itself around the new rules.
The Short Version, If You Read Nothing Else
- Google has shipped seven confirmed spam updates since October 2023, plus three new spam policies in March 2024 that rewrote the economics of publishing.
- Enforcement keeps getting faster. The August 2025 spam update ran 27 days. The March 2026 spam update finished in 19.5 hours, the fastest on record. June 2026 wrapped in about two days.
- Site reputation abuse enforcement gutted the parasite SEO business model, pulled major publisher subfolders out of the rankings, and triggered an EU investigation in November 2025.
- On May 15, 2026, Google rewrote its spam policy definition to cover AI Overviews and AI Mode. Manipulating AI answers is now spam. The June 2026 update was the first enforcement pass after that change.
- Links still matter. But Google spent three years telling everyone to stop counting them. Relevance, earned placements, and real editorial standards are what survive updates now.
Four Numbers That Frame Everything Else
Before the timeline, look at the scale of what happened.
These four numbers explain why the SEO industry of mid-2026 looks nothing like the one from early 2023.
Google’s own measurement of how much unoriginal content the March 2024 work removed from results. The forecast was 40%. It overshot.
The fastest confirmed spam update in dashboard history. SpamBrain knew exactly what it was looking for before it started.
The longest recent spam rollout, and 2025’s only one. It hit in two waves and kept site owners guessing for a month.
October 2023, March 2024, June 2024, December 2024, August 2025, March 2026, and June 2026. The cadence has never been tighter.
Every Confirmed Spam Update Since October 2023
Spam updates used to be rare events. Google confirmed link spam updates in 2021 and 2022, then went mostly quiet.
Since October 2023, they have become a rhythm section. Seven confirmed rollouts, each one an upgrade to SpamBrain, Google’s AI-based spam detection system.
The table below is the full log. It draws on Ahrefs’ update history, Search Engine Land’s 2025 review, and our own running Google algorithm updates tracker.
Read the pattern and three eras appear.
2024 was the policy year, with three updates and three new rules. 2025 was one long grind. 2026 is fast, frequent, and quiet, with Google saying less and enforcing more.
March 2024 Changed the Rules, Not Just the Rankings
Everything in this story bends around March 5, 2024.
That day, Google launched a core update and a spam update together, and announced three new spam policies in the same breath: expired domain abuse, scaled content abuse, and site reputation abuse.
The scaled content abuse policy settled the biggest argument of the AI era.
Google stopped asking whether content was written by a human or a machine. The question became whether pages were mass-produced with little value for the people reading them. Ten thousand templated pages got you flagged either way.
Expired domain abuse closed an older loophole.
Buying a dead medical blog’s domain, flooding it with casino affiliate pages, and coasting on its legacy authority became a named violation. By 2026, Google’s systems catch the intent shift almost instantly and strip the inherited signals, which is why the tactic has quietly disappeared from most agency menus.
The results outran Google’s own forecast.
Elizabeth Tucker, Director of Product for Search, projected the combined work would cut low-quality, unoriginal content in results by 40%. When the rollout completed on April 19, 2024, Google revised the number to 45%.
One more detail mattered.
Google gave site owners a two-month grace period on the site reputation abuse policy, with enforcement set for May 5, 2024. That countdown clock is where the next chapter starts.
The Policy That Killed Parasite SEO
Of the three 2024 policies, site reputation abuse hit hardest.
The target was parasite SEO: renting space on a high-authority domain so third-party content could ride the host’s ranking signals. Coupon subdomains on news sites. Casino reviews on newspapers. Affiliate subfolders on legacy media. Here is how Google dismantled it, step by step.
The Policy Drops, With a 60-Day Warning
Google names site reputation abuse a spam violation and gives everyone until May 5 to clean house. Some publishers pulled entire coupon sections down. Others gambled.
Manual Actions Start Landing
Google’s Search Liaison account confirmed enforcement was “really kicking off” that day. Coupon subdomains on major news sites vanished from results within hours. The gamblers lost.
The Oversight Loophole Closes
Google updated the policy so first-party involvement no longer counts as a defense. If the point of the content is exploiting the host’s signals, it violates the rule, editor sign-off or not. We covered the change and its fallout for affiliate content as it unfolded. Industry trackers watched the affiliate review subfolders of household-name publishers lose most of their visibility in the weeks that followed.
