Could Someone Be Hijacking Your Business on Google?

Aug 30, 2026 | Business, PSA

Why Automotive Recyclers Should Pay Attention to Their Google Business Profile

For many automotive recyclers, the customer journey starts long before a phone call is made or a part is sold. It starts with a Google search.

car-part

When a customer searches for your company, your Google Business Profile is often the first thing they see. It displays your phone number, website, business hours, address, photos, customer reviews, and directions. In many ways, your Google listing has become your digital storefront.

Because of that visibility, Google Business Profiles have become an attractive target for scammers. Google itself warns businesses to claim their profiles, carefully manage access privileges, and remain alert to unauthorized ownership requests and impersonation attempts.

The good news is that these scams are usually preventable. The bad news is that many business owners don’t realize something is wrong until customers start complaining or business starts disappearing.

Understanding the Real Risk

When people hear about Google Business Profile scams, they often imagine a hacker instantly taking over a company’s listing. In reality, the more common threat is unauthorized access to the Google account associated with the profile or manipulation of profile information through deceptive tactics.

Scammers may attempt to gain access by impersonating Google, sending phishing emails, tricking employees into sharing verification codes, or obtaining credentials through other means. Once inside the account, they may be able to modify information customers rely on every day.

That information might include:

  • Phone numbers
  • Website addresses
  • Hours of operation
  • Business descriptions
  • Ownership and management permissions

Even seemingly minor changes can create major problems for a recycler that depends on customer inquiries, parts requests, and online visibility.

A Real-World Example

Imagine a customer needs a replacement door for a late-model vehicle. They search Google, find your company, and click “Call.”

Instead of reaching your sales team, they reach a phone number that was changed without your knowledge.

Another customer clicks on what they believe is your website, but the link now points somewhere else.

A third customer drives to your yard only to find that Google incorrectly shows you’re closed.

While these examples may sound extreme, they illustrate why profile security matters. A customer who cannot reach you often won’t spend time investigating. They’ll simply move on to another recycler.

What These Scams Often Look Like

Unlike a traditional cyberattack, Google-related scams often begin with something that appears routine.

You may receive an email saying:

“Someone has requested ownership of your Business Profile.”

Or perhaps:

“Action required: Verify your listing to avoid suspension.”

A caller may claim to represent Google Support and tell you there is a problem with your account.

They might say:

“Your listing could be removed from Google Search.”

“We need to verify ownership immediately.”

“Please provide the verification code that was just sent to your phone.”

These tactics are designed to create urgency and prevent you from taking time to verify the request. Google specifically advises businesses to be wary of requests for verification codes and warns that Google does not ask business owners to provide one-time passcodes over the phone.

Signs Something May Be Wrong

In many cases, warning signs appear before substantial damage is done.

Pay attention if you notice:

  • Unexpected requests for owner or manager access.
  • Verification messages you did not initiate.
  • Changes to your phone number, website, address, or business hours.
  • New users appearing as profile owners or managers.
  • Customers reporting incorrect information online.
  • Calls claiming your listing will be suspended.
  • Sudden drops in call volume or website traffic.
  • New reviews mentioning problems that did not occur.

None of these signs automatically mean your profile has been compromised, but they should prompt immediate review.

Why Smart Businesses Still Fall for These Scams

Many scams succeed not because criminals are highly sophisticated, but because they exploit normal business behavior.

Scammers often rely on:

Urgency

  • “Respond today.”
  • “Immediate action required.”

Authority

  • “I’m calling from Google.”
  • “I’m with the verification team.”

Fear

  • “Your profile may be suspended.”

Trust

  • Using information about your business that is already publicly available.

Busy business owners and employees are focused on serving customers, processing orders, responding to insurers, and managing operations. When a message appears legitimate, it can be easy to react before verifying its authenticity.

That’s exactly what scammers are hoping for.

How to Protect Your Business

Fortunately, protecting your Google Business Profile doesn’t require advanced technical knowledge.

Start by claiming and verifying every business location associated with your company. Google warns that unclaimed listings can be more vulnerable to unauthorized control attempts.

Next, review who has access to your profile. Owners and managers should be limited to individuals who genuinely need access.

Former employees, contractors, and vendors should not retain unnecessary permissions.

It’s also a good idea to assign responsibility for profile oversight to one person within your organization.

At least once each month, verify that the following information is accurate:

  • Phone number
  • Website address
  • Street address
  • Business hours
  • Categories
  • Owners and managers
  • Customer reviews

Finally, enable multi-factor authentication (MFA) on the Google account associated with the profile and educate employees never to share passwords, security codes, or verification information.

What to Do If You Think You’ve Been Scammed

If you believe someone has gained unauthorized access to your Google Business Profile, speed matters.

Immediate Actions

Take the following steps as soon as possible:

  • Change the password associated with the account.
  • Enable or confirm multi-factor authentication.
  • Review all listed owners and managers.
  • Remove any unauthorized users.
  • Take screenshots documenting suspicious activity.

Same-Day Actions

Next, focus on containing the problem:

  • Correct any information that was changed.
  • Contact Google Business Profile Support.
  • Review other accounts that may use the same credentials.
  • Notify employees so they don’t approve suspicious requests.

Communicating with Customers

If customers may have been affected, transparency is important.

Consider:

  • Posting a notice on your website.
  • Informing customers through social media.
  • Clarifying the correct phone number, website, and contact information.
  • Monitoring reviews and customer feedback.

Most customers understand that businesses can become victims of scams. What matters is how quickly and professionally the business responds.

Follow-Up Actions

Once the immediate threat has been addressed, take time to understand how the incident occurred.

Review:

  • Who had access to the account
  • Recent ownership requests
  • Account security settings
  • Employee procedures for handling profile-related communications

Use the incident as an opportunity to strengthen internal controls and educate staff.

Stop and Check Before You Act

Before responding to any Google-related request, ask yourself:

  • Did I initiate this request?
  • Do I know who is requesting access?
  • Is someone asking for a password or verification code?
  • Am I being pressured to act immediately?
  • Has this request been verified through another channel?
  • Have profile details changed recently?
  • Have customers reported unusual issues?
  • Have I reviewed account permissions recently?

If the answer to any of these questions concerns you, stop and investigate before taking action.

The Bottom Line

For many recyclers, a Google Business Profile is one of the most valuable marketing assets the business owns. It helps customers find you, contact you, and trust you.

Like any important business asset, it deserves regular attention.

Scammers are often looking for businesses that are too busy to notice small changes. Don’t give them that opportunity.

Take a few minutes each month to review your Google Business Profile. The small issues you catch today may prevent much larger problems tomorrow.

RELATED POSTS

Freedom to Fix: What the White House’s New Memorandum Means for Automotive Recyclers

Freedom to Fix: What the White House’s New Memorandum Means for Automotive Recyclers

“For decades, automotive recyclers have embodied the principles behind right to repair by providing affordable, sustainable access to quality OEM parts. We are encouraged to see the Administration recognize that consumers deserve repair options and that outdated regulations should be reviewed in light of modern vehicle technology. As vehicles have become increasingly sophisticated, policymakers should ensure federal regulations keep pace with innovation while preserving both environmental protections and consumer choice.”
— Vince Edivan, Executive Director, Automotive Recyclers Association

read more