The March 2026 spam update rolled out on March 24 and completed in under 20 hours. That speed tells you something. The August 2025 spam update ran for 27 days. When Google wraps something up in less than a day, it either had a narrow target or the enforcement was already baked into systems waiting for a trigger. Either way, if you saw ranking movement between March 24 and 25, this is why.
This is the first spam update of 2026 and the third algorithm event in seven weeks, following the February 2026 Discover core update and the March 2026 broad core update. That is an unusual concentration. Whether they are connected in intent or simply a coincidence of timing is not clear yet, but the cumulative effect on volatile sites will be hard to separate.
What this update actually is
Google described it on LinkedIn as “a normal spam update.” That phrase matters. Spam updates are enforcement actions. They target sites that violate Google’s spam policies. They are not re-assessments of content quality. That is what core updates do. If your site was hit by a core update last month and you have been working on content quality, that work will not protect you from a spam update targeting a different category of violation.
Like this stuff? Get it weekly.
The Wednesday Roundup. SEO and AI search news, tactics and what is changing this week. No fluff.
Subscribe →Google also confirmed this update does not specifically target link spam or site reputation abuse. So if you were hoping a disavow file would fix whatever happened to your rankings this week, that is likely not the answer here.
WORK WITH JAMES
Get a straight answer on your SEO.
No account managers. No generic reports. Direct access to someone who has been doing this for 25 years.
What it does target: cloaking, doorway pages, scaled content abuse, AI-generated content produced without human oversight or original value, and other violations of the spam policies Google has had in place since the March 2024 update introduced site reputation abuse and expired domain abuse as named categories. The March 2026 update is not introducing new rules. It is improving enforcement of existing ones through SpamBrain, Google’s AI-powered spam detection system.
The AI content question
The inevitable question after any spam update in 2026 is whether AI-generated content was targeted. The honest answer is: we do not know precisely what this update targeted, and Google has not said. What Google has consistently said is that AI-generated content is not penalised by default. The issue is content that is produced at scale without fact-checking, editing, or original insight. A thousand near-identical articles published in a week with no human review is a spam pattern. A well-edited piece that used AI to help draft a section is not.
If you have been producing content with AI and applying genuine editorial judgment, you should be fine. If you have been using AI to fill a blog with keyword-targeted articles at volume, this update is the kind of enforcement action those sites attract.
How to check if your site was affected
Open Google Search Console, go to Performance, and set your date range to compare the week of March 24 against the previous week. Look for drops in clicks and impressions that began on March 24 specifically. If your traffic dropped earlier in March, that is more likely the core update. If it dropped on or around March 24 and 25, the spam update is the more likely cause.
Check for manual actions in Search Console under Security and Manual Actions. If Google has issued a manual penalty on top of the algorithmic action, you will see it there. Most spam update impacts are algorithmic rather than manual, but it is worth checking.
If your traffic is steady or improved, that is also a relevant data point. Spam updates tend to redistribute rankings. Sites that were competing against spam-heavy content may find themselves moving up as those competitors drop.
Recovery if you were hit
The first step is an honest audit against Google’s spam policies, not a guess at what might have triggered the update. Read through the policies at developers.google.com/search/docs/appearance/spam-policies and check your site against each category. If you find violations, fix them. If you do not find obvious violations, the cause may be subtler patterns that aggregate into a spam signal.
Recovery from spam updates takes time. Google’s own documentation is explicit that improvements may not become visible for several months after you have fixed the underlying issues. This is not a situation where you patch something this week and see rankings recover next week. The systems need to recrawl, reassess, and update their signals. For content violations, three to six months is a realistic window. For link-related issues, recovery is less certain and may require a disavow file alongside the content work.
If your site has always operated within Google’s guidelines, this update is not something to act on. Clean sites with natural backlink profiles and original content are not the target. The disruption you might experience is neighbouring noise from competitors who were hit, and that tends to settle in your favour.
The broader picture
Three algorithm events in seven weeks is worth paying attention to as a pattern. Google has not slowed down its update cadence in 2026. The February Discover update, the March core update, and now this spam update have collectively created significant ranking volatility for sites that were already close to the edge on quality or compliance signals.
