The instinct when rankings drop overnight is to start changing things immediately. Resist that for the first hour. Diagnosing the actual cause takes less time than most people assume, and acting before you know the cause means you might fix the wrong thing, or undo a change that wasn't the problem in the first place.
First, confirm it's real
Check whether the drop shows up in Search Console's Performance report and in an independent rank tracker, not just one tool. Search Console data can lag or show temporary noise. If only one source shows the drop, wait 24 hours before treating it as confirmed.
Check the date against known algorithm updates
Google announces most major core updates and product reviews updates publicly, with rollout date ranges. If your drop lines up with a confirmed update window and affected many sites in your industry, not just yours, this is almost certainly an algorithm update, not something specific to your site. Recovery in this case usually means improving overall content quality and E-E-A-T signals over the following weeks and months, not finding one broken thing to fix.
Check for a manual action
Open Search Console's Security and Manual Actions report. If there's a manual action listed, you'll see exactly what triggered it, like unnatural links or thin content, and you'll need to fix that specific issue and file a reconsideration request. This is rare compared to algorithmic causes, but it's the fastest to confirm, so check it early.
Check for a technical break
Did a recent deploy accidentally add a noindex tag, block crawling in robots.txt, or break canonical tags? Compare your site's current crawl behavior against a crawl from before the drop if you have one saved. A technical break is the best-case scenario, because the fix is usually fast and the recovery is usually fast too, once Google recrawls.
Check whether you lost significant backlinks
A site that built much of its authority on a small number of high-value backlinks is vulnerable if one of those linking pages gets removed, de-indexed, or no-followed. Run a backlink comparison against a recent historical snapshot to see if anything significant dropped off.
Check what a competitor did, not just what you did
Sometimes nothing changed on your end at all; a competitor published something stronger, earned a wave of new backlinks, or fixed technical issues of their own and simply overtook you. This is the case people check last, but it's common enough to check earlier than most people do.
Why this needs to be routine, not reactive
Most of this diagnostic process is just comparing "now" against "before," which only works if you have a clear, dated record of what "before" looked like. RankMesh's Drop Alert agent watches rankings hourly and flags drops with this diagnostic context attached automatically, specifically so the panic-and-guess cycle doesn't have to happen at all.