Epic Web Studios
Epic Insights
Edition 37  ·  Sep 15, 2026

The One Thing You Don't Get to Approve

Your website shows only what you put on it or approve, or at least I hope that's the case. Your Google listing doesn't work that way. Anybody with a Google account can add a photo to yours, and it goes live before anyone looks at it.


The Big Story

Anybody Can Publish to Your Google Listing

Your Google Business Profile is the only asset in your marketing that other people can add to. Photos from any contributor. Suggested changes to your hours and address. Answers to questions about your business from people who've never walked in. None of it waits for your sign-off. It publishes, and then it gets reviewed, if it gets reviewed.

Here's what that buys somebody who's looking for a way in. This month Naomi Stevens found an AI-generated photo sitting on a client's profile: the company's name printed across it, and a phone number that belonged to somebody else. She checked the account that uploaded it and found the same number on photos across more than 150 unrelated businesses. Anyone who read that number off the picture and dialed it reached a stranger.

She reported the image. Support sent back a list of fixes for common problems, none of them hers. She uploaded a logo and a cover image to try to push it down the gallery, and it stayed put. It came off after Barry Schwartz wrote about it at Search Engine Roundtable on September 10.

Google is screening this at a scale nobody else could manage. By its own count it blocked 79 million bad edits and pulled 13 million fake profiles last year, and in April it announced Gemini models screening edits before they publish plus email alerts so verified owners can review them. Those alerts cover edits. A photo somebody uploads is a different surface, and it showed.

Scale catches patterns. It doesn't catch yours, today. Whatever is sitting on your listing right now has been there since the last time a human being looked, and that's the whole exposure. Fifteen minutes closes it.

What this means for your site
Your listing is the one place where somebody else can publish about your business and you find out afterward. Nothing is going to tell you it happened, so the checking has to be yours.

Your move: Open your listing on your phone tonight and scroll the photo gallery all the way to the end. Anything you didn't upload, zoom in and read the text inside it.


Quick Hits

The rest of the week, in bite-sized pieces

One Dead Link Can Switch Your Ads Off
We caught this on a managed account recently. A page came down, an ad was still pointing at it, and Google disapproved the ad because the destination returned a 404. Disapproved ads don't run, so the spend and the leads stop together, and the first you hear about it is an automated policy email that reads a lot scarier than the fix actually is.
Your move: Retiring or renaming a page? Check what's pointing at it first. Your ads, the website link on your Business Profile, your booking link.
Two Form Plugins Are Under Active Attack
Wordfence reported hundreds of thousands of blocked exploit attempts against file upload flaws in Elementor Pro, patched in 4.2.2 on August 19, and Super Forms, patched in 6.3.314. Both need a published page carrying a form with a file upload field before an attacker can reach them, which narrows it.
Your move: On WordPress with either plugin? Confirm you're on 4.2.2 and 6.3.314 or later this week. If we maintain your site, no worries, we got you.
Google Is Handing Back a Number It Took Away
Google retired post view counts in 2023, so for about three years there was no telling whether anybody saw an offer or an event you published. The September Small Business Bulletin says they're back, covering the last 18 months and blending Search and Maps into one number, though clicks aren't back and Google hasn't defined what a view is.
Your move: Open the Posts section of your Business Profile and see which of your last few posts anybody actually looked at.
Google Analytics Added Custom Dashboards
Google is rolling out Dashboards in Analytics, a single page where you drag the numbers you care about onto one screen instead of clicking through separate reports. Score cards, line charts and funnels all live on the same canvas.
Your move: Tell us the three numbers you actually want to look at, and we'll put them in front of you in your Client Center.

Ask Epic

"We got a one-star review we're pretty sure came from a competitor. Can we get it taken down?"

You can report it, and Google does pull a lot of them. Their own 2025 numbers say 292 million policy-violating reviews blocked or removed. So it's worth doing.

Just know what the bar is. Google removes reviews that break a policy, not reviews that are unfair. If there's no name, no visit and no detail, you've got a case worth making. If it's just somebody being harsh, it's probably staying, and it can take a while either way.

So the better protection is the one you control. One bad review out of thirty reads as a bad day. One out of six reads as a pattern. Keep the count climbing and a single spiteful star stops mattering.

Reply to it in public, short and calm, no arguing the facts. Then keep asking customers for reviews the clean way: ask everybody, don't tell them what to say, don't screen for the happy ones, don't offer anything for it. Google's enforcing all three of those now, and a stripped profile hurts worse than the review did.


What Epic's doing for you this week
We're scrolling the photo galleries on every Business Profile we manage, looking for anything uploaded by somebody who isn't the business. It's not a thrilling job and it's apparently the only version of quality control there is. We're also running link checks across ad destinations and profile links so nothing's pointing at a page that no longer exists, and confirming the owner email on each profile is an address somebody still reads, because that's where Google sends its alerts. Whatever turns up lands in your Client Center.

Your 15-minute self-audit

Look at What Other People Put on Your Listing

1. Scroll the whole gallery on a phone. Not the dashboard, the listing the way a customer sees it. Go past the first row until you reach the end, and read the text inside any picture that has some. Phone number, web address, price, hours. All of it should be yours and current.

2. Read your questions and answers. Anyone can answer a question about your business, and whatever they said is sitting there as your answer until you write a better one.

3. Check the owner email on the profile. Google sends its alerts to the verified owner. If that's an address from two staff members ago, fix it now, because it's the only heads-up you get.


Thanks for reading! Got questions? Ideas? I'm all ears. Share your thoughts with me and help shape future editions of Epic Insights.

— Kristy Freeman
Epic Web Studios
k.freeman@epicwebstudios.com

Talk to Epic →

Return to all