Google Just Dropped a Spam Update and a Core Update in the Same Week. Here Is What I Am Seeing.

Two algorithm updates in one week. A spam update on 24 March, a core update three days later on 27 March. If your rankings did something weird this spring, congratulations, you found the culprit.

The dust has settled now. The spam update wrapped in under 20 hours and the core update finished on 8 April. So this is no longer a "watch and wait" situation. It's a "right, what do we actually do" situation. And that's a much better place to be writing from.

We've steered client sites through more of these than we'd care to count, and the March 2026 pair told us something genuinely interesting about where Google is heading. Let's get into the timeline, what changed, and the recovery plan we're running across our own campaigns right now.

What happened in March 2026, in plain English

Here's the sequence, with the verified dates so you're not relying on someone's vague memory.

• 24 March, 3:20pm ET: Google starts the March 2026 spam update. It's a normal spam update, hitting all languages and all locations, with no new policy categories announced.
• 25 March, 10:40am ET: The spam update is done. Total rollout time, per Search Engine Land, was 19 hours and 30 minutes.
• 27 March: Google announces the March 2026 core update, the first broad core update of the year.
• 8 April: The core update finishes. Search Engine Journal confirmed the rollout took 12 days, the second-fastest of the last five core updates.

For comparison, the December 2025 core update took 17 days. So this one moved noticeably quicker. That speed is a theme worth paying attention to, and we'll come back to it.

What is a spam update versus a core update?

Quick definitions, because plenty of people use these interchangeably and they really aren't.

A spam update targets sites that break Google's published rules: link schemes, scaled junk content, expired domain abuse, that sort of thing. If you got hit by one, Google is effectively telling you that you've crossed a line in the spam policies.

A core update is a broad recalibration of how Google assesses quality and relevance across the whole web. Google describes it as "a regular update designed to better surface relevant, satisfying content for searchers from all types of sites." A core update drop is not an accusation. It's Google reweighing the deck.

That distinction matters enormously for recovery, and it's the first thing we work out when a client pings us in a panic. Were you flagged for breaking rules, or did the goalposts move? The fix is completely different.

The 20-hour spam update is the real story

The spam update felt muted. Most SEOs barely flinched. But quiet doesn't mean unimportant, and we'd argue the opposite here.

Think about the maths. The March 2024 spam update, which introduced three new abuse categories, took roughly two weeks. This one took 19 and a half hours. That's not a slightly faster rollout. That's a different order of magnitude.

Our read: Google's automated spam detection has got dramatically faster at identifying and demoting patterns at scale. When the system can evaluate and apply decisions across billions of pages in under a day, the gap between "publish dodgy content" and "get caught" is shrinking towards real time.

Roger Montti at Search Engine Journal had a sharper take that we keep coming back to. He argued the muted update may signal bigger changes, putting it like this:

"I've always seen Google's spam updates as a clearing of the table in preparation for the next course."

A core update landing three days later fits that pattern neatly. Clear the spam, then recalibrate quality. Whether or not it was deliberately choreographed, the effect on your site is the same, and you should plan for both layers.

How to tell which update hit you

Before you change a single thing, diagnose properly. We've watched too many people "fix" a core update problem by disavowing perfectly good links, which helps nobody.

1. Pull your Search Console data and find the exact date your traffic moved. A drop starting 24 or 25 March points to the spam update. A drop starting 27 March onwards points to the core update. A drop that started before 24 March is neither, and you've got a different problem to chase.
2. Check the scale of the drop. Google's own guidance separates a slide from position 2 to 4 (no drastic action needed) from a fall from position 4 to 29 (time for a serious look). Match the severity of your response to the severity of the drop.
3. Look at whether it's site-wide or page-specific. A handful of pages losing ground is usually a content quality signal. The whole domain sinking suggests a deeper authority or trust problem.
4. Check Search Console for manual actions. Spam updates are algorithmic, so most affected sites won't see a manual action. But if you do have one, that changes the recovery path entirely and you'll need to file a reconsideration request.

If you're not confident reading the signals, this is exactly the kind of forensic work our SEO team does day in, day out. Misdiagnosis is the most expensive mistake in update recovery, because you burn weeks fixing the wrong thing.

Recovering from the spam update

If 24 or 25 March is your drop date, you broke a rule somewhere. The job is finding it and removing it. Here's where we look first, ranked by how often they're the actual cause in the sites we audit.

Scaled content abuse

This is the big one in 2026. Google defines scaled content abuse as generating "many pages for the primary purpose of manipulating search rankings and not helping users." Note the phrasing. It says nothing about how the content was made. AI-assisted content isn't banned. Mass-produced, low-value content is, whoever or whatever wrote it.

If you spun up a few hundred near-identical pages last quarter and they all tanked, that's your answer. We'd far rather you keep ten genuinely useful pages than a thousand thin ones. If you're weighing up scale, our take on when programmatic SEO works and when to avoid it walks through where the line sits.

Link spam

Google defines link spam as "creating links to or from a site primarily for the purpose of manipulating search rankings." Bought links, dodgy exchanges, private blog networks, the lot. The detection is genuinely good now, and a 20-hour spam update is a reminder of how quickly these patterns get caught.

