(770) 874-6085
770-874-6085
Review extortion scams can damage trust quickly, but paying or arguing with the attacker usually increases the risk instead of solving it.
The pattern can feel like a business emergency. Several one-star reviews appear within hours or days. The names are unfamiliar. The comments describe services the company does not offer. Then a message arrives through email, WhatsApp, Telegram, social media, or another channel demanding money, free products, or services to make the reviews disappear.
Google says these scams are a serious policy violation. Its guidance is direct: do not engage, do not pay, gather evidence immediately, and report the attempt through the merchant extortion report form.
The business owner’s first job is not to win an argument in public. It is to preserve evidence, protect accounts, maintain professional communication, and follow a calm response process.
What Review Extortion Looks Like
Google describes a common pattern as a sudden increase in one-star or two-star reviews followed by someone demanding money, goods, or services in exchange for removing the negative reviews. The attack may target a single profile or a group of businesses.
Warning signs include reviewers who have no record in the customer system, repeated wording across multiple reviews, claims unrelated to the business, several reviews posted in a compressed time window, threats to continue posting, and a direct demand tied to removal.
Not every unfair or false review is extortion. A review becomes an extortion case when a malicious party directly demands something of value or a favor in exchange for stopping or removing the attack. That distinction determines the correct Google reporting path.
Why the First Response Matters
A frightened owner may respond emotionally, threaten the reviewer, offer a refund to a person who was never a customer, or pay to make the problem go away. Those actions can create more leverage for the attacker, weaken the evidence, and encourage repeat demands.
The public response also matters. Prospective customers may see the review before Google removes it. A short, calm statement can show that the business takes feedback seriously without admitting to an event it cannot verify. Avoid accusing a reviewer of a crime in public unless legal counsel advises it.
Internally, assign one person to manage the incident. That prevents multiple employees from replying, deleting messages, negotiating, or creating conflicting records.
What Google Says Not to Do
- Do not engage with or pay the malicious individual.
- Do not offer money, products, discounts, services, or favors to resolve the attack.
- Do not delete messages or block the sender until the evidence has been preserved.
- Do not post customer or attacker personal information publicly.
- Do not ask employees, friends, or customers to flood the profile with defensive reviews.
- Do not submit the extortion form for ordinary spam reviews that contain no direct demand.
Paying does not guarantee removal. It can also signal that the business is willing to pay again. The goal is to move the case into an evidence-based reporting process as quickly as possible.
Build the Evidence File Immediately
Google asks for detailed evidence. Capture the information before messages disappear, profiles change, or reviews are edited. Use full-screen screenshots that show the platform, date, time, username, contact information, and complete message.
| Evidence | What to capture | Why it matters |
|---|---|---|
| Suspicious reviews | Direct links, reviewer names, star ratings, dates, full text, and screenshots | Connects the attack to specific profile content |
| Extortion messages | Complete conversations, payment or service demands, deadlines, threats, and sender details | Shows the direct exchange being demanded |
| Timeline | When reviews appeared, when contact began, and when each action occurred | Helps investigators understand sequence and coordination |
| Business records | Evidence that the reviewers are not identifiable customers, when available | Supports context without exposing private customer data |
| Account activity | Login alerts, profile changes, or related security events | Identifies whether the attack includes account compromise |
Store the evidence in a restricted folder. Do not alter the original files. Name screenshots with dates and short descriptions. Keep a written incident log with the person responsible for each action.
How to Report Review Extortion to Google
Use Google’s merchant extortion report form for a direct extortion attempt. Google asks for the reporter’s contact information and relationship to the business, the full name and address of the affected business, the Business Profile link, suspicious review details, information about the malicious third party, and evidence files.
Submit direct links to the suspicious reviews, not only screenshots. Include every relevant communication channel. Explain the timeline clearly. Attach the evidence files in a format Google can open.
Google says its team investigates the claim and notifies the merchant about the result, although it may not share specific investigation details for privacy and security reasons.
What to Do About Fake Reviews Without an Extortion Demand
Use the ordinary review reporting process for reviews that are spam, off-topic, impersonation, conflict of interest, harassment, or otherwise violate policy without an extortion demand. Do not force every fake review into the extortion process.
