---
title: "Review Bombing: What to Do When Your Business Is Targeted"
description: "A calm, step-by-step plan for a sudden wave of negative reviews: tell an attack from real backlash, document it, report it and respond in public."
url: https://brandprotecto.com/blog/review-bombing-what-to-do
updated: 2026-10-28
publisher: BRANDprotecto (info@brandprotecto.com)
---

# Review Bombing: What to Do When Your Business Is Targeted

[Home](https://brandprotecto.com) / [Blog](https://brandprotecto.com/blog) / Removal requests & policies
Removal requests & policies

# Review Bombing: What to Do When Your Business Is Targeted

When dozens of negative reviews arrive at once, the first hours matter. How to tell a coordinated wave from genuine backlash, what to report, and what to say in public.

By the BRANDprotecto editorial team · Published October 28, 2026 · Last reviewed October 28, 2026 · 6 min read

## In short

- Review bombing is a sudden, often coordinated wave of negative reviews; Google's policy covers it as rating manipulation and off-topic content.
- Pause, document everything and find the trigger before replying to anyone.
- If someone demands money to remove reviews, don't pay or engage and use Google's extortion report form.
- Report reviews one by one under the matching policy, and never answer with fake positive reviews.
- Publish one calm, factual statement and keep individual replies short and consistent.

Review bombing is a sudden wave of negative reviews, often from people who never visited, usually triggered by a viral post, a news story, a public dispute or an extortion attempt. Don't reply in anger or post anything you'll regret. Document the wave, report the reviews that break platform rules, use Google's extortion form if someone demands payment, and publish one calm, factual statement.

## What review bombing is, and what it isn't

Google's policy pages don't use the term, but they describe the behavior. Google's definition of [rating manipulation](https://support.google.com/contributionpolicy/answer/16597280?hl=en) includes orchestrating coordinated campaigns to unfairly inflate or deflate a place's rating, and the [prohibited and restricted content policy](https://support.google.com/contributionpolicy/answer/7400114?hl=en) lists unusual volumes or patterns of review contributions that indicate efforts to manipulate a rating. Off-topic content, such as general, political or social commentary and personal rants, isn't allowed either.

Not every spike is an attack. If many real customers complain about the same real problem, that is feedback, even when it arrives all at once. The table below helps you tell the two apart.

Signal Points to genuine backlash Points to a coordinated wave

Content Specific visits, orders, dates or staff Reactions to a post, article or person, with no visit described

Reviewers Local customers with varied review histories Distant locations, new or single-review accounts

Wording Different details in each review Repeated phrases, slogans or identical text

Timing Follows a real incident at your business Follows a viral post, news item or online call to action

Contact Customers ask for a refund or a fix Someone offers to remove reviews for money

## The first hour: what to do

- **Pause before replying.** Replying to every review in the heat of the moment can feed the attention. Agree internally on who speaks for the business.
- **Capture evidence.** Screenshot each review with its date, reviewer name and rating, copy the links, and save the post or article that seems to have started it. Reviews can disappear later, and you will want a record for reports and appeals.
- **Find the trigger.** Check social media, local news and your inbox for what started it. The trigger often decides which policy applies.
- **Brief your staff.** Ask them not to reply from personal accounts, not to argue online, and not to post anything about the people involved.
- **Check who has access.** Make sure only the right people manage your Business Profile and social accounts while things are tense.

## If someone demands money, use Google's extortion form

One variant is an extortion scam: a sudden increase in 1-star and 2-star reviews followed by a demand for money, goods or services in exchange for removing them. Google has a [dedicated report form for negative review extortion](https://support.google.com/business/answer/16404809?hl=en) and advises the following:

- Don't engage with or pay the people involved; Google says paying can encourage further attempts and won't necessarily get the reviews removed.
- Don't try to resolve it yourself by offering money or services.
- Gather evidence immediately: screenshots of every demand showing the date, time and sender details where possible, direct links to the suspicious reviews, any names, usernames, email addresses or phone numbers used, and when you first noticed the spike and received the demand.

Google says it investigates and tells you the result, but won't share specific details of the investigation. The form is only for cases where you received a direct demand; reviews that break the rules for other reasons go through the normal reporting process.

