Google began rolling out the August 2026 Spam Update on 18 August. If your traffic slipped in late August and nobody can tell you exactly why, the Google spam update 2026 rollout is the first thing to rule in or out. This is not a warning letter that arrives in your inbox. It is an algorithmic reassessment of whether the content and links on your site were built for readers or for rankings.
Most owners who get caught did not set out to break a rule. They approved an invoice, trusted a vendor, and never saw what was published or linked on their behalf. This post explains the four behaviours Google named, in plain language, and gives you an audit you can run yourself before you spend anything more on SEO help.
What does the Google spam update 2026 target?
Four behaviours: scaled content abuse, expired domain abuse, site reputation abuse and unnatural link schemes. Google also expanded the spam policy to cover attempts to manipulate AI Overviews and AI Mode. The rollout began on 18 August 2026. It is algorithmic, so no message appears in Search Console to confirm you were affected.
Context helps here. Industry analyses published in 2026 count five core updates between March and August, roughly one every six to seven weeks, with the spam update shipped on top of that. The second half of the year has been noisy for almost everyone. Plenty of drops blamed on spam were core updates, and the other way round.
The distinction matters because the fixes are different. A core update asks whether your page is the best answer available. A spam update asks whether you, or someone acting for you, tried to shortcut the system.
You can improve your way out of the first. You cannot improve your way out of the second until whatever triggered it is gone.
Scaled content abuse: the one that catches honest businesses
Scaled content abuse means publishing a large volume of pages that add little for the reader, whatever tool produced them. The rule is not that AI writing is banned. The rule is that volume without judgment is the problem.
The version we see most often in India is the content package: thirty articles a month, a fixed price per article, no named writer, and nobody with subject knowledge checking anything before it goes live. The second version is the location page set, where forty pages differ only by the city name in the heading and the first line. Both look productive on a monthly report. Both are exactly what this update was built to find.
Ask one question of any page on your site. If a customer read it, would they learn something the page already ranking above you did not tell them? If the honest answer is no, that page is filler, and filler is a liability now that 2026 reporting suggests roughly 60 to 63 percent of Google searches end without a click to any external site.
The fix is unglamorous. Cut the pages nobody reads, merge the near-duplicates into one page worth ranking, and put a named human behind whatever survives.
Expired domain abuse and rented subfolders
Expired domain abuse is buying a dropped domain that still carries old backlinks, then putting unrelated content on it to borrow that history. If a reseller has ever pitched you an aged domain with high authority, that is the practice being targeted. It also applies to a domain you bought years ago for a different business and quietly repurposed.
Site reputation abuse is the other half of the pair. It covers third parties renting space on a trusted domain: a subfolder or subdomain filled with coupon, loan or betting content that has nothing to do with the host brand. Large publishers were the obvious target, but smaller sites run a version of the same thing without realising it.
So check who controls every part of your domain. A guest post partner who asked for a folder, a developer who parked an unrelated microsite on a subdomain, an affiliate who wanted a landing page: each one puts content you never approved under your name. If you cannot name the owner of a subfolder, that is the first job on your list.
Unnatural links you did not order
Link schemes are the oldest item on the list and still the easiest one to end up with without knowing. Paid placements, private blog networks, mass directory submissions, reciprocal link deals and guest posts on sites that exist only to sell guest posts all sit here. The difficulty for an owner is visibility. You paid for an outcome, not a list, so you never saw where the links actually went.
Genuine business listings are a different thing entirely. A JustDial or IndiaMART profile, a verified Google Business Profile, an industry association page and a local chamber directory are citations real customers use. Building those on purpose is normal work, and our rundown of Indian citation sites covers the ones worth the effort.
The test is simple. Would that link exist if Google did not? A directory listing that brings you calls passes. A blog in another language linking to your Pune clinic from an article about insurance does not.
Does Google's spam policy now cover AI Overviews?
Yes. Google expanded the spam policy to cover attempts to manipulate AI Overviews and AI Mode. That covers content mass-produced to be quoted by an AI answer with no human check. Industry analyses published in 2026 report AI Overviews appear in roughly 20 percent of searches, so the incentive to game them is real.
This matters more than it first sounds. The same 2026 analyses suggest AI Overviews show up in around 89 percent of brand-name search results, and in about 37 percent of searches in some countries. That has created a market for services promising to force your brand into an AI answer. Those tactics now sit inside the spam policy, and our breakdown of what AI Overviews mean for Indian businesses covers what earns a mention instead.
Google also published official guidance on optimising for generative AI search on 15 May 2026. It is worth reading in full, because it points in the same direction as the spam policy: write for a reader who has a decision to make, not for a summary engine.
How do you tell a spam hit from a core update hit?
