Fake Author Profiles on Your Website: Google Now Calls Them Deception

"Fabricating creator profiles (such as by using AI-generated headshots, made-up names, or false credentials to make content appear as if it was written by human experts) is a form of deception." That sentence now sits in Google's own guidance on creating helpful, reliable content ^[1]. The page shows a last-updated date of 5 October 2026, and Search Engine Roundtable reported the new paragraph a day later ^[2]. It came up during our morning operations review this week. I read it twice.

The next line is the one that matters for anyone running a business website. Google says any form of deception "makes a page untrustworthy to both users and our automated quality systems, and is a signal of a low-quality page."

Most owners will assume this is aimed at content farms. Some of it is. But invented authors turn up on ordinary small business sites more often than people expect, usually put there by a tool, a template or a well-meaning freelancer rather than by the owner. This guide covers what changed, where fake authorship tends to hide, and how to audit and fix your own site in an afternoon.

What Google Changed, and What It Did Not

The new wording lives in the "Who" section of Google's people-first content page. That section already asked site owners a set of plain questions. Is it self-evident who wrote this? Does the page carry a byline where a reader would expect one? And if it does, will that byline lead somewhere with real background about the person?

Directly before the new warning, Google repeats its existing advice: "We strongly encourage adding accurate authorship information, such as bylines to content where readers might expect it." So the message has two halves. Show who wrote it. Make sure that person is real.

Three things the update does not say are just as useful to know:

• No ban on AI-assisted writing. The same page has a "How" section that describes AI disclosures as useful wherever a reader might reasonably wonder how something was produced.
• No penalty announcement. No rollout date and no named ranking update is attached to it. Google describes deception as a signal of low quality, which is a statement about how pages are assessed, not a manual action.
• No requirement for a byline on every page. Your contact page and your price list do not need an author. A blog post giving advice usually does.

One limitation before going further. Google does not publish how its systems detect a generated face or an invented name, or how much weight that signal carries against everything else on a page. Nobody outside Google knows. Anyone quoting you the exact ranking cost of a fake byline is guessing. What can be said with confidence is that Google has now put the practice in writing as deception, and that the same page names trust as the most important part of E-E-A-T.

For the wider question of how Google treats machine-written text, our guide to using AI website content without getting penalised by Google covers the effort and originality side. This article stays on the narrower question of names and faces.

Where Fake Authors Hide on Business Websites

In operations, we trace a fault back to where it originates, not just where it shows up. Fake authorship has four common origins on small business sites. Three are genuinely deceptive. The fourth is honest but weak.

Where it appears	What it looks like	Risk
The invented blog persona	Every post signed by a confident expert nobody at the business has met	High
The stock-photo team page	Placeholder or generated faces with job titles attached	High
The inflated credential	A real person described with a title or qualification they do not hold	High, and a legal question too
The generic or departed byline	Posts signed admin, or by someone who left years ago	Low, but a missed opportunity

The Invented Blog Persona

Some AI writing tools and content subscriptions publish under a built-in persona: a name, a friendly bio, a generated portrait. The owner switches the tool on, the posts appear, and the persona becomes the public face of the business's advice without anyone deciding that it should.

Consider an illustrative scenario. A physiotherapy clinic in Westmeath subscribes to a blogging service that signs every article as a senior chartered physiotherapist, complete with a smiling headshot. The articles are decent. Then a patient rings to book with the physio who wrote the piece on knee pain, and the receptionist has to explain that this person does not exist.

That call costs more than any ranking drop. The patient now wonders what else on the site is invented, and so does anyone they mention it to. It is precisely the case Google describes: content made to appear as if a human expert wrote it when no such expert exists.

The Stock-Photo Team Page

Template sites and some agency builds ship with a "Meet the Team" section full of placeholder faces. Sometimes those placeholders never get replaced before launch. In other cases, a generated image stands in for a real employee who did not want their photo online.