Keep the same evidence discipline. Save the review link and screenshot, document why it appears unrelated to a real transaction, and use Google’s review management tools. If Google denies removal, review the available appeal path and provide clearer policy-based reasoning.
A business should not claim that a negative review is fake merely because it is harsh. Check records, speak with the team, and separate a real service complaint from malicious content.
How to Respond Publicly While the Case Is Open
A temporary response should be brief, factual, and non-defensive. For example: “We take customer feedback seriously, but we cannot identify a customer or service record matching this review. We have reported the matter to Google and invite any legitimate customer to contact our office directly so we can investigate.”
Do not reuse the exact wording on every suspicious review if it makes the profile look automated. Do not reveal internal records. Do not debate the reviewer point by point. The public response is for future customers, not the attacker.
Protect the Rest of the Business
Change passwords if there is any sign of account compromise, confirm Business Profile owners and managers, enable strong authentication, and preserve access logs. Alert customer-service and sales teams so they do not unknowingly negotiate with the attacker.
Monitor other platforms for coordinated activity. An extortion attempt may extend to social media, industry directories, or direct messages. Preserve evidence consistently and consult legal counsel or law enforcement when threats go beyond reviews, involve fraud, or create safety concerns.
Build a Review Monitoring and Recovery System
Reputation protection should not begin during a crisis. Set alerts or a daily review check, document who responds, maintain a legitimate review request process, and keep recent testimonials, case studies, photos, and credentials visible on the website.
The site’s reputation management service explains why reviews are part of conversion, not merely branding. A strong body of authentic feedback and website proof can reduce the impact of a temporary attack while the platform investigates.
Use the Google review guidelines to keep review generation compliant and the guide on preventing avoidable negative reviews to reduce legitimate friction.
Review Attack Response Checklist
- Preserve every review, message, link, timestamp, username, and demand.
- Assign one incident owner and stop uncoordinated replies.
- Do not pay, negotiate, or offer services.
- Secure Business Profile and connected accounts.
- Use the merchant extortion report form for direct demands.
- Use normal review reporting for policy violations without extortion.
- Post a calm public response only when appropriate.
- Monitor other platforms and new review activity.
- Keep legitimate review requests and customer service operating normally; use Google review insights with Gemini only for legitimate customer research.
- Document Google’s response and every follow-up action.
Keep the incident file organized after the immediate crisis. A clear record supports follow-up, legal review, insurance questions, and future staff training.
Final Takeaway
Review extortion scams are easier to manage when your business already has monitoring, evidence, escalation, and reputation-recovery procedures in place. Do not pay. Preserve the proof, use the correct reporting channel, protect your accounts, communicate professionally, and continue building legitimate trust while Google investigates.
Protect the Trust Your Business Worked to Earn
Elite Web Professionals helps service businesses strengthen reviews, website proof, local visibility, and reputation systems. A stronger system cannot prevent every attack, but it can help the business respond faster and lose fewer opportunities.
Next step: Create a one-page review incident plan now, then review the wider July Google updates roundup.
FAQs About Review Extortion Scams
What is a review extortion scam?
A review extortion scam may involve a sudden wave of low-star reviews followed by a demand for money, goods, or services in exchange for removing them.
Should I pay someone who threatens my business with fake reviews?
No. Google advises businesses not to engage with or pay malicious individuals because payment can encourage further demands and does not guarantee removal.
What evidence should I save?
Save screenshots of reviews and messages, direct review links, dates and times, sender contact information, usernames, phone numbers, email addresses, payment demands, and any threats.
How do I report review extortion to Google?
Use Google’s merchant extortion report form and provide the affected Business Profile, suspicious review details, third-party contact information, and clear evidence of the demands.
What if the review is fake but there is no payment demand?
Use Google’s normal review reporting process for spam, off-topic, or other policy-violating content. The extortion form is specifically for direct demands tied to review removal.
How can I protect my business reputation long term?
Monitor reviews, preserve records, respond professionally, request legitimate feedback consistently, strengthen website proof, and maintain a documented escalation process.
customersupport@advertisingbusiness.org
(770) 874-6085