Articles — Regulatory Failure — September 2026
The ASA ruled against fake locksmith ghost address listings in July 2024. Trading Standards has received thousands of complaints. Action Fraud has been notified repeatedly. Ofcom is consulting. The CMA has imposed a conduct requirement. And yet — in September 2026 — the same listings or their direct replacements are still live on Google Maps. Still with fabricated reviews. Still overcharging consumers. Here is exactly why — and what has to change.
"The ASA investigated. The ASA ruled against. The listing is still there. Two years later."
This is the sentence that defines regulatory failure on fake locksmith listings in the UK. Every body involved has the power to document the problem. None has had the power to stop it. The result is a paper trail of rulings, reports, consultations and referrals — and a Google Maps search result that looks exactly the same in 2026 as it did in 2022.
In July 2024 the Advertising Standards Authority investigated and ruled against multiple fake locksmith listings for using ghost addresses and making false local presence claims. The specific cases named in the ruling included Gauge B-Ready Locks, Guardian Tech Locksmith Cranleigh, ApexCraft Locksmith Frimley, and Alex the Locksmith West Molesey at 112 Down Street KT8 2TU.
The ASA's guidance — published on its website — is clear and correct. Advertisers claiming to be local require a permanent registered office or branch in that area. Ghost addresses — mail forwarding services, serviced offices — are insufficient to support a local claim. A listing showing a Google Maps pin at a residential address where no locksmith business operates is misleading under the CAP Code.
The ruling was made against persons unknown. Not a named director. Not a company number. Unknown persons. Because the operators of these listings are anonymous — hiding behind virtual numbers, ghost addresses, and shell companies with nominee directors.
What happened after the ASA ruling
The ruling was published on the ASA website. The operators never read it. The listings remained live. The fabricated reviews remained visible. The ghost addresses continued to be used. In September 2026 — fourteen months after the ruling — the same listings or direct replacements using identical tactics are still operating in the same areas. The ASA ruling achieved one thing: it documented that the practice is illegal. It stopped nothing.
The fake locksmith listing problem falls across multiple regulatory jurisdictions simultaneously. Every body involved has some relevant power. None has all of them. The result is a patchwork where every regulator can act on part of the problem and none can fix the whole thing.
Advertising Standards Authority (ASA)
DOCUMENTED — NOT STOPPEDPowers: Can rule against misleading ads. Can refer persistent non-compliers to Trading Standards. Can name and shame publicly.
Why it has not worked: Has no statutory enforcement powers. Cannot compel Google to remove organic listings. Cannot fine operators. Rules against persons unknown who ignore the ruling entirely. The July 2024 ruling against Alex the Locksmith West Molesey did not result in listing removal.
Trading Standards
UNDER-RESOURCEDPowers: Can investigate and prosecute under CPRs 2008 and Fraud Act 2006. Can issue civil enforcement orders. Can refer to NTS eCrime Team.
Why it has not worked: Lost over 50% of funding and staffing since 2010. Case volume far exceeds capacity. Investigations take months. Operators dissolve and recreate shell companies faster than prosecutions proceed. Individual complaints rarely result in prosecution.
Action Fraud
REPORT COLLECTORPowers: Receives fraud reports. Passes intelligence to police and NCA. Feeds the National Fraud Intelligence Bureau.
Why it has not worked: Does not investigate directly. Reports are assessed for intelligence value and most individual consumer fraud cases do not meet the threshold for active investigation. The locksmith scam model — individually modest charges, nationally large volume — is specifically designed to stay below individual investigation thresholds.
Google (spam reports)
WHACK-A-MOLEPowers: Can remove individual listings following spam reports. Can suspend accounts. Can implement verification.
Why it has not worked: Individual listing removal is reactive — the listing must be reported before it is reviewed. Operators recreate removed listings within days under new names using new virtual numbers. Removal of the listing does not remove the operator. The same call centre reappears with a different name within the week.
Ofcom
CONSULTING — RESULT DUE MID-2027Powers: Has powers under the Online Safety Act. Running Fraudulent Advertising Codes consultation closed October 2026. Statement due mid-2027.
Why it has not worked: Enforcement of any resulting codes will not begin until late 2027 at the earliest. Two years of consultation and implementation while consumers continue being overcharged throughout.
Competition and Markets Authority (CMA)
DECEMBER 2026 — FIRST REAL TESTPowers: Imposed Fair Ranking Conduct Requirement on Google June 2026. Compliance deadline December 2026. Can fine up to 10% of global annual turnover.
Why it has not worked: The first instrument with genuine financial consequences for Google. But compliance deadline is December 2026 — six months after imposition. Non-compliance investigation takes additional months. The CMA is the first body that could actually change the commercial calculation — but enforcement will not be instant.
