By Taqweem Ahmad | Founder, Dexora Digital | March 2026 | Issue 5
March 2026 was the most active month for Google algorithm changes in recent memory. Two significant updates hit within five days of each other — a spam update and a core update — and together they represent the clearest signal yet of where Google is taking search quality in 2026.
If your rankings fluctuated in late March or April, this newsletter explains exactly why. If they did not, this newsletter tells you why — and what you can do to make sure they stay stable through whatever Google runs next.
Let me take each update separately because they targeted completely different things. Treating them as one event leads to the wrong diagnosis.
MARCH 2026 — THE TIMELINE
March 24-25 SPAM UPDATE — Rolled out in 19.5 hours. Fastest Google spam update ever recorded.
March 27 CORE UPDATE — Began rolling out. Completed April 8, 2026 (12 days).
5 days Between the start of the spam update and the start of the core update.
2 targets Spam update: AI content abuse and domain manipulation. Core update: content quality and CWV scoring.
Update 1 — The March 2026 Spam Update (March 24-25)
The March 2026 spam update was notable for two things: its speed and its specificity.
Google spam updates typically roll out over 1 to 3 weeks. The March update completed in approximately 19.5 hours. That speed is significant. It means Google was not running a gradual algorithmic evaluation. It was applying pre-identified targets with high confidence. When an update rolls out that fast, the patterns being penalized were clearly defined well before the update launched.
A spam update that takes under 20 hours to complete is not a broad sweep. It is a precision strike on specific, pre-identified behaviors. If you were not doing those things, you were not affected.
What the March Spam Update Targeted
Google confirmed three primary targets through documentation and Google Search Liaison communications:
Target 1 Scaled AI Content Abuse | The primary target
Mass-produced AI-generated pages published at scale with no original editorial input, no genuine expertise, and no value beyond keyword targeting. This is different from using AI tools to assist content creation — it specifically targets large volumes of pages where AI replaced human knowledge entirely. Sites publishing hundreds of pages per week with no subject matter expert review, no original data, and no firsthand experience signals were the primary targets.
Target 2 Expired Domain Abuse | Domain manipulation
The practice of purchasing expired domains with existing authority and backlink profiles, then populating them with unrelated content to benefit from the inherited rankings. Google has been targeting this for years but the March 2026 update significantly strengthened the enforcement. If the content on a domain has no relationship to the content that earned the domain its original authority, the inherited signals no longer transfer.
Target 3 Site Reputation Abuse (Parasite SEO) | Third-party content exploitation
The practice of hosting third-party content — typically from low-quality publishers — on high-authority domains to benefit from the host domain’s ranking power. This is often called ‘parasite SEO.’ The March update specifically targeted cases where a trusted domain publishes content that has no relationship to the site’s primary purpose and no editorial control from the site owner.
What the March Spam Update Did NOT Target
Because the update was fast and specific, the list of what it did not target is equally important for understanding the actual risk.
Check Using AI tools to assist content creation — the target was unreviewed bulk AI content, not AI-assisted writing
Check Sites with a small number of AI-assisted articles among a primarily human-written content library
Check Websites with clear topical focus and genuine expertise in their subject matter, regardless of how content was produced
Check Businesses that had not purchased expired domains or hosted unrelated third-party content
Good news: Dexora Digital client sites that publish expertise-based, reviewed content saw no negative impact from the March spam update. None of the behaviors targeted were present in well-maintained, legitimate business websites.
Update 2 — The March 2026 Core Update (March 27 – April 8)
The core update that followed five days after the spam update was a longer, more complex rollout affecting a broader range of sites. Core updates evaluate the overall quality signals of a site — not specific spam behaviors but holistic assessments of whether a site genuinely serves its users.
The March 2026 core update introduced one significant technical change and reinforced several ongoing quality signals.
The New Technical Change — Composite Core Web Vitals Scoring
This is the most important technical development in the March core update and the one that caught the most sites off guard.
Previously, Core Web Vitals were evaluated individually. Your Largest Contentful Paint (LCP), Interaction to Next Paint (INP), and Cumulative Layout Shift (CLS) each had their own threshold — Good, Needs Improvement, or Poor — and were treated as independent signals.
The March 2026 core update introduced composite CWV scoring. All three metrics are now evaluated as a group. A weakness in any single metric drags down the composite score, which in turn affects rankings.
A site with excellent LCP and CLS but poor INP now has a weak composite CWV score. Previously it would have been penalized only on INP. Now the weakness in one metric has a broader suppressive effect across all three.
