Google's September 2026 spam update may take two weeks, unlike every 2026 spam update before it

Google released the September 2026 spam update on 24 September 2026 at 16:15 UTC (23:15 in Bangkok), and it applies globally and to all languages, Thai included. The one detail that separates it from the three spam updates Google already ran this year is the timetable: Google says the rollout "may take up to two weeks to complete", where the March, June and August notices all said "a few days".

That is the whole of the official disclosure. The Google Search Status Dashboard entry names no spam category, no share of affected queries and no new policy. So this post sets out what the dashboard does say, what Google's own documentation says a spam update does, how the 2026 cycles compare, and what a site owner in Thailand should check over the next fortnight.

What Google published on 24 September

The dashboard entry is one sentence long. It reads: "Released the September 2026 spam update, which applies globally and to all languages. The rollout may take up to two weeks to complete." It links to Google's page on spam updates, and it is filed as a ranking incident, like every core and spam update Google has announced through the dashboard.

Three things follow from that sentence. First, the scope is every market and every language, so a Thai-language site gets no exemption and no special treatment. Second, the update is still running. Nothing will be "complete" until Google adds a second line to the entry, which is how it closed the March, June and August cycles. Third, if Google uses the whole allowance, the rollout would run to roughly 8 October 2026. That date is our arithmetic, not a Google commitment; it could finish earlier.

How the 2026 spam updates compare

All the dates below come from the same Google Search Status Dashboard, which keeps a start time, an end time and the text of each notice. Durations are measured from the dashboard's start and end times.

Two patterns stand out. The gap between spam updates has shrunk each time: 92 days from March to June, 55 days from June to August, and 37 days from the August release to this one. And the September wording matches the language Google used this year for broad core updates, not for spam. The March 2026 core update and the May 2026 core update were both announced with "may take up to 2 weeks", and both finished in about 12 days (27 March to 8 April, and 21 May to 2 June).

Google has not said why this spam cycle carries a core-update-length window. It could reflect a larger change to the detection systems, a staged rollout across languages, or simple caution. The source does not say, and any explanation beyond "Google allowed more time" is guesswork.

What a spam update actually is, by Google's own account

Google's documentation page on spam updates, the one the dashboard links to, is short and worth reading in full. Its main points:

• Google's automated spam detection runs all the time. A "spam update" is the label Google uses when it makes a notable improvement to those systems.
• SpamBrain, which Google describes as its AI-based spam-prevention system, is named as one of the systems it improves from time to time "to help ensure it catches new types of spam".
• Sites that violate Google's spam policies "may rank lower in results or not appear in results at all".
• Fixing the problem may help, but only once Google's automated systems "learn over a period of months" that the site now complies.
• For link spam specifically, fixing things may not bring anything back, because the ranking benefit the spammy links had given the site is removed and "cannot be regained".

The months-long recovery is the part people tend to skip. A site that loses visibility in a spam update should not expect a rebound the week after it cleans up. That makes the next two weeks more about diagnosis than repair.

Which behaviours Google's spam policies cover

The spam update enforces Google's published spam policies for web search. Those policies currently list cloaking, doorway abuse, expired domain abuse, hacked content, hidden text and link abuse, keyword stuffing, link spam, machine-generated traffic, malicious practices, misleading functionality, scaled content abuse, scraping, the site reputation policy, sneaky redirects, thin affiliation and user-generated spam, plus a group of other practices such as scams and policy circumvention.

Google has not said which of these the September update targets. Its dashboard notice and its documentation are both silent on that. Any article claiming this update is "about" AI content, parasite SEO or link networks is going beyond what Google published, and should be read with that in mind.

What this means for Thai marketers

Because the update covers all languages, Thai-language sites are in scope in the same way as English ones. A few of the listed policies map onto patterns that show up often on Thai sites, and they are the sensible places to look first if traffic moves:

• Hacked content. Injected pages, often promoting gambling, that the owner never created. They can sit on an otherwise clean WordPress site for months. Search Console's Security issues report is the first check.
• Scaled content abuse. Large numbers of near-identical pages built to catch search variations, such as one template repeated across every province or district with only the place name changed.
• Site reputation abuse. Third-party sections hosted on a trusted domain, such as a coupon, casino or loan directory that has little to do with the main site.
• Link spam. Bought links and link-exchange schemes. Remember Google's note that the benefit of removed spammy links does not come back.

None of this means every Thai site with a traffic dip was hit by the spam update. Rankings move for many reasons, and the timing this week is crowded (see the checklist below). If your site relies on organic search and you are unsure where you stand, an independent SEO audit is a faster way to separate a spam issue from ordinary volatility than waiting a fortnight.

What to check in your own Search Console over the next two weeks

The honest instruction for a two-week rollout is to watch, record and avoid overreacting before it finishes. Concretely:

1. Mark 24 September in your reporting. Add an annotation in whatever dashboard you use, so later comparisons show where the rollout began.
2. Compare like with like. In the Search Console Performance report, compare the days after 24 September with the same weekdays before it, not with a month-old average. Wait for the final completion notice before drawing conclusions.
3. Look at pages as well as totals. A spam action tends to concentrate on particular sections or templates. Filter by page and look for folders that dropped together.
4. Check Security issues and Manual actions. A spam update is algorithmic and sends no notification. A manual action does show up in the Manual actions report. If you have one, that is a different process with a reconsideration request.
5. Separate this week's other changes. Google also added a new multimodal search type to Search Console on 24 September, splitting Web results into text-based and multimodal. If you are filtering by search type, make sure you are comparing the same type before and after.

If nothing moves, nothing needs doing. Google's own guidance is aimed at sites that "see a change", and a site that follows the spam policies is not the target.

What Google did not say

It is worth being clear about the gaps, because they are where speculation fills in:

• No spam category, tactic or policy was named as the focus.
• No figure was given for the share of queries or sites affected.
• No reason was given for the two-week window.
• No date was given for completion, only an upper bound.
• No mention of whether the update interacts with AI Overviews or AI Mode visibility.

Relevant Audience covered the August 2026 spam update when it rolled out on 18 August. The September cycle is a separate release with a different timetable, and it should be treated as its own event when you compare data.

Frequently asked questions

When did the September 2026 spam update start?

It started on 24 September 2026 at 16:15 UTC, which is 23:15 on the same day in Bangkok, according to the Google Search Status Dashboard.

Does the September 2026 spam update affect Thai-language websites?

Yes. Google's notice says the update "applies globally and to all languages", so Thai sites are in scope like any other.

How long will the rollout take?

Up to two weeks, according to Google, which would mean around 8 October 2026 at the latest if Google uses the full window. Google will add a completion note to the dashboard when it finishes.

Will I get a notification in Search Console if my site is affected?

No. A spam update is an automated ranking change and does not send a message. Only manual actions appear in the Manual actions report.

How fast can a site recover after fixing spam problems?

Slowly. Google's documentation says improvement may come once its systems learn "over a period of months" that the site complies, and lost link-spam benefits cannot be regained at all.

Spam updates reward sites that were already clean and give little back quickly to those that were not. If you want a second pair of eyes on where your site stands before the rollout finishes, our SEO team in Thailand can review your Search Console data and your site's exposure to the policies above.