{"success":true,"data":{"id":"fake-google-business-profile-verification-lure","label":"Fake Google Business Profile verification lure — \"verify your GBP / GMB listing within 24 hours or it will be removed from Maps / Search\" targeting SMB owners; Google-account credential harvest leads to phone-number redirect, review hijack, customer-PII exfil from Q&A inbox","description":"Fake \"verify your Google Business Profile within 24 hours or your listing will be removed from Google Maps / Search\" email targeting small-business owners (restaurants, salons, dentists, plumbers, auto repair). Harvests the Google account credentials of the GBP manager. Once compromised, attackers redirect the business phone number to a scam line, rewrite hours, hijack the review stream (delete negatives, flood competitors), and exfil customer PII from the Q&A + messaging inboxes. Google Business Profile is the #1 discovery surface for local-services businesses, so owners react fast to \"listing at risk\" threats — losing Maps ranking means losing revenue. BleepingComputer and Krebs documented sustained 2024-2025 campaigns; 2026 variants scaled with the new verification UX rollout. Fires when the body references Google Business Profile / GMB / GBP / business listing AND contains verification / suspension / removal urgency. Excludes google.com, business.google.com, mybusiness.google.com, support.google.com, googleapis.com umbrellas. Auto-classified as danger via the `-lure` suffix.","tier":"danger","category":"scam","isThin":false}}