Google began rolling out its August 2026 spam update on 18 August, the third spam update of the year following rollouts in March and June. Here’s what’s actually known so far, and what it means if you manage a website.
What Happened
Google logged the update on its Search Status Dashboard as an incident impacting ranking, starting at 9:27am Pacific time on 18 August 2026. The release note was brief:
“Released the August 2026 spam update, which applies globally and to all languages. The rollout may take a few days to complete.”
That’s it — no companion blog post, and as of publication, no new spam policy types announced. Google’s spam policies documentation hadn’t been updated since December. In other words: this looks like a routine enforcement pass against Google’s existing spam policies, not a new set of rules to learn.
Rollout Status
The update applies globally, across all languages. Based on Google’s two previous 2026 spam updates, rollout timing has varied significantly — March 2026 was the fastest confirmed spam update rollout on record at 19 hours and 30 minutes, while June 2026 took just over two days. Google will close out the incident on the Status Dashboard once the rollout finishes, the same way it did for both earlier updates this year.
Why a Third Spam Update This Year Is Notable
Three spam updates in eight months is a faster cadence than Google has run in prior years, and it comes against a backdrop worth understanding. In May 2026, Google clarified that its existing spam policies also apply to attempts to manipulate generative AI responses in Search — including AI Overviews and AI Mode — and the June 2026 spam update followed shortly after that clarification. Google hasn’t said whether the August update specifically targets AI-response manipulation, but the sequencing is worth keeping in mind: as more search traffic flows through AI-generated summaries rather than the traditional ten blue links, expect spam enforcement to increasingly follow it there.
What Google’s Existing Spam Policies Actually Cover
Since no new policy type was announced, the practical move is to check your own site against the policies that were already in force. Google’s spam policies cover behaviours including:
- Cloaking — showing search engines different content than what users see
- Doorway pages — multiple pages targeting near-identical search terms that funnel users to the same destination, often with only a location or keyword swapped between them
- Scaled content abuse — mass-producing pages (AI-generated or otherwise) primarily to manipulate rankings rather than to genuinely help users
- Site reputation abuse — publishing low-quality third-party content on a trusted domain to exploit its existing ranking signals
- Hacked content and malware
- Link spam — buying links, excessive link exchanges, or other unnatural link-building tactics
- Thin affiliate content — content that adds no original value beyond what’s already on the page it’s promoting
- Sneaky redirects and misleading functionality
The pattern worth paying closest attention to for most small and mid-sized Australian businesses is doorway pages and scaled content abuse — both catch out sites that have templated location pages, near-duplicate service pages targeting slightly different keyword variations, or AI-assisted content published at volume without a genuine editorial pass. If any of that description matches part of your site, this is a reasonable prompt to review it now rather than wait to see if you’re affected.
What To Do If You Think You’ve Been Hit
- Check your Search Console data from 18 August onward. A single day’s fluctuation doesn’t confirm impact — look for a sustained pattern across several days of the rollout window, not a one-day dip.
- Audit against the policy list above, not against guesses about what might have changed. Google explicitly didn’t announce new rules with this update, so the existing spam policies are the actual checklist.
- Fix genuine issues, then wait. Google’s own documentation notes that recovery can take months, since its automated systems need time to observe that a site is now following the rules — there’s no manual “please re-crawl me” fix for a spam-related ranking drop.
- If nothing’s changed and rankings haven’t moved, you likely don’t need to do anything. Spam updates target specific policy violations; a site with no doorway pages, thin content, or manipulative link patterns has little reason to be affected.
Frequently Asked Questions
What is the Google August 2026 spam update?
It’s the third spam-focused algorithm update Google has released in 2026, rolled out globally on 18 August to all languages. It enforces Google’s existing spam policies rather than introducing new ones.
How long does a Google spam update take to roll out?
It varies. The two prior 2026 spam updates took 19.5 hours (March) and just over two days (June) to complete. Google updates its Search Status Dashboard when a rollout finishes.
Does the August 2026 update target AI-generated content specifically?
Google hasn’t confirmed that. It follows a May 2026 clarification that spam policies also cover manipulation of AI-generated search responses (AI Overviews and AI Mode), and the June update came shortly after that clarification — but Google hasn’t stated the August update targets that behaviour specifically.
How do I know if my site was affected?
Check Search Console performance data from 18 August onward for a sustained ranking or traffic drop that lines up with the rollout window, rather than a single day’s fluctuation.
How long does recovery take after a spam update?
Google’s own guidance says it can take months, since ranking systems need time to reassess a site after issues are fixed — there’s no immediate reversal once a fix is made.
Should I panic if I see ranking movement this week?
Not immediately. Rankings fluctuate for many reasons even outside a named update. Confirm the timing lines up with the rollout window and check for a genuine, sustained pattern before assuming it’s related to this update specifically.
Need a second opinion on whether something on your site could be a spam-policy risk? Get in touch!
