Sean Walsh
Sean is a Director at Intelligency heading up our digital marketing and client services operations. Sean has 15+ years experiencing working both in-house and agency with brands including Lloyds, Alstom, Hitachi, Lufthansa, Viaplay, DFDS Seaways and Mercedes-Benz.
Google released the August 2026 spam update on 18 August, logged on its Search Status Dashboard at 9:28am Pacific time. It applies globally and to all languages, and Google says the rollout may take a few days to complete. This is the third spam update Google has released in 2026, following updates in March and June.
If your rankings are stable, you can broadly relax. But if you have seen movement in the last few days, or if your site is in an area where spam tends to accumulate, it is worth knowing what these updates actually target and how to respond sensibly.
What a spam update is and what it is not
The distinction between a spam update and a core update matters because they work differently and require different responses.
- A core update changes how Google weighs quality signals across the whole web. It is a recalibration of the algorithm’s judgement about what constitutes a good, helpful, trustworthy result. Core updates affect sites that are technically fine but that Google has decided to rank differently against its quality criteria. Recovery from a core update usually requires improving the overall quality and relevance of your content.
- A spam update is different. It improves the detection systems that identify violations of Google’s existing spam policies. Think of it as the bank upgrading its fraud detection rather than rewriting what counts as fraud. No new spam categories have been announced with this update. The policies themselves, which have not changed since December 2025, remain the reference point. Google is simply getting better at catching sites that violate rules that were already in place.
The practical implication is that if your site was not violating spam policies before this update, you are unlikely to have been hit by it. And if you have been hit, the path forward is not to improve content quality in the core update sense but to identify and remove whatever the policy violation is.
What the 2026 spam updates have been targeting
Google has been quiet about the specific targets of all three 2026 spam updates, which is standard practice. It confirmed no new policy types alongside the August release and described it on LinkedIn as a normal spam update. But the context around the June update, which came shortly after Google formally extended its spam policies to cover AI Overviews and AI Mode, is worth noting.
On 15 May 2026, Google clarified that its existing spam policies now explicitly include attempts to manipulate generative AI responses in Google Search. That means tactics designed to force brand mentions into AI Overviews or AI Mode responses carry the same demotion risk as other forms of search spam. Google did not confirm that the June update enforced this provision, and has not confirmed it for August either. But the timing of three spam updates in a year that saw AI spam policies extended is not a coincidence worth ignoring.
This connects to something we have been tracking across this series: the difference between manufactured AI visibility tactics and genuine brand recognition. If Google’s spam systems are being improved partly to catch artificial AI citation manipulation, that reinforces the case for building real presence rather than gaming the signal.
Google spam policies: what they actually cover
If you want to check your site against what Google’s spam updates enforce, the reference document is Google’s spam policies page. The main categories it covers are:
- Cloaking. Showing different content to Googlebot than to users. A persistent and straightforward violation that spam updates have targeted for years.
- Doorway pages. Pages created to rank for specific queries that funnel users to a different destination. A common pattern in local SEO abuse where hundreds of near-identical location pages are generated with minimal unique content.
- Hacked content. Content placed on a site without the owner’s knowledge. Spam updates improve detection of sites that have been compromised and are being used to host or redirect spam. Relevant given the Premier Laser site incident this week where a related site was hacked.
- Hidden text and links. Content that is visible to crawlers but hidden from users. Still actively targeted despite being one of the older spam categories.
- Scaled content abuse. Creating large volumes of low-quality content primarily to manipulate rankings. This category was formalised in March 2024 and is directly relevant to AI-generated content published at scale without meaningful human review or original value.
- Link spam. Buying, selling or exchanging links to manipulate PageRank. A long-standing category with an important asymmetry: once Google neutralises spammy links, the ranking benefit they conferred does not return. Recovery restores the site to where it would have been without them, not to its prior position.
- Site reputation abuse. Publishing third-party content on an established site to exploit its authority signals. This runs on its own enforcement track since September 2024 and is separate from standard spam updates.
- AI manipulation of search features. Tactics designed to artificially influence appearances in AI Overviews or AI Mode. Formally added to spam policy in May 2026. Enforcement scope in recent updates has not been officially confirmed but the policy exists.
How to read your data during a rollout
One important piece of context for the August update: Search Console performance reports experienced a logging failure starting around 12 August that caused a decrease in reported impressions and clicks. Google confirmed this on 17 August. The logging issue was a data problem, not a ranking event. Sites reading their August data for evidence of an unannounced update were partly reading a broken meter, not their actual search performance.
This matters for how you interpret any movement you see around this period. If you have seen impression or click drops since 12 August, check whether they fit the pattern of the logging issue rather than assuming a ranking change. Google has said the logging problem is being resolved.
For the spam update itself, the sensible approach is:
- Wait until Google confirms the rollout is complete before drawing conclusions. Previous spam updates have taken between 19 hours and 48 hours. Google’s estimate for this one is a few days with no completion date named.
- Look for sustained changes rather than single-day movement. Volatility during a rollout is normal and some of it reflects ranking churn that settles after completion.
- If you see a genuine, sustained drop, compare it against the spam policy categories above. The most common causes are link-related or content-volume-related rather than technical.
- If you are clean, the rollout will complete and nothing will have changed for you. Spam updates do not affect sites that are not violating the policies they enforce.
The broader pattern behind three updates in one year
Three spam updates in eight months is a higher cadence than Google has run in previous years. The March update was the fastest confirmed rollout in dashboard history at under 20 hours. The June update followed within days of Google formally extending spam policy to AI features. The August update has arrived with no new policy announcements but in a year where the signals that drive genuine search and AI visibility are increasingly distinct from the signals that spam tactics try to manufacture.
The consistent message across all three updates is that Google is investing in better spam detection rather than changing the rules. For sites operating within the guidelines, that is straightforwardly good news. Better detection means less noise from spam competitors in the results, cleaner ranking signals and more reliable performance data. The businesses most affected by spam updates are those trying to take shortcuts that the policies have prohibited for years. The rest can monitor this one as it completes and then get back to building the kind of presence that compounds over time.