Report threats or extortion to law enforcement as well. This article is general information, not legal advice; consult a qualified lawyer in your jurisdiction about your situation.

## Report the reviews that break the rules

Report reviews one by one from your Business Profile or the Reviews Management Tool, choosing the reason that fits each one. [Google's reporting page](https://support.google.com/business/answer/4596773?hl=en) says evaluation typically takes several days and explains the status labels and the one-time appeal. During a review bomb, the categories to check first are off-topic content, fake engagement (no real experience), harassment and personal information.

Be selective. A review from a real customer who is unhappy about the same incident may well be allowed, even if it is unwelcome. And don't ask staff, friends or followers to mass-flag reviews or to post positive reviews to balance the rating. If Google determines that a business violated its Fake Engagement policy, it can [restrict the Business Profile](https://support.google.com/business/answer/14114287?hl=en) , for example by blocking new reviews for a set period or showing a warning that fake reviews were removed.

If you're unsure whether a particular review is genuine, our guide on [how to spot fake reviews](https://brandprotecto.com/blog/how-to-spot-fake-reviews) lists the signals worth checking and the ones that mislead.

## What platforms may do on their own

Platforms have their own tools for spikes, and you don't control when they are used:

- **Google:** according to its [Posting Restrictions page](https://support.google.com/contributionpolicy/answer/13036130?hl=en) , posting may be turned off for a place for a short period to protect it from a spike in irrelevant or offensive content, for example during a real-world event that attracts off-topic commentary. Google says it lifts the restriction when the risk of policy-violating content subsides. Its [Consumer Alerts page](https://support.google.com/contributionpolicy/answer/15178562?hl=en) adds that when Google detects suspicious review activity on a business, users may see a banner saying suspicious reviews were removed, may be unable to post reviews for a period, and reviews may be hidden for a time.
- **Yelp:** in its [2025 Trust and Safety Report announcement](https://www.yelp-press.com/press-releases/press-release-details/2026/Yelp-Releases-2025-Trust--Safety-Report/default.aspx) , Yelp says that when a business receives public attention or goes viral, it uses signals to detect unusual spikes in activity, and its User Operations team may temporarily disable posting and place an alert reminding users that reviews must reflect genuine, firsthand experiences. Yelp describes an Unusual Activity Alert as the case where a business, after gaining public attention, receives an influx of reviews that don't reflect firsthand experiences.

Neither page promises that a restriction will be applied in any particular case, so keep reporting individual reviews through the normal channels.

## Post one calm, factual statement

Customers will look at how you respond. Instead of replying to every review, publish one statement in the places you control, such as your website and social profiles, and keep any review replies short and consistent.

Example (illustrative statement): We're aware of a large number of reviews posted since [date] following [brief, neutral description of the event]. We take feedback from our customers seriously. If you visited us and had a problem, please contact [manager's email] so we can look into it. We've reported reviews that don't describe a visit, in line with the platforms' rules.

Example (illustrative short reply): Thank you, [Name]. We couldn't match this review to a visit. If you were a customer, please contact [manager's email] and we'll look into it.

Healthcare providers and other regulated businesses should not say whether they can match a review to a visit: they must not confirm or deny that someone is a customer or patient, so their replies should only invite the person to get in touch. Our guide to [responding to patient reviews](https://brandprotecto.com/blog/hipaa-review-responses) has safer wording.

Avoid naming or accusing individuals, sharing private messages, or speculating about who organized the wave. If the trigger was a genuine mistake on your side, say so plainly and explain what you are changing.

## After the wave

- Track every report and appeal in a simple log until each one has a final status.
- Respond individually to anyone who describes a real visit, and fix what they describe.
- Keep asking every real customer for a review, without incentives or filtering, so the profile reflects actual experiences again. Our guide on [getting more Google reviews](https://brandprotecto.com/blog/how-to-get-more-google-reviews) covers the policy-safe way.
- Write down what happened and turn it into a short plan for next time; our [online reputation crisis plan](https://brandprotecto.com/blog/reputation-crisis-plan) guide has a template outline.
- Set up monitoring so the next spike reaches you quickly. See [what brand monitoring covers](https://brandprotecto.com/blog/what-is-brand-monitoring) .

A few weeks later, look back at the log. Which reports led to removals, which were rejected, and what evidence did the successful ones include? Which complaints in the wave pointed to something real that you have since changed?

