August 2025 Spam Update Complete: What It Hit and What to Do

If your traffic moved in late August or September, you can now find out whether the spam update caused it. Google has marked the August 2025 spam update complete. It started it on 26 August 2025 and confirmed the rollout finished on 22 September 2025, so the data you see now is no longer mid-rollout noise.

In this article I’ll cover what the update was looking for, how to tell if your site was affected, and what Google says about recovery. I’ll also cover the mistakes I’d avoid while you fix things.

August 2025 Spam Update Complete: The Confirmed Timeline

Here is what Google posted on the Search Status Dashboard entry for the August 2025 spam update:

• Started: 26 August 2025. Google said it “applies globally and to all languages” and “may take a few weeks to complete”.
• Completed: Google’s note says “The rollout was complete as of September 22, 2025.”
• Length: about four weeks from start to finish.

That is a long rollout for a spam update. The December 2024 spam update, for comparison, took about a week. A longer rollout means changes could land on different days for different sites, so don’t expect to see one clean drop on 26 August.

When the update started, I covered what to watch in Google’s August 2025 spam update is rolling out. This article picks up from there, now that the full picture is in.

What the Update Targeted, According to Google

Google did not say which spam tactics this update focused on. It rarely does. Any list of “what it hit” that claims to come from Google is guesswork.

What Google does explain is how spam updates work in general:

• Google’s automated spam systems run all the time, not only during updates.
• A “spam update” is when Google makes a notable improvement to those systems.
• The main system is SpamBrain, Google’s AI-based spam prevention system. Google improves it from time to time to catch new kinds of spam.
• Sites that break Google’s spam policies may rank lower or not appear in results at all.

So the honest answer to “what did it hit?” is this: sites that break Google’s spam policies, and that the improved systems now catch.

The Spam Policies Most Likely to Matter for Normal Businesses

Google lists its rules in its spam policies for Google web search. In my experience, these are the ones that cause the most trouble for ordinary business and publisher sites:

• Scaled content abuse: making many pages mainly to rank, not to help people. It does not matter if they are written by AI, people or templates.
• Site reputation abuse: hosting third-party content mainly to borrow your site’s ranking strength, often called parasite SEO.
• Expired domain abuse: buying an old domain and using its history to rank unrelated, low-value content.
• Link spam: buying, selling or swapping links to pass ranking credit.
• Thin affiliation: affiliate pages that copy product details and add nothing new.
• Doorway abuse: lots of similar pages that all push visitors to one place.
• Cloaking and sneaky redirects: showing Google something different from what visitors see.
• Hacked content and user-generated spam: spam added to your site by someone else, through a security hole, comments or forums.

The last point is the one people forget. Many sites caught by spam systems never chose to spam. Someone else filled their site with gambling or pharma pages through an old plugin.

Manual Actions vs Algorithmic Demotions

Before you check your data, you need to know which kind of problem you might have. The recovery route is very different for each.

Algorithmic Demotion (What a Spam Update Does)

A spam update is algorithmic. That means Google’s systems change rankings automatically. There is no message, no report and nothing to submit.

The only signal is what you see in your traffic and rankings. Recovery comes when the systems learn, over time, that your site now follows the rules.

Manual Action (a Human Decision)

A manual action is when a human reviewer at Google decides that pages on your site break the spam policies. You’ll see it in Search Console under Security & Manual Actions > Manual actions, and Google also sends a message.

Manual actions have a clear path. You fix the issue on every affected page, then click Request Review to send a reconsideration request (a note to Google explaining what you fixed). Google says most reviews take several days or weeks, and link-related reviews can take longer.

The spam update itself does not give out manual actions. But I always check that report first after any big update, because it is the only place you get a direct answer.

How to Check If You Were Affected

Now that the rollout is complete, you can compare clean before-and-after periods. Here is the process I follow.

1. Pick Fair Date Ranges

In the Search Console Performance report, compare a period after 22 September with a period of the same length before 26 August. Avoid using days inside the rollout as your “after” period, because rankings often swing both ways during an update.

Since the rollout ended so recently, you only have a few days of post-update data. That is enough for a first look. I’d check again after two to three weeks before making big decisions.

2. Watch Out for the September Reporting Change

This one matters a lot for this update. From around 10 September, many site owners saw desktop impressions fall in Search Console while average position went up.

The SEO community has widely linked this to a change in how Google handles the num=100 results parameter, which many rank-tracking tools used. Google has not given a full public explanation. Either way, it looks like a reporting change, not a ranking drop.

So if impressions fell but clicks stayed steady, don’t blame the spam update. Look at clicks first. Clicks are the number that tells you whether real visitors stopped coming.

3. Rule Out Other Causes

Before you link a drop to the spam update, check the boring things:

• Site migrations, redesigns or URL changes in the same window.
• New noindex tags, robots.txt changes or spikes in server errors.
• Seasonal patterns, such as late-summer dips.
• Broken analytics tags or consent settings that changed your tracking.

One useful fact: Google did not confirm a core update during this window. The June 2025 core update finished in July. That makes it a little easier to link a sharp change in this period to the spam update.

