Google released the August 2026 spam update on August 18, and as of today it is still rolling out worldwide across every language. It enforces Google's existing spam policies, not a new algorithm, so if your rankings drop this week the question is not "what changed at Google" but "what on my site trips a spam policy." Most legitimate sites will see nothing.
The short version
- Google announced the August 2026 spam update on August 18 through its Search Status Dashboard. It applies globally and to all languages and may take a few days to finish rolling out.
- This is a spam update, not a core update. It targets sites that violate Google's published spam policies, not the broad quality reassessment a core update performs.
- If your site follows Google's spam policies, you are very unlikely to be affected, even if you see minor ranking wiggle during the rollout.
- Recovery from a spam update is slow by design. Google says a site can take many months to recover after it cleans up, because automated systems need time to re-trust it.
- Google confirmed earlier in 2026 that its spam policies now cover attempts to manipulate generative AI answers in Search, which is worth knowing if you have leaned into AI-generated content.
What actually happened, and when
Google confirmed the August 2026 spam update on Monday, August 18, posting to its Search Status Dashboard at around 9:27 a.m. Pacific. The dashboard note states the update applies globally and to all languages, and that the rollout may take a few days to complete. This is the third spam update Google has shipped in 2026, following ones in March and June, so the cadence is roughly quarterly.
That timing matters for how you read your own analytics right now. We are inside the rollout window. Rankings for some queries will move up, down, and back again over the next several days as the update propagates, and reading too much into a single day's data is a good way to panic over noise. The March 2026 spam update finished in under a day; the June one took just over two days. Wait for the rollout to complete before you conclude anything about your site.
Spam update or core update? The distinction changes your response
The most common mistake I see when any Google update lands is treating every update the same way. A spam update and a core update are different tools, and they call for different responses.
A spam update enforces Google's spam policies. It is looking for specific, nameable violations: scaled content abuse, cloaking, hidden text, sneaky redirects, expired-domain abuse, and similar tactics Google has explicitly banned. If a spam update hits you, it is because something on your site matches one of those patterns. The fix is concrete: find the violation and remove it.
A core update is broader. It reassesses how helpful and reliable your content is relative to everything else, with no single policy you violated. Recovering from a core update is about improving overall quality over time, not deleting one bad tactic.
This week's update is a spam update. So the productive question is not "is my content good enough," it is "does anything on my site break a specific rule." If you have never used a manipulative tactic, this update is background noise. If you bought links, spun content at scale, or ran an expired domain to inherit its authority, this is the update that can catch it.
Who is actually at risk
Be honest with yourself about what is on your site. The sites that get hit by spam updates almost always did something that, in hindsight, they knew was a shortcut.
The clearest risk today is scaled content abuse: publishing large volumes of pages, often AI-generated, primarily to rank rather than to help anyone. Google's spam policy names this directly, and it does not matter whether a human or a model produced the text. The test is intent and value, not authorship. Producing a hundred thin location pages or a content library churned out to blanket keywords is exactly the pattern these updates target.
The other reliable risks are the old ones that never went away. Cloaking, showing Google different content than users see. Sneaky redirects. Hidden text and links. Doorway pages built only to funnel traffic. Site reputation abuse, where a trusted domain rents out subsections to third parties to exploit its rankings. If any of that describes a corner of your site you have been avoiding looking at, look now.
One clarification from earlier this year is worth flagging. In 2026 Google confirmed that its spam policies also cover attempts to manipulate its generative AI answers in Search, not just the classic ten blue links. If your strategy has drifted toward gaming AI Overviews or AI Mode with manufactured content, understand that the same spam enforcement applies there.
What to do this week
If you think you may be exposed, here is the order of operations I would run.
First, wait for the rollout to finish before diagnosing anything. Mark the date the update completes and compare a stable week after to a stable week before, not day-to-day inside the window.
Second, if you do see a real drop tied to the update, go straight to Google's spam policies and read them against your own site, section by section. Do not guess. The policies are specific, and the violation is usually something you can identify honestly within an hour of looking.
Third, fix the actual violation, not the symptom. Remove the scaled thin content, kill the cloaking, drop the manipulative redirects. Half-measures do not reset the clock. When I audited a client site that had quietly accumulated a few hundred auto-generated pages from a previous vendor, the recovery did not begin until we deindexed and removed them entirely, not when we lightly rewrote them.
Fourth, be patient in a way that is genuinely uncomfortable. Google is explicit that recovery from a spam action can take many months, because its automated systems need repeated crawls over time to confirm the site now follows the rules. There is no reconsideration request that speeds this up for an algorithmic spam update. You clean up, then you wait.
What this does not cover
This is guidance for a spam update specifically, not a general ranking-recovery playbook. If your traffic has been sliding for months without a clear update to blame, that is more likely a core-update or content-quality story, and the fix is different. This also is not about manual actions, which show up as a notice in Search Console and do have a reconsideration process; an algorithmic spam update does not send you a message. And nothing here replaces reading Google's actual spam policy documentation for your specific situation, which is the primary source and the only one that governs.
Frequently asked questions
Should I be worried about the August 2026 spam update?
Only if your site uses tactics Google's spam policies prohibit, such as scaled content abuse, cloaking, or sneaky redirects. Legitimate sites that follow the guidelines are very unlikely to be affected, though minor ranking movement during the multi-day rollout is normal for everyone.
How long will the August 2026 spam update take to roll out?
Google said it may take a few days to complete. For reference, the March 2026 spam update finished in under a day and the June 2026 one took just over two days. Wait until the rollout is done before judging any impact on your site.
What is the difference between a spam update and a core update?
A spam update enforces specific spam policy violations, so recovery means finding and removing the violating tactic. A core update reassesses overall content helpfulness and reliability, so recovery means improving quality broadly over time. This week's update is a spam update.
My rankings dropped during the update. How do I recover?
Read Google's spam policies against your own site, identify the specific violation, and remove it completely rather than lightly editing it. Then wait. Google states recovery can take many months, because its systems need time across repeated crawls to confirm compliance.
Does the spam update affect AI-generated content?
It can. Google's scaled content abuse policy applies regardless of whether content is written by a person or a model; what matters is whether pages exist mainly to rank rather than to help users. Google also confirmed in 2026 that spam policies cover attempts to manipulate its generative AI answers.
If you want a second set of eyes on whether anything on your site trips a spam policy before you assume the worst, send me your domain and I will run a 20-minute spam-policy read-out and tell you where the real risk is, if any.