## Frequently asked questions

### What is review bombing?

Review bombing is a sudden wave of negative reviews, usually from people reacting to a viral post, news story or dispute rather than describing a real visit. Google's policy covers it as rating manipulation, which includes coordinated campaigns to unfairly inflate or deflate a place's rating, and as off-topic content when the reviews are commentary rather than experiences.

### Can I ask Google to turn off reviews during a review bomb?

Google's help pages describe short-term posting restrictions that Google may apply to a place during a spike in irrelevant or offensive content, but they don't describe a switch that owners can use. What you can do is report individual reviews, use the extortion form if there is a payment demand, and keep a record of everything.

### Should I respond to every review in a review bomb?

Usually not. Replying to dozens of hostile reviews can keep the attention going. Publish one calm statement on channels you control, use a short, consistent reply where a reply is needed, and focus on reporting reviews that break the rules. Respond individually to anyone who describes a real visit.

### Can I add positive reviews to balance out a review bomb?

No. Asking staff, friends or followers to post reviews that aren't based on a real experience is fake engagement under Google's policy, and Google can restrict profiles that violate it, for example by blocking new reviews for a period or showing a warning that fake reviews were removed. Keep asking real customers for honest reviews.

## Sources

- [Rating Manipulation - Maps User Generated Content Policy Help — Google](https://support.google.com/contributionpolicy/answer/16597280?hl=en) (checked October 28, 2026)
- [Prohibited & restricted content - Maps User Generated Content Policy Help — Google](https://support.google.com/contributionpolicy/answer/7400114?hl=en) (checked October 28, 2026)
- [Report negative review extortion scams on your Business Profile - Google Business Profile Help — Google](https://support.google.com/business/answer/16404809?hl=en) (checked October 28, 2026)
- [Report inappropriate reviews on your Business Profile - Google Business Profile Help — Google](https://support.google.com/business/answer/4596773?hl=en) (checked October 28, 2026)
- [Business Profile restrictions for policy violations - Google Business Profile Help — Google](https://support.google.com/business/answer/14114287?hl=en) (checked October 28, 2026)
- [Posting Restrictions - Maps User Generated Content Policy Help — Google](https://support.google.com/contributionpolicy/answer/13036130?hl=en) (checked October 28, 2026)
- [Consumer Alerts - Maps User Generated Content Policy Help — Google](https://support.google.com/contributionpolicy/answer/15178562?hl=en) (checked October 28, 2026)
- [Yelp Releases 2025 Trust & Safety Report — Yelp Inc. (Newsroom press release, 25 February 2026)](https://www.yelp-press.com/press-releases/press-release-details/2026/Yelp-Releases-2025-Trust--Safety-Report/default.aspx) (checked October 28, 2026)

Prepared by the BRANDprotecto editorial team with AI assistance and checked against the sources above. Platform rules and laws change: always confirm the current wording at the source. This article is general information, not legal advice.

## Not sure whether a review breaks Google’s rules?

Answer eight questions in our free review check. You will see which Google policies may apply, what evidence to collect and how to report the review. If you want, an analyst checks it for you within one business day.

[Check a review for free](https://brandprotecto.com/tools/review-removal-check)

## Related articles

[Removal requests & policies What Evidence Helps When You Report a Fake Google Review Google's report form asks for a policy reason, not attachments. A short evidence file still helps you pick the right reason, write a precise appeal and recognize when a review is genuine. November 9, 2026 · 7 min read](https://brandprotecto.com/blog/review-reported-to-google-still-visible-what-evidence) [Removal requests & policies A Negative Facebook Recommendation on Your Page: What You Can Report and Remove You can't delete a customer's Facebook recommendation yourself. Here is what you can report under Meta's rules, how to reply, and what hiding reviews really costs. November 8, 2026 · 7 min read](https://brandprotecto.com/blog/facebook-recommendation-negative-page-report) [Removal requests & policies A Google Review Is About Politics or Something Unrelated to Your Service A review about an election, the news or the owner's views may break Google's off-topic rule. Here is how to tell, how to report it once and how to reply if it stays. November 7, 2026 · 7 min read](https://brandprotecto.com/blog/google-review-about-off-topic-political-issue)
