Did Google's May 15 Spam Update Just Ban AEO Agency Tactics?

What Google's May 15 Spam Policy Actually Changed

On May 15, 2026, Google added eight words to its Search Spam Policy that may already be the most consequential change to enterprise AEO agency work in 2026. The policy now reads that spam includes "attempting to manipulate generative AI responses in Google Search," which extends the spam framework directly into AI Overview and AI Mode.

Three categories of common AEO agency tactics now sit on the banned side of the line. Buyers paying $20,000 to $60,000 a month for AEO retainers should audit their last 90 days of deliverables against the new policy this week, because the same Google enforcement system that demoted scaled-content sites in the March 2026 spam update now has explicit authority over AI-citation manipulation.

The change landed alongside a companion release. The same day, Google published "Optimizing your website for generative AI features on Google Search," the platform's first official optimization resource for AI Overviews and AI Mode. The two releases form a paired carrot and stick. The optimization guide tells buyers what Google considers legitimate. The spam policy update tells buyers what Google now treats as enforceable spam. The combination redefines the entire risk profile of an AEO retainer purchased before May 15.

The May 15 sequence is the second half of a two-step move. Nine days earlier on May 6, Google had published five new ways to explore the web with generative AI in Search, adding inline citation links, desktop hover previews, news-subscription highlighting, follow-up exploration suggestions, and community-perspective quotes inside AI Overview and AI Mode.

eMarketer's coverage of the May 6 package framed it as a coordinated answer to publisher click-loss inside AI surfaces. The May 15 spam policy update closes the loop by giving Google the enforcement authority to police the surfaces the May 6 update opened up. The two releases read together as a single product roadmap for the next twelve months of AEO economics.

The article that follows maps every commonly billed AEO agency tactic into one of three columns. The SAFE column lists tactics Google's own guide endorses. The GRAY-AREA column lists tactics that survive the literal policy language today but sit close enough to the new boundary that the next manual-action sweep could capture them. The BANNED column lists tactics that Google's May 15 language now treats as spam. The table is built from the policy text itself, the new optimization guide, and the enforcement pattern Google demonstrated in the March 2026 scaled-content sweep.

The Three Categories of AEO Agency Tactics After May 15

Every enterprise AEO retainer billed in 2026 produces deliverables that fall into one of three categories under the new policy. The categorization is not a judgment of agency intent. It is a categorization of tactical risk. A reputable agency may produce SAFE deliverables exclusively. A less reputable agency may rely heavily on GRAY-AREA tactics that worked under the looser pre-May-15 interpretation. A small number of vendors built their business model on BANNED tactics and now face an existential repricing event.

The single most important question a buyer can ask after May 15 is which percentage of last quarter's deliverables came from each column. Agencies that cannot produce that breakdown within one business day do not have the internal categorization to defend the work. Agencies that produce a breakdown showing more than 10 percent in the BANNED column have an obligation to refund or remediate. Agencies that produce a breakdown showing more than 30 percent in the GRAY-AREA column have an obligation to migrate that work into the SAFE column before the next quarterly review.

The next three sections examine each column in detail, with the specific tactics that land there, the policy citation that puts them in the column, and the migration path if a buyer discovers a tactic in the wrong place.

The Banned Column, Tactics That Trigger Manual Action Now

Recommendation poisoning is the centerpiece of the BANNED column. Google named the tactic explicitly in announcement coverage of the policy update. The mechanic is the manipulation of "best of" listicles, "top vendor" round-ups, and comparison articles to engineer AI citation outcomes. The tactic worked through 2025 because AI engines weighted listicle authority heavily when constructing answer responses. Under the May 15 language, any listicle that demonstrably skews rankings to favor a paying client is treated as manipulation intent and may trigger a manual action against the publishing domain, the cited domain, or both.

Scaled AI-content production is the second BANNED tactic and was already enforceable under the March 2026 scaled-content-abuse update. The new policy language extends the prohibition into AI-citation-specific scenarios. The pattern that triggers enforcement is documented: sites publishing 50 to 500 AI-generated articles per day across keyword clusters, with no editorial oversight, thin factual depth, and no first-hand expertise saw NewsGuard's AI Content Farm tracker grow to more than three thousand sites across sixteen languages by May 2026.

