On September 24, Google started its fourth confirmed spam update of 2026. That's the whole story in one sentence — but if your business depends on people finding your website through Google, the next two paragraphs matter more than most marketing emails you've read this year.
Here's what Google actually said, via its Search Status Dashboard: a spam update began on September 24, 2026, it applies to all languages and all locations, and it may take about two weeks to fully roll out. That's a longer window than the three previous updates this year — March, June, and August — which wrapped up in days. So as of this week, the update may still be moving. The picture isn't final yet.
Here's what Google did not say: which spam technique or policy category this update targets. They haven't named one. Anyone telling you with confidence "this update punishes exactly X" is guessing — don't build your week around a guess.
What this post is: the honest, practical version. What a spam update is, what it isn't, the 20-minute check a local business owner should run this week, the things you should not do while the rollout is still moving, and what a properly built website already has in place for moments like this.
What a spam update actually is
Google's language for these is worth reading literally: spam updates are "notable improvements to our automated systems for detecting search spam." That's it. They're enforcement upgrades, not product launches.
They are not, in particular, a war on AI-written content. Google's own generative-AI guidance doesn't treat AI assistance as spam by itself — the thing the spam policies call out is scaled content abuse: large volumes of pages that exist mainly to manipulate rankings, with little value added for the reader. Some of those pages are made with generative AI tools. The tool isn't the violation; the low-value page is.
The practical question for a business owner is therefore not "did a model help draft my site?" It's the question one practitioner put plainly this week: would a real customer learn something specific from this page? If the answer is yes, you're in the category these updates were never aimed at.
One more piece of calendar context: four confirmed spam updates in nine months, with rollout windows now stretching to two weeks, is a clear signal about direction. Google is tightening enforcement rather than loosening it. That's not alarming news if your site is built on genuine content — it is, arguably, good news, because every shortcut your competitor relied on just got more expensive to maintain. But it does mean the bar keeps rising, and "good enough in 2023" isn't the standard anymore.
What this kind of update targets
Google hasn't specified this update's target, so treat this section as the pattern, not the verdict. Across the spam updates this year, the pages that keep getting pushed down look like this:
Near-duplicate city pages. Twenty pages that are identical except the town name is swapped — "Plumber in Jupiter," "Plumber in Wellington," "Plumber in Royal Palm Beach," same text, no local detail. These exist to rank, not to help someone choose a business.
Thin AI pages with no local detail. Publishing a hundred blog posts in a week that say nothing a customer in your actual service area couldn't get from Wikipedia. Volume without substance.
Service pages that could belong to anyone. Generic copy — "we provide quality service at competitive prices" — with no specifics about what you do, where you do it, or how a customer reaches you. If a stranger in the next town reads your services page and can't tell it's about your business, the page isn't doing its job for customers or for Google.
Name, address, and phone that don't match. Your website says one phone number, your Google Business Profile says another, and a directory says a third. Inconsistency reads as untrustworthy — to customers first, and to Google second.
None of this is exotic. It's the difference between a website that represents a real business and a website that represents a ranking strategy. Spam updates are Google's way of widening that gap.
The 20-minute check
Do this before you change anything. The goal is a baseline: know where you stand while the rollout is still moving, so you can compare equal windows before and after once it settles.
1. Write down September 24. Seriously — put it in whatever you use for notes. Every future "did my traffic change?" question gets measured against this date. Comparing traffic before and after the update is the only comparison that means anything; day-to-day wiggles during a two-week rollout are weather, not verdicts.
2. Open Google Search Console and check Manual actions. If you don't have Search Console set up, setting it up is step zero — it's free, it's Google's own channel to you, and it takes five minutes. In Search Console, the Manual actions report tells you whether a human reviewer at Google has penalized your site. If it's empty, you do not have a manual penalty. That's a clean answer to a scary question.
3. Open the Security issues report. Before you blame SEO for a traffic dip, rule out a hacked site. Compromised pages — spam injected into a site the owner never looks at — are more common than most owners think, and they will tank your visibility. Clean this first; it takes two minutes.
4. Look at Performance from September 17 through today. Note whether clicks or impressions dropped, and on which pages. You're not diagnosing yet — you're recording. Which pages moved, and how much. Screenshot it. Future-you will want this.
5. Read your homepage, main service page, and contact page out loud. This is the single most useful test in this list, and it costs nothing. If a stranger in the next town listened to those three pages and couldn't tell you exactly what your business does, where it operates, and how to call you — those pages need work. This is the "could only be about your shop" test, and it catches more problems than any tool.
6. Check that your name, address, and phone match everywhere. Compare your website's contact details against your Google Business Profile. Exact match. Different formatting is fine (St. vs Street); different numbers are not.
7. Flag — don't fix yet — templated city pages and thin blog batches. If you (or someone you hired) published a batch of near-identical location pages or a pile of generic AI posts, mark them for a focused cleanup after the rollout completes. Note them now; act later.
