A med spa owner called us on a Friday evening, upset and confused. New bookings had dried up for almost a week, and she could not figure out why. Nothing had changed on her end. When we searched her practice on Google, the answer was sitting right there in the map result: her listing said Permanently closed. She had never touched it. Someone else had, and Google had accepted the change without asking her.
Most practice owners assume their Google listing is locked, like their bank account. It is not. Google treats your Google Business Profile as public, crowd editable information, and that means people who are not you can suggest changes to it, mark it closed, or in the worst cases try to take it over entirely. If you have never thought about protecting it, this is the article to read before you find out the hard way.
Why your listing is such a tempting target
Your Google Business Profile is not a nice extra. For a local practice it is the front door. When someone searches dermatologist near me or urgent care open now, the map pack is the first thing they see and tap, usually before they ever reach a website. It holds your phone number, your directions, your hours, your reviews, and the Call and Directions buttons that turn a search into a patient walking in.
That is exactly what makes it worth attacking. Control the listing and you control where the calls go. Google itself has made clear how big the fake and fraudulent listing problem has become. In its public reporting on fighting fake business profiles, Google says it blocks or removes millions of fraudulent profiles every year and stops millions more attempts to claim listings that do not belong to the person claiming them. That volume is not random. It is because a business listing has real value, and yours is no exception.
The three ways a profile actually gets hijacked
People imagine hijacking as some dramatic hack. It is usually far simpler and more boring than that, which is what makes it so easy to miss. Here are the three flavors we see most.
1. Suggested edits that go live behind your back
Under every listing there is a small link that says Suggest an edit. Any random Google user can use it to propose a new phone number, a different website, new hours, or a moved pin on the map. Some of these edits get published automatically, before you ever see them. A scammer swaps your phone number for a call center that poses as your office, then sells or misdirects the patients who call. You keep paying for ads and ranking well, and the calls land somewhere else without a trace.
2. Marked closed or hours changed
This is the one that hit the med spa. Anyone can suggest that your practice is permanently or temporarily closed, and that label can appear on your listing. To a patient scrolling the map, closed means skip, and they book the next clinic down the list. The same trick works with hours. Set your Saturday to closed and every weekend searcher goes elsewhere. It is subtle, it is cheap, and a dishonest competitor two miles away has every incentive to try it.
3. A full ownership takeover
The rarest but most serious version. A scammer requests owner or manager access to your profile, or claims a listing you never formally verified. If the request reaches an email nobody at your practice monitors, or your listing was never verified in the first place, they can gain control, change everything, and lock you out. Recovering it is possible but slower and far more stressful than simply having claimed and secured it from day one.
The silent version is the dangerous one
A hijack rarely announces itself. There is no alarm, no email that screams something is wrong. The first sign is almost always a soft one: the phone is slower than usual, a patient mentions they thought you had closed, or your new patient count dips for no clear reason. By the time you notice, the bad edit has often been live for a week or more. That gap is the whole problem, and it is why checking your listing has to be a habit, not a reaction.
How to tell if it already happened to you
You do not need special tools. Open an incognito window and search your practice name, then run the search a patient would actually type, like your specialty plus your city. Look hard at these fields:
- Phone number. Is it exactly yours? Call it from a phone that is not in your system and make sure it rings at your front desk, not a stranger.
- Website link. Does it point to your real site, or somewhere you do not recognize?
- Hours. Any day flipped to closed that should be open? Any label saying temporarily or permanently closed that you never set?
- Address and map pin. Is the pin dropped on your actual building, or has it drifted down the street?
- Owners and managers. In your dashboard, check the list of people with access. Anyone there you do not know is a red flag.
If a patient ever tells you they thought you had closed, or that they called and got someone strange, treat it as a five alarm signal and check the listing that day. That offhand comment is often the only warning you will get.
How to lock it down and take it back
Protecting your profile is not complicated. It is mostly about claiming what is yours and paying attention. Here is the sequence we walk practices through.
- Claim and verify the listing. An unverified profile is the easiest to hijack. Make sure it is claimed under a Google account your practice actually controls, not a former employee's personal email or a login nobody has anymore.
- Add a second owner. Assign one trusted person or your marketing partner as an additional owner, so a lost password or a departed staffer never locks you out of your own front door.
- Turn on notifications. In the profile settings, enable alerts for edits and reviews. When someone suggests a change, you want to hear about it in real time, not discover it three weeks later.
- Secure the Google account. Use a strong, unique password and switch on two step verification. Most takeovers walk through an open door, not a picked lock.
- Reject bad edits fast. If a wrong change slips through, correct the field and, when needed, use Google's tools to report the edit. The faster you act, the less damage it does.
- Check it weekly. Put a recurring reminder on the calendar. Two minutes to eyeball your phone number, hours, and reviews will save you a very bad month.
If you have already lost access, do not create a brand new listing. That throws away your reviews and ranking history and can trigger a duplicate flag. Instead, use Google's request access flow to reclaim ownership, and if someone falsely claimed a listing that is yours, open a conflict with Google support and prove the practice is real with your signage, license, and address. It is the same discipline that keeps a profile from getting suspended in the first place: be the legitimate, verified, consistent owner, and Google sides with you.
Our honest take: never let one listing be your whole business
Securing your Google profile is essential, and you should do everything above this week. But here is the harder truth we tell every practice. If a single edit on one listing can freeze your new patient flow, the real problem is not the edit. It is that your entire pipeline was balanced on one thing you do not fully control.
Google can suspend you, a scammer can tamper with you, an algorithm update can move you down the map. None of that should be able to empty your schedule. Practices that stay steady are the ones with more than one way to be found and booked: a fast website that ranks on its own, real local SEO that keeps you visible across Google and the AI answers patients now trust, an active social presence, and a dependable way to capture and follow up with every inquiry. When one channel has a bad week, the others carry you.
Where we come in
At EtherealMinds we set up and protect local search the durable way for healthcare practices across the United States. That means claiming and verifying your Google Business Profile by the book, adding the right safeguards so a stranger cannot reroute your patients on the sly, watching your listing so a bad edit gets caught in days not weeks, and building the rest of the engine around it so you are never one change away from a silent phone.
And we make sure the patients who do find you actually get through. A perfectly protected listing is wasted if the call goes to voicemail, which is why our patient acquisition system follows up with every inquiry, and our AI receptionist answers and books patients around the clock, even on the day someone decides to mess with your map pin.
Not sure who controls your Google listing right now?
Book a free strategy call. We will check who owns your Google Business Profile, spot anything a scammer or competitor could tamper with, and lay out how to lock it down and rank locally for good. No jargon, no pressure.
Book a free strategy call →