Google Business Profile Hacked? How to Get It Back

The email says a new owner was added to your Business Profile, and you did not add anyone. Or you searched your own business and found a phone number, a website or even a name that is not yours. Customers may already be calling that number. When a Google Business Profile is hacked or taken over, the first hour matters less for speed than for order: some moves protect you, and some can lock you out further. You can get control back through Google's own process, and a lot of it you can do yourself without paying anyone. The waiting periods are short and published, though Google does not promise a result. What you do while you wait decides how many customers end up at the wrong door. Start with the account, then the profile, then the people who might be calling.

Your first move is locking down the Google Account, not the listing

It feels natural to go straight to the listing and fix the phone number. Hold off for a few minutes. If someone got into the Google Account that owns your profile, they can undo your fixes, remove you, or approve their own access again. Securing the account comes first because everything else depends on it.

Google's guidance for a compromised Google Account walks through the same short list:

• Review recent security activity: Look for sign-ins, password changes or new recovery details you did not make. Google's instruction is direct: "If you find activity that didn't come from you: Select No, it wasn't me."
• Check signed-in devices: Remove any phone, tablet or computer you do not recognize.
• Change the password: Use a new one that you have not used anywhere else.
• Check recovery email and phone: Make sure the backup email and number are yours, since an attacker may have swapped them.
• Turn on 2-Step Verification: Google's 2-Step Verification setup adds a second check at sign-in, so a stolen password alone is not enough.

If you cannot sign in at all, the account recovery flow comes before anything else, because the profile cannot be fixed from an account you no longer control.

Before you change anything, save proof. Take screenshots of the profile as it looks now, the People and access list, and any Google emails about new owners, ownership requests or security alerts. Search your inbox for those messages too. If this turns into an appeal or a support request, dated evidence of what changed and when is what you will be asked for.

You are in one of three situations, and each has its own fix

A Business Profile takeover can look like several different problems from the outside. Working out which one you have tells you which fix to use, and it keeps you from spending days on the wrong process. Google's Business Profile protection page describes the signs: an unknown owner or manager under People and access, the real owner removed or demoted, or changes to the name, phone, website, address, hours or category that nobody on your team made. The three sections below cover where you still have control, where you do not, and where the change came from outside your account.

You still have owner access

This is the best case. Open Business Profile settings, go to People and access, and write down every owner and manager listed. Remove anyone you do not recognize, and anyone who no longer works with you. Then correct the public details: name, phone, website, hours, address, category, booking link and messaging settings. If an old employee or a former agency is still listed as an owner, remove them or transfer primary ownership back to an account your business controls.

Someone else now owns the profile

If you were removed, or the profile shows as owned by someone you do not know, you need Google's ownership request process. That is covered step by step in the next section.

The details changed, but nobody new has access

Sometimes the People and access list is clean and your account shows no strange activity, yet the phone number or hours still changed. That can come from a suggested edit on Google Maps, a duplicate listing, or a moderation action. It still harms you, because customers see the wrong details, but the fix is to correct the information from your owner account and keep watching for it to change again, rather than to request ownership. If Google has suspended the profile instead, that is its own process with its own steps.

Google's ownership request is how you get a locked profile back

When someone else controls the verified profile, you ask for it through Google's ownership request page. You search for the business, start the request, and fill in the form. Google then contacts the current owner.

What happens next follows timing Google publishes. In Google's words, "The current profile owner is then notified by email and has 3 days to respond." There are three ways it can go:

1. The owner approves: You get access. If the owner was a former employee or agency that simply forgot, this is often the path.
2. The owner denies it: Google says you'll get a rejection email, "but you can still suggest an edit to the profile. You can also try to appeal the decision."
3. The owner does not respond: Google says, "If you don't get a response after 3 days, you may have the option to claim the profile." You open the confirmation email, select View request and then Verify, and follow the steps to verify your business.

Plan for the catch in option three. Google states that "the option to claim a profile isn't always available." Three days is the owner's response window, not a promise that you will have the profile back on day four. If the claim option does not appear, or the appeal does not resolve it, Business Profile support is the next route. Google does not publish a total recovery time, so treat any timeline beyond these as unknown.

That 7-day limit comes from Google's page on managing owners and managers: newly added owners or managers face restrictions on some actions for their first seven days. It is separate from the 3-day response window, and it helps to know about it so a restored owner does not panic when a setting is still grayed out.

While you wait, point customers to the real business

The waiting period is when the damage happens. A wrong phone number can send callers somewhere else. A wrong website can send them to a page you do not control. A wrong name can make the business look closed or unreliable. You cannot fix the listing yet, but you can make the real details easy to find everywhere else.

• Your website: Put your correct phone number and contact route at the top of the home page and contact page.
• Your other profiles and email signature: Make sure social pages, directory listings and email signatures show the correct number and web address.
• Your regular customers: A short email or message to existing customers can warn them that a listing is showing wrong details and give them the right number.
• Your front desk: Tell staff what happened so they can confirm details with anyone who says they called and got no answer.
• A running log: Note each customer who mentions the wrong number or website, with the date. It adds to your evidence.