Cloaking, expired trusted-domain abuse, and hidden text or links round out the BANNED column. None of these are new prohibitions in isolation. What is new is that the policy now reaches them when the manipulation intent is directed at AI-citation outcomes rather than ten-blue-link rankings. The technical mechanism is identical. The enforcement surface is broader. A vendor that bought an expired domain to repurpose for AI-citation laundering is now operating against the explicit text of the policy, not against an implied reading.

The trajectory of scaled-content-abuse enforcement is what should concern buyers most. NewsGuard's tracker has more than doubled in twelve months, accelerating at 300 to 500 new sites per month. The May 15 policy language gives Google the framework to extend its detection model from publisher-side scaled content to AEO-vendor-side citation manipulation, and the enforcement velocity over the past four months suggests the next sweep will be measured in days, not quarters.

The Gray-Area Column, Tactics That Will Face Scrutiny

Programmatic FAQ pages built from search-suggest queries are the most common GRAY-AREA tactic shipped by mid-tier AEO agencies. The pattern works mechanically: pull every "people also ask" question from Google for a target keyword, generate an FAQ page that answers all of them, and ship the page on a templated URL pattern. The tactic survives the literal May 15 language when each FAQ answer is editorially reviewed for accuracy and value. The same tactic fails the policy when the FAQs ship unedited at scale, because the policy now reaches "generative AI to mass-produce low-value pages."

Mass-produced glossary pages have the same risk profile. A curated glossary maintained by subject-matter experts is a SAFE deliverable. A glossary generated overnight by an LLM from a topic dictionary is a BANNED deliverable. The distinction is editorial investment and demonstrable expertise, not page count. Buyers should ask their agency how many hours of human editing went into each glossary page that shipped in the last quarter. If the answer rounds to zero, the work belongs in the BANNED column regardless of how the agency categorizes it internally.

Schema-stuffed comparison pages are the third common GRAY-AREA tactic. Comparison content that genuinely informs buying decisions is the kind of content Google's new optimization guide explicitly encourages. Comparison content built by scraping competitor specifications, dressing the result with structured data markup, and shipping at scale is the kind of content the new policy treats as manipulation. The schema itself is neutral. The intent and the originality of the underlying analysis are what determine which column the page lands in.

The migration path from GRAY-AREA to SAFE is the same in every case: add human editorial oversight, ship fewer pages with deeper analysis, and stop the templated mass-production that signals manipulation intent to Google's automated detection systems. Agencies that resist this migration because it threatens their per-page billing model are signaling that their economic incentive is now misaligned with their client's policy exposure.

The Safe Column, What Google's Own Optimization Guide Endorses

Google's new optimization guide makes the SAFE column unusually easy to read. The guide states that creating content people find unique, compelling, and useful will likely influence website presence in generative AI search more than any other suggestion in the document. The phrasing is significant. Google did not publish a list of AI-search ranking factors. It published a reminder that the existing SEO fundamentals are the foundation of AI-search eligibility, with a few specific elaborations for multimodal content, crawlability, and shopping data.

The guide is also explicit that no new machine-readable files, AI-text files, or special schema.org structured data are required for AI Overview or AI Mode appearance. Any agency selling a "proprietary llms.txt strategy" or a "custom AEO schema bundle" as a billable deliverable in 2026 is selling work Google has just stated is not required. The work is not banned. It is simply not what determines AI-citation outcomes inside Google's surfaces.

The five principles the guide endorses form the spine of any defensible AEO retainer. Unique, expert-grounded content from people who actually know the subject. Crawlable site architecture that does not block AI crawlers. Multimodal content where high-quality images and videos genuinely support the text.

Local and shopping data formatted for Google's existing product surfaces. SEO fundamentals applied consistently. Every line item in that list is the kind of work a competent in-house team or competent agency would do anyway. The difference after May 15 is that doing this work now defends the buyer from policy exposure that competitor brands paying for shortcut tactics will discover the hard way.

