If you own a small business, nothing ruins your morning like a sudden wave of fake one-star Google reviews. What once seemed like random malice has evolved into organized extortion—and it’s hitting small businesses hard.
The scam is straightforward: Coordinated attackers flood your Google Business Profile with phony, often identical negative reviews. Your rating crashes. Shortly after, you receive a message (usually a text, WhatsApp, Telegram, or another messaging app) claiming a competitor paid them to leave bad reviews, and offering to “stop the attack” or remove the reviews—for a price.
This is extortion. It’s illegal, and paying almost never works.
Google is stepping up. They already remove billions of fake reviews each year and, as of late 2025, have introduced a dedicated extortion-reporting tool for merchants.
We’ve successfully helped small businesses fend off these attacks and recover from them quickly, and are sharing what we’ve learned so you can protect yourself and your business.
What to Do If You’re Hit (Proven Step-by-Step Response)
- Stay calm and never pay
Responding, even to say “no,” confirms your contact works and often triggers more aggressive demands or attacks. Silence is your strongest move. - Immediately report every fake review
From your Google Business Profile or Maps, flag each one as “Spam” or “Fake.” Do it yourself first—Google’s system responds faster when the owner reports. - Mobilize trusted customers and friends
Ask a handful of real customers (and close contacts) to flag the same reviews as spam. Multiple reports from different accounts trigger faster removal—Google’s algorithms prioritize coordinated fraud signals. - Use Google’s dedicated extortion reporting tool
Google is adding new ways to combat these scams. Log into your Google account and go to the extortion reporting tool here: https://support.google.com/business/contact/merchant_extortion
Submit screenshots of any demand messages here—this escalates the case and helps Google pursue the actors. - Wait 3–7 days before responding publicly
Don’t reply right away. Early responses can feed the trolls and make the bombing appear more “organic.” If the fake reviews are still up after several days, post one calm, professional reply: “We’ve identified and reported a coordinated campaign of inauthentic reviews. We’re working directly with Google to resolve this quickly. Thank you for your continued support—we truly value feedback from real customers.” - Get more 5-star reviews with proactive reputation management
The best defense against scammers is a consistent stream of positive reviews from real customers. That’s why we recommend ReviewLead, our automated technology that makes it easier to ask for reviews, easier for people to leave them, monitors your online reputation while you sleep, and actually gets you more leads from Google.
Most attacks fizzle out within days when you refuse to pay and report aggressively. Google’s systems are getting better at detecting these patterns quickly.
Stay proactive, protect your reputation the right way, and don’t let scammers win.
— Josh Latterell
Elm Digital Marketing
