Last week we reported that some users were receiving many new user verification emails from Google Search Console, for users previously added to the account as a result of Google re-running verification checks. It was described as an issue on Google’s end, but it seems it could also have some unintended consequences.

It seems that when some users were removed, but if the site owner still left up the verification when they removed that user, then that user might have become reauthorized once Google ran the verification check.

I am not sure if this is a legacy issue for users removed a long time ago because Google normally requires the site owner to remove the verification method when removing someone.

It is also a good reminder to site owners to go and clean house with who they have added to their Google Search Console accounts.  Many former agencies, consultants and auditors with access to previous clients use that information for competitive analysis and market trends regularly when the client fails to remove their access.