> ## Content Index > Fetch the complete content index at: https://www.nearmedia.co/llms.txt > Use this file to discover other available public pages before exploring further. # Hacking a Business Phone Number on a Google Listing Is (Still) Easy - URL: https://www.nearmedia.co/hacking-a-business-phone-number-on-a-google-listing-is-still-easy-2/ - Published: 2024-08-18T13:00:00.000Z - Updated: 2024-11-19T21:06:39.000Z - Description: When confronted by the media about fraud and local listings scams, Google's PR machine trots out a familiar playbook and canned messaging. - Author: Mike Blumenthal - Tags: Analysis Last year airline phone numbers were hijacked and [redirected](https://www.washingtonpost.com/technology/2024/02/27/airline-customer-service-phone-numbers/?ref=nearmedia.co) to scammers. At the time, a "Google spokesperson [said](https://www.nbcnews.com/tech/tech-news/phone-numbers-airlines-listed-google-directed-scammers-rcna94766?ref=nearmedia.co) in an emailed statement \[to NBC\] that the company does ’not tolerate this misleading activity’ and that it had fixed the issue." Google also [told](https://www.washingtonpost.com/technology/2024/02/27/airline-customer-service-phone-numbers/?ref=nearmedia.co) the Washington Post that "it’s 'extremely rare' for airline customer service searches to show you scam phone numbers." Recently we discovered just how surprisingly easy it still is to change a Google listing's business phone number. How do I know? I tried it. ### The Experiment I was curious what it would take to change a listing's phone number. I purchased a virtual forwarding number for the experiment last year and I enlisted Local SEOs [Amy Toman](https://www.digitallawmarketing.com/about-us/amy-toman/?ref=nearmedia.co), [Kevin Pauls](https://simpleseo.biz/team/kevin-pauls/?ref=nearmedia.co) & [Kurt Impens](https://www.linkedin.com/in/kurtimpens/?ref=nearmedia.co), Local Guides of varying rankings, to change the phone number of my [infamous Illusory Laptop listing](https://blumenthals.com/blog/2010/12/07/illusory-laptop-repair-a-most-elegant-googleplaces-hack/?ref=nearmedia.co) in Bradford, Pa., asking each to "suggest an edit" to the new phone number. ![](https://storage.ghost.io/c/03/80/0380d96d-ef7e-450e-96b3-2963e18aaab5/content/images/2024/08/Capture-d--cran-2024-08-14-213047.png) The third attempt at suggesting an edit was successful and the number on the listing was changed almost instantly. While the number changed on the public profile within a few minutes, there was no obvious notification in the GBP dashboard. While Google did send an email to a listing manager within a few minutes, the primary owner of the listing (me) received *no email or alert* of the changed phone number. ![](https://storage.ghost.io/c/03/80/0380d96d-ef7e-450e-96b3-2963e18aaab5/content/images/2024/08/Screenshot-2024-08-14-at-4.49.22-PM.png) No obvious notice at the highest level of the GBP dashboard Buried in the "Edit profile" area there was a small notice of the change. ![](https://storage.ghost.io/c/03/80/0380d96d-ef7e-450e-96b3-2963e18aaab5/content/images/2024/08/Screenshot-2024-08-14-at-4.54.58-PM.png) Two clicks away for a business to learn of the edit ### How Hard Was It? While I purchased the number a year ago, the actual "work" took 22 minutes from start to finish. ### 2:32 PM Posted to Local Slack Group I asked my friends there to change the number ![Suggest an edit - not accepted](https://storage.ghost.io/c/03/80/0380d96d-ef7e-450e-96b3-2963e18aaab5/content/images/2024/08/notaccepted-250.jpg) ### 2:35 Amy Toman suggests an edit The new number is instantly rejected ### 2:43 Kevin Pauls suggests the same edit It immediately goes to a pending status ![Suggest an edit - not accepted](https://storage.ghost.io/c/03/80/0380d96d-ef7e-450e-96b3-2963e18aaab5/content/images/2024/08/accepted-250.jpg) ### 2:54 Kurt suggests the same edit It is immediately published and shows publicly on search That's it. Three suggested edits and the dirty work was done. I had anticipated a much rockier road and if I knew I was on the clock I probably could have accomplished the task in less time. Who knew it would be so easy? Given the lightweight communication from Google about the number change, it's very likely most businesses would not have noticed the email, and the hijacked number would have persisted for some time. ### What Actually Triggered the Change? Each of the three "editors" are [Local Guides](https://support.google.com/maps/answer/6225846?hl=en&ref%5Ftopic=14986415&sjid=5051226713466295042-NC&ref=nearmedia.co). Amy is a Level 5, Kevin a Level 2 and Kurt is a Level 10\. While it seems likely that it was the three edits that did the trick, it is conceivable that there was some extra value to Kurt's [Level 10 status](https://support.google.com/maps/answer/6225851?hl=en&co=GENIE.Platform%3DAndroid&ref=nearmedia.co), which requires a crazy amount of Google contributions. I suppose that the "aged" phone number with a local area code might have contributed as might the size and visibility of the business. I will leave it to others to determine the nuance of