Google launched its fourth spam update of 2026 on September 24. If you have city pages, AI-generated service content, or location doorways, your rankings may already be moving.
Ido Cohen · Published 2026-09-28 · Local SEO
Google fired its fourth spam update of 2026 on September 24 — and it is still rolling out as you read this. If your service-area website has city pages, AI-drafted service content, or location doorways, your Search Console numbers may already be shifting. Here is what changed, why it matters more for service businesses than almost any other vertical, and exactly what to do before the rollout closes.
Google launched the September 2026 Spam Update globally at 9:15 a.m. PDT on September 24, 2026. According to Search Engine Roundtable's coverage, Google confirmed via its Search Status Dashboard that this update "applies globally and to all languages" and that "the rollout may take up to two weeks to complete" — significantly longer than any of the three previous spam updates this year.
That extended timeline is the first signal this one is different. As Coalition Technologies noted in their coverage, each earlier 2026 spam update came with an estimate of "a few days," and none took longer than three days to finish. Two weeks means Google is processing a much larger — or more complex — set of signals across its systems.
The update is Google's fourth spam rollout of 2026, following updates in March, June, and August. That frequency is unusual: Search Engine Journal reported that 2025 saw only one spam update the entire year, though 2024 had three. Four updates in nine months suggests Google is on an accelerated campaign to close quality gaps created by the AI content boom.
The spam policies this update enforces were written precisely for the patterns service businesses tend to use most.
Two behaviors in particular appear squarely in the crosshairs, based on multiple SEO analyses published since the update launched:
1. Doorway pages and near-identical city/suburb pages. Google's spam policies — which were updated as recently as August 28, 2026 — explicitly list "multiple domain names or pages targeted at specific regions or cities that funnel users to one page" and "substantially similar pages that are closer to search results than a clearly defined, browseable hierarchy" as doorway abuse. According to Digital Advisors' breakdown, the policy also counts "blocks of text that list cities and regions" as keyword stuffing.
This is the exact playbook that has been popular for service businesses for a decade. A plumbing company with 40 "plumber in [city name]" pages, each with the same body copy and only the city name swapped, is a textbook example. Boston Web Marketing put it plainly: "If a contractor has dozens of nearly identical town pages, that is a reason to ask whether each page genuinely helps someone in that town."
2. Scaled AI-generated content. Coalition Technologies reported that "the biggest potential impact area is likely heavy AI content abuse," noting that Google has already confirmed that "manipulating generative AI features in Search, including AI Overviews and AI Mode, falls under its existing spam policies." The September update appears to tighten automated enforcement of that position. The key word is scaled: a handful of carefully reviewed AI-assisted pages is different from hundreds of templated posts generated in an afternoon.
Rank My Business added that "thin local pages with minimal differentiation between service areas are getting harder to rank" — a shift that was already underway but that spam enforcement now formalizes with ranking penalties rather than just ranking disadvantages.
YMYL industries face extra scrutiny. If you are a dentist, doctor, financial advisor, or personal injury attorney, your site sits in Google's "Your Money or Your Life" category, which receives heightened scrutiny by default. Rank My Business specifically flagged this: the healthcare sector faces an additional layer of review under YMYL classification.
Before you panic and delete half your website, understand what this update actually does.
Search Engine Journal confirmed Google has not named a specific tactic, and primotech.com's analysis noted it would be "inaccurate to describe this update simply as an 'AI content update.'" Google's guidance is consistent: the key question is whether each page "is useful and created for people rather than produced primarily to manipulate search rankings."
This distinction matters. If you used AI to draft a page that a human then reviewed, added real local details, local photos, customer reviews, and genuine expertise — that page is likely fine. If you used AI to spin 60 versions of the same page with one field-swap, that is what this update is hunting.
Do not draw conclusions mid-rollout. Primotech was blunt: "Rankings and traffic can continue to fluctuate while Google's systems complete the rollout. It is too early to judge the full impact." That said, there are specific things worth checking today.
Start in Search Console, not in rankings trackers. Rankings are noisy during a rollout; Search Console data is slower but more signal-dense.
1. Manual Actions report — Go to Search Console → Security & Manual Actions → Manual Actions. A spam update can trigger manual action notices. If there is one, you need to know immediately.
2. Security Issues report — Same section. Unusual behavior flags here often precede broader ranking loss.
3. Performance report — last 7 days vs. prior 7 days — Pull organic clicks and impressions. Filter by page to see which pages are moving. Do not compare to 30 days ago; too much noise.
4. Hold the comparison baseline. Digital Applied recommended comparing the two weeks after the rollout completes with the two weeks before it started — September 10–23 — for a clean before/after read.