What Composite CWV Scoring Means in Practice
| LCP | INP | CLS | |
| Before March 2026 | Evaluated independently | Evaluated independently | Evaluated independently |
| After March 2026 | Part of composite score | Part of composite score | Part of composite score |
| Impact of one weak metric | Affects only that metric’s signal | Affects only that metric’s signal | Affects composite score — all three suppressed |
| Priority implication | Fix independently | Fix independently | Fix your weakest metric first — it drags everything |
Key insight: Run Google PageSpeed Insights on your homepage and your top three service pages today — mobile score only. If any of the three CWV metrics shows Poor or Needs Improvement, that is your composite score anchor. Fix the weakest metric first. Everything else is secondary until that anchor is resolved.
The Three CWV Metrics — What They Are and What Causes Problems
| Metric | What It Measures | Good Threshold | Most Common Cause of Poor Score | Fastest Fix |
| LCP | How fast main content loads on screen | Under 2.5 seconds | Uncompressed images, slow server, render-blocking resources | Convert images to WebP, compress under 100KB each |
| INP | How fast page responds to user interaction | Under 200ms | Heavy JavaScript, third-party scripts, large DOM size | Defer non-critical JS, remove unused plugins |
| CLS | How much page elements shift while loading | Under 0.1 | Images without dimensions, late-loading fonts, dynamic content injection | Add explicit width/height to all images and embeds |
Technical SEO Service — Core Web Vitals audit and fixes.
The Ongoing Quality Signals the Core Update Reinforced
Beyond the composite CWV change, the March core update continued Google’s multi-year push toward the same quality signals it has been reinforcing since the September 2023 helpful content system was folded into the core algorithm.
YMYL thresholds raised further:
YMYL — Your Money or Your Life — covers content that could significantly impact a reader’s health, financial decisions, or safety. Healthcare, finance, legal, and insurance content now faces a higher quality bar than general web content. Thin pages in these categories that previously floated on domain authority are increasingly being re-evaluated against stricter quality criteria.
E-E-A-T signals weighted more heavily:
Experience, Expertise, Authoritativeness, and Trustworthiness. The March update reinforced the correlation between sites with clear author credentials, verifiable expert identity, and factual accuracy versus sites with no identifiable human expertise. Author schema on articles, professional biography pages, and LinkedIn-verified author identities are increasingly measurable signals.
Holistic site quality evaluation:
The March update showed stronger evidence of Google evaluating page quality in the context of the whole site rather than evaluating each page independently. A site with 80 high-quality pages and 20 thin pages now carries the risk of the 20 thin pages suppressing rankings on the 80 good ones. Indexation hygiene — making sure thin, duplicate, or outdated pages are either improved or removed from Google’s index — is more important post-March than it was before.
How to Tell If the March Updates Affected Your Site
The most reliable way to diagnose whether your site was affected by a specific update is to compare GSC data from before and after the update dates.
Spam Update Diagnosis (March 24-25)
Pull your Google Search Console Performance report. Filter by date comparing March 1-23 vs March 26 onwards. If you see a sharp, sudden drop on or immediately after March 24-25 on specific pages — and those pages were publishing scaled AI content, were on a purchased expired domain, or were hosting third-party content — the spam update is the likely cause.
Characteristics of a spam update hit:
-> Drops appear suddenly rather than gradually — spam updates apply changes quickly
-> Drops are concentrated on specific page types rather than spread across the site
-> Pages that dropped are the ones publishing highest volumes of AI-generated content
-> Recovery from spam update penalization typically requires genuine content improvement — not just technical fixes
Core Update Diagnosis (March 27 – April 8)
Core update impacts are typically more gradual and broader. Pull GSC data comparing March 1-26 vs April 9 onwards (after the update completed rolling out). Core update characteristics:
-> Changes appear gradually during the rollout window, not on a single day
-> Drops or gains spread across multiple page types rather than one specific category
-> If you see a CWV metric at Poor on PageSpeed Insights, the composite scoring change is likely contributing
-> Pages with missing or thin content are more likely to have dropped than pages with comprehensive, expert content
Warning: Ranking fluctuations during a core update rollout window are normal and do not always represent a permanent change. Wait until at least 14 days after the update completes (April 22 in this case) before drawing conclusions. Rankings often fluctuate significantly during the rollout and then stabilize at a new position.
Recovery — What to Do If You Were Affected
The recovery path differs depending on which update affected you.
If the Spam Update Hit You
Spam update recovery requires addressing the actual behavior that was penalized — there is no technical shortcut that bypasses the quality evaluation.
1. Audit your content library. Identify pages that were published primarily by AI without substantive human editorial input, genuine expertise, or original information. These are the pages at risk.
2. For each flagged page, decide: improve it properly or remove it. Improving means adding genuine expertise, original perspective, specific data, or firsthand experience that AI alone could not provide. Removing means either deleting or noindexing the page.
3. If the site is on an expired domain purchased for its authority, evaluate whether the content has any genuine relationship to the content that built that authority. If not, the inherited signals are at permanent risk.
