Google Spam Update Phase Two: What Changed on 30 September

Phase two of Google's September 2026 spam update was reported on 30 September 2026, about six days into a rollout Google said could take up to two weeks. Site owners reported sharp drops, some mid-day recoveries followed by new drops, and volatility in Discover and News. Google has not named a specific policy or published a "phase two" announcement, so everything below is as reported by practitioners, as of 4 October 2026.

Key Takeaways

• Google announced the September 2026 spam update on 24 September 2026 and said the rollout may take up to two weeks (Google Search Central, as quoted by Search Engine Roundtable).
• "Phase two" is a community label, not a Google term. Search Engine Roundtable reported fresh volatility on 30 September; Glenn Gabe said the update "continues to roll out."
• As of this writing, the Google Search Status Dashboard lists the update with a start date of 24 September and no end date.
• Google named no policy. Early patterns reported by practitioners point at templated, programmatic and thin AI-generated pages.
• Do not rewrite anything until the rollout is declared finished. Annotate, segment, then act.

What Google has actually said

Google's own statement is short. Per Search Engine Roundtable's report on the announcement, Google Search Central posted that the update "applies globally and to all languages" and that "the rollout may take up to two weeks to complete." John Mueller said it would likely take longer than some previous ones. The same report notes the August 2026 spam update finished in about two days, so this one is deliberately different in shape.

You can check the official entry yourself on the Google Search Status Dashboard. When I opened it on 4 October 2026, the September 2026 spam update was listed under Ranking, started 24 September, with no completion date. Until Google marks it complete, treat every chart as a work in progress.

Google also reminds site owners, in its spam policies documentation, that spam updates enforce those written policies. Recovery, according to the announcement coverage, can take months and may involve periodic refreshes. That matters for how you plan the next quarter, which I cover in my Q4 content plan.

Timeline: from 24 September to 30 September

If you want the first 48 hours in more detail, I wrote that up in the first-48-hours post.

What changed on 30 September

Volatility returned after a quieter few days

Search Engine Roundtable reported that multiple site owners described a "huge drop" on 30 September and that Gabe saw specific changes that day while noting the update continues to roll out. Several owners saw traffic recover mid-day and then fall again. That pattern is what you would expect from a system being adjusted in stages. It is not proof of anything about a particular site, and it is a reason to avoid reading a single day's data.

Discover and News moved

Community members on WebmasterWorld reported Discover traffic "vanished" or swung wildly. Discover is a separate surface with its own eligibility behaviour, and Google's Discover documentation describes a dedicated Search Console performance report and says Discover traffic is "less predictable or dependable" than keyword-driven search, with fluctuations tied to changing interests and Search updates. Do not assume a Discover loss means your web search rankings changed. Check each surface independently.

An odd data point: AI-translated Reddit content

The 30 September report mentions that Reddit's AI-translated content saw an unexpected ranking recovery. This is a single reported observation. I would not build a strategy on it, but it is a useful reminder that spam enforcement is not a clean "AI content is penalised" rule. Google's guidance on generative AI content says the issue is scale without added value, not the tool.

What the early patterns suggest (hedged)

Search Engine Roundtable's weekend report said early observations, mostly from practitioners such as Gabe, pointed to highly templated, programmatic page structures, AI-generated pages with minimal variation, and automated page creation such as one page per phone number or area code. That is observation, not a Google statement. The announcement coverage also says the update does not specifically address link spam and may produce collateral damage for compliant sites.

I covered why Google not naming a policy is normal in this post on the spam policies list. The practical meaning: match your site against the whole list, with extra attention to scaled content abuse, which the spam policy defines as many pages generated primarily to manipulate rankings rather than help users.

Roundtable's monthly summary, the October 2026 Google Webmaster Report, places the spam update alongside the other Google changes this month if you want the wider context. For what "good" looks like on the other side, Google's helpful, people-first content guide is still the reference: its Who, How and Why framework is a fair test for any page you are unsure about. Google's documentation updates log is also worth bookmarking, since it shows what changed in the docs on 1 October (the generative AI content guidance) and 24 September.

A 7-day response plan

I use this order with clients, and I used a similar one when I helped manage organic growth for edtech and startup brands.

