Google Business Profile Verification Is Getting Stricter — and Scammers Are Calling About It

What owners are reporting

In late October 2026, a few people on X described stricter Google Business Profile verification — including a government ID upload option in at least one country — and cold calls claiming a profile is flagged or about to be suspended unless owners “verify” right away. Those were individual posts, not a study. Walk Google’s own help pages so you know what real verification looks like before anyone rushes you.

This is different from a Meta Page lockout, a Google Ads suspension, a hacked site or Search Console takeover, or general email phishing. Here the target is your Google Business Profile on Search and Maps.

How real GBP verification works

Google’s Verify your business on Google page is the primary guide. You need to verify before you can fully edit hours, name and other details. Methods are automatically determined by Google and can’t be switched by you. Availability depends on business type, public info, region or hours; sometimes Google asks for more than one method.

Methods Google documents today include:

Phone or text — a code to your business phone. IVR systems won’t receive it; answer or open the text, then enter the code on the profile.

Email — follow the steps in the message Google sends.

Live video call — not available for every business; only during that location’s business hours. You show the place and proof you manage it on camera with a support representative.

Video recording — Google’s video verification help explains uploading a live, unedited clip of at least 30 seconds from a mobile device through the Business Profile. Pre-recorded offline clips are not allowed, and the video must not include sensitive info like bank, tax or ID numbers.

Postcard — if offered, Google mails a code (often within 14 days). Codes expire after 30 days. Google’s help is explicit: keep the code secure, Google will never ask for your verification code, and you should not share it with anyone — including people who manage the profile for you.

After you finish, Google may take up to five business days to review (sometimes instant, such as with Search Console website verification or bulk verification). You’ll get a confirmation email when verified. If “Get verified” returns later, try again with the options offered.

Government ID uploads: what’s known and what isn’t

Google’s main verify-help page does not list government ID photo upload among official methods. Trade coverage such as Search Engine Roundtable on Oct. 20, 2026 reported owners seeing a screen that says roughly “Submit an Identity Verification,” “Upload a photo of your government ID,” and that the ID is only used for verification and won’t be shown publicly. Separate posts on X described a similar option in Spain. That is not a published global rule. If an identity upload appears inside your own signed-in Business Profile, it may be a limited test or region-specific option — rollout details are still unknown. Do not send government ID, personal info or codes to a cold caller claiming to be Google support.

How the fake “your GBP is flagged” call works

Google’s Help protect your Google Business Profile page warns about phone calls, emails or texts from people who offer to help with your Business Profile in exchange for money — including people claiming to be Google support or Google employees. Google does not charge for that service. Tip: Google will never ask for a one-time code or PIN, and will never pressure you to pay to keep a profile verified or reinstated.

The fraudulent calls and texts help page adds: if someone calls pretending to be from Google, hang up — do not press buttons even if a prompt tells you to. Legitimate automated Google Maps calls about hours or services won’t ask you to sign up, pay, or give personal info.

Practical red flags on a cold call:

Urgency: “suspended today unless you verify now.”

They want you to read a code from a text, share a postcard PIN, or approve a remote screen session.

They ask you to pay a fee to “reinstate” or “keep verified.”

They send a link that is not opened from your own Business Profile while you are already signed in.

They want photos of your government ID emailed or texted to them.

None of that matches Google’s documented verify or appeal flows.

If Google actually asks you for more proof

Real requests show up when you open your Business Profile signed in — “Get verified,” a live-video or video-upload path, or a request for more details after recent edits. Follow the on-screen options Google offers. Prefer video when Google recommends it. For postcard codes, enter them yourself on the profile; never read them to a caller.

If the profile is truly suspended or disabled, Google’s Fix suspended or disabled profiles and appeals pages describe using the Google Business Profile appeals tool while signed into the owning account. Optional evidence can include business registration, a license, tax certificates or utility bills matching the profile name and address. Appeals are typically submitted once; don’t create a duplicate profile. Reviews can take up to about five business days. That path lives inside Google’s tools — not a high-pressure phone script.

A calm checklist for this week

Sign in and open your Business Profile yourself. Confirm you still have owner access and that no unknown managers appeared.

Turn on two-factor login on the Google account that owns the profile. Limit owners and managers to people who need access; remove ex-employees.

If verification is pending, use only the methods Google shows on that profile. Do not chase a method that isn’t offered.

If a caller claims a flag or suspension, hang up. Then check the profile and, if needed, the appeals tool — do not call back a number from the scam.

Never share postcard codes, one-time codes, PINs, government ID photos or remote-control access with a cold caller.

In the U.S., Google points owners toward FTC and FCC complaint paths for persistent suspicious calls; use those official channels, not a number the caller gave you.

What we don’t know

I can’t say whether every market will get government ID verification or how long any test will last. Google’s public help still centers on phone, email, live video, video upload and postcard. Treat ID-upload screens as possible and region-specific until Google documents them. Verify and appeal only inside your signed-in Business Profile, and hang up on anyone who tries to shortcut that.

How Local Business Search can help

We help local owners harden Google Business Profile access, complete the right verification path, and set up simple monitoring so fake “suspension” calls don’t panic the team. We also cover small-business IT, practical AI products and setup, AI consulting, marketing, websites, and EV or Tesla-related services. How-to videos are coming soon.

If a caller has you worried about your listing, or you want a second set of eyes on verification and owner access, contact Local Business Search and we’ll walk the next step with you.