Have you ever clicked a link, didn't like the page, hit the back button, and ended up somewhere completely random instead of where you came from? Maybe an ad popped up. Maybe the page just reloaded itself. Maybe you got stuck in some kind of loop with no way out.

That's called back button hijacking. And as of April 13, 2026, Google has officially had enough of it.

What Google Just Announced

Google added back button hijacking to its official spam policies. It now falls under what Google calls "malicious practices," the same category as malware and harmful software. That's not a small deal.

Enforcement starts on June 15, 2026, giving website owners about two months to sort things out before penalties kick in.

So What Exactly Is Back Button Hijacking?

It's when a website stops you from using the back button the way you normally would.

You hit back, expecting to return to Google or the previous page you were on. But instead, the site sends you somewhere else, shows you an ad, or just keeps you stuck. The site is basically taking control of your browser navigation without your permission.

Google said people are reporting feeling "manipulated" when this happens, and it makes them less willing to trust new websites. That's why Google decided to act on this now, because it's genuinely bad for users.

What Happens to Sites That Keep Doing This?

If your website is caught doing this after June 15, Google can:

Issue a manual spam action against your site
Automatically lower your rankings in search results

Both of these can seriously hurt your organic traffic. And recovering from a manual action takes time, you'd have to fix the issue and then submit a reconsideration request through Google Search Console, which isn't instant.

What If You Didn't Even Know It Was Happening?

This is the part most website owners miss.

Google specifically pointed out that back button hijacking doesn't always come from code you wrote yourself. It can come from third-party tools, ad networks, or plugins running on your site. Things like:

Pop-up or exit-intent tools that intercept the back button to show a "Wait, here's a deal!" screen
Ad network scripts that redirect users instead of letting them leave
Affiliate or tracking scripts that insert extra steps into browser history
Some engagement or recommendation widgets

Even if you had no idea a tool was doing this, your site is still responsible. Google made that pretty clear.

What Should You Do Right Now?

You don't need to panic, but you do need to check a few things before June 15.

Test your own site. Go to your website from a Google search result. Browse around a bit. Then hit the back button. Does it take you straight back to Google? Or does something strange happen? Try this on your phone too, not just desktop.

Look at what's installed on your site. If you use WordPress, check your active plugins, especially anything related to pop-ups, ads, or redirects. If you use an ad network, look through their settings for anything that controls "exit traffic" or "engagement."

Remove anything suspicious. If something is messing with back button behavior, disable it. Find a cleaner alternative or just remove it entirely.

Check Google Search Console regularly. This is where Google will notify you if they take action against your site. If you don't have it set up already, now's a good time to do that.

The Bottom Line

Google is cleaning up the web, one deceptive practice at a time. Back button hijacking has been frustrating users for years, and now there are real consequences for sites that keep doing it.

If your site is clean, great; nothing to worry about. But if you're running ad scripts, pop-up tools, or affiliate plugins you've never really looked into, take 20 minutes this week and do a quick check.

The deadline is June 15, 2026. That's your window to fix things before it affects your rankings.