‘Google My Business’ Listing Hijackings Are Increasing

Spammers are attacking businesses by accessing the “claim this business” link in the Google Local Knowledge Panel. An
email is then sent to the business owner from Google My Business notifying them of a request to gain control over the
listing.
If you ever receive one of these emails for your business, don’t assume it’s your webmaster or some other friendly person doing this. Decline the request until you can verify who this person is. A user shouldn’t be able to access your listing as long as you do not click the link in the email or follow through with the verification process it contains.

https://searchengineland.com/hijacked-google-my-business-listings-appear-to-be-a-growing-problem-343737