For sites that have been doing the fundamentals correctly, structure, E-E-A-T, genuine content, natural links, this is a consolidation period rather than a threat. The sites getting hit are the ones that were benefiting from conditions that should not have existed in the first place.
I will update this post as data from affected sites becomes clearer over the next few weeks. If your site was hit and you are trying to diagnose what happened, get in touch and I can take a look.
History of Google spam updates
There have been nine confirmed spam updates since 2021. Looking at them together, a clear pattern emerges: rollout duration is the best signal of how targeted an update is. The longer it runs, the broader the sweep. The faster it wraps up, the more surgical the enforcement.
November 2021, 8 days
The first confirmed spam update of the modern era. Ran November 3 to November 11. Google gave no specific detail about what it targeted but it landed during the Q4 holiday period, which caused outsized concern for ecommerce sites. In hindsight it was relatively contained, 8 days is a moderate rollout. SpamBrain was not yet in public deployment for this update.
October 2022, 48 hours
One of the fastest spam updates on record at the time. Started October 19, done October 21. The speed pointed to a narrow, well-defined target rather than a broad enforcement sweep. Given subsequent updates, this was likely focused on a specific spam pattern Google had identified and could act on cleanly.
December 2022 link spam, 19 days
The most structurally significant update before March 2024. This was the first public deployment of SpamBrain for link spam detection, running December 14 to January 12, 2023. SpamBrain is Google’s AI-based spam detection system and its introduction here marked a shift from rule-based filtering to machine learning for link enforcement. Sites with purchased links, PBNs, and unnatural anchor profiles took the biggest hits. Google was explicit that recovery from link spam may be impossible even after the offending links are removed or disavowed, the ranking benefit cannot be restored once SpamBrain neutralises it.
October 2023, 15 days
Ran October 4 to October 20. Landed alongside a core update in the same month, making it difficult to isolate the specific impact. The SEO community noted heavier than usual impact on internal and external linking patterns, particularly sites using aggressive anchor text strategies or thin interlinked content. No new spam policy categories were introduced but enforcement of existing policies appeared tighter than previous updates.
March 2024, 15 days (the policy shift update)
March 5 to March 20, running alongside what became one of the most significant core updates in years. This was the structural pivot. Google introduced three new named spam policy categories alongside the update: expired domain abuse (using old domains to publish low-value content), site reputation abuse (third-party content hosted to exploit a domain’s authority), and scaled content abuse (large-scale content production with no original value, regardless of whether it was AI-generated or human-written). These were not just enforcement changes, they were policy changes. Sites that had been operating in grey areas for years suddenly had explicit policy violations they could be measured against. Recovery from this update was slow and for many sites incomplete.
June 2024, 7 days
Ran June 20 to June 27. A standard enforcement update with no new policies. Seven days is a moderate rollout suggesting a reasonably broad but not sweeping scope. The March 2024 policy categories were still relatively new at this point and the June update was likely partially targeting sites that had been flagged but not yet processed during the March rollout.
December 2024, 7 days
December 19 to December 26. Landed one day after the December 2024 core update completed, creating significant combined volatility heading into Christmas. Sites observed to be penalised included those with programmatic or scaled AI content, articles without authors, and doorway pages. No specific new policies announced. The timing one day after a major core update made it harder to diagnose which signal caused which ranking change.
August 2025, 27 days (the longest recent update)
August 26 to September 22. The longest spam update rollout since March 2024, at 27 days. Google described it as a “normal spam update” but the duration indicated a broad sweep rather than targeted enforcement. The main patterns observed were bulk AI-generated articles, templated product roundups, programmatic location pages with thin original content, and affiliate-heavy sites. Effects were felt within hours of launch but continued accumulating throughout the rollout. No new policy categories were introduced, this was enforcement of the March 2024 framework at scale.
March 2026, under 20 hours
The fastest spam update ever recorded. Started March 24 at 12:18 PDT, complete by March 25 at 7:30 AM PT. Less than 20 hours from start to finish. Google confirmed it does not specifically target link spam or site reputation abuse. No new policy categories. The speed strongly suggests a very narrow, well-defined target, either a specific type of violation Google could identify and act on cleanly, or a technical enforcement action rather than a broad content quality sweep.