this hack and whether Local Guide Level (etc.) played a role. ### It Shouldn't Be This Easy Google and the public at large both want accurate and reliable business data. It's understandable that Google wants to gather information from multiple sources. Some potential changes, like a minor business hours alteration, could be harmful to the business but would not lead to criminality and probably would have a limited or minimal impact on consumers. However a change to a phone number allows bad actors to step between a business and their customers to the detriment of both, potentially causing significant harm. In the case of the airline phone number hijacking the bad actors attempted to charge consumers credit cards for flight changes. On critical data like a phone number it shouldn't be so easy to make a change. More verification should be required and a business should be alerted that a change is pending. There should also not be so little communication or notification *after* the change is made. While we don’t know for sure whether this can still happen in the airline industry, we do know that it could happen in any number of other industries. ### How Google Handles the Media If you look at major reports of consumer harm from bad actors on Google Maps over the years, you'll see the same Google PR playbook every time. Whether it's [fake drug rehab listings](https://www.theverge.com/2017/9/7/16257412/rehabs-near-me-google-search-scam-florida-treatment-centers?ref=nearmedia.co) or [bait and switch locksmith tactics](https://www.cbc.ca/news/canada/locksmith-google-maps-reviews-fake-marketplace-1.5417931?ref=nearmedia.co) from fake listings or [bogus appliance repair listings](https://www.cbc.ca/news/canada/appliance-repair-industry-online-listings-1.5762489?ref=nearmedia.co), Google temporarily tightens things up and says the same thing they said about the airline scam in 2023: 💡 "Google spokesperson said in an emailed statement that the company does ’not tolerate this misleading activity’ and that it had fixed the issue" Sometimes for good measure they will remind us of the many bad actors out there and how Google is equally a victim, having to play whack a mole with spammers. To Google claiming victim status I say bollocks. ![](https://storage.ghost.io/c/03/80/0380d96d-ef7e-450e-96b3-2963e18aaab5/content/images/2024/08/Phone-numbers-for-airlines-listed-on-Google-directed-to-scammers.png) As mentioned, during the airline number hijackings, Google [told](https://www.washingtonpost.com/technology/2024/02/27/airline-customer-service-phone-numbers/?ref=nearmedia.co) the Washington Post it's “extremely rare” for this to happen. By Google's calculation, rare means the number of hacked airlines that show in search/divided by the number of locations in Google. By Google's math that is something less than 5000/2,300,000 or .2%, the total number of worldwide airlines divided by the total number of business in Google’s local database. It *is* rare – for them. If it happens to you or your airline, it is painful, deeply disturbing and potentially costly. But I also call bollocks on their oft-repeated playbook for these situations. Unfortunately, in every case, it would seem their fix is temporary and six months later the exact same thing happens again. This playbook has been around since the [first reports of widespread locksmith](https://blumenthals.com/blog/2009/02/18/google-maps-proves-more-locksmiths-in-nyc-than-cabs/?ref=nearmedia.co) spam in 2009 and [similar reports](https://www.cbc.ca/news/canada/locksmith-google-maps-reviews-fake-marketplace-1.5417931?ref=nearmedia.co) ten years later, where Google said (are you ready?): 💡 "More than 99 per cent of the businesses people find on Google Maps are legitimate and we're working hard to detect and remove the small number of fraudulent listings that have been posted by bad actors." and "Local business scammers have been a thorn in the internet's side for over a decade. We're continually working on new and better ways to fight these scams using a variety of ever-evolving manual and automated systems." In late 2020, I [worked](https://www.cbc.ca/news/canada/appliance-repair-industry-online-listings-1.5762489?ref=nearmedia.co) with the CBC in Canada on fake appliance repair listings in the Toronto area where Google's [response](https://s3.documentcloud.org/documents/7232321/pages/Google-responds-to-CBC-Marketplace-story-p1-normal.gif?ts=1605148021863&ref=nearmedia.co) was similar: ![](https://storage.ghost.io/c/03/80/0380d96d-ef7e-450e-96b3-2963e18aaab5/content/images/2024/08/Screenshot-2024-08-15-at-7.41.35-AM.png) For the past several months I have been [tracking](https://support.google.com/business/thread/279256210?ref=nearmedia.co) the [exact same problem](https://support.google.com/business/thread/289634143?ref=nearmedia.co), fake appliance repair listings in the exact same Toronto market. The bigger crime here is not the scammers and spammers who deceived the public but that a large, public corporation glad hands the press and allows these scams and harmful deceptions to continue year after year. ---