It Enters the Quality Rater Guidelines
Google adds site reputation abuse to the guidelines its human raters use, defining it as content published mainly to trade on the host’s established ranking signals. That is how policies get baked into future algorithms.
Analysts Call It Algorithmic
Google confirmed in mid-2024 that enforcement was manual-only. By late 2025, after the August spam update, third-party analysts widely treated detection as baked into the automated systems. Google kept the details thin, as usual. Even so, marketers kept asking whether a cleaner version of the tactic could make a comeback.
The EU Opens an Investigation
The European Commission opens a Digital Markets Act probe into whether the policy unfairly demotes publisher revenue models. Google pushed back hard, with Search Chief Scientist Pandu Nayak calling the probe “misguided.” The fight is still open in mid-2026.
What People at Google Actually Said
Google rarely explains an update in detail. But its people said plenty between 2022 and 2026.
Line the statements up and they form one consistent message: stop manufacturing signals.
Duy Nguyen, Search Quality Team
Said in an SEO office hours session that the weight of backlinks as a signal had fallen sharply compared to Google’s early days. The first public crack in the link-counting era.
Gary Illyes at PubCon
Told the audience he thinks people overestimate links, that he doesn’t agree they sit in the top three ranking factors, and that they haven’t “for some time.”
Google’s Own Documentation
Alongside the March update, Google quietly removed the word “important” from its documentation describing links as a ranking signal. A one-word edit that said everything.
Gary Illyes, On Stage Again
Dropped the line that echoed through the industry: “We need very few links to rank pages.” He later joked he shouldn’t have said it. Too late. Everyone heard.
John Mueller, Senior Search Analyst
Advised site owners to stop obsessing over the absolute count of links, warning that over-focusing on them wastes time that could improve the site itself.
Pandu Nayak, Chief Scientist, Search
Defended the parasite SEO crackdown against the EU probe, arguing the anti-spam policy stops pay-for-play tactics from outranking sites competing on merit.
Notice what nobody at Google said.
Nobody said links are dead. They said manufactured links are worthless, counted links are a distraction, and rented authority is a violation. That distinction built the entire 2026 playbook.
August 2025: One Update, 27 Days, Two Waves
2025 broke the quarterly rhythm. Google ran three core updates but only one spam update all year.
It made up for the wait. The August 2025 spam update started August 26 and did not finish until September 22, a 27-day rollout that hit in two distinct waves.
The first wave landed within 24 to 48 hours. Sites relying on scaled thin content, aggressive affiliate patterns, and manipulative links saw traffic drop almost overnight.
Then things went quiet. Around September 9, a second wave of volatility rolled through and caught sites the first pass had missed. Barry Schwartz at Search Engine Roundtable documented the whole messy stretch, made messier by Google killing a search parameter that most rank trackers depended on mid-rollout.
We broke down the impact as it happened, and the takeaway aged well: spam evolves as fast as the algorithms chasing it.
Link schemes gave way to PBNs. PBNs gave way to spun content. By 2025, the battleground was mass-produced AI sites, and SpamBrain had clearly been retrained for exactly that.
2026 So Far: Faster, Quieter, Wider
Six months into 2026 and Google has already run six confirmed actions.
The February 5 to 27 Discover core update came first, the first core update ever scoped to Discover alone. Then the March spam update ran its 19.5-hour sprint, and the March core update began two days later, finishing April 8. A 12-day May core update followed. Then a May 15 policy rewrite. Then the June spam update.
The sequencing was no accident. Search Engine Journal’s Roger Montti compared the spam-then-core pattern to clearing the table before recalibrating quality signals.
Sweep out the junk first, then re-rank what’s left.
2024: The Policy Year
Three spam updates, three new spam policies, and the start of manual actions against parasite content. Rollouts ran 7 to 14 days.
2025: The Long Grind
One spam update, 27 days, two waves. Fewer events, heavier passes, and enforcement analysts read as newly algorithmic.
2026: Precision Mode
Two spam updates in 19.5 hours and 2 days. Sub-day rollouts mean the systems know their targets before the switch flips.
