Local businesses across the country are being targeted by a sophisticated scam designed to steal their Google Business Profile. Once scammers take control, they can redirect your phone calls, change your address, damage your reputation, and send your customers to competitors. Here is everything you need to know to protect your listing.
What Is the Google Business Profile Hijacking Scam?
Your Google Business Profile (GBP) is one of the most valuable online assets your business owns. It controls what customers see when they search for you on Google, including your phone number, hours, location, photos, and reviews. Scammers know this, which is why they are actively targeting business owners to steal profile ownership.
A recent case from local SEO expert Darren Shaw (Whitespark) illustrates how brazen these attacks have become: one of his clients nearly had their entire profile hijacked. The scam follows a predictable pattern:
- A call arrives from “Google.” The scammer claims to be from Google Business Support. They may sound professional and may spoof a legitimate-looking phone number.
- They manufacture urgency. Common lines: “Your profile has a policy violation,” “Your listing is about to be suspended,” or “You need to verify your account today.” The goal is panic so you act fast without verifying.
- They ask you to confirm your identity. They send a verification code to your phone and ask you to read it back, or they send a link and ask you to click it. What you are actually doing is granting them manager or owner access to your GBP.
- They take over. Once inside, they can remove you as owner, change your business name, website URL, phone number, and even redirect your customer calls to their own line or to a competitor who paid them.
The Damage Is Real and Recovery Is Slow
Businesses that fall victim to GBP hijacking face serious consequences:
- Customers calling your phone number reach scammers or competitors
- Your address or service area gets changed, damaging your local search rankings
- Fake negative content appears under your business name
- Appealing to Google and recovering ownership can take weeks
- During that time, your rankings drop and customers cannot reach you
How to Protect Your Google Business Profile
Take these steps today to lock down your listing:
1. Know That Google Will Never Call You Unsolicited
Google does not make outbound calls to business owners to fix problems. Any call claiming to be Google support asking for verification codes or account access is a scam. Hang up immediately.
2. Audit Your Profile Access Every Month
Log into your Google Business Profile, navigate to Business Information, then People and Access. Review every manager and owner listed. Remove anyone unfamiliar immediately.
3. Never Share Verification Codes
A verification code sent to your phone is a key to your account. There is no legitimate reason for anyone on the phone to need this code. Do not share it under any circumstances.
4. Enable Two-Factor Authentication
Add two-factor authentication (2FA) to the Google account associated with your GBP. This adds a critical layer of protection even if someone gets your password.
5. Use a Dedicated Google Account for Your Business
Keep your GBP separate from your personal Gmail account. A dedicated business Google account limits your exposure if either account is compromised.
Why Your Google Business Profile Matters More Than Ever in 2026
With Google rolling out AI Mode and Ask Maps, your business profile is now influencing AI-generated search results, not just the traditional Local Pack. Here is what has changed:
- Your GBP description is now a ranking factor in Ask Maps. Conversational queries like “dentist near me specializing in veneers” pull directly from your business description. A vague, generic description means missed visibility.
- AI reads the entire internet about your business, including review sites, directories, and social media. Consistency across all your listings is more important than ever.
- A hijacked profile is catastrophic in this environment. AI search may surface incorrect information about your business for months after a hijacking incident.
Monitor and Score Your Business Listings
One of the best defenses against listing hijacking and profile inconsistencies is active monitoring. Tools like BizScoreAI help business owners track their profile health across Google, Yelp, Facebook, and dozens of other directories, flagging unauthorized changes before they do lasting damage.
A strong, consistent, and monitored business profile is your best defense against both scammers and poor search visibility. Do not wait until something goes wrong to check your listing health.
Run a free scan to see your AI Visibility Score, SEO rating, and local citation accuracy.