WSJ Prime7.00%▲ 25 bpsSOFR3.88%▲ 23 bpsFed Funds Target4.00%▲ 25 bps10-Yr Treasury5.28%▲ 50 bpsDiesel, retail$6.199▲ 60¢Bank C&I Lending$2,935B▲ 1.62%WSJ Prime7.00%▲ 25 bpsSOFR3.88%▲ 23 bpsFed Funds Target4.00%▲ 25 bps10-Yr Treasury5.28%▲ 50 bpsDiesel, retail$6.199▲ 60¢Bank C&I Lending$2,935B▲ 1.62%

Front Page › Brokers & Harassment › From the Notebook

Scam Report

She tapped "approve." Her 214 Google reviews got a new owner.

A real Google email can hand your profile and reviews to a scammer. Red flags, what to do and how to lock your Business Profile before someone claims it.

A gloved hand steals a glass case of brass stars from a shop counter beside an open padlock and smartphone.
Scam Report · Brokers & Harassment

"Someone has requested ownership of your Business Profile. Review the request."

Marisol saw it at 6:40 a.m., on her phone, in the truck, between a supplier text and a customer asking if 9 still worked. She runs a two-van plumbing outfit. Eleven years, 214 reviews, 4.8 stars. Most of her new calls start with somebody googling "plumber near me" and tapping her name.

The email looked exactly like Google, because it was Google. Real sender. Real logo. A big blue button.

She figured it was her nephew. He'd offered to "fix the website" at Thanksgiving. She tapped approve and went to her first job.

By lunch the phone was quiet. By Thursday a customer called her cell, furious, asking why the plumber who showed up had charged him $600 to look at a drain and then left. Marisol had never heard of the guy. She searched her own business. Her photos were there. Her 214 reviews were there. The name on top was different, and so was the phone number.

Marisol is a composite. The play isn't. BBB warns that scammers click the "Own this business?" Link on a real company's Google profile, which makes Google send the owner a genuine ownership-request email. If anyone at the company approves it, the scammer can rename the business and lock the owner out. Then they use the hijacked profile, reviews and all, to get customers to call them. BBB says scam locksmiths commonly use this exact move. BBB New Hampshire pushed the warning out again on September 30.

Here's the twist most owners miss. You can't spot this one by the sender address. The email is real. Only the person behind the request is fake.

And it rarely comes alone. In July, BBB of Northeast California described the robocall that says your Google listing is "unverified" and about to be removed unless you press one. Google says it never asks for a one-time code or PIN, and never pushes you to pay to keep, verify or reinstate your profile. On September 24, the FTC asked for public comment on whether ad platforms are helping impersonation scams spread.

Red flags

  • An ownership or manager request you didn't expect. Google's own help page says not to approve those requests unless you know the person asking.
  • "Someone on the team probably did this." BBB says if you aren't sure whether a staff member sent it, find out before you accept.
  • A caller or texter who wants money to keep your listing alive. Google says it doesn't charge to verify or reinstate a profile.
  • Anyone asking for the code Google just sent you. Google says it will never ask for a one-time password or PIN.
  • A "verify now or lose your listing" deadline. BBB says to treat that message as a scam until you've proven otherwise.
  • Phone suddenly quiet, or customers describing someone you didn't send. Search your own business name and check the name, number and website on the profile.

What to do

  1. Reject any ownership request you can't confirm. Don't ignore it. Google's help page says the current owner has 3 days to respond, and after that the requester may get the option to claim the profile.
  2. Ask your team out loud. Text whoever has access, today, before you tap anything.
  3. Lock the doors. Keep owners and managers to the people who truly need it, remove ex-employees, and turn on 2-Step Verification. Use an email you actually check for the profile.
  4. Claim every location. Google warns that unclaimed locations are easier to hijack.
  5. Already lost it? Contact Google Business Profile support right away to start reclaiming it, and report it to Google. Warn regular customers that your number hasn't changed.
  6. Report it at ReportFraud.FTC.gov, BBB Scam Tracker and your state attorney general. If you paid a fake "Google" caller, call your bank or card company now and ask to reverse the charge.

Marisol got the profile back. The $600 drain guy still has her photos somewhere.

Sources:

More from Scam Report

The series →

The skid steer was $28,500. The dealer was real. The phone number wasn't.

Industry Scams · Oct 8

Your $18,412 tariff refund is ready. Just scan the QR code.

Industry Scams · Oct 7

They paid $4,200 every two weeks to settle their debt. Nobody called the lender.

Industry Scams · Oct 6

More in Brokers & Harassment

All →

Stop the Calls, Part 7: one word ends the text thread

Your Rights & the Law · Oct 9

SBA Can Make a Broker Refund That $18K "Only If Approved" Fee

From the Notebook · Oct 9

The UCC Hit Nineteen Minutes After She Said No

From the Notebook · Oct 9

Getting the calls? Shut it down.

MCAFax was built to do the thing you can't do from inside the room: make the phone stop. Check any broker against our member-built database, send cease & desist letters from your own Gmail, and build the paper trail. Some laws, like the TCPA, put statutory damages on illegal calls — whether they apply to your calls depends on your situation, and business lines get less protection than home ones. It's free, and we're not a law firm.

Join the network