1 of 33

Pinning Down Abuse�on Google Maps

Univ of California, San Diego

Danny Y. Huang, Kirill Levchenko, Alex C. Snoeren

Google

Doug Grundman, Kurt Thomas, �Abhishek Kumar, Elie Bursztein

2 of 33

Maps SEO is based on physical proximity

2

Traditional�SEO

Ranked by relevance

Example: pharma

Maps�SEO

Ranked by proximity

Example: locksmiths

How many and where?

How to make money?

How to evade detection?

Impact on users?

3 of 33

7 locksmiths near me

3

4 of 33

“Locksmith” located at UPS Store

4

5 of 33

Hard to detect via Street View

5

6 of 33

Fake locksmiths are an old problem

6

Jan 2016

False sense of proximity

Monetize from inferior service

7 of 33

Overview of abuse on �Google Maps

7

Violation of ToS

Caused harm to users

8 of 33

Overview of abuse on Google Maps

8

Listings that Google marked as “abuse”

2014 - 2015

15% reached users

Fake Locations (40%)

locksmiths, plumbers, garage door openers

9 of 33

Affiliate fraudsters hijack hotel listings

9

Paying for referral traffic

Damages to branding

Reputable �travel agency

10 of 33

Overview of abuse on Google Maps

10

Abusive listings

2014 - 2015

15% reached users

Fake Locations (40%)

locksmiths, plumbers, garage door openers

Affiliate Fraud (13%)

hotels, restaurants

Misc (47%)

11 of 33

Abuse varies across countries

11

0%

20%

40%

60%

80%

100%

% of abusive listings in each country

USA

India

12 of 33

Abuse varies across countries

12

locksmiths

plumbers, etc

0%

20%

40%

60%

80%

100%

% of abusive listings in each country

USA

India

13 of 33

Abuse varies across countries

13

hotels

% of abusive listings in each country

locksmiths

plumbers, etc

0%

20%

40%

60%

100%

USA

India

80%

% of abusive listings in each country

14 of 33

How did scammers evade Google’s detection?

14

15 of 33

Creating a free listing on Google Maps

Google My Business

Reviewer

Google Map Maker

16 of 33

Creating a free listing on Google Maps

16

17 of 33

Verification via mail

17

80% abusive listings verified through mail

18 of 33

Creating listings with fake locations

18

Residential

Commercial

19 of 33

Verifying listings using the same address

19

123 Main St

123 Main St Suite 456�123 Main St #456�#456 123 Main St

l23 Main St

Verify multiple listings��25% of abusive listings �used this trick

Impose a cutoff?

20 of 33

Abusive listings verified at the same address

20

>1,000

101 - 1,000

11 - 100

2 - 10

1

# Listings at same address

0%

20%

40%

60%

80%

100%

Probability of abusive listings

21 of 33

Abusive listings verified at the same address

21

>1,000

101 - 1,000

11 - 100

2 - 10

1

# Listings at same address

0%

20%

40%

60%

80%

100%

Probability of abusive listings

22 of 33

Abusive listings can be reached at VoIP numbers

Carrier

Abusive

Non-abusive

Bandwidth

Ring Central

Level 3

Misc VoIP Carriers

Other Carriers

Non-VoIP Carriers

VoIP Carriers

23 of 33

Abusive listings can be reached at VoIP numbers

Carrier

Abusive

Non-abusive

Bandwidth

33%

3%

Ring Central

13%

1%

Level 3

10%

4%

Misc VoIP Carriers

13%

3%

Other Carriers

31%

89%

Non-VoIP Carriers

VoIP Carriers

Example: Of the abusive listings with phone numbers, 33% of them used the carrier Bandwidth.

24 of 33

Impact on end users?

24

25 of 33

Quantifying impact on users

25

# of abusive search results

# of search results

Locksmiths

11%

26 of 33

Search results that are abusive

26

Locksmiths

11%

Plumbers, etc

0.4%

New York, NY

16%

West Harrison, NJ

84%

Restaurants

1%

Hotels

1%

27 of 33

Pie chart: abusive results that are locksmiths

27

Locksmiths

11%

Plumbers, etc

0.4%

Restaurants

1%

Hotels

1%

28 of 33

Pie chart: abusive results that are plumbers etc

28

Locksmiths

11%

Plumbers, etc

0.4%

Restaurants

1%

Hotels

1%

29 of 33

Pie chart: abusive results that are hotels

29

Locksmiths

11%

Plumbers, etc

0.4%

Restaurants

1%

Hotels

1%

30 of 33

Pie chart: abusive results that are restaurants

30

Locksmiths

11%

Plumbers, etc

0.4%

Restaurants

1%

Hotels

1%

31 of 33

Overall search results that are abusive

31

Locksmiths

11%

Plumbers, etc

0.4%

Restaurants

1%

Hotels

1%

0.5%

of search results in US were abusive

32 of 33

Summary

32

SEO based on physical proximity

Fake locations vs affiliate fraud

Hard to verify addresses at scale

Improved defenses by Google;�abusive listings down by 70% from peak

33 of 33

Thank you!

More info: http://sysnet.ucsd.edu/~dhuang/

Univ of California, San Diego

Danny Y. Huang, Kirill Levchenko, Alex C. Snoeren

Google

Doug Grundman, Kurt Thomas, �Abhishek Kumar, Elie Bursztein