Google Business Profile Hacked? How to Get It Back

The email says a new owner was added to your Business Profile, and you did not add anyone. Or you searched your own business and found a phone number, a website or even a name that is not yours. Customers may already be calling that number. When a Google Business Profile is hacked or taken over, the first hour matters less for speed than for order: some moves protect you, and some can lock you out further. You can get control back through Google's own process, and a lot of it you can do yourself without paying anyone. The waiting periods are short and published, though Google does not promise a result. What you do while you wait decides how many customers end up at the wrong door. Start with the account, then the profile, then the people who might be calling.

Your first move is locking down the Google Account, not the listing

It feels natural to go straight to the listing and fix the phone number. Hold off for a few minutes. If someone got into the Google Account that owns your profile, they can undo your fixes, remove you, or approve their own access again. Securing the account comes first because everything else depends on it.

Google's guidance for a compromised Google Account walks through the same short list:

• Review recent security activity: Look for sign-ins, password changes or new recovery details you did not make. Google's instruction is direct: "If you find activity that didn't come from you: Select No, it wasn't me."
• Check signed-in devices: Remove any phone, tablet or computer you do not recognize.
• Change the password: Use a new one that you have not used anywhere else.
• Check recovery email and phone: Make sure the backup email and number are yours, since an attacker may have swapped them.
• Turn on 2-Step Verification: Google's 2-Step Verification setup adds a second check at sign-in, so a stolen password alone is not enough.

If you cannot sign in at all, the account recovery flow comes before anything else, because the profile cannot be fixed from an account you no longer control.

Before you change anything, save proof. Take screenshots of the profile as it looks now, the People and access list, and any Google emails about new owners, ownership requests or security alerts. Search your inbox for those messages too. If this turns into an appeal or a support request, dated evidence of what changed and when is what you will be asked for.

You are in one of three situations, and each has its own fix

A Business Profile takeover can look like several different problems from the outside. Working out which one you have tells you which fix to use, and it keeps you from spending days on the wrong process. Google's Business Profile protection page describes the signs: an unknown owner or manager under People and access, the real owner removed or demoted, or changes to the name, phone, website, address, hours or category that nobody on your team made. The three sections below cover where you still have control, where you do not, and where the change came from outside your account.

You still have owner access

This is the best case. Open Business Profile settings, go to People and access, and write down every owner and manager listed. Remove anyone you do not recognize, and anyone who no longer works with you. Then correct the public details: name, phone, website, hours, address, category, booking link and messaging settings. If an old employee or a former agency is still listed as an owner, remove them or transfer primary ownership back to an account your business controls.

Someone else now owns the profile

If you were removed, or the profile shows as owned by someone you do not know, you need Google's ownership request process. That is covered step by step in the next section.

The details changed, but nobody new has access

Sometimes the People and access list is clean and your account shows no strange activity, yet the phone number or hours still changed. That can come from a suggested edit on Google Maps, a duplicate listing, or a moderation action. It still harms you, because customers see the wrong details, but the fix is to correct the information from your owner account and keep watching for it to change again, rather than to request ownership. If Google has suspended the profile instead, that is its own process with its own steps.

Google's ownership request is how you get a locked profile back

When someone else controls the verified profile, you ask for it through Google's ownership request page. You search for the business, start the request, and fill in the form. Google then contacts the current owner.

What happens next follows timing Google publishes. In Google's words, "The current profile owner is then notified by email and has 3 days to respond." There are three ways it can go:

1. The owner approves: You get access. If the owner was a former employee or agency that simply forgot, this is often the path.
2. The owner denies it: Google says you'll get a rejection email, "but you can still suggest an edit to the profile. You can also try to appeal the decision."
3. The owner does not respond: Google says, "If you don't get a response after 3 days, you may have the option to claim the profile." You open the confirmation email, select View request and then Verify, and follow the steps to verify your business.

Plan for the catch in option three. Google states that "the option to claim a profile isn't always available." Three days is the owner's response window, not a promise that you will have the profile back on day four. If the claim option does not appear, or the appeal does not resolve it, Business Profile support is the next route. Beyond these windows, plan for a process rather than a fixed date.

Frequently Asked Questions About google business profile hacked

Can a Google Business Profile be hacked?

Yes. Someone can take control through a compromised Google Account or through access that was granted and never removed, such as an old employee or agency. A changed detail on its own does not prove a takeover, so check People and access and your account's security activity to confirm.

My Google business account was hacked and I was removed as owner. What now?

Secure or recover the Google Account first, then use Google's ownership request to ask for the profile back. The current owner has 3 days to respond. If they deny it, you can appeal; if they do not respond, a claim option may appear, though Google says it is not always available.

How long does it take to get a hacked profile back?

Google sets a 3-day response window for ownership requests and a 7-day limit on some actions for new owners and managers. Beyond those, plan for a process rather than a fixed date.

Can I remove an unknown owner or manager myself?

If you still have owner access, yes. Open Business Profile settings, go to People and access, and remove anyone you do not recognize. Removing users depends on your role, so this works only while you still hold owner access.

Should I pay someone to recover my Google Business Profile?

Google does not charge to maintain, verify or reinstate a profile, and no outside company can force Google's decision. Outside help can make sense for complicated cases, such as a former agency holding ownership or several locations affected, but treat anyone who claims to act for Google or guarantees recovery as a red flag.

How do I stop customers calling the wrong number while I wait?

Put your correct number on your website, social pages, directory listings and email signature, and tell regular customers directly. Log anyone who mentions the wrong number, since it adds to your evidence for an appeal or support request.

The Bottom Line

When your Google Business Profile has been hacked, work in order. Secure the Google Account, save your evidence, and check People and access. If you still own the profile, remove strangers and fix the details yourself. If you do not, use Google's ownership request, allow the 3 days, and appeal or contact support if it stalls.

Afterward, one business-owned primary owner, managers instead of extra owners, 2-Step Verification on every owner account and a regular access check make the next takeover far harder. The phone rings at your number, the website link goes to your site, and the Google emails stop being a surprise.

If your case is the messy kind, such as a former agency or employee holding ownership, a denied request, duplicate listings or several locations, Web Leveling can help you organize the evidence, follow Google's process and set up access checks so it does not happen again. Our Google Business Profile management keeps ownership in your name and your details accurate, though no one can promise Google's decision. We work with small and medium businesses across the country and overseas. Tell us what changed on your profile, and we will reply with the steps that fit your situation.

Terms