The second case is understandable. It is still a fabricated creator profile if that face is presented as the person. A name and a role with no image is perfectly acceptable. So is an honest illustration that nobody would mistake for a photograph. A face that belongs to nobody is not.

The Inflated Credential

This one involves real people, which makes it easy to miss. A sole trader becomes a "director". The recent graduate turns into a "senior consultant". Somewhere along the way, a professional membership lapsed and the badge stayed on the bio.

Google lists false credentials alongside made-up names. Irish consumer law has its own view. Section 43 of the Consumer Protection Act 2007 treats false information about "the trader's identity, qualifications, assets or status" as a misleading commercial practice where it would be likely to cause the average consumer to make a decision they would not otherwise make ^[3]. Whether a particular overstated title crosses that line depends on the facts, and a solicitor is the right person to ask about your specific wording. The safe operating position is shorter: if you cannot produce the certificate, take the claim off the site.

The Generic or Departed Byline

Posts signed "admin" are not deceptive. Neither is a byline for a staff member who wrote the post and has since moved on. But neither does the job Google asks bylines to do, which is to tell a reader who stands behind the advice. "Admin" tells them nothing. An ex-employee's name tells them something that is no longer true of the business.

This is the lowest-risk row in the table. It is also the most common, and the cheapest to fix.

Why This Matters Beyond Rankings

It would be easy to file Google's paragraph under SEO housekeeping. I would treat it as an incident waiting for a trigger.

Every invented author is a quiet dependency on nobody checking. That holds until a customer asks for the person by name, a local journalist tries to quote them, or a competitor runs the headshot through a reverse image search and shares the result in a community group. By the time anyone at the business notices, the screenshot has done the rounds, and the owner is answering questions about honesty rather than price or availability.

Compare that with the cost of fixing it now. One afternoon. Some editing. Real names and real faces are also simply more persuasive, because a reader deciding whether to trust advice about their knee, their tax return or their boiler wants to know that an accountable person wrote it.

How to Audit Your Site's Authorship in Five Steps

This is a one-afternoon job for most small sites. Work through it in order.

1. Inventory every name and face. Open each blog post, your about page, your team page and any testimonial section, and list every person shown, with their photo and any title or qualification next to them.
2. Verify each entry against a real person. For every name on the list, confirm that the person exists, still works with you, agreed to appear, and holds any qualification the site claims for them.
3. Rewrite or remove what fails. Swap invented personas for the real person who reviewed or wrote the content, delete generated faces presented as staff, and correct or drop any credential you cannot prove.
4. Deploy accurate author profiles. Give each real author a proper WordPress user profile with their own name, a short honest bio and a genuine photo, then reassign their posts to it.
5. Disclose how content is made. Where AI drafted a piece and a person edited it, add a short line at the foot of the post to say so, and readers are not left guessing.

Most sites fail somewhere in step two. That is normal. The audit exists to find those gaps before a customer does.

Getting the Byline Right in WordPress

WordPress already has the machinery for honest authorship. Most sites simply never configure it.

Your Profile Screen

Under Users, then Profile, every account has a setting called "Display name publicly as" ^[4]. It controls the name shown on posts. Many sites leave it on a login name, which is how "admin" ends up as the author of years of advice. Set it to the person's real name.

The same screen has a Biographical Info field. Whether and where it appears depends on your theme, so verify it on a published post rather than assuming. The profile picture comes from Gravatar, a free service tied to the author's email address, so a real photo uploaded once appears on every post where your theme shows an author picture.

In practice, a reader who clicks the byline lands on a page listing everything that person has written, with a face and two sentences of background. That is exactly what Google's "Who" questions are asking for. Expect about ten minutes per person.

Author Pages and Structured Data

WordPress creates an author archive page for each user who has published something. That page is the natural destination for a byline link, and it is where a reader goes to decide whether the person behind the advice is credible.

