Google Targets Back Button Hijacking Spam Policy

Google has introduced a new addition to its spam policies that specifically targets websites interfering with browser back button functionality. “Back button hijacking” is now officially classed as a violation under Google’s malicious practices guidelines, with enforcement set to begin on 15 June 2026. Sites have been given a two-month period to make any necessary changes before penalties start being applied.

What Back Button Hijacking Involves

Back button hijacking occurs when a website disrupts normal browser behaviour, preventing users from returning to the page they previously visited. Instead of going back as expected, users may be redirected elsewhere, shown unexpected ads or recommendations, or in some cases unable to navigate back at all.

Google explained that this goes against a basic user expectation, where clicking the back button should reliably return someone to their previous page without interference.

Why Google Has Introduced the Change

Google has said it has seen an increase in these types of practices across the web. The company also referenced earlier guidance against manipulating browser history, noting that such behaviour has long been considered against its Search Essentials policies.

According to Google, users often feel misled or manipulated when this occurs, which can reduce trust in websites and discourage them from visiting unfamiliar pages in the future.

Enforcement and Potential Penalties

Under the updated rules, websites found to be using back button hijacking techniques may face either manual spam actions or algorithmic demotions. Both can lead to reduced visibility in Google Search results.

A two-month grace period has been granted before enforcement begins on 15 June 2026. This follows a similar rollout approach used in previous policy updates, where time was given for sites to become compliant before penalties were introduced.

Third-Party Scripts and Responsibility

Google also acknowledged that not all cases of back button hijacking are intentional. In some situations, the behaviour may come from third-party tools, advertising networks, or embedded scripts rather than the website owner directly.

Even so, site owners remain responsible for ensuring that anything running on their pages does not interfere with user navigation or breach Google’s policies.

How This Fits Into Google’s Wider Spam Framework

This update has been added under Google’s “malicious practices” category, which covers behaviours that create a mismatch between what users expect and what they actually experience. This includes issues such as malware, deceptive behaviour, and unwanted software.

Rather than creating a new policy category, Google has expanded its existing framework to include this specific issue.

What Website Owners Need to Do

Google is advising site owners, particularly those using advertising scripts, widgets, or third-party engagement tools, to review their websites before the enforcement date. Any code that alters browser history or prevents standard back navigation could now lead to a policy violation.

Once enforcement begins after 15 June, non-compliant sites may be subject to manual or automated action. If a manual penalty is applied, site owners can submit a reconsideration request through Google Search Console after resolving the issue.

Final Notes

At this stage, Google has not confirmed whether enforcement will be handled through a dedicated spam update or through its existing systems such as SpamBrain and manual reviews. However, the addition makes it clear that interfering with browser navigation is now officially within scope of Google’s spam enforcement policies.