1. Day 0: annotate. Add 24 Sep and 30 Sep to your analytics and Search Console annotations. Write down the hour you first noticed a change.
2. Day 1: segment by template. Export Search Console performance by page, then group URLs by template (blog, category, location, programmatic). A drop that tracks a template is a signal. A sitewide drop across every template is a different problem.
3. Day 2: separate surfaces. Look at Web, Discover and News tabs independently. Do not merge them.
4. Day 3: inspect the losers. Open ten of the worst-hit URLs. Ask the scaled content abuse question honestly: is this page here for a person, or for a query?
5. Day 4: compare against stable pages. What do your stable pages have that the dropped ones lack: original data, named authors, real examples?
6. Day 5: decide, do not execute. Draft a prune-merge-improve list. Hold it until the rollout is complete.
7. Day 7+: act after completion. Make changes once Google marks the update finished, so you can measure cleanly.

My fuller recovery method is in how to recover from a Google spam update, and the audit steps are in the content audit after a spam update.

What not to do

• Do not mass-delete. Deleting hundreds of URLs on 1 October because of a 30 September dip removes your ability to learn what actually caused the change.
• Do not blame the last thing you shipped. Same-day reversals show noise is high.
• Do not trust a single tool. Volatility trackers, including those SER lists such as Mozcast, Semrush Sensor, Sistrix and others, measure different keyword sets. They tell you a lot is moving, not why.
• Do not publish a flood of AI pages as a "response." That is the pattern the spam policy describes.

Does phase two mean a different update?

No. Phase two is practitioner shorthand for a second visible wave within the same rollout. Google has not announced separate phases. The distinction matters for reporting: if a client asks "was this the spam update or a core update?", the honest answer is that it is the same spam update unless Google says otherwise. Spam updates and core updates differ in purpose; my comparison post explains how to tell them apart in your data.

What I would watch over the next ten days

• Whether the Search Status Dashboard marks the update complete, and the end date it records.
• Whether Google comments on a policy area.
• Whether Search Engine Roundtable and Gabe report a third wave.
• Your own Search Console impressions by template after completion.

FAQ

Is "phase two" an official Google term?

No. Google announced one spam update on 24 September 2026. "Phase two" is how practitioners and Search Engine Roundtable describe the second wave of volatility seen on 30 September. Check the Search Status Dashboard for official status.

When does the September 2026 spam update end?

Google said the rollout may take up to two weeks from 24 September. As of 4 October 2026, the Status Dashboard listed no end date. Wait for Google to mark it complete before judging final impact.

Which policy did the update target?

Google has not said. Practitioners report early patterns involving templated programmatic pages and thin AI-generated pages, but that is observation, not confirmation. Review all of Google's spam policies, especially scaled content abuse.

My Discover traffic collapsed on 30 September. Is that the spam update?

It may be related, but it is not proven. Discover volatility was reported by several site owners that day. Check Discover separately in Search Console and compare against your web search data before drawing conclusions.

Should I delete pages now?

Not yet. Annotate, segment by template and identify weak pages, but hold major changes until the rollout is finished so you can measure the effect cleanly.

Can I recover?

Google's announcement coverage says recovery can take months and may involve periodic refreshes. Sites with real value that were hit as collateral may see changes sooner. Improving or removing genuinely low-value pages is the durable path.

Is AI-generated content banned?

No. Google's guidance says using AI to generate many pages without adding value may violate the scaled content abuse policy; it does not ban the tool. See the guidance page for details.

How is a spam update different from a core update?

A spam update enforces spam policies. A core update re-evaluates overall relevance and quality. They can overlap in the data, which is why annotating exact dates helps.

Which tools should I trust to measure this?

Your own Search Console and analytics first. Third-party volatility tools show that rankings are moving, not why, and they sample different keywords.

Work with me

I'm Younus Fardeen, an organic growth, SEO and AEO strategist with 4+ years of marketing experience across edtech and startup brands, including growing Masai School's social presence (Instagram 26K to 117K, LinkedIn 50K to 200K). If a Google update has hit your traffic and you want a calm, evidence-first audit, see my work and reach me through the contact form at younusfardeen.in.