Google's Spam Update Finished on 8 October: 9 Ways a Home Service Website Gets Flagged Without Meaning To
Share
Google's September 2026 spam update finished rolling out on 8 October, after 13 days and 16 hours. That is unusual. The three earlier spam updates this year took between 19 hours and three days. Google has not said what this one targeted, only that it is a "normal spam update" applying to all languages and regions, and that sites which lose visibility should review the spam policies and expect recovery to take months, not days. The dates are on the Google Search Status Dashboard, with a useful summary of the timeline from Search Engine Journal.
Most garage door, HVAC, plumbing and roofing websites are not spam. Nobody set out to game anything. But the spam policies are written in broad language, and a surprising number of ordinary home service sites trip them through habits that were sold to the owner as "SEO" at some point in the last ten years. This post walks through the nine that come up most often, how to tell if your site has them, and what to change.
First: did the update actually touch you?
Before you change anything, establish whether there is a problem. Rank trackers were noisy during this rollout, so use Search Console as the record that matters.
- Open Search Console, Performance, Search results. Set the date range to 1 September to today.
- Compare clicks and impressions for 24 September to 8 October against the two weeks before.
- Look for a drop that starts in that window and holds for at least five consecutive days. A two day dip that recovers is normal fluctuation.
- Click the Pages tab and sort by click change. If the loss is concentrated on a handful of pages, note which ones. Spam actions tend to hit specific page types, not the whole site evenly.
- Check Security and Manual Actions. Algorithmic spam updates do not show a manual action, but if one appears you have a separate and more urgent job.
If nothing moved, you still want to read the rest of this post. Google says it refreshes spam systems periodically, and the next refresh is a better time to have already cleaned house. If you did see a lasting drop, our earlier guide on what probably happened when traffic dropped covers the broader diagnosis.
The nine accidental spam signals on home service websites
1. City pages that say the same thing fifty times
This is the big one. Google calls it doorway abuse: pages created to rank for specific locations that all funnel the visitor to the same place with no real difference between them. A page for "garage door repair Murfreesboro" that is the Franklin page with the town name swapped is exactly what the policy describes.
How to check: open any three of your city pages side by side. Read them aloud. If the only words that change are the place names, they are doorway pages.
What to do: keep the pages for towns you genuinely serve and genuinely want to rank in, usually five to ten. For each one, add things that are only true of that town: drive time from your shop, the neighbourhoods you cover, the door brands or furnace types common in that housing stock, a job you did there, local permit quirks. Delete or redirect the rest to the nearest surviving page. We laid out the structure in how to rank in multiple cities from one location.
2. A blog that grew by 200 posts over a weekend
Google's scaled content abuse policy covers "many pages generated without adding value" regardless of how they were made. Fifty posts titled "Why is my garage door making a noise in [month]" with the same five paragraphs each is scaled content abuse, however they were made.
How to check: in Search Console, Pages, sort by impressions ascending. Pages with zero impressions after 90 days are not helping you, and in volume they can hurt.
What to do: consolidate. Ten substantial posts beat two hundred thin ones. Merge the near duplicates, set redirects from the removed URLs, and keep the ones a real customer would thank you for. AI written content is not banned, but it is held to the same standard as everything else; we covered the evidence in can AI written content rank.
3. Hidden keyword blocks in the footer
Older agencies loved a footer paragraph in eight point grey text listing every service and every town. That is hidden text and keyword stuffing in the same element. It is also the easiest thing on this list for an automated system to detect.
How to check: scroll to the bottom of your homepage and select all. Anything that lights up but you could not read before is hidden text. Then read the footer honestly: if it is a list of "HVAC repair Nashville, HVAC repair Franklin, HVAC repair Brentwood" it is stuffing.
What to do: replace it with a short, readable service area sentence and real links to your surviving city pages. Normal font. Normal colour.
4. A phone number and a Google Maps embed, and nothing else
A service page that contains a heading, a photo, one sentence and a call button is what Google's policies call thin content. It is not a deliberate trick, which is why owners are surprised when it counts against them.
How to check: count the words on your five most important service pages. Under 250 and the page is almost certainly not answering what the searcher asked.
