Google’s first spam update of 2026 went live on March 24. According to Search Engine Land, the rollout is moving faster than typical spam updates (days, not weeks) and ranking changes are already visible. The targets are specific: scaled AI-generated content, parasite SEO schemes, expired domain abuse, and manipulative link patterns.
If your agency spent the last 18 months helping clients publish AI content at volume, this is the moment to stop and ask an uncomfortable question: did we build an asset or a liability?
This post breaks down what the update targets, how to assess your exposure, and what to actually do before the rollout completes.
What Google Is Going After This Time
Google’s spam policies have three main enforcement areas that this update specifically addresses.
Scaled content abuse. Google’s own documentation defines this as “generating content at scale to boost search rankings, whether using AI or other automated tools.” The language matters here. It’s not “AI content is spam.” It’s content created primarily to rank, rather than to serve a reader. The distinction sounds philosophical until you look at what actually gets hit: thin articles written to match keyword clusters, FAQ pages with no real answers, service pages generated from templates with city names swapped out.
Parasite SEO. High-authority domains hosting third-party content with no editorial connection to the site’s core topic. The healthcare and finance niches saw heavy exploitation of this pattern. A law firm hosting gambling affiliate posts. A hospital blog publishing cryptocurrency reviews. Google has been targeting this for two years, but Search Engine Journal’s March 25 reporting suggests this update is applying that policy more broadly.
Expired domain abuse. Buying domains with legacy authority and redirecting them to unrelated content. This was a favorite shortcut for link builders and remains a documented spam tactic.
None of these tactics are new. What is new is the speed and precision of this rollout, which signals that Google has gotten better at detecting them at scale.

Why This Update Is Different from the Last One
The “AI content is over” panic cycle has happened before. Every major update since 2023 has prompted the same round of predictions, and most of the doom didn’t materialize. That track record makes it easy to dismiss this one. That would be a mistake.
Two things make March 2026 different from earlier cycles.
First, this update follows a February Discover core update that explicitly rewarded quality signals. Two significant updates in 30 days is not a standard cadence. It signals enforcement pressure building in sequence, not random algorithm noise.
Second, the detection tooling has matured. Google’s ability to identify AI-generated content and scaled content operations has improved substantially since 2023. The false positive rate that protected a lot of borderline content in earlier updates is lower now. Content that survived prior updates because it was “good enough” is more exposed than it used to be.
The r/SEO community thread on this update reflects this split: skeptics pointing to past non-events, practitioners posting early ranking movements. The practitioners watching their dashboards right now are not wrong to be concerned.
How to Assess Your Agency’s Exposure
There is a direct way to think about this. The question is not “do we use AI to write content?” Almost every agency does at this point. The question is: what was the intent behind how we used it?
Audit for thin content first. Pull your clients’ content inventories and sort by pages with under 600 words, pages with no internal links, and pages where the meta description and H1 are the only unique sentences. These are the pages most likely to be read as scaled content abuse.
Check for topical disconnect. If a client’s site has posts that have no relationship to the site’s core topic area, such as “guest posts” from third parties, sponsored content that went live and was never updated, or old affiliate sections, that’s parasite SEO exposure regardless of whether it was intentional.
Look at traffic patterns over the last 10 days. The update started rolling on March 24. If a client is seeing sudden drops in impressions for a cluster of pages (not individual URLs, but a category), that’s a pattern consistent with an algorithmic hit rather than a technical issue.
Cross-reference against the February core update. Sites that were already soft-hit in February are higher risk in March. The two updates are separate, but sites with persistent quality signals below Google’s threshold are more vulnerable.

