Google review extortion: what to do when fake reviews come with a demand
A burst of fake one-star reviews, then a payment demand. How established Australian businesses should respond, and why Google’s dedicated extortion form matters.
A business with a strong Google rating gets a burst of one-star reviews over a day or two, from accounts that have never been customers. Then a message arrives, usually by WhatsApp, Telegram or email: pay, and the reviews disappear.
This is review extortion, and it has become common enough that Google now runs a dedicated channel for reporting it. For established businesses whose enquiries start with a Google search, it’s worth knowing the response before it’s needed.
How the attack works
The reviews are usually short and vague, posted from several accounts within a short window. Their purpose isn’t to describe a bad experience. It’s to drag the average rating down quickly enough to hurt, then sell the fix.
It targets businesses where the rating does real commercial work: a medical or dental practice where patients compare clinics before booking, or a trades business where the first few results in the map pack get the calls. A drop from 4.8 to 4.1 can change which business gets the enquiry.
Don’t pay
Paying doesn’t buy safety. It confirms you’ll pay, and nothing obliges the attacker to remove the reviews or stay away. Treat the demand as evidence, not a negotiation.
What to do instead
1. Collect evidence first
Before reporting anything, screenshot each review with the reviewer’s name and date, and the demand itself: the message, the sender’s details and the timestamp. Google relies on this evidence, and reviews or messages can disappear once you start reporting.
2. Use Google’s merchant extortion form
Google has a dedicated form for reporting review extortion, separate from flagging reviews one at a time. You’ll need to be signed in to an account with access to the Business Profile, and you’ll be asked for the profile details, links to the reviews and evidence of the demand. Flagging individual reviews as fake is still worth doing, but the extortion form is the channel built for this.
3. Reply briefly, for the people reading later
Prospective customers will see the reviews before Google acts. A short, factual reply to each one — that you have no record of this person as a customer and have reported the review — tells readers what’s happening without escalating it. Don’t mention the demand publicly or engage with the reviewer.
4. Watch the profile daily
The damage compounds the longer an attack goes unnoticed. Turn on Business Profile notifications for new reviews, or check daily, so you catch the next wave in hours rather than weeks.
Make the rating harder to move
A profile with a handful of reviews can be dragged down by five fake ones. A profile with a steady flow of genuine reviews is far harder to move. The most durable protection is a routine for asking satisfied customers for a review after each job, built into your process rather than left to memory. It’s the kind of follow-up AI workflow automation handles well, triggered from your CRM when a job is marked complete.
Reviews also sit inside a wider local presence. A well-maintained Business Profile, a technically sound website and consistent business information across the web all shape how you appear in local search — the foundation our technical SEO and local search work covers.
The short version
- Don’t pay.
- Screenshot the reviews and the demand before anything else.
- Report through Google’s merchant extortion form.
- Reply briefly and factually to each review.
- Keep genuine reviews coming in, so a burst of fake ones can’t define your rating.
Gurdeep Saroa
Founder & full-stack engineer
Software developer turned performance marketer. Builds the automation, tracking and web systems GRIVITY delivers.