More threads by HoosierBuff

Joined
Dec 12, 2013
Messages
370
Reaction score
105
Hi All,

I have a client that has seen a rash of emails from Google where someone is trying to gain management control of their GMB. They don't recognize the name of the person requesting it, and they deny the request. This happened a few times in the last month.

Today my client received a postcard with a PIN on it.

This is starting to look like someone is trying to hijack their profile. Is there anything that can be done to protect this from happening?
 
Unfortunately, these requests happen when someone clicks "Own this listing?" on your profile, so unfortunately there is no option to block these requests.

What can you do?

Pass this "checklist to your client:

1. Please do not press the “Review request” button as it could be a fake email.

2. Next step, you login into your Google My Business account and "Deny" any request that appears on the dashboard


Important: If you have a notice from Google about an access request, please make sure to “Deny” request it as soon as possible and tell all the other account users about the request.

If you delay for more than 3 days to reject it or some other user gives access, the scammer can take control of your listing and remove you from the account and change all account details.


What else can you do
If it is more than one request, contact support to advise the situation as a spammer attack and provide all the details.
 
Thanks guys.

What do you think about the postcard being sent? That seems like an escalation, and I'm worried that they can send the postcard, wait two weeks, and then say "postcard not received"
 
Thanks guys.

What do you think about the postcard being sent? That seems like an escalation, and I'm worried that they can send the postcard, wait two weeks, and then say "postcard not received"
I heard about some cases where those Spammers call the business after few days advising they are from Google and asking for the code, so I would alert your client to not provide any code over the phone.
 
This morning I did an access request test and Google is not showing the banner on the dashboard to deny or accept the request.

Apparently the only way to do it, it's through the email received, thank you Google for making phishing easier!

So I updated my checklist:

1. Please, before clicking on the “Review request” button, check the email address as it could be a fake email - emails are sent from: "google-my-business-noreply@google.com"
1619515114227.png


2. When clicking on the "Review request" button, you should be forwarded to an URL similar to the below:

1619515042386.png



3. Next step, you login into your Google My Business account and "Deny" any request that appears on the dashboard

1619515289362.png




Important: If you have a notice from Google about an access request, please make sure to “Reject request" as soon as possible and tell all the other account users about the request.

If you delay for more than 3 days to reject it or some other user gives access, the scammer can take control of your listing and remove you from the account and change all account details.
 
Last edited:

Login / Register

Already a member?   LOG IN
Not a member yet?   REGISTER

LocalU Event

LocalU Webinar

  Promoted Posts

New advertising option: A review of your product or service posted by a Sterling Sky employee. This will also be shared on the Sterling Sky & LSF Twitter accounts, our Facebook group, LinkedIn, and both newsletters. More...
Top Bottom