Google quietly rolled out its third spam update of the year

Google flipped a switch on August 18. Three days later it was still rolling, spreading through search results one region at a time, the way these updates always do.

This is the third spam update Google has shipped in 2026, after one in March and one in June. It applies everywhere, in every language, and Google says it can take a few days to settle. If your rankings moved this week, that is probably why, and it is probably not personal.

Since May 15, Google's spam policies explicitly cover attempts to manipulate AI Overviews and AI Mode, the same way they've always covered attempts to manipulate regular blue-link rankings. That's the new part. Search used to be one target. Now the AI answer is a second target, and Google says, in writing, that gaming it counts as spam too.

What is a spam update?

Not a new law. Google runs automated systems that hunt for a known list of tricks all year. A spam update is when they ship a meaningful upgrade to those systems and flip it on for everyone at once. The Search Status Dashboard logged this one starting at 9:27 a.m. Pacific on August 18. Google didn't publish a blog post with it and didn't announce a new category of violation. The June 2026 update took two days and one hour to finish rolling out. March took under twenty hours. Expect something similar this time.

Most of what these systems catch has nothing to do with a small business owner in Indiana: hacked WordPress sites pushing pill ads, expired-domain flips, cloaked pages that show Google one thing and a visitor another. You can skip worrying about those.

One category on the list is worth your actual attention: doorway pages.

Does this mean my Google Business Profile is at risk too?

No, and it's worth being precise here. This update targets Google's web ranking systems, which power the blue links and AI Overviews. Your Google Business Profile runs on a separate set of policies. A spam update by itself won't suspend your profile or pull your reviews. It can quietly bury pages on your website that were built the wrong way, a different problem with the same root cause: content built to game a system instead of answer a real question.

A landscaping company in Westfield hired a marketing vendor last spring for what the invoice called "hyperlocal SEO." What they got was nine pages: "Landscaping in Westfield," "Landscaping in Carmel," "Landscaping in Noblesville," and so on, each one the same three paragraphs with the town name swapped and a stock photo of a lawn. That's a textbook example of what Google calls doorway abuse: pages built to rank for a list of nearby queries that funnel every visitor to the same place, adding no real information along the way.

It's a common sell. A vendor tells a shop owner "we'll build you a page for every town you serve," bills it as local SEO, and hands over nine pages that are functionally one page in a trench coat. It sometimes works for a while. It's also exactly the pattern Google's automated systems are built to find, and each update gets better at finding it.

A page that says the same thing about six different towns isn't six pages. It's one page wearing six hats.

Not every worried call I got this week was about the update. A hardware store in Brownsburg called me convinced their traffic had "fallen off a cliff" starting August 18. We pulled their Search Console data together. Impressions were flat. Two keywords had shuffled position by one or two spots, which is normal noise during any rollout, spam update or not. Nothing on their site resembled a doorway page. They spent an hour worried about nothing, because a spam update sounds scarier than it usually is for a business that isn't gaming anything.

That's the actual split. If you built your own pages, wrote your own words, and every page on your site says something a real page needs to say, a spam update is background noise. If a vendor sold you a stack of near-identical city pages, this is the season those get found.

What to check this week

Open your site's page list, in your CMS or just by clicking through the nav. Count how many pages exist mainly to target a city name. Read two of them back to back. If they're the same paragraph with the town swapped, you have three options: rewrite each one with something only true of that town (a job you did there, a neighborhood you know, a permit rule specific to that county), consolidate them into one strong service page and let your Google Business Profile carry the local signal instead, or delete the thin ones outright. A shorter site with real pages outranks a padded one more often than owners expect.

Then check Search Console. Look at your Performance report for August 18 forward. A flat or slightly noisy line means the update wasn't about you. A real, sustained drop starting that day, especially on pages built around a list of nearby cities, is worth a second look with whoever built your site.

Google didn't hand small businesses a new rulebook this month. It sharpened a system that's been running the same checks all year, and it said, for the first time in writing, that those checks now cover how you show up in an AI answer too. The vendor pitch that got you nine city pages for the price of one is older than this update. It just got a little easier for Google to spot.

---

Sources

#	Source	What it backed up
1	Google Begins Rolling Out The August 2026 Spam Update	Rollout date, timing, third-update-of-2026 count, and the May 15 clarification that spam policies cover AI Overviews and AI Mode.
2	Search Status Dashboard: August 2026 spam update incident	Official start time (9:27 a.m. Pacific, August 18, 2026) and rollout status.
3	Search Status Dashboard: June 2026 spam update incident	Rollout duration for the prior update, used for comparison.
4	Spam Policies for Google Web Search	Definition and examples of doorway abuse.