Google rolled out a new spam update this week. Remarkably fast: the rollout started on 24 March and was already complete on 25 March, less than 20 hours later. For comparison: the August 2025 spam update ran from 26 August through 22 September — nearly four weeks.
The speed says something about the nature of this update. No major policy shift, no new categories — just a targeted improvement of existing detection systems. But before we get into that: what is a spam update, exactly?
What is a spam update?
Google runs automated systems continuously in the background that check search results for abuse. A spam update is not a revision of how Google assesses content quality — that is what a core update does. A spam update is specifically aimed at websites that deliberately try to game the rules.
SpamBrain is Google’s AI-powered spam prevention system. It automatically detects and neutralises spam — including link schemes, thin content and cloaking — across all Google search results, and operates continuously without human intervention.
A spam update is therefore not a random algorithmic shift, but a targeted enforcement action. Spam updates have historically focused on a narrower group of sites using manipulative practices, rather than causing broad volatility. If your website publishes quality content and follows the guidelines, there is little to worry about.
What is Google targeting?
Google has not communicated which specific spam technique is the primary focus of this update. No new spam policy categories were announced alongside this update, so the existing policies form the relevant framework for assessing any impact.
That is in contrast to the major March 2024 spam update, where Google for the first time explicitly introduced three new categories: scaled content abuse, expired domain abuse and site reputation abuse. The March 2026 update refines existing enforcement rather than drawing new lines.
Based on existing policies, there are patterns most likely to be in the crosshairs. Sites relying on parasite SEO, manipulative link schemes or thin AI-generated content are most at risk. Think of websites producing hundreds of near-identical pages without editorial oversight, or content farms using AI as a substitute for genuine expertise.
This is an important distinction. Google is not against AI content. Google is against content without value, regardless of how it was made.
Are you seeing movement in your organic traffic?
Check Google Search Console for traffic and ranking changes around 24 and 25 March. If your Discover traffic dropped in February, that was a separate incident. Google Discover and Google Search are separate systems with different signals. Do not conflate the two.
If you see a drop that coincides with the rollout period, it is worth looking at which pages were affected and what they have in common. One thing to keep in mind: recovery typically takes three to six months for content-related violations, and potentially much longer for link-related violations, with no guarantee of full recovery.
What can you take away from this?
If you are doing serious quality work, there is no need to lose sleep over this. That said, there are a few things always worth reviewing periodically.
Audit your backlink profile. Links from dubious sources can hurt you, even if you did nothing to acquire them. Google Search Console gives a first impression; tools like Ahrefs or Semrush provide more detail.
Make sure AI content has editorial oversight. AI as a writing aid is fine. AI as a replacement for substantive expertise is a risk. Every page should have a clear owner, and the information should be accurate and up to date.
And as we wrote earlier about Google Discover: anyone fully dependent on a single traffic source is vulnerable to every update Google rolls out. Diversification is not a luxury — it is a necessity.
Have questions about what this update means for your website? Get in touch with us. We are happy to take a look with you.