Google spam update September 2026: are backlinks safe?

The Google spam update September 2026 finished on 8 October 2026: your backlinks are not automatically unsafe because of it. Backlinks are links from other websites to yours. For small businesses, the risk to check is whether links were bought to influence rankings, which Google's spam policies already prohibit.

What Google has and has not announced

Search Engine Land reports that Google described this as a “normal spam” update with nothing specifically new announced. That gives you a timely reason to review existing risks. It does not establish that Google introduced a new link-specific penalty or that a change in your website's performance came from backlinks.

The relevant rule was already there. Google's spam policies, last updated on 28 August 2026, list “Buying or selling links for ranking purposes” as link spam. Link spam means creating or obtaining links to manipulate search rankings rather than help readers.

An accountant mentioned by a professional association and a shop buying links solely to move up Google are different situations. The question is how a link came about and what it is intended to do, not simply whether another website links to yours.

How to check backlinks without buying a tool

If you already have access, open Google Search Console, Google's free tool for checking how your website appears in search. In its Links report, look at websites linking to you and the pages they link to. Export the available links if you want a working list, but treat it as a starting point rather than a complete history.

Put that list beside your supplier's placement reports and invoices. Start with links that you or someone working for you arranged, because you can ask useful questions about their origins. A strange website you have never dealt with is not automatically evidence that you have done something wrong.

You don't need a paid tool for this first pass. Keep a simple sheet with:

• The page carrying the link and the page on your website it points to.
• Who arranged it and whether money, goods or services changed hands.
• What a reader gains from following it.
• Whether the publisher has marked a paid link for search engines.

Open the linking pages rather than relying on a supplier's quality score. Does the article make sense for that publication's readers? Would the link help someone find a relevant service, product or source?

A page filled with unrelated business links deserves a closer look. So does wording that repeatedly forces in service names and towns. Neither is proof of a breach on its own, and relevance does not make a link bought for ranking purposes acceptable.

Are paid backlinks safe?

Buying links to influence rankings breaks Google's rules. Paying for advertising is a different arrangement: Google's policy allows paid links that use sponsored or nofollow labels in their code. These labels identify a paid relationship or ask search engines not to treat the link as an ordinary recommendation.

Do not assume a visible “sponsored post” heading does that job. Ask the publisher to confirm how the link itself is marked, and keep the reply with the invoice. If you cannot inspect the code yourself, whoever maintains your website can help check the published link.

For a salon, an advert in a local magazine might make commercial sense because readers could book appointments. Assess it as advertising, not as a purchase of Google ranking influence. No supplier can make that distinction disappear by calling the placement “editorial”.

If you find a paid link intended to influence rankings, ask the supplier or publisher to correct its treatment or remove it. Keep a record of the request and outcome. Ignore offers to replace it with another unmarked paid link described as safer.

Check lost clicks before blaming a link

A fall in visits around an update is a clue, not a diagnosis. In Search Console's Performance report for search results, compare periods of equal length with matching weekdays. Look at clicks to the pages that bring enquiries or orders, rather than only the website's total.

Check your own changes too. A moved service page, a broken booking form or an unavailable product needs a different response from questionable links. If the business is seasonal, compare the pattern with a similar period from the previous year before blaming the update.

Also check the Manual actions report, which shows penalties applied after a human review at Google. A link-related notice needs attention. An empty report does not prove every link is safe or that Google's automatic spam checks have had no effect.

Keep notes on what changed and when. Evidence of lost clicks alongside questionable paid placements is a reason to investigate, not proof that those placements caused the loss.

A monthly backlink quota is not proof of quality

A monthly backlink quota is not proof of quality. Paying for outreach does not exempt the resulting placements from Google's rules against buying links for ranking purposes, whatever the invoice calls the work. Those rules apply to an automated service as much as to a traditional agency.

Paying someone to research relevant publications and approach editors is different from paying a publisher for a link intended to improve rankings. But the service description alone cannot tell you which happened. Ask who was paid, what was promised and whether the editor could decline the link.

Do not accept “we hit the monthly target” as the answer. A placement total shows that links were delivered, not editorial judgement or compliance with Google's rules. A supplier should be able to explain the arrangements behind the placements, not merely send a list of web addresses.

When you can skip a large backlink review

If you have never commissioned link building, have no link-related notice from Google and have not seen a meaningful change in useful search visits, a large review may not deserve your time. Check what you already know about your links and move on. The completion of a spam update is not an instruction to buy a clean-up service.

You can do a modest review yourself using Search Console and your purchasing records. Bring in help when you find arrangements you cannot explain or a notice you do not understand. Do not commission mass removal simply because an automated report has coloured some links red.

For a shop with poor product photographs, those images may deserve attention first. Checking whether Google Lens traffic is useful can help you decide: Google Lens lets people search with a picture. Spend your time on a documented weakness rather than whichever search update has the newest headline.

Keep link checks tied to useful search traffic

Organic traffic means visitors from ordinary, unpaid search results. For a plumber, what matters is whether those visits lead to relevant enquiries, not whether a report lists more backlinks. Review search clicks alongside calls, booking requests and the pages customers actually need.

PageNumberOne runs automated SEO, work to help search engines find and understand your website, every day. The Page One plan combines a weekly check for website faults and fixes with improvements to page titles and content, links between your own pages, local business information and backlink outreach. It also includes work on how your business appears in AI answers.

Search-position tracking and a plain-English monthly report help make changes visible over time. That ongoing work gives you something to review after an update; it does not prove which change caused a drop or make a paid placement safe.

The same Google rules apply to our outreach. Nobody can guarantee a place on Google, and a placement quota is not a substitute for checking how links were obtained. The point of continuing work is to keep the website maintained and its search performance under review, rather than respond to every announcement with another round of link buying.