Google's Gary Illyes compared purchased AI brand mentions to paid links at Search Central Live Shanghai on May 15. Ten days later, the May 2026 core update peaked with AI-thin content absorbing the steepest losses. Both events point the same direction: gaming AI visibility through bought mentions now carries real enforcement risk.

TL;DR

Google explicitly flagged AI brand mention manipulation as equivalent to paid links at Search Central Live Shanghai (May 15). The May 2026 core update peaked Saturday May 30 with AI-generated thin content as the hardest-hit category. Bill Hartzer predicts a dedicated manual action for AI mention manipulation by Q3 2026. For brands investing in GEO, this shifts the playbook decisively toward earned citations and away from mention-buying services.

What Happened

Two events converged over seven days.

First, at Search Central Live Shanghai on May 15, Gary Illyes and Cherry Sireetorn Prommawin warned against purchasing or manipulating brand mentions intended to influence AI Overviews, AI Mode, and other generative search features. Illyes compared the practice directly to paid links: Google's systems detect and discount them. The trigger was a well-known AI software platform promoting tools that automate the buying of brand mentions for placement in ChatGPT, Claude, and Google AI responses.

Barry Schwartz amplified the warning in his May 29 video recap. Optimixed and Digital Phablet published detailed recaps the same week.

Second, the May 2026 core update, confirmed on May 21, hit peak volatility on Saturday May 30. The Semrush Sensor reached 9.5 out of 10. Top-3 URL shifts measured 79.5%, meaning fewer than one in five top-3 positions held steady. Community reports and early volatility data from Digital Applied confirmed AI-generated thin content and affiliate-review sites as the hardest-hit categories in the first 72 hours.

One detail worth flagging: Illyes and Prommawin did not confirm that organic, authentic mentions provide a direct AI search ranking benefit either. They acknowledged uncertainty. That ambiguity matters because it means the upside of legitimate mention-building is not guaranteed by Google, but the downside of manipulation is explicit.

Why It Matters for AI Visibility

This is the first time Google has drawn a direct equivalence between AI mention manipulation and paid links.

The paid-links analogy is significant because it implies a well-understood enforcement model: algorithmic detection, discount of manipulated signals, and potential manual actions. Bill Hartzer predicts Google will add a dedicated manual action category for AI mention manipulation by Q3 2026.

For brands investing in GEO (Generative Engine Optimization), this changes the risk calculus. Services that sell "get mentioned in ChatGPT" packages now carry the same category of risk that link schemes carried in 2012. The Penguin penalty wiped out thousands of sites that built on paid links. A parallel enforcement cycle for paid AI mentions would hit brands that invested in those services hard.

Our citation source analysis across AI citations from four engines shows that legitimate citation surfaces (YouTube, Reddit, Wikipedia, industry publications) already generate the majority of AI brand mentions. Brands that build genuine presence across those channels do not need to buy their way in. Last week's Ahrefs data (75,000 brands studied) confirms the correlation: organic brand web mentions outperform backlinks 3 to 1 for AI visibility.

The timing is not coincidental. Core updates historically serve as enforcement mechanisms for policy changes Google has signaled. The March 2026 update demoted established publishers in favor of their underlying authoritative sources. May 2026 continues that pattern with AI-thin content taking the largest hit.

What Brands Should Do Now

Audit your AI mention sources. Look at where your brand appears in AI answers and trace each mention back to its source. If a significant share of your AI visibility depends on paid placement services, directory spam, or AI-generated mention farms, you are exposed.

Stop paying for AI mentions. If you are using services that promise ChatGPT, Perplexity, or AI Overview placements through purchased mentions, the return profile just inverted. Even if those mentions contributed visibility yesterday, the enforcement signal is clear.

Double down on earned citation infrastructure. Three channels that consistently generate legitimate AI citations: (1) YouTube creator collaborations and brand-name podcast appearances. (2) Original research and data studies that other publications cite. (3) Expert commentary in industry publications. These are the same channels that drove the strongest AI citation correlations in our tracking.

Document your mention provenance. If your brand is audited or if AI visibility drops after the update completes (estimated June 2-4), having a clear record of organic vs. paid mention sources will help diagnose the cause.

How to Measure Impact

Run a full AI visibility check across ChatGPT, Perplexity, Claude, Gemini, and Google AI Overviews for your top 10 brand queries. Compare this week's results against a pre-update baseline if you have one.

Pay attention to citation sources. If AI engines were previously citing paid mention placements and those citations disappear during the rollout window, that is a direct signal your visibility depended on discounted sources.

Track three numbers weekly through June: (1) total AI mention count across engines, (2) unique citation sources per engine, and (3) the ratio of citations from owned domains vs. third-party sources.

BeRecommended runs this analysis in a single report, scoring brand AI visibility 0-100 with per-engine breakdowns and citation source mapping. If you need to distinguish organic from potentially manipulated mention sources, this is what the tool was built for.

FAQ

Will buying AI mentions get my site penalized?

Google compared it to paid links, which means algorithmic detection and discount of those signals. A formal manual action specifically for AI mention manipulation has not been announced, but Bill Hartzer predicts one by Q3 2026. The safer path is to stop before enforcement tightens.

Are organic brand mentions safe?

Illyes and Prommawin did not confirm that organic mentions provide a direct AI search benefit, but they did not say they hurt either. The risk is limited to manipulation: buying, automating, or artificially inflating mentions. Genuine mentions earned through PR, content, and creator partnerships carry no stated risk.

How long until the May 2026 core update finishes rolling out?

Google confirmed the update on May 21, with an estimated two-week rollout. That puts completion around June 2-4. Volatility peaked on May 30, suggesting the most significant ranking shifts may already be in the index.

Should I remove old paid mentions?

If you can identify and remove mentions that were placed through paid services, doing so reduces future exposure. Google's systems are designed to ignore manipulated signals rather than penalize the target site directly, at least under the current enforcement model. A proactive cleanup is lower risk than waiting.

Sources

Search Engine Roundtable: Google Warns Against Buying Inauthentic Mentions for AI (May 2026)
Schwartz Video Recap: Buying AI Brand Mentions, Preferred Sources (May 29, 2026)
Optimixed: Google Strongly Warns Against Manipulating Brand Mentions (May 28, 2026)
Bill Hartzer: Why Paid AI Mentions Could Become the Next Google Penalty (May 2026)
Digital Applied: May 2026 Core Update Day 5 Volatility Heatmap (May 2026)
Digital Phablet: Google Cautions Against Manipulating Mentions for AI Gains (May 2026)

Buying AI Brand Mentions Is Now Penalty Territory: What Google's May 2026 Warning Means