One more June detail worth keeping. When Barry Schwartz asked Google directly, the answer was that the June 2026 update did not target link spam or the site reputation abuse policy.
Whatever it swept up, plenty of site owners in the forums still felt it. Several reported it seemed to start before the official announcement, and Search Engine Land called it bigger-feeling than March.
Google’s guidance for anyone hit stayed boring on purpose: review the spam policies, fix what violates them, and wait.
Improvements only register after the automated systems learn, over months, that a site now complies. Periodic refreshes are when that recognition usually lands, so a June hit likely won’t fully resolve before the next pass.
May 15, 2026: The Day Spam Policy Reached AI Answers
For two years, AI Overviews sat in a gray zone. The feature launched in May 2024, reshaped click behavior, and cut some publishers’ traffic in half. But Google’s spam policies never named AI surfaces directly.
That gap closed on May 15, 2026.
Google rewrote the opening definition of spam to include “attempting to manipulate generative AI responses” in Search. That covers AI Overviews, AI Mode, and whatever ships next.
The same day, Google published its first official guidance on AI-feature visibility, and the message paired neatly: here’s the legitimate playbook, and here’s the prohibition.
The June 2026 spam update was the first enforcement cycle to land after that wording change.
Google never tied the update to AI surfaces publicly. It didn’t need to. SpamBrain enforces the policies as written, and the policies now cover the answer layer. Search Engine Journal’s coverage also flagged why enforcement is hard: a Cornell Tech paper showed a single planted comment can steer what an AI system recommends.
The stakes explain the timing. By 2026, AI Overviews reach billions of queries, AI Mode has its own tab, and an entire vendor category sprang up selling guaranteed placement inside AI answers.
Some of those vendors were selling exactly what the policy now names: manufactured prominence. Google closed the gap before the market got any bigger.
Here’s what that means for the fast-growing GEO industry. Paid AI citation placements, fake mention networks, and biased best-of listicles built to bait AI answers now carry active penalty risk, not just wasted budget.
Earning citations still works, and it works the way AI SEO has always worked underneath: real expertise, original data, and brand mentions on sources AI systems already trust.
That’s all Google changed on May 15, 2026. One line in the spam policy definition, and every AI visibility shortcut being sold that spring became a compliance risk overnight.
How the Industry Rebuilt Itself Around the New Rules
Agencies didn’t just survive three years of enforcement. They rewired their playbooks.
Put the old approach next to what actually works in 2026 and the shift is obvious.
The Old Playbook, Now Radioactive
- Buy links in bulk and count them like currency
- Rent subfolders on big-name domains for affiliate plays
- Mass-produce AI pages and let volume do the work
- Rebuild expired domains for their old authority
- Chase exact-match anchors on any site that would take them
The 2026 Playbook, Built to Survive
- Earn placements through manual outreach to relevant sites with real audiences
- Publish guest posts that clear a genuine editorial bar
- Win transparent listicle inclusions instead of rented subfolders
- Build entity signals and citations that AI surfaces trust
- Treat every link as a relevance decision, not a metric purchase
What Spam Updates Still Punish in 2026
Every rollout since 2023 has hammered the same four patterns.
If any of these describe your site or a client’s site, you’re carrying update risk right now.
Scaled Content With No Added Value
AI-written or human-written, it doesn’t matter. Thousands of templated pages that summarize what already ranks are exactly what the scaled content abuse policy exists to demote.
Rented Authority
Parasite subfolders, leased subdomains, and expired domain rebuilds. Google now evaluates site sections independently, so borrowed signals stop transferring.
Manufactured Link Profiles
PBNs, link farms, and bulk guest post networks with no editorial standards. SpamBrain neutralizes the links rather than penalizing them, which is quieter and worse. The rankings just never come.
AI Answer Manipulation
The newest category. Paid citation schemes, fake mention networks, and listicles engineered to bait AI Overviews now sit inside the spam boundary as of May 15, 2026.
That’s how much ranking benefit returns after Google’s systems discount spammy links. Per Google’s own spam update documentation, cleanup won’t restore value the links never should have passed. Recovery from content violations takes months, and only after the systems relearn trust.
