Google Maps spam
Locksmiths, garage doors, water damage, auto glass, air duct cleaning, chimney sweeping — Google has called these duress verticals. People search while something is already going wrong. Fake profiles, stuffed names, and lead mills have followed that panic for more than a decade.
Why these categories
The worst Maps spam is not random. It clusters where the customer is locked out, flooded, stranded, or staring at a cracked windshield — and will call the first number that looks local.
A restaurant spam listing has to survive a visit. A locksmith listing only has to survive a phone call. That is the whole business model. The customer is already in trouble. They type a city plus a trade. They tap the first pack result. They do not compare licenses, storefronts, or invoices until it is too late.
These trades are also mobile. Real companies drive to the job. That gave Google a legitimate reason to let service-area businesses hide a street address. Spammers used the same rule to look present in every suburb without owning a shop in any of them. Keyword-stuffed names did the rest: 24/7 Emergency Locksmith Dallas, Garage Door Repair Phoenix Phoenix, Miami Water Damage Restoration.
Lead-generation networks learned they could rent, hijack, or fabricate Google Business Profiles, route the call to whoever paid, and move the pin when Google caught up. Google’s own research, published with UC San Diego in 2017, found abusive listings living a median of only 8.6 days — short enough that volume beat quality. The categories below are where that volume still concentrates.
Notorious categories
None of these industries are the problem. Real shops in every one of them get buried by mills that treat a Business Profile like a paid ad. These are the categories operators still scan first.
The original
The poster child. Locked-out customers, bait-and-switch pricing, and listings that impersonate a licensed local shop. Google piloted extra verification for locksmiths (and plumbers) as early as 2017. In 2025, a Texas locksmith’s report helped kick off an investigation that Google said uncovered more than 10,000 illegitimate profiles.
Broken spring, same day
A snapped torsion spring is another panic search. Packs fill with “Garage Door Repair [City]” clones, shared phone numbers, and stock photos of the same white door. Many are call-center lead mills that dispatch whoever is closest — or whoever bought the lead — not a company with a shop in that town.
Insurance + flood
Burst pipes and storm claims create a rush to whoever answers. Spam names stack every keyword Google might match: water damage, flood restoration, mold, 24/7, plus the city twice. The listing looks like a local emergency crew. The website is often a national intake form.
Chip in the glass
Windshield work is insurance-driven and scheduled in a hurry. Fake or hijacked profiles sit on every highway corridor with names like “Auto Glass [City] Mobile Service.” The customer thinks they booked a nearby installer. The job gets sold downstream, sometimes at a shop they never searched for.
Inspection upsell
A category famous for cheap ranking and expensive “while we’re here” add-ons. Listings multiply across metros with stuffed titles, identical galleries, and pins on residential streets or virtual offices. Legitimate HVAC companies then have to compete with names that read like search queries.
Seasonal sweep
Fall and winter searches bring the same mill pattern: city in the name, service-area coverage that spans half a state, and reviews that do not match a real crew. It is a smaller trade than locksmithing, which is exactly why a few spam networks can own the pack.
The same playbook shows up in plumbing, HVAC, roofing, towing, moving, appliance repair, and — in waves — legal and medical. Google’s 2017 study found on-call services were the core of Maps abuse; brick-and-mortar fakes (hotels, restaurants) were the minority. If the customer comes to you, fraud is harder. If you go to the customer, a pin and a phone number are enough.
How Google fought back
Fake local listings existed before Maps. Google’s problem was that Maps became the new Yellow Pages — and verification that works for a cafe fails for a locksmith who never needed a storefront.
Google has said local-business scammers predate the internet: inflated ads and fake shops in bound directories. When Maps replaced that book, the incentive moved with it. Whoever owned the local pack owned the call.
Google Maps, then Places, then Google+ Local, then Google My Business, asked new listings to prove an address — usually with a postcard PIN. For a restaurant that works. For on-call trades, abusers rented UPS boxes, invented suite numbers, and requested hundreds of cards to the same building. Phone verification could be phished or shared.