If your SEO plugin outputs Article structured data, it usually takes the author from the WordPress user who published the post. Google's documentation for that markup is specific ^[5]. The author name field should contain "only the name of the author", with job titles and honorifics in their own properties, and every author shown on the page should also appear in the markup. After making changes, verify one published post with Google's Rich Results Test. A visible byline that says one thing while the markup still says "admin" is an environment mismatch, and it undercuts the clean-up you have just done.

Where AI Fits, Honestly

None of this is an argument against AI. It is an argument against pretending.

Self-building with AI is the right model for most small businesses now. Nobody understands a business better than the person who runs it, and AI has removed the skills barrier that used to send owners to an agency at several thousand euro a time. The owner describes the business, the AI builds the structure, and the owner stays in charge of what the site says. That is how Web60's AI builder turns your own description into a working WordPress site in under a minute.

The question is who stands behind the words. When you build the site yourself, the natural byline is yours. You are the expert the reader came looking for, and that position survives the phone call that an invented persona never will. An agency writing your team page has usually never met your team, which is how placeholder faces make it to launch in the first place.

Owning Your Byline on Web60

A Web60 site is full WordPress, so every user profile, author page and byline is yours to edit from day one, with no change request and no hourly fee. One-click staging lets you rework an author box or theme template away from production and verify it before you deploy, and automatic nightly backups with one-click restore mean a bad edit is a rollback rather than a rebuild.

Treat anything an AI tool drafts, including a team page or a bio, as a draft. Review it, put real names on it, and push to production only what is true. If you want the broader picture of where this is all heading, our overview of what every business owner needs to know about AI-powered WordPress is a good place to start.

When You Need More Than This

There is a limit to what a small business site needs here. Large publishers with dozens of contributors, commissioning editors and a legal team signing off every article genuinely need editorial workflow tooling and contributor management well beyond a standard WordPress setup, and enterprise publishing platforms suit that workload better. For an owner-operator writing a handful of posts a year, a real name, a real photo and two honest sentences of bio is the whole job.

Put a Real Name on It

Google has now said in writing what most customers already sense: a face that belongs to nobody undermines everything around it. The fix needs no new software and no specialist. It needs an honest list of who appears on your site, a few profile edits, and the habit of reviewing whatever an AI tool produces before it reaches production. Set aside an afternoon this month, work through the five steps, and the next person who reads your advice will know exactly who gave it.

Frequently Asked Questions

Does Google penalise AI-written content on business websites?

Not for being AI-written. Google's guidance focuses on effort, originality and honesty. Its helpful content page says that using generative AI to produce large amounts of text without manual oversight represents little to no effort, and that fabricating human authors is deception. AI drafting that a real person reviews, edits and puts their name to is a different thing entirely.

Does every page on my website need an author byline?

No. Google asks for bylines where readers might expect them. Advice articles, guides and opinion pieces benefit from a named author. Service pages, contact details and product listings generally do not need one, because nobody expects a personal author there.

Can I sign blog posts as the team instead of a named person?

Yes, as long as it is true. A team byline that honestly represents your business makes no false claim about a specific expert. Google's wording targets fabrication intended to make content look as if a human expert wrote it. A named person usually builds more trust, but an honest team byline is not deceptive.

Can I use AI-generated images of people on my team page?

Not to represent real or implied staff. Google names AI-generated headshots as an example of fabricated creator profiles. If a team member does not want their photo online, use their name and role without a picture, or an illustration that clearly is not a photograph.

Is it deceptive if someone else writes posts under my name?

Ghost-writing is long established, and the deciding factor is whether the named person genuinely stands behind the content. If you brief the writer, review the draft, correct it and approve it, the advice is yours. If your name is attached to posts you have never read, you are back in fabrication territory, and the process needs to change.

Could false qualifications on my website break Irish consumer law?

Potentially. Section 43 of the Consumer Protection Act 2007 lists false information about a trader's identity, qualifications or status as a misleading commercial practice, where it would likely influence a consumer's decision. Whether a specific claim crosses that line depends on the facts, so check with a solicitor if you are unsure. Removing any credential you cannot prove is the simplest protection.

Sources