Review Extortion: What to Do When Someone Demands Payment to Stop 1-Star Reviews

A review extortion scam is when someone floods your profile with 1- and 2-star reviews, or threatens to, and then demands money, goods, or services to take them down. Don't pay and don't negotiate. Save every message and review link, report the case through Google's dedicated extortion form, and file a report with the FTC and the FBI's Internet Crime Complaint Center.

This guide covers how to tell extortion apart from ordinary negative reviews, what to do in the first hour, how to report through each channel, and how to respond publicly while you wait.

What a review extortion scam looks like

Google's help page on reporting negative review extortion scams describes the pattern: a sudden increase in 1-star and 2-star reviews on your Business Profile, followed by someone demanding money, goods, or services in exchange for removing them.

In practice it tends to arrive in one of two orders:

• Reviews first, demand second. Several low ratings appear within hours or days, often from accounts with no history and no text, or text that doesn't match anything that happened at your business. Then a message arrives by email, text, WhatsApp, or social media offering to make them go away for a fee.
• Threat first. You get a message saying that unless you pay, your profile will be hit with negative reviews. Sometimes a few reviews are posted as a "demonstration."

Common features include urgency ("pay within 24 hours"), payment requested in cryptocurrency, gift cards, or wire transfers, and claims of being able to control what appears on your profile. The FTC lists exactly these warning signs in its guide How To Avoid a Scam: pressure to act before you have time to think, and payment methods that are hard to reverse.

How this differs from other negative reviews

The defining element is the demand. A genuine unhappy customer, even an angry one, is not extortion, and neither is a cluster of critical reviews after a public controversy. If there is no demand for payment or favors, the situation is closer to review bombing or individual fake reviews, and the normal reporting tools apply. Google's extortion form is specifically for businesses that have been directly subjected to a demand for money or favors in exchange for review removal.

Why you should not pay

Paying feels like the fastest way out, but Google's guidance is direct: do not engage with or pay the people involved, because it can encourage further attempts and doesn't guarantee the reviews will be removed. The same page also advises against trying to resolve it yourself by offering money or services.

There are practical reasons too:

• The person may not control the accounts, or may come back with new accounts and a new demand.
• Paying marks your business as one that pays.
• Google's Maps user-generated content policy prohibits businesses from offering incentives, including payment, in exchange for posting a review or for the revision or removal of a negative review. A payment to make reviews disappear can look like exactly that.

Also be careful with anyone who contacts you afterward offering to "get the reviews removed" for a fee. The FTC's guide Scams and Your Small Business warns that some scammers claim they can replace negative reviews or boost your ratings. Only the platform decides what stays up.

What to do in the first hour

Evidence disappears. Accounts get deleted, messages get unsent, and reviews get edited. Google's page says to gather evidence immediately, because the sooner you collect proof, the better. Work through these steps in order:

1. Stop replying to the sender. Don't argue, threaten, or bargain. You don't need to respond at all.
2. Screenshot every demand. Capture the full message including the date, time, and the sender's email address, phone number, username, or profile link. If the message is on a platform where you can export the chat, do that too.
3. Copy the link to each suspicious review. On Google, you can share a direct link to an individual review. Note the reviewer name, star rating, date, and any text.
4. Write a short timeline. When did the first unusual review appear? When did the demand arrive? How many reviews in what period? Google's form asks for these dates and times.
5. Check whether any reviews match real customers. Search your bookings, orders, or CRM for the reviewer names. This helps you separate the extortion reviews from genuine feedback that happens to arrive at the same time.
6. Tell your team. Make sure whoever monitors your inbox, phone, and social accounts knows not to engage or pay, and to forward any new messages to one person.

Store everything in one folder. You'll reuse the same material for each report.

How to report review extortion to Google

Google has a separate channel for extortion, distinct from the normal "report review" button. According to its help page on extortion scams, the process is:

1. Open the merchant extortion report form linked from that help page.
2. Enter your business details and your relationship to the business.
3. Describe the suspicious reviews and how the person contacted you.
4. Attach your evidence: screenshots of the demands, direct links to the reviews, and the person's names, usernames, email addresses, phone numbers, or social media profiles.
5. Add the dates and times of the first increase in negative reviews and of the demand.
6. Submit the form.

Google says its team investigates and notifies you of the outcome, but keeps specific details of the investigation confidential for privacy and security reasons. Don't expect a detailed explanation of what was done.

Should you also flag the reviews individually?

You can. Google's page on reporting inappropriate reviews explains how to flag a review from your profile or through the Reviews Management Tool, how to check each report's status, and how to submit a one-time appeal if a report is rejected. Google notes that processing typically takes several days.

Flag only the reviews that are actually part of the attack, and choose the reason that honestly fits. Don't mass-flag every recent negative review hoping some will stick; genuine customer feedback that arrived the same week is not extortion. Our guide on getting a Google review removed covers which reasons Google accepts and what to do when it won't remove a review.

Reporting to the FTC and law enforcement

Demanding payment under threat is a matter for law enforcement, not just the platform. This section is general information, not legal advice; for advice about your situation, consult a qualified lawyer in your jurisdiction.

• FTC. The FTC asks businesses to report suspected scams at ReportFraud.ftc.gov. Its small business guide also suggests alerting your state Attorney General.
• FBI Internet Crime Complaint Center (IC3). The IC3, run by the FBI, is the central hub for reporting cyber-enabled crime. Complaints are analyzed and may be referred to federal, state, local, or international law enforcement. The IC3 states that it will never contact you directly, so treat anyone claiming to be from the IC3 and asking for money as another scam.
• Local police. A police report can be useful for your records, for insurance, and if the platform or a lawyer later asks for one. Bring the same evidence folder.

Outside the US, use your national fraud or cybercrime reporting service and keep the same evidence.

Don't expect a quick personal response from these agencies. The reports matter because they create a record and help investigators connect cases, not because they'll make reviews disappear.

How to respond publicly while you wait

Investigations take time, and customers will see the reviews in the meantime. A short, calm public reply helps more than silence or an angry rebuttal. Don't mention extortion, accuse anyone of a crime, or reveal personal details about the people involved.

Example (illustrative): "Hi [Name], we can't find any record of a visit or order under this name. We take every review seriously, so if you were a customer, please contact [manager's email] so we can look into it."

Use the same factual tone for each suspicious review, and keep replying normally to genuine reviews. For more wording, see how to respond to a fake Google review.

Preventing the next attempt

You can't stop someone from targeting you, but you can make the next attack easier to handle:

• Monitor your profiles daily. Turn on review notifications for every location so a sudden cluster of low ratings is spotted within hours, not weeks. Our guide to monitoring brand mentions for free includes a simple routine.
• Write down the playbook. One page that says who handles it, that nobody pays, where evidence goes, and which forms to use. A broader reputation crisis plan can include it.
• Keep a steady flow of genuine reviews. Asking every customer for honest feedback, without conditions on what they say, means a handful of fake ratings has less effect on your average.
• Train staff on scam signs. The FTC recommends teaching employees to recognize pressure tactics and unusual payment requests, since the first message often reaches a front-desk inbox.

If it happens again, run the same steps: document, don't pay, report to Google's extortion form, and file with the FTC and IC3.