Great question — answering as the UphillTech team:
If you own a business that you want to be verified on GMP Google My Profile you still can do that by following the verification process which every business has to follow. I don't get your first point clearly "How can someone randomly take your location?" If you have multiple locations add them one-by-one in the GMP, add all the details and send them for verification. Complete the verification process and you will own them. And Google systems are now smart enough to catch all the fake profiles.
Full answer by Adil Balti: https://webmasters.stackexchange.com/a/144598 (CC BY-SA 4.0).
Need it done for your business? UphillTech.