This is the bit that stings: rebuilding a clean profile is slow. There's no shortcut. We do this properly with white-hat link building earned through real relationships and real content, and the difference shows the moment an update lands. If you want the long version of how to clean up after a links problem, our guide on link reclamation covers the recovery mechanics.

Expired domain abuse, site reputation abuse, and friends

The rest of the usual suspects sit in the spam policy list too. Expired domain abuse (buying an old domain to ride its history), site reputation abuse (renting space on an established site to publish parasite content), cloaking, doorways, thin affiliate pages. If any of those describe your setup, that's the thing to unwind.

One honest warning. Google itself says recovery from a spam update can take time, and improvements may only show "once automated systems learn over a period of months that the site complies." Fixing the problem in April doesn't mean you bounce back in May. Patience is part of the job.

Recovering from the core update

This is the harder one, because there's no single rule you broke. Google reassessed quality across the board and decided your content didn't deserve its old position. Frustrating, but also fixable, and the path is well documented.

Google's official core update guidance is the document to read, not someone's hot take on it. Three points from it we lean on most:

Wait at least a week after completion before analysing. The data needs to settle. The core update finished on 8 April, so mid-April onwards is when your Search Console comparison actually means something. Reacting to mid-rollout wobbles is how good pages get deleted by mistake.

You don't have to wait for the next core update to recover. This is the part most people get wrong. Google explicitly says it makes smaller, unannounced core updates between the big ones, "another way that your content can see a rise in position if you've made improvements." Make your content better now, and you can climb back before the next headline update.

Run the self-assessment honestly. Google publishes a list of questions in its helpful content documentation, and they're more useful than any third-party checklist. Two that cut deepest: "Does the content provide original information, reporting, research, or analysis?" and "Is this content written or reviewed by an expert or enthusiast who demonstrably knows the topic well?" If the honest answer is no, you've found your work.

Our practical core recovery sequence

1. Identify your biggest losers. Sort Search Console by traffic lost since 27 March. Fix the pages that mattered, not every page.
2. Read each loser as a user, not an SEO. Does it answer the query better than the pages now outranking you? If a thinner competitor beat you, the problem is rarely word count. It's usefulness, freshness, or trust.
3. Strengthen your experience and expertise signals. Real author bios, credentials, sources, review dates. This is where getting E-E-A-T right earns its keep, and it matters more with every update.
4. Prune what can't be saved. Some pages are beyond a quick fix. Our content pruning playbook covers how to cut dead weight without nuking pages that still pull their weight.
5. Improve and wait. Then resist the urge to keep fiddling. Give the smaller updates time to notice your changes.

What we're actually seeing across client sites

Patterns, not promises. Every site is different, but here's the shape of what landed on our desks this spring.

Sites that held or gained shared the same boring profile: genuine topical authority, steady publishing, a natural link profile, solid trust signals. No tricks. The clients who got the least exciting strategy from us 18 months ago are the ones sleeping fine now. That's not a coincidence.

Sites that dropped tended to have thin content at scale, links from places that made no sense, or pages that existed to rank rather than to help a human. These are the exact patterns Google has been chipping away at since the helpful content system was folded into core back in 2024.

Sites in YMYL niches saw more movement than average, which is normal for any big core update. If you publish on health, money, or law, your expertise signals need to be airtight, because Google holds you to a higher bar and a core update is when it cashes that in.

If you want context on the wider volatility this spring, we tracked the ranking swings and broke down the winners and losers in detail.

Our honest take on where this is heading

We'll say the quiet bit out loud. If you've been doing SEO properly, these updates are good news. Every core update that rewards quality and demotes shortcuts widens the gap between you and the competitor who bought their way to the top. You should be quietly delighted when one lands.

If you've been cutting corners, the warning is getting louder. A spam update that runs in under 20 hours is Google telling you the detection window is closing. The tactics that worked in 2022 are on borrowed time, and 2026 is not the year to bet your traffic on them.

There's one bigger shift underneath all of this. Search itself is fragmenting. AI Overviews, ChatGPT, Gemini and the rest are eating into clicks, and the sites that survive a core update are increasingly the same ones that get cited inside AI answers. Quality, originality and trust are now the price of entry across the board, classic search and AI search alike. The two have converged, and that's the real lesson of March 2026.

Your one-page action plan

1. Diagnose first. Match your drop date to the right update. Spam (24 to 25 March) and core (27 March to 8 April) need different fixes.
2. For spam hits, find and remove the rule-breaking content or links. Then accept it takes months, not days.
3. For core hits, wait a week post-8 April to read clean data, fix your biggest losers, strengthen E-E-A-T, prune the dead pages.
4. Don't over-react mid-rollout. The rollout is done now, so this matters less, but the habit is worth keeping for next time.
5. Read Google's own docs, not the panicked threads. The core update guidance and spam policies are free, clear, and straight from the source.

If your traffic took a hit this spring and you'd rather not guess your way through recovery, that's our whole job. Tell us what happened and we'll work out which update caught you and what it'll take to climb back. We treat it like the engineers we are: find the bottleneck, fix it, measure the result. No theatrics, no magic dust, just the unglamorous work that actually moves rankings.