On April 13, 2026, Google added back button hijacking to its spam policies, making the deceptive practice an explicit violation under malicious practices. The policy became enforceable on June 15, giving website owners two months to find and fix any problems.
Unlike Google’s spam algorithm updates, this was a policy change that spelled out a specific practice that can put a website’s search visibility at risk.
What Is Back Button Hijacking?
Back button hijacking happens when a website interferes with browser navigation, so the Back button doesn’t behave the way someone expects.
Instead of returning to the previous page, someone might:
- Land on a page they never visited.
- See an unexpected advertisement or recommendation.
- Get stuck clicking Back through extra pages.
- Have trouble leaving the website altogether.
Manipulating browser history like this was already against Google’s Search Essentials. The April update made back button hijacking an explicit violation of Google’s spam policies.
Why Did Google Add It?
Google said it had seen an increase in back button hijacking and wanted to address the practice more directly.
The problem is pretty simple: clicking Back should take you back.
Manipulating someone’s browser history to keep them on a website, send them somewhere unexpected, or interfere with normal navigation creates a deceptive experience. It can also make people less willing to trust or visit unfamiliar websites in the future.
Making the practice an explicit spam violation gives Google another way to take action when it finds it.
It May Be Hiding in Your Website
Back button hijacking isn’t always something a website owner intentionally adds.
Google warns that some cases can come from third-party libraries or advertising platforms. Code, imports, scripts, plugins, and other configurations are all worth checking if something strange is happening with browser navigation.
So even if you didn’t intentionally add the behavior, it’s still worth knowing what’s happening behind the scenes on your website.
What Happens If Google Finds It?
Pages using back button hijacking may face automated ranking demotions or manual spam actions, potentially affecting their visibility in Google Search.
If your website receives a manual action and you fix the issue, you can submit a reconsideration request through Google Search Console.
Ideally, it never gets that far.
What Should Website Owners Do?
Start with a simple test: use your website like a visitor.
Move between pages and use your browser’s Back button. It should immediately take you where you expected to go.
If something interferes with that behavior, review your scripts, plugins, advertising technology, third-party libraries, imports, and other integrations. Anything manipulating browser history should be removed or disabled. If your website is still giving you sticky problems, it may be time to call in an expert.
Google’s spam systems are always changing, but the goal here is pretty straightforward: visitors should stay because they want to, not because your website makes leaving difficult.