4. Submit a reconsideration request through GSC if you received a manual action. If the impact was algorithmic (no manual action notice), submit the improved pages through URL Inspection after making substantive changes.
5. Do not expect fast recovery. Spam update recovery typically takes one to three months of sustained quality improvement before rankings stabilize.
If the Core Update Affected You
Core update recovery is typically slower and requires addressing holistic quality signals rather than specific technical fixes.
1. Fix composite CWV issues first. Run PageSpeed Insights on mobile for your top five pages. Identify your weakest metric. Fix it. This is the only immediately technical component of core update recovery.
2. Audit your 20 lowest-quality pages. Look for thin content, outdated information, missing author credentials, or pages with no clear purpose. Either improve or remove from index.
3. Improve author signals on key pages. Add Author schema, a professional biography page, LinkedIn credentials, and verifiable expertise signals to your top content.
4. Check internal linking. Core updates sometimes expose pages that were ranking on internal link authority rather than standalone content quality. If those pages dropped, they need content improvement, not just more internal links.
5. Wait for the next core update. Core update recovery is often validated at the next core update — Google re-evaluates improved sites as part of the next rollout. Recovery that happens between core updates is possible but less common.
Free SEO Audit — technical health check including CWV.
If Your Rankings Did Not Change — Here Is What That Tells You
I want to address the businesses that saw no significant impact from either March update — because that is also useful information.
Sites that held or improved rankings through the March spam update and core update share the same characteristics. They were publishing content that demonstrates genuine expertise and serves a real user need. They were not publishing at scale with AI without editorial oversight. Their technical foundation — including CWV metrics — was solid. Their content had identifiable human authors with verifiable credentials.
This is not luck. These are all choices that were made in advance. And the reason I am making this point in the newsletter is that the next core update will apply the same criteria. The businesses that are stable in April 2026 should be asking: is everything we are currently publishing meeting the same standard as the content that survived March?
A site that survived the March 2026 updates because it was built correctly needs to keep being built correctly. The next update will apply the same criteria to whatever you publish between now and then.
Your March 2026 Action List
Action 1: Run PageSpeed Insights on mobile — top 5 pages — Find your weakest CWV metric. That is your highest-priority technical fix this month.
Action 2: Pull GSC before/after data for March 24 and March 27 — Two separate comparisons. One for spam, one for core. Identify whether you were affected and by which update.
Action 3: Audit your 10 lowest-quality pages — Identify thin content, AI-generated pages without editorial review, or outdated information. Decide: improve or remove.
Action 4: Check Author schema on your top content pages — View page source, search application/ld+json. If Author schema is missing from blog articles and case studies, add it.
Action 5: Verify your content publishing process — Every piece of content published after March 2026 should have a human expert reviewing, improving, and adding original knowledge before it goes live. If that is not currently the process, change it now.
Action 6: Check YMYL pages specifically — If you publish healthcare, legal, financial, or safety content, those pages face the highest quality bar. Verify they have verifiable expert authorship and current, accurate information.
Action 7: Remove or noindex thin pages from the index — A site with 50 excellent pages and 20 thin pages is better served by having Google index 50 excellent pages. Use the noindex tag on pages that cannot be substantively improved.
Action 8: Submit improved pages to GSC URL Inspection — After making substantive improvements, request indexing for updated pages. Do not wait for the next crawl.
Key insight: April newsletter covers what the May 2026 core update targeted — and Google I/O 2026, which announced AI Mode as the new default search experience. May was the month everything changed in how Google presents search results. Next issue covers exactly what that means for your business.
Frequently Asked Questions — The March 2026 Google Updates
Q: What did the March 2026 Google spam update target?
A: The March 24-25, 2026 spam update targeted three specific behaviors: scaled AI content abuse (mass-produced AI pages without editorial oversight or genuine expertise), expired domain abuse (purchasing expired domains for their authority then publishing unrelated content), and site reputation abuse or parasite SEO (hosting unrelated third-party content on high-authority domains). The update rolled out in approximately 19.5 hours — the fastest Google spam update ever recorded — indicating Google had high confidence in the patterns being targeted.
Q: Did the March spam update target all AI-generated content?
A: No. The March spam update targeted scaled AI content abuse — specifically, large volumes of pages produced entirely by AI without human editorial input, original expertise, or genuine value beyond keyword targeting. Using AI tools to assist content creation, or publishing occasional AI-assisted articles as part of a primarily expert-written content library, was not targeted. Google has consistently said it evaluates the quality and helpfulness of content, not the method of production. The target was the outcome — thin, unreviewed, bulk-published content — not the tool used to create it.
Q: What is composite Core Web Vitals scoring introduced in the March 2026 core update?