Six Moves to Make Before the Next Rollout
Date-Match Every Traffic Drop
Pull Search Console and isolate the exact window. A drop on March 24 to 25 points to the spam update. March 27 onward points to the core update. The fix is different for each, so don’t guess.
Audit Every Third-Party Section
Coupon pages, sponsored subfolders, contributed affiliate content. Ask one question: would this section exist without the host’s ranking signals? If no, it’s a site reputation abuse risk.
Cut or Rebuild Scaled Thin Pages
Consolidate near-duplicates into one page that actually answers the query. Add first-hand data, named authors, and original assets to what survives. Noindex or remove the rest.
Rebuild Links Around Relevance
Vet every prospect for topical fit, real traffic, and editorial standards before outreach starts. A link building program with domain pre-approval keeps you in control of exactly where your name shows up.
Earn AI Citations the Slow Way
Original research, real expertise, and mentions on trusted industry sources. Skip anything sold as a shortcut into AI answers. As of May 15, 2026, shortcuts carry the same risk as bought links.
Watch Every Surface, Not Just Blue Links
Rankings, AI Overview citations, AI Mode mentions, and Discover visibility now move together. A site that games one surface risks losing all of them at once, because they draw on the same index.
Three Years of Updates, Zero Change to Our Model
Here’s the honest part. Every update since October 2023 punished automation and rewarded human judgment.
That’s the model we run for the 150+ agencies who use our white label link building, and it’s why our partners spend update weeks watching competitors scramble instead of scrambling themselves.
Human Outreach at Scale
150+ outreach specialists pitching real editors through blogger outreach, across a network of 35,000+ vetted publishers. No marketplaces, no automation footprints.
Pre-Approval on Every Domain
You see the site, the metrics, and the niche fit before a single email goes out. The exact opposite of the rented-authority plays these updates keep burning down.
Built for Every Surface
Relevance-first placements that hold up in rankings and in AI answers, delivered white label under NDA within 25 days. Your clients never know we exist.
Quick Answers on Google Spam Updates in 2026
How many spam updates has Google released in 2026 so far?
Two. The March 2026 spam update ran 19.5 hours, and the June 2026 spam update ran about two days. The May 15 spam policy change covering AI answers was a documentation update, not a ranking rollout.
What’s the difference between a spam update and a core update?
A spam update enforces existing rules by improving the systems that detect violations. A core update re-evaluates quality, relevance, and authority across the whole index. One punishes rule-breakers, the other re-grades everyone.
My site got hit by a spam update. How long does recovery take?
Months, per Google’s own documentation. Fix the violations, then wait for the systems to relearn that the site complies, often across the next refresh. If the hit came from link spam, the lost value doesn’t come back at all. You rebuild forward instead.
Does the May 2026 policy make GEO and AEO illegal?
No. Earning AI visibility through better content, clear entity signals, and credible citations is fine, and Google’s own guidance frames it as regular SEO. Manufacturing that visibility through paid citation schemes or fake mentions is what crossed into spam territory.
Are backlinks still worth building in 2026?
Yes, with one big caveat. Google devalued link counting, not links. Relevant, earned placements from real publications still move rankings and feed the sources AI systems cite. The sites that got burned were counting links. The sites that grew were earning them.
Build Links That Survive Every Spam Update
Pre-approved domains. Human outreach. White label delivery in 25 days. That’s how 150+ agencies stopped worrying about rollout weeks.
Deepan Paul
AuthorDeepan Paul is a SEO Lead with four years of experience helping brands recover, scale, and sustain organic growth across global B2B, B2C, and D2C markets. He is recognized as a ranking revival expert, specializing in diagnosing traffic drops, fixing indexing and technical issues, and restoring lost search visibility. He has managed international clients and led cross-functional teams, aligning SEO strategies with core business goals. His expertise spans technical SEO, content strategy, indexing optimization, and building scalable growth systems that adapt to constant algorithm changes. Beyond execution, Deepan is also an SEO trainer and guest speaker, mentoring professionals and contributing insights to leading digital marketing publications. His approach is focused on sustainable, system-driven SEO that delivers long-term results rather than short-term gains.
