A practical cleanup process for malicious or incorrect citations submitted under your business name, from detection through directory correction.
Every time I audit a new Google Business Profile after a client suspects something's wrong, I ask the same first question: has anything about your business information changed recently that you didn't do yourself? The answer to that question, more often than business owners expect, is yes, and it usually traces back to citation spam, bad NAP data pushed to directories under a business name without the owner ever submitting it.
Citation spam shows up as a sudden cluster of new or altered listings with incorrect information appearing across multiple directories within a short window, which is different from the slow, natural drift every business experiences as directories go stale over time. Before starting a cleanup, confirm you're looking at an attack pattern and not just years of accumulated small errors.
Run a basic citation scan across your top 30 to 50 directories and note two things: how many listings show incorrect information, and when those listings were created or last updated. A handful of outdated listings from five years ago is normal drift. Fifteen new or altered listings that all appeared within the same two-week window is a different story entirely.
I ran this exact check for a pizzeria in Denver whose ranking had quietly slipped over about a month. Three different directories showed a suite number that didn't match their actual location, all updated within nine days of each other. That timing concentration was the giveaway that this wasn't ordinary directory decay.
Action Step: Before doing anything else, pull a timestamp on when each incorrect listing was created or edited. That single data point tells you whether you're dealing with drift or an attack.
Document every directory showing incorrect business information before correcting anything, since fixing listings one at a time without a master inventory leads to missed duplicates and repeated work. Treat this like triage: know the full scope before you start treating individual wounds.
For each affected listing, record:
Running a proper local citation audit speeds this up considerably compared to manually searching your business name across dozens of directories one at a time. Whichever method you use, the goal is the same: one master list before you touch a single correction.
💡 Pro Tip: Sort your inventory by directory authority. Fixing incorrect data on Yelp, Facebook, and other high-authority directories first has more immediate impact on your local ranking signals than working through smaller, low-traffic directories.
Prioritize correcting your Name, Address, and Phone number on the highest-authority directories first, then work down through industry-specific and local directories, rather than fixing listings in whatever order you happen to find them. This tiered approach gets your most impactful signals correct fastest.
Think of your citations in three tiers:
For claimed listings showing incorrect data, log in and correct the fields directly. For unclaimed duplicates or altered listings you don't control, most directories have a claim or dispute process, though the exact steps vary by platform. Where a directory offers no claim path at all, a direct support request citing your official business registration is usually the next step.
⚠️ Common Mistake: Fixing Tier 3 directories first because they're easier to access, then running out of time or attention before getting to Tier 1. Impact should drive your order, not ease of access.
A duplicate listing, a second, unauthorized profile for your business rather than one existing profile with wrong information, needs to be merged or removed entirely rather than corrected in place. Trying to "fix" a duplicate by editing its data just leaves you with two accurate listings competing against each other instead of one wrong listing and one right one.
On Google specifically, duplicate Business Profiles can often be merged directly if you're the verified owner of the primary listing, or reported for removal through Google's process for resolving duplicate profiles if you don't control the duplicate. On third-party directories, most have a dedicated "report duplicate" flow separate from a standard edit request.
I helped an HVAC company in Tampa work through exactly this: four active Google listings, only one legitimately claimed. Merging the three unclaimed duplicates into the primary listing, rather than trying to edit each one, was what actually fixed their ranking. The business jumped from position 6 to position 2 within three weeks once the duplicates were consolidated.
Action Step: Before correcting any listing's data, confirm whether it's actually a duplicate first. Merging is the right fix for duplicates. Editing is the right fix for a single wrong listing.
Write down the exact, single correct version of your business name, address, and phone number before correcting a single directory, since using slightly different formatting across your cleanup (like "St" in one place and "Street" in another) recreates the same NAP consistency problem you're trying to fix. This becomes your reference copy for every correction going forward.
The strangest inconsistency I ever found wasn't even from an attack, it was a pizza place in Denver with three different suite numbers across 22 directories after moving offices twice and never updating anything beyond their own website. Whether the inconsistency comes from an attack or years of internal neglect, the fix is the same: one locked format, applied everywhere.
Your NAP standard should specify:
📊 Flento Data: Across the citation cleanups Flento has run for US local businesses, listings corrected to an exact, locked NAP standard saw citation accuracy scores improve by an average of 45 percentage points within 30 days.
Set a recurring monthly citation check after your initial cleanup, since a business that's been targeted once by citation spam, or has simply drifted into inconsistency once, tends to see the same pattern resurface without ongoing monitoring. A cleanup is a project with a start and end date. Consistency is not.
This matters more for businesses in competitive categories or metro areas where the underlying incentive for an attack, if that's what caused the original mess, hasn't gone away. It also matters simply because directories change ownership, merge, or update their systems in ways that can silently reintroduce old, incorrect data even without any malicious intent involved.
A simple monthly routine:
Done? Run the full audit before assuming a single listing fix has solved the problem.
Q: How long does a full citation cleanup usually take? A: For a single-location business with a moderate number of affected listings, most cleanups take one to two weeks of focused work. Multi-location businesses or severe cases can take longer, particularly when several duplicate listings need merging rather than simple correction.
Q: Should I fix every directory, even ones with almost no traffic? A: Prioritize Tier 1 and Tier 2 directories first, since they carry the most ranking and consumer-visibility weight. Low-traffic Tier 3 directories are worth cleaning up eventually for full consistency, but they shouldn't come before the directories that actually move your rankings.
Q: What if a directory has no way to claim or edit a listing? A: Most directories without a self-serve claim process still have a support contact. Reach out directly, cite your official business registration or license, and request the correction or removal manually.
Q: Can citation spam actually get my Google Business Profile suspended? A: It's not the most common cause of a suspension, but severe NAP inconsistency across the web can contribute to Google flagging a profile for review in more serious cases.
Q: Is it worth hiring someone to do a citation cleanup, or can I do it myself? A: A single-location business with time to invest can absolutely do this manually. Multi-location businesses, or anyone managing more than a handful of affected directories, usually save significant time using a citation management tool instead of manual searches across dozens of sites.
Q: How do I know if I should merge two listings or just delete one? A: If one listing is verified and accurate, and the other is an unauthorized duplicate, merging (when the platform supports it) or reporting the duplicate for removal is the right move. Never delete a listing that might be your only verified, accurate presence on that directory.
Q: Will fixing my citations alone bring my rankings back? A: Citation accuracy is one input among several. It's often a meaningful piece of a ranking recovery, but if other factors (reviews, content, backlinks) also declined, a citation cleanup alone may not fully restore your previous position.
The pizza place in Denver had three different suite numbers spread across 22 directories, the kind of mess that's nearly impossible to track by memory or a spreadsheet once you're past a handful of listings. Manually checking dozens of directories one at a time is exactly the kind of repetitive process that eats a business owner's week for no strategic reason.
Flento's Business Listing Management Software scans 50+ directories in one pass, flags every inconsistency against your locked NAP standard, and pushes corrections without you logging into each platform separately. What would take days of manual checking, the way it did for Maria's Kitchen in Phoenix before her team automated it, takes closer to 10 minutes.
The businesses that win at local SEO long-term aren't doing more work than everyone else. They've built systems that keep citations consistent without anyone having to remember to check. That's the real advantage, and it's available to any business willing to set it up once. Get started free → and run your first full citation scan today.
