(Read time: 2 minutes)
You probably don’t use Google’s Law Enforcement Request System (LERS) – most small businesses don’t. It’s a portal used by police and government agencies to request data from Google.
But a recent incident where a fake account was created inside this system is a reminder that even trusted platforms can be abused by cybercriminals.
So, while you may never log into LERS, the tactics used here are exactly the kinds of tricks attackers use to target small and medium businesses (SMEs) every day.
What Actually Happened?
Google confirmed that someone managed to create a fake account inside its law enforcement portal. This account tried to send fraudulent data requests – essentially pretending to be a legitimate authority.
Google caught it and shut it down quickly, but it shows that attackers are getting creative at making fake requests look real, even inside systems meant for official use.
Why It Matters to Small Businesses
Even though you’re not a police department or may use LERS, this story matters because:
- Scammers love trusted brands – They hijack logos, domains, and systems you already know (like Google services) to trick people.
- Fake authority tactics – Attackers often pretend to be “official” to pressure staff into giving away data or access.
- Less technical defences – SMEs are attractive targets because they’re less likely to have dedicated security teams.
How SMEs Can Protect Themselves
- Train Your Team
Teach staff to spot phishing emails (download our FREE phishing email checklist), fake authority requests, or unusual Google Docs/Drive shares. - Use Strong Logins
Enable 2FA and strong passwords on all accounts especially on shared or admin accounts. Download our FREE Step by Step Guide to Strong Password Management or Password Management Poster to train your team. - Verify Before You Act
If someone requests sensitive data or urgent action, check through an official contact before complying. - Keep Systems Updated
Make sure software updates and patches are applied regularly to reduce vulnerabilities. - Stay Informed
Follow security news or subscribe to alerts so you’re not caught off guard.
Wrap-Up
Even though this fake account was in a law enforcement portal, the lesson is universal:
if scammers can trick Google systems, they can certainly try to trick your staff.
Simple steps like training, strong password management, and being on the look out for phishing emails go a long way in keeping your business safe.
