Google link spam updates: a timeline from Penguin to 2026
Google has moved from periodic link penalties (Penguin, 2012) to continuous, mostly silent neutralising of spam links by SpamBrain. There has been no named link spam update since December 2022. This page lists the dated events and explains what each changed.
In short
- Penguin launched on 24 April 2012 and became a real-time part of the core algorithm on 23 September 2016, when it switched from demoting sites to devaluing spam links.
- The December 2022 link spam update was the first to use SpamBrain to find both sites that buy links and sites that exist to pass them on.
- There has been no named link spam update since December 2022. Google said in August 2026 that link spam is handled by a separate system.
- The March 2024 update added three policies that hit link tactics: expired domain abuse, scaled content abuse and site reputation abuse.
- The March 2026 spam update finished in about 19.5 hours, the fastest rollout on record.
Google’s handling of link spam has gone through three phases. From 2012 to 2016 it punished sites in periodic batches. From 2016 it began to discount bad links in real time. Since 2021 Google has aimed to neutralise link spam as it finds it, from December 2022 with a system called SpamBrain, and with fewer and fewer announcements. The practical result is that a bought link is now more likely to be quietly ignored than to trigger a visible penalty.
The timeline
Dates from 2024 onward were checked against current reporting for this page. Earlier dates come from Google’s own announcements as they are generally recorded; we have not re-read each original post, so treat an exact day before 2024 as indicative.
| Date | Event | What changed for links |
|---|---|---|
| January 2005 | The nofollow attribute is introduced | Site owners get a way to link without passing credit |
| February 2011 | The New York Times exposes JC Penney’s paid links; Google applies a manual action | Paid links become a mainstream story |
| 24 April 2012 | Penguin 1.0 | Targets manipulative links; Google put the effect at about 3.1% of English queries |
| 16 October 2012 | Disavow links tool launches | Site owners can ask Google to ignore named links |
| May 2013 to October 2014 | Penguin 2.0, 2.1 and 3.0 | Periodic refreshes; penalised sites waited months or years for the next run |
| 2014 | Matt Cutts declares guest blogging for links finished; the MyBlogGuest network is penalised | Guest posts at scale become a named target |
| 23 September 2016 | Penguin 4.0 | Real time, part of the core algorithm, and it devalues spam links instead of demoting the whole site |
| May 2017 | Google reminder on large-scale article campaigns | Guest post links with keyword anchors are restated as a violation |
| 10 September 2019 | The sponsored and ugc attributes arrive; nofollow becomes a hint | Google may choose to count or ignore a nofollow link |
| 26 July 2021 | Link spam update | Aims to “nullify” link spam across languages; guidance on tagging affiliate, sponsored and guest post links |
| 14 December 2022 to 12 January 2023 | December 2022 link spam update | SpamBrain detects sites buying links and sites used to pass them; links are “neutralized” and the credit is lost |
| 4 to 20 October 2023 | October 2023 spam update | Cloaking, hacked, auto-generated and scraped content in many languages |
| 5 March 2024 | March 2024 core update (to 19 April) and spam update (to 20 March) | Three new policies: expired domain abuse, scaled content abuse and site reputation abuse. Link spam wording widened |
| March 2024 | Documentation edit | Links are described as “a factor”, no longer “an important factor” |
| 20 to 27 June 2024 | June 2024 spam update | General spam update |
| 19 November 2024 | Site reputation abuse policy tightened | Third-party content that exploits a host’s signals breaks the policy whatever the host’s involvement |
| 19 to 26 December 2024 | December 2024 spam update | General spam update |
| 26 August to 22 September 2025 | August 2025 spam update | 27 days, global; SISTRIX reported modest visible volatility |
| 24 March 2026 | March 2026 spam update | Completed in about 19.5 hours, the fastest on record |
| 24 to 26 June 2026 | June 2026 spam update | General spam update |
| 18 to 21 August 2026 | August 2026 spam update | Google said it targeted neither link spam nor site reputation abuse |
| 30 August 2026 | Site reputation abuse manual actions stop affecting results for users in the European Economic Area | Enforcement elsewhere is unchanged |
Two further 2026 changes rest on a single trade press report (ppc.land) and we have not confirmed them against Google’s own changelog: back button hijacking named as a spam violation on 13 April 2026, effective 15 June, and the spam policies extended to AI Overviews and AI Mode on 15 May 2026.
Phase one: Penguin as a periodic penalty (2012 to 2016)
Penguin ran in batches. If your site was caught, you cleaned up, disavowed, and then waited for the next refresh to find out whether it had worked. With gaps of many months between runs, a single mistake could cost a business more than a year of traffic. This is the period that created the fear of “toxic links” and the audit industry around it.
Phase two: real-time devaluation (2016)
Penguin 4.0 changed the logic. Google’s announcement said it now “devalues spam by adjusting ranking based on spam signals, rather than affecting ranking of the whole site”. It also became granular and continuous.
The consequence is easy to miss. Under the old model a bad link could hurt you. Under the new one, most bad links simply do nothing. You lose the money you paid, and nothing else. The exception, reported from past comments by Google staff, is a profile so manipulative that the systems stop trusting the site’s links as a whole.
Phase three: SpamBrain (2021 onward)
The July 2021 update used the word “nullify”. The December 2022 update named SpamBrain and added something new: it detects sites that buy links and also sites used to pass outgoing links. In other words, the seller’s site is a target as well as the buyer’s.
Google’s wording about what happens next has stayed the same since. When spam links are neutralised, any credit they passed is lost. With the March 2026 update Google repeated that this benefit cannot be regained. You cannot recover rankings that only existed because of links that no longer count.
Why there has been no link spam update since 2022
No update since December 2022 has carried the “link spam” name. Google’s statement on the August 2026 spam update is the clearest explanation: “this update does not target link spam, and it does not target the site reputation abuse policy. Both of those are handled by separate systems.”
The quote is on record. The reading that link spam detection now runs continuously, without announced rollouts, is the natural interpretation but Google has not described it in those words.
For diagnosis this matters. A traffic drop on the date of a general spam update or a core update is usually not a link problem. The spam updates of 2024 to 2026 were mostly about content abuse.
The policies that sit next to link spam
The March 2024 update did not launch a link update, but three of its policies hit common link tactics:
- Expired domain abuse: buying a dropped domain to exploit its old backlinks. See expired domains.
- Scaled content abuse: mass-produced content, which covers the filler articles on many private blog networks.
- Site reputation abuse: third-party pages placed on a strong host to borrow its ranking. See the site reputation abuse policy.
The link spam policy itself was widened at the same time to cover low-value content created mainly to manipulate linking signals.
Where to go next
If you think you have been hit, go to Google link penalties and recovery for diagnosis. For what Google’s internal documents say about the systems behind these updates, read the leak and the antitrust documents.
Common questions
When was the last Google link spam update?
The last update Google named as a link spam update began on 14 December 2022 and finished on 12 January 2023. Later spam updates were general, and Google said of the August 2026 update that it did not target link spam.
Is Penguin still running?
Yes, as part of the core algorithm since September 2016. It works in real time and discounts spam links instead of waiting for a periodic refresh.
What is SpamBrain?
SpamBrain is Google's spam detection system. Since the December 2022 link spam update it has been used to detect sites buying links and sites used to pass outgoing links, and to neutralise those links.
My traffic dropped during a spam update. Is it my links?
Probably not on that evidence alone. The general spam updates of 2024 to 2026 were mostly about content abuse, and Google says link spam is handled separately. Check for a manual action first, then look at which pages lost traffic.

