The August 2026 Google Spam Update: What Actually Changes, and What to Check

Google began rolling out the August 2026 spam update at 09:27 US/Pacific on 18 August 2026, and says it applies globally and to all languages, with a rollout that "may take a few days to complete." It is the third spam update Google has announced in 2026, following the June release.

What Google actually said

The announcement went up on the Search Status Dashboard, not the Search Central blog, and it is short:

"Released the August 2026 spam update, which applies globally and to all languages. The rollout may take a few days to complete."

That is the whole confirmed picture. Google gave no list of targeted behaviours, no country breakdown, and no technical detail about how sites are evaluated during the rollout. Google has also repeated its standing position on spam updates: sites that were not affected by previous ones are, in its words, good to go at least for now — while acknowledging that on rare occasions a site that violates nothing can still be caught.

Everything beyond those two paragraphs is inference, including the analysis below. We have marked it as such.

Why a spam update is not a core update

This distinction decides your whole response, and it is the single most common mistake we see after an announcement like this.

A core update re-weighs how Google assesses quality and relevance across the board. Recovery is gradual and comes from being genuinely more useful than the alternatives.

A spam update acts on Google's published spam policies — a specific, documented list of practices: cloaking, doorways, expired domain abuse, hacked content, hidden text, keyword stuffing, link spam, machine-generated traffic, misleading functionality, scaled content abuse, site reputation abuse, sneaky redirects, thin affiliate pages and user-generated spam.

The practical consequence: if you were hit by a spam update, the fix is to find and remove the specific violation. "Writing better content" is not a recovery plan for a spam action. Conversely, if you have no violation, generic quality work will not protect you from collateral damage either — and Google admits collateral damage happens.

Where the risk concentrates in 2026

Google has not said what this update targets, so this section is our reading, not Google's statement. Three policies have absorbed most of Google's enforcement attention over the past two years, and they are where we would look first:

Scaled content abuse. Google defines this as generating many pages primarily to manipulate rankings rather than to help users, focused on large amounts of unoriginal content that provides little value — explicitly regardless of how it was produced. The "how it's created" clause matters: hand-written, templated and AI-generated pages are judged the same way. Programmatic SEO is not the violation. Programmatic SEO where every page is the same shell around a different number is.

Site reputation abuse. Third-party content published on an established domain mainly to exploit that domain's ranking strength — coupon sections, sponsored "reviews" and directory subfolders bolted onto a trusted publisher.

Expired domain abuse. Buying a domain for its residual authority and repurposing it for unrelated content.

What to check, in what order

If your traffic moved this week, work through this before changing anything:

1. Wait for the rollout to finish. Google says it may take days. Rankings genuinely oscillate mid-rollout; reacting to day-one movement means optimising against a signal that is still settling.
2. Segment before you diagnose. Look at Search Console impressions and average position by page type or directory, not sitewide. Spam actions usually land on a section — a templated directory, a user-generated area, a syndicated subfolder — while the rest of the site is untouched. A sitewide chart hides exactly the pattern you need.
3. Read the policy list against your own site honestly. Go down Google's fourteen policies and ask, for each, whether a stranger reviewing your site would say you are doing it. The uncomfortable answers are the useful ones.
4. Check what links to you. Link spam is on the list, and links can be pointed at you by someone else. Our Backlink Checker and Toxic Backlink Checker are free and need no account if you want a second opinion on your profile.
5. Do not panic-delete or mass-disavow. Removing large numbers of pages, or disavowing broadly, during an unfinished rollout destroys the evidence you need to work out what actually happened.

Who is most exposed

Site type	Why	What we would check first
Large programmatic / directory sites	Highest surface area for scaled content abuse	Is each page uniquely useful, or a template with a swapped variable?
Publishers hosting third-party sections	Site reputation abuse	Coupon, deals, sponsored and partner subfolders
Affiliate-heavy sites	Thin affiliate pages	Does the page add first-hand experience beyond the merchant feed?
Sites on acquired domains	Expired domain abuse	Does current content relate to what earned the links?
Sites doing nothing wrong	Collateral damage, which Google admits	Segment, document, wait for the rollout to complete

What should change in how you work

Three shifts, offered as our opinion rather than as Google guidance:

• Publish fewer pages that each earn their existence. The scaled content policy is indifferent to production method and interested in value per page. Volume without differentiation is now a liability, not a strategy.
• Own your third-party surfaces. If someone else publishes on your domain, their compliance is your ranking risk.
• Instrument before the next update, not after it. Segmented Search Console tracking set up today turns the next announcement from a panic into a measurement.

What is the difference between a spam update and a core update?

A spam update enforces Google's documented spam policies — specific practices like cloaking, scaled content abuse and link spam. A core update re-weighs Google's general assessment of quality and relevance. A spam action is fixed by removing the violating practice; a core update decline is addressed by being genuinely more useful. Confusing the two leads to the wrong recovery work.

How long will the August 2026 spam update take to roll out?

Google stated the rollout "may take a few days to complete" and gave no specific end date. Until the Search Status Dashboard marks the incident complete, ranking movement should be treated as unfinished rather than final.

Does this update target AI-generated content?

Google has not said what this update targets. Its scaled content abuse policy applies to unoriginal, low-value pages produced at scale "no matter how it's created" — so AI-generated content is neither exempt nor singled out. The test is value per page, not production method.

Was my site hit by the spam update or by something else?

Compare the timing of your movement against the 18 August start and check whether the decline is concentrated in one section of the site. A drop that begins clearly before the announcement, or one spread evenly across every page type, is more likely something else — an unconfirmed volatility period, a technical regression, or seasonality.

The honest limitation

We cannot tell you what this update targets, and neither can anyone else writing about it today. Google published two sentences. Any article claiming to know which signals changed is inferring, as we are. What is verifiable: the start time, the global scope, the multi-day rollout, and the policy list Google enforces. Everything else is a hypothesis until Google says more or the data shows a pattern.