Google also added a multimodal search filter to Search Console the same day the spam update launched. According to Search Engine Roundtable, "Google Search Console released multimodal search filters in the performance reports." If your service business uses images heavily (before/after project photos, procedure photos for med spas, etc.), turn that filter on and see whether image-search traffic is moving.
Let's be direct: the service-business SEO playbook of the last ten years relied heavily on city pages. Plumbers, HVAC techs, roofers, electricians, dentists, real estate agents — almost everyone in local services was told to build one page per city they served. Many marketing agencies sold this as a standard deliverable, and a lot of those pages are thin.
According to Google's spam policies, the disqualifying pattern is "pages targeted at specific regions or cities that funnel users to one page" combined with pages that are "substantially similar." The problem is not having city pages; the problem is having city pages that are identical except for the location name.
How to tell if your city pages are at risk:
The fix is not to delete all your city pages. It is to either genuinely differentiate them or consolidate the thin ones into a single, robust service-area page with a clear geographic map. Smarkupp Studios framed the principle well: "Businesses should examine whether each important page has a clear purpose and provides information that genuinely helps its intended audience."
The rollout will be complete no later than October 8. Here is what to do before then.
1. Check Search Console for manual actions today. Takes 90 seconds. If you have one, stop everything else and deal with it first.
2. Export a performance baseline now. Download clicks and impressions by page for September 10–23 from Search Console. Save it. You will need it to measure impact once the update settles.
3. Inventory your city/service-area pages. Make a spreadsheet: page URL, word count, what is unique on that page beyond the city name. Any page with zero unique content besides the city name is a candidate for consolidation or rewrite.
4. Do not mass-delete pages mid-rollout. Rankings are volatile right now. A page that dips today might recover by next week. Wait for the rollout to finish before making structural changes.
5. Review AI-generated content with fresh eyes. Pull three or four of your AI-drafted service pages and ask honestly: does this page answer a real question a customer in this city would have, or does it exist to rank for a keyword? The former is fine; the latter is what this update penalizes.
6. For YMYL businesses (dentists, lawyers, financial advisors): Check that your author bios, credentials, and E-E-A-T signals (experience, expertise, authoritativeness, trustworthiness) are current and prominent. YMYL pages need to demonstrate real human expertise, not just topical coverage.
7. If your agency built your city pages for you: Ask them directly whether the pages are differentiated or templated. If they cannot answer that question confidently, you need to audit those pages yourself.
The update is not a catastrophe for service businesses that have been building real content. It is a penalty engine aimed at businesses that hired someone to spin out 80 identical city pages with an AI tool and called it SEO. If that is you, use the next two weeks to start fixing it — recovery is possible, but Google notes it can take months for its systems to recognize that a site now complies.
---
Will this spam update penalize all AI-generated content on my service business website?
No. Google has been consistent on this point: AI-generated content is not penalized by default. What this update targets is content that is low-effort, provides no genuine value, and appears to exist primarily to manipulate rankings. An AI-drafted service page that was reviewed by a human, includes real local details, and genuinely helps a customer is not at risk. A batch of 60 location pages spun from a single template in an afternoon is.
I have city pages for every town in my service area. Do I need to delete them?
Not necessarily — but you do need to audit them. The risk is pages that are "substantially similar" with only the city name changed. If each page has genuinely unique content — local neighborhoods served, regional permit considerations, local customer testimonials, or area-specific advice — those pages are defensible. If they are template clones, consolidate the thin ones into a well-built service-area page rather than deleting them cold, which can create redirect and traffic problems of its own.
How long will this update take, and when will I know if I was affected?
Google says the rollout may take up to two weeks, starting September 24, 2026. That means it could complete anytime before roughly October 8. Do not judge impact until after the rollout finishes — ranking volatility during an active rollout is not a reliable signal. Pull a clean before/after comparison using your Search Console data from the two weeks before September 24 versus the two weeks after the rollout completes.
My rankings dropped the same day the update launched. Does that mean I was hit?
Not necessarily. Third-party ranking trackers picked up significant volatility beginning September 23 — before the official announcement. Some of that movement predates the update itself. Additionally, fluctuation during an active rollout is expected and does not confirm a penalty. Check Search Console's Manual Actions report first. If there is no manual action, wait for the rollout to complete before deciding the drop is update-related.
My service business website has been built by an agency. What should I ask them?
Ask three specific questions: (1) Are any of my service-area or city pages built from a template, and if so, what unique content differentiates them? (2) Has any AI tool been used to generate bulk page content, and was it human-reviewed? (3) Can you pull a list of pages on my site with fewer than 300 words and tell me the purpose of each one? An agency that cannot answer these questions clearly is one you should be monitoring closely over the next two weeks.
---
Sources: