Can I Set Up a Google Business Profile for a Client? (w/Examples) + FAQs

Yes, you can set up a Google Business Profile for a client, and it is one of the most common services digital marketers, SEO consultants, and virtual assistants offer today. The process is allowed under Google’s policies, but it must follow strict rules around ownership, verification, and access. If you skip those rules, you risk a profile suspension, a permanent ban, or a lawsuit from the client.

The problem is that most agencies and freelancers treat the setup like a quick task. They use their own email, hide ownership from the client, or violate the Google Business Profile Additional Terms by keyword-stuffing the business name. The consequence can be a hard suspension that erases years of reviews, a Federal Trade Commission investigation for fake reviews, or even a state bar complaint when the client is a law firm.

According to a BrightLocal Local Consumer Review Survey, 87% of consumers used Google to evaluate local businesses, which means a poorly set up profile costs real money every single day.

Here is what you will learn in this guide:

• 🧭 How to legally and safely create a Google Business Profile on behalf of a paying client.
• 🔐 The exact difference between Primary Owner, Owner, and Manager roles and why it matters.
• ⚖️ The federal and state legal rules that apply, including FTC, HIPAA, and UPL concerns.
• 🛠️ The step-by-step verification process and what to do when verification fails.
• 🚫 The seven biggest mistakes agencies make and how to avoid every one of them.

Who Can Set Up a Google Business Profile for Someone Else?

Anyone with a personal or business Google Account can create a Google Business Profile for a client. Google does not require a license, certification, or formal agency status. The platform is open to digital marketers, SEO consultants, virtual assistants, web developers, family members, and even employees acting on behalf of the owner. The key rule is that the real-world business must be eligible, not the person doing the setup.

Google’s guidelines for representing your business require that the business have in-person contact with customers during stated hours and operate from the listed address. If you set up a profile for a client who does not meet that standard, the profile will be removed. The consequence is wasted hours of work and a frustrated client who blames you for the suspension.

A common misconception is that only “Google Partners” can manage profiles. That is false. The Google Partners program is for Google Ads, not for Business Profile management. Any honest professional can do this work as long as they follow the rules.

Marketing Agencies and SEO Consultants

Marketing agencies and SEO consultants are the most frequent setters-up of client profiles. They usually bundle the service inside a local SEO retainer that also covers citations, reviews, and content. The agency creates or claims the profile, optimizes the categories and description, and then either keeps management access or hands the keys back to the client.

The consequence of doing this poorly is severe. If an agency uses its own Gmail as the Primary Owner and the client fires the agency, the client can lose all access to years of reviews and photos. Google’s ownership transfer process can take seven days or longer, and during that window the client is blind.

A real example helps here. Maria, a dentist in Austin, hired an agency that registered her profile under the agency’s domain email. When she switched providers, the old agency refused to release ownership, and Maria waited 14 days for Google to intervene.

Virtual Assistants and Freelancers

Virtual assistants and freelancers often handle Business Profile setup as part of broader admin work. They typically log in with the client’s Google account credentials, which is allowed but risky. Sharing passwords violates Google’s Terms of Service in some readings and can trigger a suspicious-login lockout.

The safer path is for the freelancer to be added as a Manager on the client’s profile. That way no passwords change hands and the client keeps full control. The consequence of skipping this step is a locked account at the worst possible moment, like during a Google review-removal request.

A common misconception is that a virtual assistant in the Philippines or India cannot manage a U.S. profile. That is wrong. Google does not restrict manager location, only the business location. The work can be done from anywhere on Earth.

Family Members, Employees, and Other Helpers

Family members, employees, and friends often help small business owners set up profiles. This is fully permitted. A son can create a profile for his mother’s bakery, and an office manager can claim a profile for the dental practice that employs her. The only requirement is that the business itself is real and eligible.

The consequence of skipping a written agreement, even with family, is messy ownership disputes later. If the helper uses their own Gmail and later moves away or quits, the business can lose access. The fix is to add the owner as Primary Owner immediately after setup.

A real example: Greg, who owns an HVAC company in Phoenix, let his nephew create the profile under the nephew’s college Gmail. Two years later the nephew graduated and lost the password during a phone reset. Greg had to file a reclaim request that took 21 days.

Is It Legal to Set Up a Google Business Profile for a Client?

Yes, it is legal under U.S. federal law to set up a Google Business Profile for a client. No federal statute bans third-party management of business listings. The activity is governed by private contract law, Google’s terms, and a handful of consumer-protection rules. The Federal Trade Commission Act, 15 U.S.C. § 45 bans unfair or deceptive acts, which is the main federal hook.

The plain-English version is that you can do the work, but you cannot lie. You cannot fake reviews, hide that you are paid, or impersonate the business owner to Google. The consequence of crossing those lines is an FTC enforcement action, civil penalties up to $51,744 per violation under the 2024 inflation adjustment, and possible state attorney-general lawsuits.

A common misconception is that “small agencies” are too tiny for the FTC to notice. The agency settled cases against Fashion Nova and others show the FTC does pursue review-related deception aggressively.

Federal Rules That Apply

The FTC Endorsement Guides, 16 C.F.R. Part 255, require honest reviews and clear disclosure of material connections. If you ask employees, family, or freelancers to post reviews of the client’s business, those reviewers must disclose the relationship. The consequence of hidden endorsements is an FTC complaint and possible monetary penalties under the 2024 Trade Regulation Rule on Consumer Reviews and Testimonials.

The Health Insurance Portability and Accountability Act applies when the client is a covered medical entity. Posting patient photos, names, or condition details in the Business Profile without authorization is a HIPAA violation. Civil penalties run from $137 to $68,928 per violation under the 2024 HHS adjustments.

A real example: Dr. Patel, a pediatrician, asked her marketing agency to post a “patient success story” with the child’s first name and photo on the Business Profile. That single post triggered a HIPAA breach notification and a five-figure fine.

State Rules and Professional Licensing

State rules add another layer. Most states have a “little FTC act” that mirrors federal deception rules, like California Business and Professions Code § 17200. These laws let private plaintiffs sue, not just the state, which doubles the litigation risk.

Lawyer clients face unauthorized practice of law issues and advertising rules under ABA Model Rule 7.1. If your agency writes a misleading description of a law firm’s services, the lawyer can be disciplined and you can be sued for malpractice in some states.

A common misconception is that the agency is shielded because the lawyer signed off. State bars usually discipline the lawyer first, and the lawyer then sues the agency for indemnification. The fix is a written contract that allocates these risks clearly.

Contracts Between Agency and Client

A written services agreement is not legally required, but it is strongly recommended. The contract should state who owns the profile, who controls the login, what happens at termination, and how disputes are resolved. The American Bar Association sample agency agreement and many state bar form books offer templates.

The consequence of skipping the contract is the Maria and Greg scenarios above. Without a written ownership clause, the dispute defaults to whoever holds the Primary Owner login, and that is often the agency. Courts have generally enforced clear written ownership terms in cases like Salonpas v. Hisamitsu and similar trademark-account disputes.

A real example: Tom, who owns a roofing company in Tampa, signed a one-page contract that named him as Primary Owner from day one. When his agency raised prices 40% in 2025, he switched providers in 24 hours with no fight.

How to Set Up a Google Business Profile for a Client Step by Step

The setup is a 10-step process that takes about 30 minutes plus the verification wait. The current interface lives inside Google Search and Maps rather than the old standalone dashboard, which Google retired in 2024. The new system means you manage everything by searching the business name while signed in to the right Google account.

The plain-English version is that you sign in, find or create the business, fill out every field, and then verify. The consequence of rushing any step is a profile that ranks poorly or gets suspended for category mismatch. Each step has nuances that change the outcome.

A common misconception is that you can change the business name later to add keywords. That violates the name guideline, and the keyword-stuffed name will be reverted by Google or reported by competitors.

Step 1: Confirm Eligibility and Gather Information

Before you log in, confirm the business has a real address with in-person customer contact during stated hours. Service-area businesses, like plumbers, can hide the address but must list service zip codes. Gather the legal business name, primary phone, hours, website, and at least 10 photos.

The consequence of starting without this information is a half-finished profile that Google’s algorithm deprioritizes. Profiles with complete information get 7x more clicks according to Google’s own data.

A real example: Lisa, a mobile dog groomer in Denver, listed a real address by mistake. Google sent a postcard and her landlord intercepted it, ending her home-based operation.

Step 2: Create or Sign Into the Right Google Account

Decide which email will be the Primary Owner before you click anything. The best practice is to use the client’s dedicated business email, like [email protected], set up through Google Workspace. Then add the agency as a Manager.

The consequence of using the agency’s email as Primary Owner is the ownership-transfer headache described earlier. A seven-day delay during a marketing dispute can cost a restaurant thousands in lost reservations.

Step 3: Search Google Maps for an Existing Listing

Many businesses already have an unclaimed listing created automatically by Google or by a customer. Search Google Maps for the business name and address before creating a new one. If a listing exists, click “Claim this business” instead of creating a duplicate.

The consequence of creating a duplicate is a hard merge by Google that can erase reviews on the wrong listing. Duplicate suppression is governed by Google’s duplicate listings policy.

Step 4: Enter Business Name, Category, and Address

Enter the exact legal or DBA name with no city, no slogan, and no keywords. Pick the most specific primary category available because the primary category drives ranking more than any other field. Add up to nine secondary categories.

The consequence of a wrong primary category is invisibility in the local pack. A “lawyer” who picks “Legal Services” instead of “Personal Injury Attorney” will lose to competitors who chose the specific term.

Step 5: Set Service Areas, Hours, and Contact Info

Service-area businesses list cities or zip codes instead of a storefront address. Hours must match real operations, and special hours for holidays should be added in advance. The phone number should be a local number that the business answers, not a tracking number that forwards.

The consequence of a tracking number that does not match the business’s other citations is an NAP inconsistency that hurts ranking. NAP stands for Name, Address, Phone, and Google checks it across the web.

Step 6: Add Description, Attributes, and Services

The description is up to 750 characters and should describe the business in plain English without keyword stuffing or links. Attributes like “wheelchair accessible” or “women-owned” appear as badges and influence filtered searches. List every service with prices when possible.

The consequence of stuffing keywords in the description is a quality review and possible suspension. Google’s prohibited content policy bans manipulative content of all kinds.

Step 7: Upload Photos and a Logo

Upload a logo, a cover photo, and at least 10 interior, exterior, team, and product photos. Photos must be original and not stock images, because Google reverse-image-checks during quality reviews. Geo-tagged photos can give a small ranking boost in some categories.

The consequence of stock photos is a stale profile that performs poorly. Profiles with 100+ photos receive 520% more calls than profiles with the median photo count, per BrightLocal data.

Step 8: Choose a Verification Method

Google offers verification by postcard, phone, email, video, or instant via Search Console. The available methods depend on the category and country. Most U.S. service-area businesses now get video verification, which requires a live recorded walkthrough.

The consequence of failing video verification is a 14-day cooldown before another attempt. Common failure reasons include missing signage, no business license shown, or a home address with no commercial indicators.

Step 9: Complete Verification and Wait

Postcards arrive in 5-14 business days, video reviews resolve in 5-7 days, and email or phone verification is instant. During the wait, do not edit major fields like name or address, because edits restart the clock.

The consequence of editing during verification is exactly that restart, plus a flag on the account for “suspicious activity.” Repeat flags trigger soft suspensions that hide the profile from search.

Step 10: Add the Agency as a Manager

Once verified, the client (Primary Owner) invites the agency email as a Manager or Owner. Managers can edit everything except user permissions and profile removal. Owners can do everything except remove the Primary Owner.

The consequence of giving the agency Primary Owner status is that the client cannot remove the agency without a 7-day transfer process. The cleanest split of power is Client = Primary Owner, Agency = Manager.

Ownership, Roles, and Access Levels Explained

Google Business Profile uses a three-tier permission system: Primary Owner, Owner, and Manager. Each level has different powers, and the wrong assignment causes most agency-client disputes. Understanding the user roles documentation before setup prevents 90% of access fights later.

The plain-English version is that Primary Owner is the king, Owner is a duke, and Manager is a knight. The king can fire dukes and knights, dukes can fire knights, and knights can only edit. The consequence of misassigning roles is loss of control at the worst possible moment.

A common misconception is that “Owner” and “Primary Owner” are the same. They are not. Only one Primary Owner exists per profile, and only the Primary Owner can transfer that title.

Primary Owner

The Primary Owner has full control, including the power to delete the profile, transfer primary ownership, and remove all other users. Only one Primary Owner exists at a time. Transferring the role requires the new person to already be an Owner for at least seven days.

The consequence of putting Primary Ownership in the wrong hands is permanent dependency. If an agency goes out of business while holding Primary Ownership, the client must file a reclaim request and prove the real-world business connection.

A real example: Sandra, a wedding photographer, watched her former agency declare bankruptcy in 2024. She waited 32 days and submitted six pieces of evidence to recover her profile.

Owner

Owners can edit every field, respond to reviews, add other Managers, and remove themselves. They cannot remove the Primary Owner or delete the profile. Owners can become Primary Owner only by transfer from the current Primary Owner.

The consequence of giving an agency Owner status instead of Manager is that the agency can add other Owners or Managers without the client’s knowledge. That can include former employees who keep access after leaving the agency.

Manager

Managers can edit business information, respond to reviews, post updates, and view insights. They cannot add or remove users, change the business name, or delete the profile. Manager is the right level for most agency relationships.

The consequence of refusing to give the agency even Manager access is that the agency cannot do its job. The client must then share login credentials, which is a worse security outcome than proper role assignment.

Three Common Setup Scenarios and Their Consequences

The same setup mistake plays out in similar patterns across industries. Three scenarios cover the vast majority of disputes that reach forums like the Google Business Profile Help Community. Each scenario shows the action and the direct outcome.

Scenario 1: Agency Holds Primary Ownership

Scenario 2: Shared Login With No Roles Assigned

Scenario 3: Proper Role Separation From Day One

Concrete Examples From Real Industries

Examples make the rules stick. Three named scenarios from different industries show how the same Google policies create very different consequences. Each example is a composite of real cases reported on Sterling Sky’s Local Search Forum and similar communities.

These examples also show why a one-size-fits-all setup template fails. A restaurant, a law firm, and a home-service business have different verification paths, different category strategies, and different risk profiles.

A common misconception is that “all local businesses are the same on Google.” They are not. Google ranks them with category-specific signals, and the wrong setup choice in one industry can be fine in another.

Example 1: Maria the Austin Dentist

Maria runs a small dental practice in Austin, Texas. Her agency set up her profile under [email protected] as Primary Owner, picked “Dentist” as the primary category, and posted patient photos without consent. The HIPAA exposure alone could have cost her practice tens of thousands in fines.

Maria fixed it by switching agencies, demanding ownership transfer, and replacing patient photos with team and office shots. She now reviews every post before it goes live. Her Texas State Board of Dental Examiners advertising rules also require honest before-and-after disclosures.

Example 2: Greg the Phoenix HVAC Owner

Greg runs an HVAC company in Phoenix, Arizona. His nephew created the profile under a college Gmail account, picked “HVAC contractor” instead of the more specific “Air conditioning contractor,” and never set service areas. Greg lost ranking to competitors who picked specific categories and listed all 47 zip codes they served.

Greg fixed it by reclaiming the profile, switching to the specific category, and adding all service zip codes. His Arizona Registrar of Contractors license number now appears in the description, which adds trust signals.

Example 3: Tom the Tampa Roofing Owner

Tom runs a roofing company in Tampa, Florida. He insisted on Primary Ownership from day one, signed a contract that named him as the owner, and gave his agency Manager access. When his agency tried to raise rates 40% mid-contract, he switched to a new vendor in 24 hours.

Tom’s setup followed Florida Department of Business and Professional Regulation advertising rules by including his license number. He keeps a clean audit trail, which protects him from both Google suspensions and state regulatory complaints.

Mistakes to Avoid When Setting Up a Client Profile

Most profile suspensions and client fights trace back to a short list of preventable mistakes. Each mistake has a specific negative consequence, and most are documented in Google’s profile suspension guide. Avoiding all of them is the difference between a smooth engagement and a six-figure lawsuit.

The plain-English version is that you should default to honesty, separation of roles, and written contracts. The consequence of skipping any of these defaults is the same: someone loses access, money, or both.

A common misconception is that mistakes can be fixed later with a support ticket. Google’s support is largely automated, and many suspensions are not appealable.