The strategic implication is that the AEO market is now bifurcating into two service shapes. The first shape is genuine editorial and technical infrastructure that satisfies the new optimization guide. The second shape is the residual shortcut market that survived through 2025 by promising fast citation lifts from tactics that now sit in the BANNED column. Buyers signing retainers after May 15 should know which shape they are buying.

Why the May 15 Update Hits AEO Agencies Hardest

The economic concentration of AEO services is what makes the May 15 policy so disruptive. Conductor's 2026 AEO/GEO Benchmarks Report analyzed 13,770 enterprise domains across ten industries and aggregated 3.3 billion sessions to separate traditional organic search from AI-driven visibility sources. The report measured that Google AI Overviews now appear on average in 25 percent of searches, reshaping how users encounter brands before they reach a website. In Health Care, where accuracy drives trust, nearly half of all Google searches at 48.7 percent surface AI-generated summaries. Financials follows at 25.8 percent.

AI-search prevalence varies dramatically by industry, which means the policy exposure varies too. Industries where AI Overviews appear in nearly half of searches face the largest reputational and traffic risk from a manual action, because the visibility loss compounds across the dominant search surface.

Prevalence on its own does not tell the full story. The size of the AI-referral pie and which engine sends most of it determine where the AEO investment dollar produces measurable lift. Both numbers come from the same Conductor benchmark and together establish the realistic ceiling on any retainer that promises AI-traffic-driven growth in 2026.

The concentration matters for tactical reasons. ChatGPT dominates AI referral traffic today, but Google AI Overviews now appear in a quarter of all searches across the open web. An AEO agency that built its citation strategy around ChatGPT-friendly tactics may have left Google's surfaces under-served, and a Google policy update that expands manual-action authority can therefore feel less immediately threatening to that agency's portfolio. The reverse is also true. Agencies that optimized heavily for Google AI Overview citations through aggressive tactics now face the largest restructuring of any subsegment of the market.

The Conductor benchmark is also a corrective to overstated AI referral claims. AI referral traffic is real, growing, and strategically important. It is not yet a majority share of total website traffic for most enterprises. An AEO retainer that promises 30 percent traffic lift from AI referrals in year one is almost certainly overselling the available pie. A retainer that promises citation share inside the available AI surfaces is selling the right outcome for the current market, and is now also selling something that needs to survive the May 15 policy reading.

Google's April 14 Spam-Reports Change Multiplies the Risk

The May 15 policy update did not arrive in isolation. It is the third in a tight sequence of Google enforcement actions over the past four months. The March 2026 scaled-content-abuse update produced traffic drops of 50 to 80 percent on sites publishing AI content at scale without editorial oversight. The April 14, 2026 change to how Google uses Spam Reports gave the platform a new input channel: user-submitted spam reports now feed manual actions directly.

The May 15 policy update expanded the scope of what manual actions can target. The three changes form a coordinated enforcement framework. Four days before the May 15 policy update, Google publicly disclosed that it had thwarted a hacker group attempting to use AI for a "mass exploitation event", signaling that the company's AI-abuse defense posture had moved to the front of its priority list across both security and search surfaces.

The pattern that should concern enterprise buyers is the velocity of enforcement once the framework is in place. Google's spam updates in 2026 have run as fast as 24 hours from initial signal to global rollout. A May 15 policy adjustment that names a new spam category gives Google the authority to enforce against that category at the same enforcement cadence the platform has demonstrated through Q1 and Q2 2026.

The competitive dynamic is the second risk multiplier. Spam Reports now feed manual actions, which means a competitor in a brand's category can submit a report against a domain pursuing aggressive AEO tactics. The report does not guarantee enforcement, but it does add a signal that Google's automated detection systems weight in their evaluation. Categories with high competitive density are now also categories where reciprocal spam reports become a defensive lever. The legal and compliance exposure of an AEO retainer with GRAY-AREA or BANNED tactics has just compounded.

The 12-Month Forecast on Agency Repricing After May 15

The first observable consequence of the May 15 update will be retainer-level pricing pressure. Agencies whose service mix leans on BANNED tactics will face client-driven renegotiation as buyers audit prior-quarter deliverables. The second consequence will be the appearance of indemnification clauses inside enterprise AEO retainers. The clauses will require the agency to remediate at no charge any deliverable Google later flags under the new policy, and to refund a defined share of fees if a manual action ties to agency-shipped content.

