Google has begun rolling out the August 2026 spam update, applying it globally and across all languages. It’s the third spam update of the year, following rollouts in March and June.

Unlike some previous spam updates, Google did not pair this rollout with new spam policy language or a companion blog post explaining what changed. That’s consistent with how Google typically frames spam updates: as refinements to existing detection systems rather than the introduction of new rules, so most sites that haven’t been engaging in manipulative tactics shouldn’t need to change anything in response.

What a spam update actually does

Spam updates are distinct from Google’s core updates. Core updates broadly reassess how content is evaluated and ranked across the board. Spam updates instead target sites that violate Google’s spam policies directly — think scaled content abuse, cloaking, expired domain abuse, and site reputation abuse, where a well-established domain hosts low-quality third-party content to borrow its authority.

Because spam updates specifically target policy violations rather than adjusting quality signals broadly, the sites that see visible movement tend to be a narrower set than during a core update: primarily sites that were already skirting, or clearly violating, Google’s spam guidelines. This is the third such rollout in 2026, following March’s spam update, which some in the SEO community described as muted in visible impact despite signaling bigger changes ahead, and a June rollout.

What’s changed about spam enforcement more broadly

Google’s spam enforcement work has increasingly extended beyond traditional search results. Earlier this year, Google confirmed that spam-fighting efforts now also reach AI-generated answers, a harder enforcement problem since manipulated or synthetic content can influence what an AI Overview or AI Mode response surfaces, not just where a page ranks. We covered that shift in Google’s spam update now reaches AI answers.

Google has also continued adding to its specific spam policies during the year — for example, a newer policy targeting back-button hijacking, where scripts interfere with normal browser navigation to trap users on a page or force unwanted redirects.

What site owners should do

For most sites, a spam update rollout doesn’t call for any action. It’s worth monitoring rankings and traffic over the days the rollout is in progress, since spam updates can take one to several weeks to fully roll out, and comparing any movement against Google’s published spam policies rather than assuming a core-update-style broad quality reassessment is underway.

Sites that have used third-party or AI-generated content primarily to manipulate rankings, hosted low-quality content on a subdomain or subdirectory to borrow a stronger domain’s reputation, or relied on cloaking or deceptive redirects are the ones most likely to see a manual or algorithmic impact from this rollout. The safest response, as with any spam update, remains removing or disavowing the practice rather than waiting to see if the update catches it.

If traffic does drop during the rollout window, check Search Console’s Manual Actions report first — a manual action means a human reviewer flagged the site directly and will specify which policy was violated, which is far more actionable than trying to reverse-engineer an algorithmic spam update from ranking movement alone. Sites that receive a manual action can request reconsideration once the underlying issue is fixed, rather than waiting for the next update cycle.