A: Previously, Google evaluated LCP, INP, and CLS as independent metrics. The March 2026 core update introduced composite CWV scoring, where all three metrics are evaluated as a group. A poor score on any single metric now suppresses the composite score, which in turn has a broader effect on rankings. A site with excellent LCP and CLS but poor INP now has a weak composite score across all three metrics, rather than only being penalized on INP. The practical implication: identify and fix your weakest metric first, as it is dragging down everything else.
Q: My rankings dropped in late March or April. How do I know which update caused it?
A: Look at the timing and pattern of the drop. If rankings dropped sharply on or immediately after March 24-25 on specific page types (particularly high-volume AI content pages), the spam update is the likely cause. If rankings dropped gradually between March 27 and April 8 across multiple page types, the core update is more likely. The two updates targeted different things — spam penalizes specific behaviors, core evaluates holistic quality. Pull your Google Search Console Performance data and compare week-by-week traffic on the specific pages that dropped to identify which date the change began.
Q: How long does it take to recover from a Google core update?
A: Core update recovery is typically validated at the next core update — Google re-evaluates improved sites as part of each subsequent rollout. This means recovery can take 2 to 4 months minimum, depending on when the next core update runs. Recovery that happens between core updates is possible but less common. The most effective approach is to make substantive content improvements to affected pages, address any technical issues identified in PageSpeed Insights, and then wait for the next update rather than repeatedly changing things in the hope of faster recovery.
Q: What is YMYL and why did the March core update affect YMYL content?
A: YMYL stands for Your Money or Your Life. It covers content that could significantly impact a reader’s health, financial situation, safety, or major life decisions — healthcare, medical advice, legal information, financial guidance, and insurance. Google applies a higher quality threshold to YMYL content than to general web content because the potential harm from inaccurate or low-quality YMYL information is higher. The March 2026 core update raised the YMYL threshold further, meaning pages in these categories without verifiable expert authorship, current accurate information, and clear credentials are at increased risk in every subsequent core update.
Q: What does E-E-A-T mean and how does it affect my website?
A: E-E-A-T stands for Experience, Expertise, Authoritativeness, and Trustworthiness. Experience was added in 2022 and specifically refers to firsthand, real-world experience with the topic — the distinction between someone who has done something and someone who has only read about it. Google uses E-E-A-T signals to evaluate whether content comes from a genuine, credible source in the relevant subject area. Practical implementation: Author schema on every article, professional biography pages for key contributors, LinkedIn-verifiable credentials on author profiles, and content that demonstrates specific, firsthand knowledge rather than generic information available anywhere online.
Q: Should I use noindex on low-quality pages after the March update?
A: Yes, in most cases. A site with 50 high-quality, well-indexed pages and 20 thin or outdated pages is better served by having Google evaluate only the 50 quality pages. Thin pages that cannot be substantively improved — old posts with minimal content, duplicate service area pages, placeholder pages — should either be improved to meet current quality standards or removed from Google’s index with a noindex meta tag. This is called indexation hygiene and it reduces the risk that low-quality pages suppress rankings on your better content. Do not add noindex to pages with actual content value, only to genuinely thin or outdated pages.
Q: What is site reputation abuse and how does Google identify it?
A: Site reputation abuse, also called parasite SEO, is the practice of publishing third-party content on a high-authority domain specifically to benefit from that domain’s ranking power, without genuine editorial oversight from the site owner. Examples include coupon or review sites published by external parties on news domain subdomains, or unrelated content marketing published on established sites without any relationship to the site’s actual subject matter. Google identifies it by evaluating whether the hosted content has a genuine relationship to the site’s primary purpose, whether the site owner has editorial control over the content, and whether the content meets the quality standards the site would apply to its own content.
Q: How do I check if my Core Web Vitals are affecting my rankings?
A: Navigate to Google PageSpeed Insights and enter your homepage URL. Run the mobile test specifically — Google uses mobile-first indexing. Look at the three CWV metrics: LCP (Largest Contentful Paint), INP (Interaction to Next Paint), and CLS (Cumulative Layout Shift). After the March 2026 core update introduced composite scoring, any metric showing Poor or Needs Improvement is now suppressing your overall CWV composite score. Prioritize fixing your weakest metric first. Also check Field Data in PageSpeed Insights, which shows real-user performance data rather than lab data — Field Data is what Google actually uses for rankings.
ABOUT THE AUTHOR
Taqweem Ahmad
Founder, Dexora Digital | Technical SEO & Algorithm Specialist | 7+ Years | 500+ Audits
Taqweem Ahmad founded Dexora Digital, a full-stack SEO and AI Search agency in Oulu, Finland. He has tracked and analyzed every major Google algorithm update since 2019, helping 500+ US, UK, Australian, and Canadian businesses maintain and improve rankings through core updates.