If the takeover involved someone pretending to be your business to take money, the Federal Trade Commission's small business guidance on impersonators recommends reporting it to the FTC, local law enforcement and the FBI's Internet Crime Complaint Center. Customer complaints tied to a wrong listing can also affect how people see you afterward, which is where steps from repairing your online reputation come in once you are back in control.

Takeovers usually start with access that was never taken back

There is no Google dataset that ranks how Business Profile takeovers happen, so any order is a practical one rather than a measured one. The common routes are still worth knowing, because each points to a gap you can close.

• Old access that nobody removed: A former employee, contractor or agency stayed listed as an owner. Google's advice is plain: "Remove ex-employees' profile access if they no longer work at your business."
• A compromised Google Account: Someone got the password of an account that owns the profile.
• Phishing and impersonation: An email or call pretending to be Google tricks someone into sharing a login or approving access. The FTC's guide to scams aimed at small businesses recommends training staff to recognize these.
• Outside abuse: Competitors, lead sellers, duplicate listings or unwanted suggested edits change what customers see.

One point changes what you should do next. Google says it does not charge to maintain, verify or reinstate a Business Profile. If a caller or email offers to restore your profile for a fee "on behalf of Google," it is not Google. Stick with the official request, appeal and support routes, which cost nothing.

A locked-down profile has one real owner and few managers

Once you have control again, the goal is to make the next takeover much harder. Google puts the principle in one line: "The fewer people who have access to your Business Profile, the less likely it is to be compromised." It also advises, "Only allow owners and managers who are essential to manage the Business profile with access." Google does not publish a recommended number of managers, so fewer is the working rule.

A simple routine covers it:

• Stay the primary owner: Keep primary ownership on an account the business controls, not on a staff member's personal email or an agency's account.
• Give out manager roles, not owner roles: Agencies and staff can usually do their work as managers. Owners can transfer ownership, so owner access deserves more care.
• Remove people when they leave: Take a departing employee or vendor off the profile on the same day their other access ends.
• Turn on 2-Step Verification for every owner: One weak owner account is enough to lose the profile.
• Check on a schedule: Look at People and access and your public details at a regular interval, and read every Google email about ownership requests or new users as soon as it arrives.

If an agency manages your listing now, you can ask them one question to test the setup: whose account is the primary owner? If the answer is theirs, ask for primary ownership to move to your business, with the agency kept on as a manager.

Frequently Asked Questions About google business profile hacked

Can a Google Business Profile be hacked?

Yes. Someone can take control through a compromised Google Account or through access that was granted and never removed, such as an old employee or agency. A changed detail on its own does not prove a takeover, so check People and access and your account's security activity to confirm.

My Google business account was hacked and I was removed as owner. What now?

Secure or recover the Google Account first, then use Google's ownership request to ask for the profile back. The current owner has 3 days to respond. If they deny it, you can appeal; if they do not respond, a claim option may appear, though Google says it is not always available.

How long does it take to get a hacked profile back?

Google publishes the 3-day response window for ownership requests and a 7-day limit on some actions for new owners and managers. It does not publish a total recovery time, so plan for a process rather than a fixed date.

Can I remove an unknown owner or manager myself?

If you still have owner access, yes. Open Business Profile settings, go to People and access, and remove anyone you do not recognize. Removing users depends on your role, so this works only while you still hold owner access.

Should I pay someone to recover my Google Business Profile?

Google does not charge to maintain, verify or reinstate a profile, and no outside company can force Google's decision. Outside help can make sense for complicated cases, such as a former agency holding ownership or several locations affected, but treat anyone who claims to act for Google or guarantees recovery as a red flag.

How do I stop customers calling the wrong number while I wait?

Put your correct number on your website, social pages, directory listings and email signature, and tell regular customers directly. Log anyone who mentions the wrong number, since it adds to your evidence for an appeal or support request.

The Bottom Line

When your Google Business Profile has been hacked, work in order. Secure the Google Account, save your evidence, and check People and access. If you still own the profile, remove strangers and fix the details yourself. If you do not, use Google's ownership request, allow the 3 days, and appeal or contact support if it stalls.

Afterward, one business-owned primary owner, managers instead of extra owners, 2-Step Verification on every owner account and a regular access check make the next takeover far harder. The phone rings at your number, the website link goes to your site, and the Google emails stop being a surprise.

If your case is the messy kind, such as a former agency or employee holding ownership, a denied request, duplicate listings or several locations, Web Leveling can help you organize the evidence, follow Google's process and set up access checks so it does not happen again. Our Google Business Profile management keeps ownership in your name and your details accurate, though no one can promise Google's decision. We work with small and medium businesses across the country and overseas. Tell us what changed on your profile, and we will reply with the steps that fit your situation.

Terms