Google later teamed with UC San Diego on “Pinning Down Abuse on Google Maps.” They studied listings created from June 2014 through September 2015 and later suspended for abuse. Tens of thousands of abusive listings were registered per month. At least 40% were on-call services. The same UPS-store address might host tens or hundreds of profiles. Google later marked June 2015 as the all-time peak of fake listings.
Google said those findings cut fake listings by about 70% from the 2015 peak. Bulk registrations at most addresses were blocked. Far-away “moves” needed extra proof. Mangled address text — a trick to confuse filters — started getting ignored. Machine learning looked for the data mismatches common to fakes. Google also piloted advanced verification for locksmiths and plumbers, the two categories that had taught everyone how Maps could be farmed.
Google’s Business Profile name rules tightened around a simple idea: the title should match the real-world name on the building, site, and paperwork — not “Best Garage Door Repair Austin 24/7.” Service-area businesses were allowed to hide a street address so mobile companies were not forced to drop a pin on a house. Spammers treated both rules as a product spec: stuff the city in the name, hide the address, cover twenty ZIP codes from a call center.
In “How we fight fake business profiles on Google Maps,” Google said it had removed more than 3 million fake profiles the prior year — over 90% before a user could see them, over 85% from internal systems. Users still reported more than 250,000. Google disabled more than 150,000 abusive accounts. That same year it pointed people to a new bulk path: the Business Redressal Complaint form, still the official way to send Maps URLs and say what is wrong. It also said it was applying extra techniques to categories with rising fraud.
The product renamed. The spam did not. Video checks, phone checks, and document reinstatement became more common. So did the cat-and-mouse around them: fake storefront photos, recycled documents, and networks that re-verify a suspended profile under a slightly different name.
Google told reporters it removed or blocked about 12 million fake business profiles in 2023. Operators in locksmith, garage door, and restoration still saw stuffed names on page one. Volume of enforcement is not the same as a clean local pack. Spam that lives eight days can still steal a weekend of emergency jobs.
Google filed a federal lawsuit alleging a network created or hijacked more than 10,000 Business Profiles, stacked fake reviews, and sold consumer leads. Coverage of the case said the investigation started when a Texas business flagged an unlicensed locksmith impersonating them. Google described the targets as duress verticals: locksmiths, towing, HVAC, and similar emergency trades. Automated filters plus analysts still sit next to the same user tools: flag a single profile, or send a batch through redressal.
Drawn from Google’s 2017 research with UC San Diego (“Pinning Down Abuse on Google Maps”), Google’s 2017 and 2019 Maps blog posts on fake listings, Google’s Business Profile name guidelines, and 2025 reporting on Google LLC v. Asayag. Google decides what happens to any listing. GBP Takedown is not affiliated with Google.
What still works
Postcard tricks are harder. Bulk pins on one UPS store are harder. Entire networks can get sued. The leftover spam is the kind a customer still sees: a city in the title, a hidden address, a phone that does not belong to a shop on that street.
Guidelines still say: no city, no slogan, no service list in the business name. That is why GBP Takedown tags US city words in titles first. It is the pattern you can prove from the public Maps card without guessing what happens after the call.
When bulk postcards died, spam shifted to service-area hide-the-address listings, residential pins, and virtual offices. A shown residential address is a different kind of evidence than a stuffed name — both belong in a report when they break the rules.
Google’s internal systems catch most fakes before anyone searches. The listings that survive are the ones that look almost real. Mass-flagging every city-name hit would hit legitimate brands named after a town. Review, then send the Maps URL.
A single “suggest an edit” is easy to ignore at scale. The Business Redressal Complaint form is how operators send many public profile URLs with a factual description. GBP Takedown is built around that form, not around a ranking trick.
Search Maps the way a locked-out customer would. Tag geo-stuffed names. Queue the ones that break Google’s rules, and report them through the official flow.