Google ran its longest spam purge in more than a year — thirteen days and sixteen hours of it — and never named a single policy it was enforcing. When it finished, a free Madrid concert calendar with no ads, no affiliates and no revenue had lost 95 percent of the traffic it lived on.
The Search Status Dashboard entry is exact about the mechanics and mute about the reason. Google opened the incident at 09:15 Pacific on September 24, said it applied worldwide and in every language, and closed it at 01:37 Pacific on October 8. Thirteen days, sixteen hours, twenty-two minutes. Among the fifteen spam updates Search Engine Roundtable has documented since June 2021, only five ran longer. Set against March 2026, which opened one day and closed the next in roughly nineteen hours, September lasted about seventeen times as long under the same label.
Gary Illyes of Google has shown internal timing data this year putting spam rollouts at one to two days. September ran close to seven times the top of that range. Google Search Central’s own message on LinkedIn called it a normal spam update — which is a generous use of the word. The company declined to say what share of queries moved. It named no targeted policy, said no policy changes rode along with the rollout, and said link spam was not the target. Recovery, it added, can take many months.
A two-day rollout and a two-week rollout are not the same event with different paperwork. One is a recalculation. The other is a decision that outlasted a fortnight and never had to be defended.
Marie Haynes — Twenty Years In, the Requests Went From Essentially Zero to Several a Week
Marie Haynes has consulted on manual actions for about twenty years, long enough to remember when the penalties were the main event rather than a nuisance. She told Barry Schwartz that requests for help went from essentially nothing to several per week, and that she had already stopped advertising the service — the sort of detail that makes a trend difficult to wave off as marketing. What she is seeing clusters around thin content, pure spam and scaled content. Her read on the casualties is the part worth pinning to the wall: most of the sites caught up in it are legitimate, established businesses, not disposable churn farms.
Daniel Foley Carter, another consultant quoted in the same reporting, names the mechanism with limited sympathy for it. Budgets were trimmed on the assumption that AI could carry the workload, lower-level staff scaled content to hit the number, and the cleanup is now being billed at consultant rates. He puts the worst manual actions above 90 percent traffic loss — extreme cases rather than the median, but not hypothetical ones either.
The shortcut was always going to be paid for. The only open question was whose account it came out of.
The Madrid Calendar — Google’s Cure for AI Slop Is Human Review, and This Site Was Already Doing It
Then there is the site that does not fit the story anyone wants to tell. Clasicamadrid.com is a classical music events calendar in Madrid, run by one person, free to read, with no advertising and no affiliate links. Every listing points back to the official venue or institution behind the concert. From September 27, mid-rollout, its Google traffic collapsed by roughly 95 percent and stayed down — site-wide, visible in Search Console and independently in PostHog analytics.
The owner posted the numbers publicly and did not attach his name to them, which is its own small indictment: the person absorbing the loss cannot afford the professional risk of being loud about it. He is not a spammer who got caught. He is a curator who got reclassified.
He is also not alone in the arithmetic. Other owners took the same collapse to Google’s own Search Central Community, describing roughly 95 percent of Google traffic gone inside a single day during the rollout, with no spam problem behind it. Once the same number shows up in unrelated inboxes, it has stopped being bad luck.
Google’s guidance, updated October 1, now states that fabricating creator profiles — AI-generated headshots, invented names, credentials nobody earned — is a form of deception and a low-quality signal, and that manually fact-checking AI-generated pages before publishing is critical. Read that twice. The company’s answer to automated content is human verification, page by page, performed by someone who knows the subject. That is a job description for what the Madrid calendar was already doing before the traffic disappeared.
The community diagnosis landed on aggregation: a calendar that gathers other people’s listings, however accurately, reads as thin. Which is the trap. A human curating at human scale produces the same page shape as automation, and the enforcement is aimed at the shape. Do the work properly and slowly, and you look exactly like the thing the filter was built to catch.
Two weeks of silence is not transparency. It is a policy.
Barry Schwartz — Nobody Has Shown the Update Caused Any of This, and That Is Worse
Honesty requires an awkward sentence here: no one has demonstrated that the spam update caused the manual-action wave. Schwartz did not claim a connection. Google has not commented. The timing overlaps, and overlapping timing is not causation. The consultants’ evidence comes from their own client pipelines, which establishes a pattern and not a mechanism.
That should make the story smaller. It makes it larger. A named, dated, globally applied enforcement action with no stated rule, no stated scope and no stated target, running alongside a rise in penalties that nobody can tie to it. The only party able to clear the fog is the party with an incentive to leave it standing.
Google — Recovery Takes Months, and Nobody Will Tell You What to Fix
Google’s guidance is that recovery, where it comes at all, can take many months, and that periodic refreshes will follow. For a site with no revenue, many months is not a business metric. It is the length of a silence, measured in invoices that never arrive.
As of October 19, Google’s status dashboard still listed the September spam update as the most recent ranking incident to hit anyone. No October update. Which means the event that took this publisher’s traffic is, officially, the newest thing that has happened to him — and the public record stops there: no rule named, no affected share published, no explanation owed.
The Madrid calendar is still online. Still free. Still citing the venues, still getting the dates right. Its owner has not been told what he did wrong, because on the available evidence he did nothing wrong. He is waiting on an explanation from a company that has decided explanations are optional.
Whatever the target was, the blast radius reached a man who checked every listing by hand.
Sources: PPC Land, Search Engine Roundtable, Google Search Central Community, Google Search Status Dashboard.