Search 'Google Business Profile hijacked' and you will find you are far from the only owner this has happened to. Whether you are locked out of your own dashboard, seeing changes you never made, or watching ownership sit with an account you do not recognize, this is a problem with a known, workable recovery path, not a dead end. This guide is for business owners who suspect their listing has been taken over by a former employee, an ex business partner, or a stranger who requested access and somehow got it. It walks through how to confirm what actually happened, the real steps for recovering ownership through Google, honest timeline expectations, and how to lock the profile down afterward so it does not happen a second time.
The Signs Your Listing Has Actually Been Hijacked
Before you treat this as an emergency, rule out the boring explanations first, since they are far more common than an actual hijack. Make sure you are signing in with the correct Google account, since owners sometimes have two or three Google accounts and simply try the wrong one. Try a normal password reset before assuming anything more serious happened. Once you have ruled those out, the real warning signs are specific: your listing shows a different primary owner than you, an unfamiliar name appears in the manager list, hours, phone number, or website changed without anyone on your team touching them, or you received (or missed) a notification about an ownership transfer or access request you never approved. A description or category change to something unrelated to your business is another common signal, especially if it happened alongside a manager change. One or two of these together, not just one odd detail, is a much stronger signal than a single change that could have an innocent explanation.
How to Request Access or Ownership Back
If you can still see the listing in Google Maps or Search but cannot manage it, start with the simplest option: the 'Request access' flow inside Google Business Profile. This sends a request directly to whoever currently holds owner or manager status, and if the situation is a genuine mix-up, such as a former employee who still has access but is willing to hand it back, or a business partner who made a change and did not realize it needed your approval, this route can resolve things in a day or two once the current owner responds. It only works, however, if someone with access is willing to approve your request, so it is worth trying first but is not guaranteed to work if the person holding access is unresponsive or acting in bad faith.
When You Need Google's Ownership Verification Process
If your access request is ignored, denied, or you have real reason to believe the takeover was deliberate, such as a competitor, a disgruntled former employee, or someone who never should have had access in the first place, you need Google's formal ownership verification and recovery process instead. This is handled through Google Business Profile support, and it asks you to prove you are genuinely connected to the business, not just claiming to be. Useful proof includes a business license or registration document, a utility bill or lease showing your business name and address, a tax document, and anything that ties your identity to the business, such as an email address on the business's own domain. Old screenshots of your dashboard from before the takeover, if you happen to have any, can also help establish that you previously had legitimate access. Be as thorough as you can the first time you submit, since incomplete documentation is one of the most common reasons this process takes longer than it needs to.
How Long Recovery Actually Takes
There is no fixed timeline Google publishes for this, and it is honestly better to expect a range than a specific number. A straightforward case with clean documentation, a real business license, a matching utility bill, a domain email, tends to move faster, sometimes resolving within a week or two. A more contested case takes longer, particularly if two parties both claim legitimate ownership, such as a dispute between former business partners where both sides genuinely believe they are in the right. In that kind of situation, Google's support process is not equipped to settle what is really a legal or contractual disagreement between two people, and it may ask for more documentation from both sides or simply move slowly while it tries not to take a side in something outside its control. If your situation involves an actual ownership or partnership dispute rather than a clean-cut external takeover, it is worth getting real legal advice in parallel with the Google process, since a support ticket alone cannot resolve a legal ownership question.
Locking the Profile Down Once You Have Access Back
Getting access back is only half the job. Immediately review the full manager and owner list and remove anyone you do not personally recognize or currently trust, even if they were added a long time ago. Turn on two factor authentication on the Google account tied to your listing, since this alone blocks a large share of simple takeover attempts that rely on a guessed or reused password. Avoid the common small business habit of sharing one login and password among several staff members, since you lose any ability to tell who made a specific change, and a person who leaves the company still has full access until someone remembers to change the password. Instead, add specific individuals as managers under their own Google accounts, and use a Google account actually owned by the business itself, not a single employee's personal account, as the primary owner. Run a free GBP scorecard check once things are stable again, since it is a fast way to confirm the profile is not just secure but also complete and accurate after the disruption.
Confirming Everything Is Actually Back to Normal
Once you have access restored and the manager list cleaned up, check the listing the way a customer actually sees it, not just inside your dashboard. A free Map Rank Check shows your listing exactly as it appears in live search results, which confirms your corrections truly reached the public version rather than just saving quietly in your account. If some of your edits do not appear to be showing up yet, that is not necessarily a sign of another problem, since public results can genuinely lag behind dashboard changes, and our related guide on edits not showing up walks through how to tell a normal delay apart from an edit that is actually stuck. Give it a day or two before you assume something else is wrong, and recheck from a phone as well as a desktop, since that is closer to how most customers will actually find you.
It is also worth telling your regular customers or staff nothing, no need to announce the incident publicly, since a quiet, competent fix is more reassuring than drawing attention to a problem that is already resolved. Keep your own written record of what happened and when, including dates you noticed the issue and dates you regained access, in case you need to reference the timeline again for a follow-up support request.
A hijacked listing is stressful, but it is rarely permanent, and most cases resolve once you have clean documentation and follow the right process instead of just repeatedly clicking around the dashboard hoping something changes. If you want a broader check on your whole local search setup once your listing is secure again, our free local SEO plan is a solid next step.
Frequently asked questions
How do I know if my Google Business Profile was actually hijacked?
First rule out simple explanations, like signing in with the wrong Google account or needing a password reset. Real signs include an unfamiliar primary owner or manager, hours or contact details changed without your team's involvement, or an ownership transfer notification you never approved.
How do I get my Google Business Profile back after a takeover?
Try the 'Request access' option first, since it works quickly if the current owner is willing to approve it. If that is ignored or denied, use Google's formal ownership verification and recovery process, providing documentation like a business license or utility bill to prove you are the legitimate business.
How long does Google take to restore a hijacked listing?
There is no fixed timeline, but a clear case with solid documentation often resolves within a week or two. A contested case, especially a dispute between former business partners, can take longer since Google is not positioned to settle a legal ownership disagreement on its own.
How can I prevent my Google Business Profile from being hijacked again?
Turn on two factor authentication on the Google account tied to your listing, avoid sharing one login among multiple staff members, and use a business-owned account, not a single employee's personal account, as the primary owner. Review your manager list periodically so old access gets removed.
What proof does Google need to confirm I am the real business owner?
Useful documents include a business license or registration, a utility bill or lease showing your business name and address, tax documents, and any identity tied to your business domain, such as a matching email address. The more complete your documentation on the first submission, the faster the process tends to move.