Back button hijacking: Google rule and compliance 2026

Google has just formalized a new anti-spam policy targeting a deceptive practice well known to webmasters: back button hijacking. Sites that still use it have until June 15, 2026 to comply, or they risk penalties in search results.

Key takeaways:

Back button hijacking is now an explicit violation of Google's malicious practices policy.
Offending sites risk manual anti-spam actions or automatic demotions in Google Search.
The effective date is set to June 15, 2026, giving site owners two months to act.
The practice can originate from third-party scripts, libraries, or advertising platforms included on the site.

What is back button hijacking?

The principle is simple: when a user clicks the browser "back" button, they expect to return to the previous page. It’s an interaction as basic and natural as web navigation.

The back-button hijacking, this is precisely what prevents that. Instead of sending the user back to where they were, some sites hijack this action to redirect to pages they never visited, show them unsolicited recommendations or ads, or simply block their normal navigation.

This manipulation is made possible by scripts that meddle with the browser’s navigation history, inserting or replacing entries there artificially.

Why is Google acting now?

Google did not arrive at this decision overnight. The search engine says it observed an increase in this type of hijacking, which led it to formalize its opposition.

Until now, the practice was implicitly considered against the Google Search Essentials. From now on, it becomes an explicit violation of the policy against malicious practices, which defines these as creating " a mismatch between user expectations and the actual result, leading to a negative and deceptive user experience, or compromising users' security or privacy ".

The logic is simple: when users feel manipulated, they become less inclined to visit sites they don't know. That's bad for the web ecosystem as a whole, and Google considers that this directly harms the search experience.

What penalties does Google impose?

Sites that continue to practice back button hijacking after June 15, 2026 face two types of measures:

Manual anti-spam actions, triggered by Google's teams after reviewing the site. They can significantly affect visibility in search results.
Automatic demotions, applied by Google's algorithms without human intervention, via an update, similar to the March 2026 Google Spam Update.

In both cases, the impact on organic traffic can be considerable. Google made a point of publishing this policy two months before the effective date to give site owners the time needed to fix the problem.

What site owners should do

The basic rule is as follows: not to interfere with a user's ability to navigate their browsing history.

More precisely, any script or technique that inserts or replaces pages in a user's browser history in a way that prevents them from immediately returning to the previous page must be removed or disabled.

Google points out an important issue that is often overlooked: the source of the problem is not always the code developed in-houseBack button hijacking can come from third-party libraries integrated into the site, or from advertising platforms used for monetization. Google therefore recommends a complete technical review of all code, imports and site configurations, including elements provided by partners or external vendors.

If your site has already been penalized

For sites that have already been subject to a manual action related to this practice, Google reminds the usual procedure: once the problem is fixed, It is possible to submit a reconsideration request via Search Console.Google also indicates that site owners can ask their questions on social networks or in the official help community.