What the history tells us
A few consistent patterns emerge from looking at these updates together.
Rollout duration predicts scope. The 27-day August 2025 update hit broadly. The 48-hour October 2022 update and the sub-20-hour March 2026 update were surgical. If you see a spam update announced and it wraps up in less than a day, do not expect widespread collateral damage. If it runs for three weeks, more sites across more violation types are in scope.
SpamBrain has made link spam recovery increasingly difficult. Since December 2022, Google has been explicit: if SpamBrain neutralises the value of links pointing to your site, that value does not come back even if you remove or disavow the links. You lose the ranking benefit permanently. This is a fundamentally different outcome from pre-SpamBrain link penalties, where cleaning up your profile could lead to recovery. The lesson is that link quality has always mattered more than quantity, but now the penalty for getting it wrong is harsher.
March 2024 was the inflection point. Before that update, Google’s spam enforcement was largely reactive to obvious violations. The introduction of named categories for expired domain abuse, site reputation abuse, and scaled content abuse gave Google a framework to penalise practices that were previously in grey areas. Every spam update since March 2024 has operated within that framework rather than introducing new rules.
AI content is not the issue but scale is. None of these updates specifically penalised AI-generated content. What they targeted was content produced at scale without human oversight, original insight, or genuine value to the reader. The distinction matters. A well-edited piece that used AI in its production is not what these updates are after. A site publishing 200 near-identical AI-generated articles a week with no editorial review absolutely is.
Recovery takes longer than most people expect. After a spam update, fixes need to be in place for several months before Google’s systems reassess the site. There is no quick fix. If your site was hit in August 2025 and you made changes in September, you should be seeing data on whether those changes helped by now, but only just. If you were hit in December 2024 and have not seen recovery, you may not have addressed the actual violation, or your fixes may not yet have been fully processed.
Frequently asked questions
Yes. The rollout completed on March 25, 2026 at 7:30 AM PT, less than 20 hours after it began. Google Search Central confirmed completion on the Search Status Dashboard.
No. Spam updates and core updates are different things. Core updates reassess how Google evaluates content quality and relevance. Spam updates enforce policy violations. They target different sites for different reasons and require different responses. Fixing a content quality issue will not recover a site hit by a spam update.
Not specifically, and Google has not said it does. AI-generated content is not penalised by default. Content produced at scale without human review or original value is the target, regardless of how it was produced. If your AI-assisted content has been properly edited and adds genuine value, it is not the issue here.
Google confirmed this update does not specifically target link spam. If you saw ranking drops around March 24 and you have known issues with your backlink profile, the link profile may still be contributing to your overall situation, but this specific update is not the mechanism targeting it.
For content-related spam violations, three to six months after fixing the underlying issues is realistic. For link-related violations, recovery is less predictable and in some cases not fully achievable. Google’s documentation is explicit that rankings lost from link spam cannot always be recovered even after the links are removed or disavowed.
Under 20 hours is the fastest completion ever recorded for a Google spam update. Short rollouts historically correspond to narrow, targeted enforcement rather than broad sweeps. The August 2025 update ran for 27 days because it was broad. This one did not need that time.
SpamBrain is Google’s AI-based spam detection system. It was first publicly deployed for link spam detection in the December 2022 update and has been upgraded with each subsequent update. Unlike the rule-based filters it replaced, SpamBrain uses machine learning to identify spam patterns. This is why recovery from link spam penalties is now harder, SpamBrain’s assessment is not reversed by simply removing links.
Google’s main spam policy categories include cloaking, doorway pages, hidden text, link spam, scraped content, sneaky redirects, and thin content. Since March 2024, three additional named categories are enforced: expired domain abuse, site reputation abuse, and scaled content abuse. The March 2026 update does not add new categories but continues enforcement within this framework.
Check whether the drop started specifically on March 24. If it began earlier, the March 2026 core update or the February Discover update may be the cause. Spam signals can also be aggregate, no single page triggers a penalty but a pattern across the site does. Check Google Search Console for manual actions first, then review your backlink profile, then audit your content against the spam policy categories.
TESTIMONIALS