• Mistake 1: Using the agency email as Primary Owner. The negative outcome is a 7-day or longer transfer delay when the relationship ends, plus possible spite deletion of the profile.
• Mistake 2: Stuffing keywords into the business name. The negative outcome is a forced revert by Google or a competitor edit suggestion approved within hours.
• Mistake 3: Posting fake or incentivized reviews. The negative outcome is FTC penalties up to $51,744 per review and Google review removal that can wipe out years of legitimate ratings.
• Mistake 4: Sharing login credentials instead of using roles. The negative outcome is two-factor authentication lockouts and Google flagging the account for suspicious activity.
• Mistake 5: Picking a vague primary category. The negative outcome is invisibility in the local pack for high-intent search terms that drive most calls.
• Mistake 6: Listing a virtual office or PO Box as the address. The negative outcome is a hard suspension under Google’s storefront eligibility rule, which has no clean appeal path.
• Mistake 7: Posting patient or client information without consent. The negative outcome is a HIPAA, FERPA, or state privacy violation with fines starting at $137 per record.
• Mistake 8: Skipping the written services contract. The negative outcome is an ownership dispute that defaults to whoever holds the login, usually the agency.
• Mistake 9: Editing major fields during verification. The negative outcome is a restarted verification clock and a “suspicious activity” flag that can soft-suspend the profile.
• Mistake 10: Ignoring review responses for months. The negative outcome is a 27% drop in conversion per BrightLocal research and a worse local ranking signal.

Do’s and Don’ts for Agencies and Freelancers

A short rules-of-the-road list keeps the engagement clean. Each do and don’t comes with a one-line reason rooted in Google’s policies or U.S. consumer-protection law.

The plain-English version is that the do’s protect the client, and the don’ts protect you. The consequence of ignoring either side is a broken relationship and possible legal exposure.

Do’s

• Do make the client the Primary Owner from day one, because it protects the client and limits your liability.
• Do sign a written services agreement, because it allocates ownership, termination, and indemnification clearly.
• Do use Manager-level access, because it gives you full editing power without holding the keys.
• Do disclose paid relationships in any reviews you facilitate, because FTC Endorsement Guides require it.
• Do keep an audit trail of every change, because Google support sometimes requires proof during reinstatement appeals.

Don’ts

• Don’t create a profile under your own email, because the client can sue you for conversion of business assets in many states.
• Don’t use stock photos, because Google detects them and downranks the profile.
• Don’t offer review-gating services that block negative reviews, because the 2024 FTC review rule bans the practice.
• Don’t share the client’s login over email or chat, because it violates security best practices and possibly Google’s terms.
• Don’t promise first-page rankings, because FTC deceptive advertising rules treat unprovable promises as actionable.

Pros and Cons of Managing Client Profiles

Setting up and managing client profiles is a lucrative service, but it carries real risks. A balanced view helps agencies and freelancers price the work properly. The LocalU and Whitespark education materials cover the trade-offs in depth.

The plain-English version is that the upside is recurring revenue and the downside is recurring liability. The consequence of underpricing is that one suspension can wipe out a year of margin.

Pros

• Recurring revenue because most clients keep paying for monthly optimization, posts, and review management.
• High client retention because Google Business Profile work compounds over time and switching costs are real.
• Cross-sell pathway because GBP clients often buy citations, web design, and Google Ads next.
• Measurable results because Google provides Performance Insights showing calls, clicks, and direction requests.
• Low startup cost because no software license is required to begin offering the service.

Cons

• Suspension risk because one bad edit or competitor report can hide a profile for weeks.
• Legal exposure because FTC, HIPAA, and state bar rules apply to your work.
• Support frustration because Google support is largely automated and slow.
• Algorithm volatility because category and ranking signals change without notice.
• Client dependency because a single bad client review can damage your agency’s own reputation in referral networks.

Key Entities You Need to Know

Several organizations and tools shape Google Business Profile work. Knowing the players helps you stay compliant and informed. The list below covers the most important ones referenced throughout this guide.

The plain-English version is that Google sets the rules, the FTC enforces honesty, state regulators handle licensed professions, and a small group of independent researchers publishes the best how-to information. The consequence of ignoring any of these is a blind spot that can cost you a profile or a client.