Start with dates. Google ran five core updates between March and August 2026, roughly every six to seven weeks, while the spam update began on 18 August. If your drop lines up with 18 August and hits specific pages or link-heavy sections, treat it as a spam issue first.
Open Search Console, set the Performance report to the last six months, and compare clicks week over week rather than day over day. The May 2026 core update began rolling out on 21 May and took up to two weeks, which is typical: core updates move slowly and broadly. A spam update usually shows a sharper edge across a narrower set of pages.
| What you are looking at | Points to the spam update | Points to a core update |
|---|---|---|
| Timing of the drop | A sharp change from around 18 August 2026 | A change that lines up with one of the five core updates between March and August 2026 |
| What lost visibility | Specific groups: bulk blog posts, near-duplicate location pages, a rented subfolder | Broad decline across informational content and whole topic areas |
| Link profile | Recent growth in links you cannot account for | Nothing unusual in the Links report |
| Shape of the curve | Steep, then flat | Gradual over one to two weeks, matching the announced rollout |
| What recovery needs | Removing the content or links that triggered it | Real quality improvement, usually visible only at a later update |
If the pattern is broad rather than sharp, the recovery path is different, and our guide to working back from a core update drop is the better starting point. If you cannot read the pattern at all, a second pair of eyes on the same data settles it faster than guesswork. Send your dates and screenshots through the contact form and we will tell you what we see in them.
The self-audit checklist
Run this yourself before you hire anyone to fix anything. All of it uses Google Search Console and about an hour of attention. None of it needs a paid tool.
- Open the Pages report in Search Console and count how many URLs Google has indexed. If that number is far larger than the pages you knowingly commissioned, find out what the rest are.
- Read the ten most recent posts on your blog. Ask who wrote each one, who checked it, and what a reader gets from it that they cannot get from the result already ranking first.
- Open the Links report and list your top linking sites. Mark every domain you cannot explain in one sentence.
- Ask your current and previous agencies, in writing, for the complete list of sites where they placed links, guest posts or press releases for you.
- List every subfolder and subdomain on your domain and name who controls each one. Anything an outsider controls needs a decision this month.
- If you bought the domain second hand, check its history on the Wayback Machine and see what it was used for before you owned it.
- Compare your drop date in the Performance report against 18 August and against the 2026 core update dates.
While you work through that, watch for the signals below in whatever you turn up.
- Content billed per article with no named writer and no reviewer.
- Location or service pages that differ only by the place name.
- Backlinks from industries or languages you never approved.
- A monthly line item for links or authority that nobody will itemise for you.
- Pages live on your domain that you did not commission.
- An agency that treats its link list as a trade secret.
You will usually turn up one or two of these rather than all six. One is enough to explain a drop, and the fix is usually removal rather than addition. If none of them apply and traffic still fell, the cause is more likely technical or competitive, which we cover in our post on why a site stops ranking.
Frequently asked questions
How long does recovery from a spam update take?
Longer than most owners expect. Once the offending content or links are gone, Google has to recrawl and reassess, and algorithmic reassessment often waits for a later refresh of the same system. Plan in months rather than weeks, and treat any promise of a fixed recovery date as a warning sign.
Should I disavow links after this update?
Only where you have evidence. Disavowing links you simply do not recognise can remove links that were helping you. Use the file for links you know were bought or placed by a vendor on your behalf, keep a written record of why each domain is on the list, and do not make it a routine monthly habit.
Is AI-written content against Google's rules now?
No. The policy is about value and intent, not the tool. AI drafting with a subject expert editing, adding real examples and checking facts is fine. Publishing forty unreviewed articles a month because the tool made it cheap is the behaviour this update goes after.
My rankings dropped but I never hired an SEO agency. What now?
Then spam is probably not your problem. Check for a core update date near your drop, an indexing or speed issue, or a competitor who simply improved their pages. Start with your Search Console coverage and performance data before you assume any kind of penalty.
What to fix first
Order matters. Remove or rewrite the thin pages before you touch links, because content you control changes faster than links sitting on someone else's site. Then deal with anything a third party controls on your domain. Only then disavow, and only links you can actually prove were bought or placed for you.
Set expectations honestly while you do it. Algorithmic recovery is not instant, it often waits for a later refresh, and nobody can promise you a position on a results page. We do not guarantee rankings, and you should be wary of anyone who does.
We run this audit for clients across Pune and Pimpri-Chinchwad as part of our SEO work for Pune businesses, and for Vadodara clients served by the same team. If you want a second opinion on a drop, bring your Search Console access and your last three agency invoices to a first conversation with our team. We will tell you straight whether it is a spam problem, a core update problem, or neither.