8. Spot-check your structured data and metadata. Titles, meta descriptions, and schema markup should describe the real business — right services, right cities. If those fields were auto-filled at some point with wrong services or cities, fix them. That's maintenance, not a redesign.
Twenty minutes. No tools beyond a browser and Search Console. You'll end up with one of three outcomes: everything's clean (the most common result for a legitimate site), something small needs attention, or something bigger needs a plan — in which case you'll be glad you have the baseline.
What NOT to do this week
The rollout is still moving. That makes this the worst possible week for dramatic action. Specifically:
Don't rewrite your whole site on day-three data. Reacting to a three-day-old chart during a fourteen-day rollout wastes effort on a problem that may resolve on its own — or may not have fully appeared yet. Google itself says recovery after spam issues can take months as automated systems relearn that a site complies. A rewrite shipped mid-rollout can't prove itself inside the rollout.
Don't buy a bundle of "recovery links." If someone emails you this week offering to fix your rankings with links, that email is older than the problem. Link schemes are precisely the kind of thing spam updates target.
Don't nuke ranking pages because position 3 became position 7 for two days. Volatility during a rollout is normal. Deleting a page that's worked for years because of a two-day wobble is the SEO equivalent of selling stocks on a bad Tuesday.
Don't republish the same thin posts under new URLs. If a page was low-value at its old address, it's low-value at a new one — and now it also looks like you're trying to dodge the update.
Don't compare unequal windows. "Traffic is down this week versus last month" during a rollout tells you nothing. Compare equal windows before and after the dashboard shows the update complete.
The discipline here is simple: observe now, decide later. The businesses that get hurt by updates aren't the ones with imperfect sites — they're the ones who panic and break what was working.
What a properly built site already has
Here's the part that connects to what we do for a living, and we'll be straight about the line between marketing and honesty: no website builder can guarantee your rankings through a Google update. Anyone who promises that is selling certainty that doesn't exist.
What a properly built site can give you is the absence of the problems these updates target. That's not a small thing — most of the damage from a spam update lands on sites with avoidable, structural weaknesses. The checklist above is really a description of what a good build includes from day one:
Real pages about a real business. Every page should pass the "could only be about your shop" test — specific services, real service areas, your actual phone number. No swapped-town-name page factories, no generic filler.
Technical SEO baked in, not bolted on. Clean HTML, structured data, a proper sitemap, robots file, OG tags, and canonical URLs — the machine-readable layer that tells Google exactly what your business is. When Google's systems re-evaluate your site during an update, this is the layer they read first.
Consistent business information. Your site's name, address, and phone matching your Google Business Profile and your listings, everywhere, from launch day.
Fast, mobile-first, and maintained. Under-three-second loads, working on every device — because the updates keep raising the bar on what "good enough" means, and a site that was fine in 2023 needs to be fine by 2026 standards.
Migrations that preserve what you earned. If your site ever moves platforms — WordPress to something modern, Wix to something you own — proper redirects, schema migration, and content audits so you don't hand your rankings back at the door.
That's the build standard we hold ourselves to at Palm Beach Websites. Not because it games any single update, but because it's what survives all of them. Four updates in nine months is the strongest possible argument for building it right the first time: every shortcut has a shrinking shelf life, and the sites that keep winning are the ones with nothing to hide from Google's enforcement.
The honest bottom line
Most legitimate local business sites will come through this update unchanged. That's genuinely the expected outcome — not a lucky escape. If your site represents your real business, with real detail, consistent information, and sound technical foundations, there is nothing in a spam update aimed at you.
But "most" isn't "all," and the update is still rolling out. The 20-minute check costs you nothing and gives you the one thing you can't buy after the fact: a baseline. Run it this week. Write down September 24. Make sure Search Console is set up and your manual-actions report is clean. Read your pages out loud. Flag anything that looks like a shortcut, and deal with it once the dust settles.
And if the check surfaces something structural — templated pages everywhere, metadata that doesn't match reality, a site that couldn't pass the "next town" test — that's not a panic. That's a project. The kind a proper rebuild solves permanently, instead of the kind you patch every time Google tightens enforcement.
Ready for a site with nothing to hide?
If this week's news has you wondering what your website looks like to Google — not to you, to Google — that's exactly the conversation we have with business owners every week. We'll look at your current site honestly: what's solid, what's a shortcut, and what it would take to build something that sails through updates like this one instead of sweating them.
Palm Beach Websites builds professional websites for Palm Beach County businesses — and ambitious businesses everywhere. Starter websites from $2,500, Growth websites from $5,000, Premium websites from $10,000 — each a one-time purchase, revisions until you're satisfied, live in 2–4 weeks, with technical SEO baked in from day one.
📞 Call (561) 718-6725 for a free discovery call. No pressure, no obligations — just a real conversation about your business, based in West Palm Beach.