4. Look at the Shape of the Change

Spam demotions usually look different from quality or competition changes. In my experience, these patterns point towards a spam issue:

• A sharp drop that starts on one day and stays down.
• One section or folder losing most of its clicks while the rest of the site holds.
• A group of templated pages losing almost all impressions at once.
• Pages that stop showing even for your own brand name.

A slow slide of a few positions across the whole site is less likely to be spam. That usually points to quality, competition or search features taking clicks.

5. Break the Data Down by Section

Use the Page filter in Search Console with “URLs containing” to check one section at a time. Try folders like /blog/, /locations/, /deals/ or any partner section.

If one section carries most of the loss, start your audit there. If you use GA4 as well, a filtered organic report makes this faster. My guide to GA4 reports for organic search traffic shows how to set one up.

6. Check the Manual Actions and Security Issues Reports

Open both reports in Search Console. If either one lists a problem, you have a clear answer and a clear next step. If both are clean, you are dealing with an algorithmic effect or normal ups and downs.

What If Your Traffic Went Up?

Some sites gained during this update. When spammy pages drop out of results, the pages below them move up. That is normal.

I’d enjoy the gain but not change strategy because of it. Gains from a competitor being removed are real, but they are not proof that Google now rates your site higher. Keep improving the pages that gained so they hold their place.

Recovery Guidance From Google

Google’s advice after a spam update is simple. Review the spam policies, make sure your site follows them, and give the systems time. There is no trick or request form for algorithmic demotions.

Fix the Actual Violation

Here is how I’d handle the most common problems:

• Scaled content: remove pages that add nothing. Merge near-duplicates into fewer, better pages. Add real, specific information to the ones you keep.
• Site reputation abuse: remove the third-party section, or keep it out of Search with noindex if it still serves a business purpose. Moving it to a subdomain to dodge the rule counts as policy circumvention.
• Expired domain abuse: stop publishing content that has nothing to do with the domain’s purpose.
• Thin affiliation: add your own testing, comparisons or advice, or remove the pages.
• Hacked content: clean the site, close the security hole, update plugins and change passwords.
• Link spam: stop buying or swapping links, and mark paid links with rel="sponsored".

A practical example: a cleaning company has 300 town pages that only swap the town name. I’d cut them to the towns it really serves. Then I’d give each one real detail, such as service days, local pricing notes and photos from jobs in that area.

Expect Recovery to Take Months

Google says its automated systems may take a period of months to learn that a site now complies. This is the part most people don’t want to hear.

Fixes you make this week will not show up in rankings next week. In my experience, the sites that recover are the ones that fix things properly once and then leave them alone long enough to be re-assessed.

Link Spam Is a Special Case

Google is clear that after a link spam change, fixing things might not bring any improvement. When its systems remove the effect of spammy links, any ranking benefit those links gave you is lost for good.

Cleaning up bad links still matters for the future. But if your old rankings depended on those links, they won’t come back on their own. You will need to earn new, genuine links and better content to replace them.

If You Do Have a Manual Action

For manual actions, Google’s advice is to fix the issue on every page listed, not just some of them. Google says fixing only some pages will not earn you a partial return to results.

Make sure Google can reach the fixed pages. They should not be behind a login, blocked by robots.txt or tagged noindex. Then send one clear reconsideration request that explains the problem, what you changed and the result. Don’t send another while one is still pending.

What Not to Do After the Spam Update

I usually see more damage from panic fixes than from the update itself. Avoid these:

• Deleting large parts of the site without checking the data. Remove pages because they break a rule or add no value, not because traffic dipped for a week.
• Disavowing every backlink. The disavow tool (a way to ask Google to ignore certain links) is for bad links you could not remove. Google says not to disavow natural links.
• Moving spammy content to a new subdomain or new site. Google’s policies treat this as circumvention and can take broader action.
• Filing a reconsideration request with no manual action. There is nothing to review for an algorithmic demotion.
• Changing dates or rewording pages to look “fresh”. Surface edits don’t fix a policy problem.
• Buying “recovery” links or services. More link spam makes things worse, not better.
• Reading too much into the first few days. Give the data at least a few weeks after 22 September before judging the full impact.

How to Stay Safe Before the Next Spam Update

Google’s spam systems run all the time, so the best protection is a regular habit, not a reaction to each update. Here is what I’d put on a simple routine:

1. Monthly: check the Manual actions and Security issues reports in Search Console.
2. Monthly: run a site:yourdomain.com search with spam words like “casino” or “viagra” to spot injected pages.
3. Before publishing at scale: ask whether each page has something unique a visitor would miss if it were gone.
4. Before any partner deal: check that the content fits your site’s purpose and that your team reviews it.
5. Quarterly: review new backlinks and paid placements, and make sure sponsored links are marked.
6. Always: keep your CMS, themes and plugins updated, and remove admin users you don’t recognise.

Keep a short log of site changes and traffic changes with dates. When the next update arrives, that log makes it much easier to see what caused what.

Conclusion

With the August 2025 spam update complete, the picture is clear. It ran from 26 August to 22 September 2025, applied in all languages, and Google did not say which tactics it targeted. If your site follows the spam policies, it should not have hurt you directly.

If you saw a sharp, concentrated drop in clicks, check for manual actions, find the section carrying the loss and fix the real violation. Then give it months, not days. As a next step, set up a clean organic view in GA4 so you can track recovery week by week, starting with my guide to GA4 organic search reports.