The pattern across every regulatory body is identical. A complaint is received. An investigation is conducted — often from behind a desk, often slowly. A finding is made. The finding is published. The operator ignores it. The listing stays live. The consumer who made the original complaint has long since given up and moved on. Nothing changes.
This is not regulatory incompetence. The individual officers at Trading Standards, the ASA, Ofcom, and the CMA are doing their jobs within the frameworks they have been given. The frameworks themselves are inadequate. They were designed for a world where a fraudulent business had a physical presence that could be shut down, a bank account that could be frozen, and a director who could be prosecuted. The fake locksmith model has no physical presence, uses merchant accounts that route through multiple jurisdictions, and hides behind nominees and shell companies that are dissolved before prosecution can proceed.
The gap between ruling and remedy
ASA rules against a ghost address listing. The ruling applies to the specific ad investigated. A new listing with a slightly different name and the same ghost address is not covered by the ruling and requires a new investigation.
Trading Standards investigates a complaint. The operator dissolves the shell company. A new company is incorporated by the same director. The investigation must start again against the new entity.
Google removes a listing following a spam report. The operator creates a new listing under a new name the next day. The new listing has no complaint history and ranks immediately.
Action Fraud receives the report. The intelligence joins a database of millions of fraud reports. The individual case is unlikely to reach investigation threshold. The operator never knows the report was made.
The consumer files a Section 75 claim. The bank refunds them. The merchant account absorbs the chargeback. The operator continues operating. The consumer is made whole — but the next consumer is not protected.
Three measures would actually stop fake locksmith listings. Not regulate them. Not document them. Stop them.
1. Mandatory locksmith licensing — the permanent structural fix
No licence, no listing, no ad. Every platform — Google, Facebook, Yell — required to verify a government-issued licence number before accepting any locksmith listing or advertisement. Proven to work in licensed US states. Requires primary legislation. Has been rejected by successive UK Governments on grounds that existing consumer law is sufficient. It is not sufficient. The evidence is in the locksmithscams.co.uk database.
2. Platform liability for unverified emergency trade listings
Google, Facebook, and directory platforms should be legally liable for consumer harm caused by listings they host that have been reported as fraudulent and not removed within a defined timeframe. Platform liability exists in other contexts — copyright infringement, child safety content. It should exist for emergency trade fraud where the platform is the customer acquisition mechanism the fraud depends on.
3. Infrastructure-level investigation — not listing-level removal
Every investigation that results only in listing removal is fighting the symptom not the cause. The virtual number prefix blocks, the merchant account networks, the shell company chains, the overseas SEO operations — these are the infrastructure. Disrupting the infrastructure collapses multiple fake listing operations simultaneously. The National Crime Agency has jurisdiction. The NCA has the tools. What has been missing is the prioritisation and the coordinated intelligence submission to trigger investigation at infrastructure level rather than individual listing level.
The CMA Fair Ranking Conduct Requirement is the first regulatory instrument that creates a financial consequence for Google — not the operators, but the platform — for failing to address fake listing dominance in organic search results. Non-compliance risks fines up to 10% of Google's global annual turnover. That is a potential £30 billion exposure.
This changes the commercial calculation for the first time. Every previous instrument — ASA rulings, Trading Standards complaints, Action Fraud reports — imposed no financial cost on Google. The CMA conduct requirement does. If Google's organic Maps results continue to be dominated by fake listings after December 2026 — the financial cost of non-compliance begins to outweigh the cost of implementing the verification measures that would fix the problem.
December 2026 is not guaranteed to fix anything. Google could implement process compliance without structural change. The CMA investigation process takes time. Appeals take longer. But it is the first moment in this regulatory history where the word no from Google carries a financial price tag. That is different from everything that came before.
What you can do right now that actually works
Regulatory action is slow. Consumer action is immediate. These three things work right now — not in 2027:
✓ Section 75 — credit card over £100: Your bank must refund you. The price charged was significantly different from the price quoted. This works. Banks know the law.
✓ Text 7726: Forward the fake locksmith number to 7726 from your mobile. Free. Goes to Ofcom. Every number reported builds the intelligence picture.
✓ Search the company name at locksmithscams.co.uk: If the company is in the database — you have documented evidence to support your bank claim, Trading Standards report, and Action Fraud submission.
locksmithscams.co.uk — independent public interest resource. Published September 2026. ASA ruling reference: Gauge B-Ready Locks, Guardian Tech Locksmith Cranleigh, ApexCraft Locksmith Frimley and Alex the Locksmith West Molesey, 31 July 2024, asa.org.uk/rulings/person-s--unknown-a24-1242111-person-s--unknown.html. Full database → Google’s role →
🔒 Need a genuine locksmith? Find an MLA approved operator near you.
✓ Find MLA Approved Locksmith →