A common misconception is that Google itself is the only authority. State licensing boards, the FTC, and even the Better Business Bureau all influence what you can and cannot say in a profile.

• Google LLC owns and operates the Business Profile system and writes the profile guidelines.
• Federal Trade Commission enforces honest advertising and reviews under 16 C.F.R. Part 255.
• U.S. Department of Health and Human Services enforces HIPAA for medical clients.
• State attorneys general enforce little FTC acts and consumer-protection statutes.
• State bar associations discipline lawyers for misleading advertising under Model Rule 7.1.
• BrightLocal, Whitespark, Sterling Sky, and LocalU publish independent research and training on Business Profile best practices.

Verification Process and Forms in Detail

Verification is the gate that controls whether a profile becomes visible. Google offers five methods, and each has its own form, timeline, and failure mode. The verification help page lists the current options.

The plain-English version is that Google needs proof you control the business. The consequence of failing verification is a profile that exists but never shows in search.

Postcard Verification

Postcard verification sends a 5-digit code to the listed address. Delivery takes 5-14 business days inside the United States. The code expires after 30 days, and only one postcard can be active per profile at a time.

The consequence of intercepted or lost postcards is a re-request that adds another two-week wait. Some shared mailrooms throw away postcards as junk, which is a common failure point.

Video Verification

Video verification requires a live, unedited recording showing the business signage, interior, equipment, and proof the recorder is authorized. The video uploads through the profile dashboard and is reviewed by humans within 5-7 days. Pre-recorded videos and edited clips are rejected.

The consequence of a failed video review is a 14-day cooldown and a more skeptical second review. Service-area businesses must show vehicles, branded uniforms, and tools rather than a storefront.

Instant, Email, and Phone Verification

Instant verification works only when the same Google account already verifies the website in Search Console. Email and phone verification are offered to a small set of categories and countries. None of these methods are guaranteed for any given profile.

The consequence of expecting instant verification and not getting it is a delayed launch. Always plan for video or postcard as the default.

FAQs

Can I set up a Google Business Profile for a client without their permission?

No. You need clear written or recorded permission from an authorized owner because creating or claiming a profile without consent can be conversion of business assets, fraud, or a violation of Google’s terms.

Can I use my own Gmail as the Primary Owner of a client profile?

No. You should not, because the client cannot fire you cleanly, and the seven-day ownership transfer process can cost the client real revenue during a switch.

Can the client and the agency both be Owners at the same time?

Yes. Multiple Owners can coexist, though only one is the Primary Owner, and the right setup is usually client as Primary Owner and agency as Manager.

Can I manage a U.S. client’s profile from outside the United States?

Yes. Google does not restrict manager location, only the business location, so a virtual assistant in Manila can manage a profile for a Phoenix HVAC company without issue.

Can I write the reviews on my client’s Google Business Profile?

No. Writing fake reviews violates the FTC Endorsement Guides and Google’s review policy, exposing both you and the client to fines and review removal.

Can I change the business name later to add keywords?

No. Keyword stuffing the name violates the name guideline, and Google will revert the change or competitors will report it within hours.

Can I set up a profile for a service-area business with no storefront?

Yes. Service-area businesses like plumbers and mobile groomers can hide the address and list service zip codes, but they must still pass video or postcard verification.

Can I get the client’s profile reinstated after a suspension?

Yes. You can file a reinstatement request through the Business Profile Help page, but success depends on fixing the underlying violation first.

Can I charge a client a monthly fee just for managing their profile?

Yes. Monthly management fees are common and legal, and typical rates run from $200 to $1,500 per month depending on review volume, posting frequency, and reporting depth.

Can I transfer Primary Ownership to the client after I set up the profile?

Yes. You can transfer Primary Ownership once the client has been an Owner for at least seven days, and the transfer itself completes within minutes after that waiting period.

Can I be sued for setting up a Google Business Profile poorly?

Yes. Clients can sue for breach of contract, professional negligence, or conversion if your setup causes lost revenue, suspended profiles, or regulatory fines.

Can I manage profiles for competing businesses in the same city?

Yes. Google does not ban it, but it creates an ethical conflict that should be disclosed in writing and managed with separate team members for each client.