What to do: for each core service write out what the customer actually wants to know: what goes wrong, what the fix involves, how long it takes, roughly what it costs and what affects the price, what you need from them before you arrive, what the guarantee is. That is 600 to 900 words of genuinely useful text and it is also what AI search systems quote.
5. The "partner" blog section that is not yours
Google's site reputation abuse policy, strengthened through 2025 and 2026, targets third party content hosted on a site to borrow its rankings. On a home service site it looks like a "resources" folder full of articles about credit cards, casinos or CBD that a link seller paid you to host, or a subdomain you let someone else run.
How to check: in Search Console, Pages, look for URLs you do not recognise. Search Google for site:yourdomain.com and scroll past the first page.
What to do: remove it. All of it. There is no amount of monthly rent that covers the cost of losing your service pages.
6. Links bought by the batch
Google said this update does not specifically target link spam, but the link spam policy is still live and still refreshed. Bulk directory submissions, "guest posts" on sites with no audience, and footer links traded with other contractors all fall under it.
How to check: Search Console, Links, Top linking sites. If the top twenty includes sites you have never heard of with names like "bestbusinessdirectory," you know.
What to do: stop buying. You do not usually need to disavow for small sites; Google mostly ignores these links. Spend the effort on the eight legitimate local approaches in link building that is not spam.
7. The expired domain you "reactivated"
Some owners bought a lapsed competitor domain, or a dead local news domain, and pointed it at their site or filled it with content to inherit its history. That is expired domain abuse, named explicitly in the policies since 2024.
How to check: ask your agency in writing whether any domains besides your main one redirect to it.
What to do: if the old domain was genuinely your business under a previous name, a redirect is fine. If it was somebody else's business, remove the redirect and let it go.
8. Pages that promise one thing and show another
A page titled "Emergency plumber open 24 hours" when the phone goes to voicemail at 6pm, or a "free estimate" page that charges a trip fee, is misleading functionality in policy language and a review problem in plain language.
How to check: read your titles and headings as a stranger. Then check whether each claim is true today, not when the page was written.
What to do: make the page match the business. If you are not open at night, say which hours you are.
9. Fake review markup
Star ratings in your own code, on your own pages, about your own business, are explicitly excluded from Google's review snippet guidelines. Marking up your Google rating on your homepage to get stars in search results is structured data abuse.
How to check: run your homepage through Google's Rich Results Test. If it shows AggregateRating on a LocalBusiness that is you, remove it.
What to do: keep LocalBusiness schema for name, address, hours, phone and services. Let Google pull your rating from your Business Profile, which it does anyway.
What recovery actually looks like
Google's own advice for this update is blunt: review the spam policies, fix what you find, and wait for the next refresh. There is no reconsideration request for algorithmic actions. In practice that means a site cleaned up in October might see movement at the next spam refresh, which historically has arrived every one to three months, and full recovery can take longer than that.
Most of the nine items above were installed by somebody the owner paid. The useful question is not "who is to blame" but "is this still being done to my site every month." Our guide to recovering from an algorithm update covers how to hold an agency to account during that conversation.
It is also why we built OmnifySEO around agents rather than a monthly checklist. The system reads Search Console daily, flags a page type that starts losing impressions within days rather than at the quarterly review, publishes only pages with a reason to exist, and adjusts when Google changes the rules.
What to do this week
- Monday: Search Console, compare 24 September to 8 October against the prior two weeks. Note any page that lost more than 30 percent of clicks and held the loss five days.
- Tuesday: open three city pages side by side. If only the town name changes, pick the five to ten towns that matter and rewrite those; redirect the rest.
- Wednesday: list every blog post with zero impressions in 90 days. Merge or remove, with redirects.
- Thursday: homepage footer and core service pages. Remove hidden text and keyword lists; bring each core service page to at least 600 useful words.
-
Friday: run the Rich Results Test, remove self applied star ratings, search
site:yourdomain.comfor content you do not recognise, and ask your agency in writing which domains redirect to yours. - Ongoing: stop any paid link or bulk directory service today. Diary a Search Console check for the next spam refresh.
If you would rather have the audit done for you, with the fixes made and watched afterwards, talk to us at omnifyseo.com/pages/contact.