SAN FRANCISCO, April 14, 2026, 10:09 PDT
Google will begin penalizing websites that hijack users’ browser back buttons on June 15, turning a long-running web nuisance into an explicit spam violation that can push pages lower in Search. The company said sites using the tactic could face manual spam actions or automated demotions.
The shift matters because Google is taking a practice it had warned about for years and putting a firm enforcement date on it. That raises the stakes for site owners running third-party libraries or ad-tech code that keeps users from leaving a page, and Google said owners remain responsible even when the behavior comes from bundled tools or advertising platforms.
Back-button hijacking, in plain terms, is when a site manipulates browser history so pressing back does not return a user to the previous page. Instead, users can be sent to pages they never visited, shown unsolicited recommendations or ads, or blocked from leaving normally; Google has now placed that conduct under its malicious practices policy, a spam rule covering deceptive or harmful experiences.
In the April 13 post, Chris Nelson of Google’s Search Quality team wrote that people can end up feeling “manipulated” and less willing to try unfamiliar sites, while Google said it had seen more of the behavior across the web. Nelson told operators to remove or disable any script that inserts deceptive pages into browser history and to audit code, imports and configurations tied to outside tools. Google for Developers
Google said violations can trigger manual spam actions — penalties applied by human reviewers — or automated demotions. Search Console documentation says manual actions can make pages or entire sites rank lower or disappear from search, though owners can ask Google to review the site after fixes are made.
The company has warned about the tactic for years. In a 2013 Search Central post, Google said sites that inserted new pages into users’ browsing histories could face removal for deceptive behavior; the April 2026 change does not invent the underlying rule so much as spell it out more plainly.
The move is separate from Google’s March 2026 spam update, which the Search Status Dashboard says finished rolling out on March 25, less than three weeks before Monday’s policy change.
Glenn Gabe, an SEO consultant at G-Squared Interactive who wrote about the tactic last year, called the change “great news for users” in a LinkedIn post and said some sites had used a “Google-like feed of articles” to trick people into staying. LinkedIn
But enforcement may not be neat. Google acknowledged some back-button hijacking can originate in bundled libraries or ad platforms, meaning sites that did not knowingly deploy the behavior could still be caught unless they find and remove the offending code before June 15.
