Fifteen years ago, achieving organic rankings for multiple locations worked differently. Simply repeating a city name enough times across a site was often enough to nudge rankings upward for that city, regardless of whether the firm had any physical presence there, at least for a while. This led many firms to claim service areas across multiple cities, counties, and even states, including jurisdictions that weren't realistically convenient for clients to travel to. This is precisely why Google changed its ranking criteria away from city mentions and other easy-to-misrepresent methods, and instead focused only on verifiable physical business addresses.
Picking a list of cities or areas to target and sprinkling their names throughout site content is dead as a strategy, and attempting it now is more likely to get a site flagged than ranked for those cities.
The clearest signal Google looks for today is a verified physical address and a properly optimized Google Business Profile. That's what unlocks the map pack, the small cluster of local results most people click first. Without a real office in that city, a firm can still show up organically for some searches, but it's competing on much thinner ground.
Google's business listing guidelines have gone through many iterations, and most of today's strict requirements exist to combat spam, fake listings, and ineligible businesses. Today, Google Business Profiles only support two types of businesses, Storefront and Service Area, both of which require proving that face-to-face interactions with clients actually take place. GBP is not a platform for firms with no local physical presence or client-facing activity in the areas they create profiles for.
Firms that try to take shortcuts by creating fake or duplicate profiles unfairly distort search results and can cause real harm to clients who rely on that information. Because of past abuses like this, Google's address verification process today often includes property ownership documents or lease agreements, proof of physical signage and a dedicated entrance, published hours of operation, and even live video verification calls. This is why firms can't work around these requirements with PO boxes, a desk rented in another firm's office, or multiple listings pointing to one shared address. Google treats any of that as a red flag, and profiles built that way risk suspension entirely. These standards aren't unique to Google either; Bing Maps and Apple Maps enforce similarly strict definitions of a "local business."
There's also a trust layer at work in legal specifically. Google holds legal content to a higher standard because the cost of bad information is real. Google calls this category "Your Money or Your Life" content, its term for anything that can meaningfully affect someone's finances, safety, or major life decisions if the information is wrong. Legal content sits squarely in that category, which is exactly why the bar is higher here than it would be for, say, a restaurant or a retail shop. A bad recommendation for dinner is an inconvenience. A bad recommendation for the attorney handling someone's custody case, injury claim, or criminal defense can genuinely hurt someone. A firm with no established presence in a market typically hasn't built the reviews, citations, bar association recognition, and local signals that prove it belongs there, and that absence shows up in rankings.
That's also why a single outlying example doesn't disprove the rule. A firm that does rank in two nearby cities has almost always earned that through years of accumulated trust signals in both places: real reviews in both, real recognition in both, listings on legal directories like Avvo or Martindale-Hubbell in both, not through a shortcut anyone can replicate by adding a second city to a website. Real proof, built over time, is what Google rewards.
None of this means smaller or newer firms are stuck. It means the strategy has to be built differently.