The third consequence will be the rise of audit-first engagements. Buyers signing new retainers after May 15 will increasingly require a first-month audit of all prior agency-shipped content before any new production starts. The audit deliverable will categorize every URL into the three columns and produce a remediation plan for anything in BANNED or GRAY-AREA. Agencies that resist the audit will lose RFPs to agencies that offer it as a standard first-month deliverable.

The click-economics behind these structural shifts have not improved. Pew Research Center's measurement of click-through behavior remains the cleanest available view: only 8 percent of users click traditional results when an AI Overview is present, compared to 15 percent without one. The 1 percent click-through on links within the AI summary itself is the harshest number in the dataset. The May 15 update strengthens citation eligibility for sites that satisfy the new optimization guide. It does not restore the click economics that existed before AI Overviews launched.

Consumer trust in AI summaries is also compounding. Pew Research Center's March 2026 study found that 55 percent of Americans now regularly use AI, with 72 percent of adults who encountered AI summaries in search results finding them useful and 54 percent saying they trust the information at least somewhat. Buyer behavior is moving toward the AI surface, which makes the May 15 spam policy update a forward-looking enforcement layer aimed at protecting that surface from manipulation before it scales further.

What Buyers Should Ask Their AEO Agency This Week

Seven specific diligence questions separate agencies that can defend their work under the May 15 policy from agencies that cannot. The questions are designed for written response within five business days. Agencies that refuse to answer in writing, or that answer with marketing language rather than tactical specifics, are signaling that they do not have the internal categorization to defend the work. Agencies that respond with detailed tactical breakdowns are signaling either confidence or transparency, which is the leading indicator of a relationship worth continuing.

The seven questions below cover the SAFE, GRAY-AREA, and BANNED categorization, the audit history, the indemnification posture, and the alignment with Google's new optimization guide. Together they form a compliance check that survives both internal legal review and CFO scrutiny during the next quarterly business review.

The May 15 update is not an endpoint. It is the first inflection in a policy curve that will bend toward tighter enforcement on every AI-citation surface Google operates over the next twelve months. Brands that read this update as a one-time compliance event will audit the next update in three months, then the one after that in six.

The buyers who win this trajectory are the ones who stop treating policy compatibility as a campaign, then start treating it as a permanent operating capability built into the AEO program from day one. The May 15 line will keep moving. The retainers built to track it compound. The retainers built around the prior interpretation spend their next year in remediation.

FAQ — Google's May 15 AEO Tactics Ban

Next Steps — Google's May 15 AEO Tactics Ban

The sequencing below assumes the buyer holds an active AEO retainer and wants to act on the May 15 update inside the current quarter. Each pointer leans on the one above it.

• ▶ Audit your last 90 days of agency-delivered URLs against the SAFE, GRAY-AREA, and BANNED taxonomy by Friday this week
• ▶ Send the seven-question diligence list to your AEO agency and require written response within five business days, no marketing language accepted
• ▶ Read Google's new "Optimizing your website for generative AI features" guide end-to-end before the next quarterly business review
• ▶ Schedule an indemnification-clause negotiation with your agency before the next invoice posts, with refund triggers tied to any manual action
• ▶ Recheck your AEO retainer against the ROI framework with the new policy exposure factored into the scenario math
• ▶ Map your current agency's deliverable mix against the five-principle SAFE column and identify which line items shift after May 15

The May 15 update is a clarifying event, not a catastrophic one, for buyers who structured their AEO investment around the SAFE column from day one. For buyers whose retainer leans on tactics now in the BANNED column, the next sixty days are a remediation window before the enforcement velocity of Q1 and Q2 2026 catches up with their domain.

Either reading points to the same response: audit this week, act on the audit findings within the quarter, and rebuild the program around tactics that survive both Google's stated policy and the next inevitable extension of it. The Answer Engine Optimization Diagnostic is the fastest route to a written audit and a policy-compliant remediation plan for buyers who need both inside the current quarter.