What the Conversation with Clients Looks Like Now
This is the part agencies tend to handle badly. A client sees rankings drop, calls in a panic, and the agency either overpromises a quick fix or goes defensive. Neither is useful.
The better frame: be specific about what you’re looking for and what the timeline is. This update will complete within days based on the current rollout speed. Until it finishes, ranking volatility is normal and not diagnostic. The time to audit is now, so you have findings ready to present when the dust settles.
A few things to communicate clearly:
“Wait for the rollout to complete before drawing conclusions.” Rank tracking during an active rollout shows noise. A URL that drops on day two can recover by day five. Give it a week before treating any movement as a signal.
“Here’s what we’re auditing and why.” Naming the specific content categories you’re reviewing (thin pages, off-topic content, expired domain redirects) shows competence. It also sets realistic expectations about timelines.
“Here’s what we’re not going to do.” Panicking and doing mass deletions or redirects during an active update is one of the fastest ways to make things worse. Changes made before the rollout finishes create attribution problems. Wait, audit, then act.
The agencies that handle this well will use it as a moment to have the quality conversation they should have had 18 months ago. If your content operations are based on quantity over usefulness, this is the forcing function to change that.
What Survives This Update
Content that passes the question: “Would this page exist if Google didn’t exist?”
That is Google’s actual test, stated explicitly in their helpful content guidance. If a page was created to serve a reader who has a specific need, and the page delivers a complete and useful answer, it does not look like spam. If the page exists because a keyword tool said there was search volume for a phrase and someone generated 800 words to capture it, it does look like spam.
The pattern that survives:
- Content written by people with actual expertise in the topic, with visible authorship and credentials
- Pages that answer a specific question completely, including nuances and caveats
- Case studies, original research, or practitioner experience that can’t be replicated by a language model from public sources
- Content that cites external sources, not to game E-E-A-T but because the topic requires it
The pattern that gets hit:
- City or industry permutation pages (“best plumber in [city]” x 200 cities)
- FAQ content that mirrors the question in the answer without adding anything
- Service pages that swap out the industry name but share identical body copy
- Posts that aggregate publicly available information without editorial POV or original analysis
The Audit Checklist for Right Now
Before the rollout completes, run through this for every client with significant SEO exposure:
Content inventory check:
- Any pages under 400 words that aren’t intentionally short (contact pages, landing pages)?
- Any content sections with no clear connection to the site’s core topic?
- Any third-party or affiliate content that isn’t editorially integrated?
- Any expired domain redirects pointing to the site or pages on the site?
Link profile check:
- Any backlink clusters from sites that were clearly created to link out?
- Any links from domains acquired recently with no organic traffic of their own?
- Any guest post placements on sites where the guest post is clearly the only reason the site publishes?
Technical quick check:
- Are all noindex tags on pages that should be noindexed (staging, test pages, thin parameterized URLs)?
- Any canonicalization issues that could be creating duplicate content signals?
None of this requires immediate action. The goal right now is to know where the exposure is, so you’re ready to act on it once the rollout stabilizes.
If your SEO services include ongoing auditing, this is a good moment to pull forward your next scheduled review. The clients who hear from you this week, with a plan and not just a note that something changed, are the ones who will remember why they hired an agency.

FAQ: Google’s March 2026 Spam Update
Is AI-written content against Google’s spam policy? No. Google’s policy targets content created primarily to rank in search, regardless of whether a human or AI wrote it. The relevant question is whether the content was designed to serve a reader or to game search rankings. Well-researched, accurate, human-reviewed content created with AI assistance is not spam under Google’s current framework.
How long will the March 2026 spam update take to complete? Google indicated on the Search Status Dashboard that the rollout began March 24 and is moving faster than typical spam updates. Most spam updates complete within 1-2 weeks. Given the pace signals, this one may wrap sooner.
Should we delete thin content right now? Wait for the rollout to complete before making bulk changes. Deleting or redirecting content mid-rollout creates attribution confusion and makes it harder to determine what was actually affected. Audit now, act after the rollout stabilizes.
What’s the difference between the March 2026 spam update and the February core update? These are separate updates with different scopes. The February update focused on content quality signals (E-E-A-T, helpfulness, topical authority). The March spam update targets policy violations: scaled content abuse, parasite SEO, and link manipulation. A site can be affected by one, both, or neither.
Our rankings dropped yesterday. Is it the spam update? Possibly. The update went live March 24, so drops in the March 24-25 window should be cross-referenced against this update first. Look at whether the drops are concentrated in a content category (which suggests an algorithmic pattern) or spread across unrelated pages (which could be something else). Check Google Search Console for manual actions before assuming algorithm impact.
What content is safest from this update? Content that demonstrates genuine expertise, serves a specific reader need, and couldn’t have been generated in bulk from a template. Original research, expert-authored content, detailed how-to guides built on practitioner experience, and pages that cite and synthesize external sources with a clear editorial POV.
The agencies that come out of this update ahead are the ones who stopped treating content volume as a KPI two years ago. For everyone else, this is the week to start. The rollout is active. The ranking data will be clear within days. Get into your clients’ Search Console now, document the baseline, and have the quality conversation before they call you asking what happened.