Treat an unexpected warning as a request to verify
A business profile affects how customers find a company, so a message claiming that the listing will disappear can create pressure. The message may use a familiar logo or a real business name. Those details are easy to copy. Do not decide whether it is genuine from the display name, caller ID or an urgent deadline alone.
Avoid entering a password or payment information through a link in an unsolicited email, text or direct message. Open the official account from a bookmark or type the known service address into the browser. Review notifications there and use the platform’s published help process. If no matching notice appears in the account, treat the message cautiously.
Watch for requests that do not fit profile management
Be especially cautious if a sender asks for your password, one-time code, remote access, an unusual fee to prevent immediate suspension, or a payment to improve rankings. Search visibility and profile verification are not the same as buying a guaranteed position. A marketer should explain which account needs access and why, and should never need you to disclose your password.
Check the full sender address and the destination domain before taking action. Look for misspellings, extra words or look-alike spellings. Even a familiar-looking email can be spoofed, so for a money request or major profile change use a second, previously verified contact method.
Keep control of the business profile
Use a company-controlled account as the primary owner. Add named managers only when they need access and review the list periodically. Keep recovery details current and use multifactor authentication where offered. If an outside agency helps, grant the minimum role needed through the platform rather than sharing the owner password.
Document who can edit business hours, locations, contact details and public responses. Confirm major changes with the people responsible for the business. Maintain a record of the correct website, phone number and official account owner so employees can compare an unexpected request with an independent source.
Respond to a suspicious message or changed listing
If you clicked a link but did not submit information, close it and report the message to the platform. If you entered a password or code, change the credential through the official service, revoke active sessions and secure the connected email account. Review recent edits, managers and recovery information. If money was transferred, contact your financial institution immediately.
Save the original message and report suspected fraud through the Canadian Anti-Fraud Centre and local police where appropriate. Warn staff using a verified internal channel. A written rule helps: never pay or share credentials in response to a warning; verify the issue inside the account and through official help documentation.
Practical checklist
- Open the profile from a saved bookmark, not from an unexpected warning link.
- Never disclose passwords or one-time codes to a caller or marketer.
- Keep primary ownership and recovery details under business control.
- Verify payment or ownership changes using an independent contact method.
In short
Use the official account and help centre to verify notices. Treat urgency, secret access requests and ranking guarantees as reasons to stop and check.
This article is general educational information, not legal, privacy, cybersecurity or financial advice. Confirm requirements for your situation with a qualified professional.