Google said the spam update "isn't about links." A week later, links turned out to be the only thing that survived

On September 24, Google launched the September 2026 Spam Update — the fourth spam update this year. These usually roll out in 1–2 days. This one takes two weeks, and John Mueller confirmed the extended timeline was intentional. On September 30, phase two hit, and the turbulence carried into October 1. As of this writing, the rollout is still not finished.

What Google said

Two statements, both official: the update “applies globally and to all languages,” and it “does not target link spam.” That's it. No list of targets, no percentage of affected queries — Google declined to share one. What's left is deduction: strip links out of the spam policies and you get scaled content abuse, expired-domain abuse, site reputation abuse (which is mostly manual anyway) and doorway pages.

What's visible on the ground

Wave one, September 24–25: tracker volatility climbing for a second straight day. Wave two, September 30: Glenn Gabe reports “huge drops” from site owners, and WebmasterWorld fills with identical messages — “Discover and News traffic has again vanished.” One owner: “Semrush has changed direction since yesterday... today something happened again. Traffic dead.”

Now the key observation, from a BlackHatWorld thread that no “white hat” publication will quote:

Pages with links from other sites held, content-only pages dropped.

Same site, pages with external links stayed put, pages without them sank. The update that “isn't about links” in practice sorted linked from unlinked. Same thread: an operator running a network of AI blogs reports that “all my AI blogs are doing fine” and sites are “getting added to AI Overviews.”

Put the two together: a content update punishes content that has nothing propping it up. Links stopped being a ranking factor and became insurance against a drop.

Double standards as a system

While small autogenerated sites bleed traffic, Reddit — with machine-translated subreddits in Italian, German, Portuguese and French, textbook scaled content that already got hit in May–June 2026 — is, per Gabe, “surging back again” across multiple countries. Same tactic: for Reddit it's “localization,” for you it's scaled content abuse.

The Mueller quote that matters more than the update

Two weeks before launch, on September 7, Mueller wrote on Bluesky about programmatic SEO: such projects “often lead to a site that's either spam, borderline spam, or low quality.” Then the important part: once Google's systems “lose faith” in a site because of a mass of low-quality pages, rebuilding trust takes “significant effort” and a long time — comparable to recovering from a spam or core update.

Translation: the penalty isn't per page. A thousand programmatic pages can drag down trust in the entire domain, including the good sections. That's the exact mechanism Google just announced for parasite SEO in the EU — “separate the foreign sections and rank them on their own merits.” Domain trust no longer smears across the site automatically. It's granted per section and revoked per section.

What to do if you build links

1. Expired domains used as link sources. Expired-domain abuse is a likely target. If your drop holds a hundred AI articles “about everything” and sends links out, check whether it just became a toxic source. A drop with a live topic and 20 pages survives; a drop-landfill doesn't.
2. Links to programmatic sections are money on fire. If a client has 10,000 autogenerated pages and you're pumping links at the homepage, expect the domain to lose faith wholesale and your links to heat the air. Clean first, link second.
3. The link as insurance. If the BHW observation holds over time, the rule for money pages is simple: don't leave a single one without at least a couple of external links. Not for position — for resilience against the next content update.
4. Don't move until the rollout ends. The volatility on September 4, 15 and 23 was most likely reversals from the August update, not this one. Compare against September 24 and September 30 separately. Export your Search Console Performance report now, while the three-month window still holds the baseline.

Bottom line

Google said the update isn't about links, and that's true — link spam isn't being punished. But content without links is, which means links are back in demand. They just no longer buy a position. They buy the right not to fall.