Written by Admin Alex · Fact-Checked by M.Ali · Info Verified September 2026
We review and update this article regularly as new information becomes available.
TL;DR: Google started rolling out its September 2026 spam update on September 24 at 9:15 a.m. PDT, and it warns the process could stretch up to two weeks, far longer than any spam update earlier this year. Google also hasn’t said what the update actually targets, so treat the next two weeks of ranking movement as noise until there’s more to go on.
If your rank tracker looks like a seismograph this week, you’re not losing your mind. Google confirmed it began rolling out the September 2026 spam update on September 24 at 9:15 a.m. PDT. It’s the fourth spam update of the year, and Google is telling site owners upfront that this rollout could take as long as two weeks to finish. Sit with that for a second. Two weeks of your positions potentially sliding around with no clear explanation, while you try to figure out whether it’s the update, a seasonal dip, or something you actually broke.
That timeline alone should get your attention, because it breaks the pattern Google set earlier this year.
How This Rollout Stacks Up Against Google’s Other 2026 Spam Updates
Look at how fast the last three finished, and the September update starts to look like an outlier rather than routine maintenance.
The March 2026 spam update wrapped in 19 hours and 30 minutes. June 2026 took 2 days and 1 hour. August 2026 ran 2 days and 16 hours. September 2026 carries an official estimate of up to two weeks. Do the math and this rollout window is somewhere between six and seventeen times longer than anything Google shipped earlier in the year. That’s not a subtle difference. That’s a completely different scale of change moving through the ranking systems.
A short rollout usually means Google is flipping a narrower set of signals. A rollout stretched across two weeks usually means something bigger and messier is being layered in gradually, watched, and adjusted as it goes. Google hasn’t confirmed that reasoning publicly. It doesn’t need to. The length of the window says enough on its own.
Google Won’t Say What It’s Actually Targeting
Here’s the part that should really bother anyone who tracks rankings for a living. Google’s only public description of this update, posted to its Search Status dashboard, is that it applies “notable improvements to automated systems for detecting search spam.” No named policy. No category of manipulation called out. No hint at whether this is aimed at AI-generated content farms, link schemes, cloaking, expired domain abuse, or something Google hasn’t publicly named yet.
“Released the September 2026 spam update, which applies globally and to all languages,” Google said in its Search Status update.
Global. Every language. Vague on purpose, it seems. That’s the pattern with spam updates generally, Google rarely spells out the mechanics while a rollout is live, but the silence hits differently when it’s paired with a rollout window this much longer than usual. Site owners are being asked to ride out two weeks of volatility with less information than they’d normally get for a rollout a fraction of the length.
The Best Guess So Far: An AI Spam Detector Called SAFE
One new data point surfaced the same day this rollout began, and it’s worth flagging even though Google has not tied it to the update directly. A research paper describing a system called SAFE, short for Scaled Abuse Forensics Examiner, showed up on September 25. It’s built to hunt mass produced, AI generated spam content, the kind researchers are now bluntly calling “AI slop,” at a scale no human review team could keep up with.
The system works through four specialized agents rather than one model. A root agent runs the investigation. A content understanding agent looks for synthetic artifacts and policy violations. A behavior understanding agent watches for coordination that doesn’t look organic. A channel cluster understanding agent maps how spam accounts and sites connect to each other using graph analysis. Put together, it reads less like a filter and more like an automated investigator built to catch spam networks acting in concert, not just individual bad pages.
SAFE is also Google’s second spam detection system to surface publicly this year, after something called the Scalable Cluster Termination System, or S CTS. Some SEOs tracking both releases think they could be feeding into, or at least informing, the September spam update given how closely the timing lines up. That’s a reasonable guess. It is still a guess. Google’s own documentation for the September update makes no mention of AI content, SAFE, or S CTS, and nothing in the official rollout notice claims this update targets AI generated content specifically. Treat the connection as plausible context, not confirmed cause.
What To Actually Do For the Next Two Weeks
Google’s own guidance for anyone watching rankings swing right now is straightforward, even if it isn’t especially comforting: review Google’s published spam policies and fix anything on your site that doesn’t comply. No shortcuts, no special dashboard, no early warning system. Just the same policy documentation that’s already public, applied honestly to your own site.
In practice, that means resisting the urge to react to every single position change this week. A drop on day three could reverse by day nine. A jump could be temporary too. Pull your rank data daily if it helps you sleep, but hold off on any big structural changes, disavow files, or content purges until the rollout is further along and the picture is clearer. Reacting mid-storm to a signal you can’t actually verify is how sites end up making things worse for themselves, not better.
What you can do productively right now is get honest about anything on your site that skirts the edges of Google’s spam policies. If there’s a page you’ve been meaning to clean up, or a tactic you adopted because a competitor was getting away with it, this is a reasonable week to deal with it. Not because you know it’s the target. Because it’s good practice regardless of what this particular update turns out to hit.
Keep reading: Google’s traffic story doesn’t stop at rankings. See what the new multimodal filter in Search Console reveals, and why Discover’s “Dive deeper” button has publishers worried about clicks too.
Bottom Line: A two-week rollout with zero detail on what’s being targeted is a strange combination, and the opacity itself is what deserves attention here. Until Google says more, the safest move is to watch your data without overreacting to it.
