Review Extortion Scams: What to Do When Someone Threatens 1-Star Reviews

If someone threatens or posts fake 1-star reviews and demands money to stop, don’t pay and don’t negotiate. Save every message and screenshot the reviews, report the extortion to the review platform (Google has a dedicated form for this), and file a report with law enforcement through the FBI’s Internet Crime Complaint Center. Then reply calmly to any reviews already posted so real customers see a business that has nothing to hide.

This is a known scam, not a personal vendetta you have to settle alone. Google describes negative review extortion as a serious policy violation, and there is a clear process for dealing with it.

How a review extortion scam works

The details vary, but most attempts follow one of two patterns.

• Attack first, demand second. Your profile suddenly gets a cluster of 1-star and 2-star reviews, often with little or no text. Then a message arrives, by email, text, WhatsApp or a messaging app, offering to “remove” them for a fee, usually requested in gift cards, cryptocurrency or a payment app that is hard to reverse.
• Threat first. You get a message saying your rating will be destroyed unless you pay. Sometimes a few reviews appear as a “demonstration.”

Some scammers pose as a reputation agency offering to protect you from the very attack they are running. Others ask for free goods or services rather than cash. A real customer who threatens a bad review unless you give a refund is a different problem with a different fix. Google’s help page on the scam describes the same core pattern: a sudden increase in low-star reviews followed by a demand for money, goods or services to remove them.

Signs you’re dealing with extortion, not unhappy customers

• Several low ratings arrive within hours or a day or two, with no matching bookings, orders or visits.
• The reviewer names don’t match anyone in your records, and the accounts have little or no history.
• The reviews are vague (“terrible,” “scam,” a single star with no text) rather than describing a real experience.
• A message arrives soon after, linking the reviews to a payment demand.
• The sender pushes for urgency and an untraceable payment method.

If the reviews describe something that really happened, even angrily, that’s a customer problem, not extortion. Our guide on review bombing covers waves of reviews driven by news stories or social media, which need a different response.

Why you should never pay

Paying feels like the fastest way to make the problem go away. In practice it rarely does.

• They can’t deliver. Scammers can’t remove reviews from Google on request. At best they delete the reviews from their own accounts, and they can post new ones whenever they like.
• Payment marks you as a target. A business that pays once is likely to be asked again, by the same people or others they share details with.
• It can make things worse with the platform. Paying anyone to change reviews on your profile, even under pressure, puts you in contact with the kind of review manipulation platforms prohibit.
• The money is usually gone. Gift cards, crypto and instant transfers are chosen precisely because they are hard to trace or reverse.

Google’s own guidance is direct on this point: don’t engage with or pay the people responsible.

What to do, step by step

1. Stop and don’t respond to the demand. Block the sender only after you’ve saved everything.
2. Document everything. Take screenshots of each message showing the sender’s name, number or email, the date and time, and the payment demand. Screenshot each review with the reviewer’s name and date visible, and copy the direct link to each one. Write a short timeline: when the reviews appeared, when the message arrived, what it said.
3. Check your records. Confirm privately that none of the reviewers were real customers. This protects you from accidentally treating a genuine complaint as a scam.
4. Report it to Google. Google’s Business Profile Help Center has a page called “Report negative review extortion scams on your Business Profile,” which links to a merchant extortion report form. It asks for your details, the affected profile, the suspicious reviews and how the third party contacted you, along with your evidence. Google says it investigates and tells you the result. Also flag each individual review as it appears; our guide to removing fake Google reviews walks through that process.
5. Report to other platforms involved. If the reviews are on Yelp, Facebook or another site, use that platform’s reporting tools and mention the payment demand. If the threat came through a messaging app or social network, report the sender’s account there too.
6. Report it to law enforcement. File a complaint with the FBI’s Internet Crime Complaint Center at ic3.gov, which takes reports of online extortion and fraud. You can also report the scam to the FTC at ReportFraud.ftc.gov. If you’re threatened with anything beyond reviews, or feel unsafe, contact your local police.
7. Reply calmly to posted reviews. A short, neutral public reply helps real customers reading the profile (see the example below).
8. Keep monitoring. Watch your profiles closely for a few weeks. Scammers sometimes return after the first round is removed.

How to reply to extortion reviews publicly

Your reply is for future customers, not the scammer. Keep it brief, factual and free of accusations you can’t prove in public. Don’t mention the extortion attempt in detail, and don’t argue.

We can’t find any record of a visit or order matching this review. We’ve reported it to Google for review. If we’ve missed something, please contact us directly so we can look into it. Rachel, Owner

Use a similar reply for each review, but vary the wording slightly. Readers who see several identical replies may assume the replies are automated.

A worked example

This is an illustrative scenario, not a real business.

A dental practice with a steady 4.7-star rating wakes up to six 1-star reviews posted overnight, none with text. An hour later the office manager receives a WhatsApp message: pay in gift cards within 48 hours or 30 more reviews will follow, and the existing six will be “removed” once payment is received.

The manager doesn’t reply. She screenshots the message, the sender’s number and the six reviews, and notes the times. She checks the patient system privately and finds no matches for any reviewer name. She submits Google’s extortion report form with the screenshots and review links, flags each review individually, and files a complaint with IC3.

Because this is a healthcare practice, her public reply avoids saying anything about who is or isn’t a patient. She posts a short, neutral line: “We take feedback seriously and have reported this review to Google. If you’d like to discuss a concern, please call our office.” More low ratings arrive over the next two days, and she reports those too. Google investigates, and the outcome is up to Google, but the practice has done everything it can, has paid nothing, and has a complete record if the scammer returns.

Healthcare practices have extra constraints on replies. See our page on healthcare reputation management for how HIPAA affects what you can say.

Common mistakes

• Paying “just this once.” It rarely ends the attack and often invites another.
• Arguing with the scammer. It gives them what they want: a response, and time to escalate.
• Accusing reviewers publicly. Calling a review “extortion” or naming a suspect in a public reply can backfire if you’re wrong about even one of them.
• Posting fake positive reviews to compensate. Fake reviews break Google’s rules and the FTC’s 2024 rule on consumer reviews, and a profile under scrutiny is the worst place to break them.
• Hiring someone who promises removal. Nobody outside the platform controls whether a review is removed. Be wary of anyone who contacts you during an attack offering exactly that, especially for an upfront fee.
• Deleting the evidence. Blocking or clearing messages before screenshotting them makes reporting much harder.

When to get help

Most businesses can handle a small extortion attempt themselves with the steps above. It becomes worth bringing in help if the attack spans several platforms, keeps coming back, overlaps with genuine negative attention, or is taking up time you don’t have. Our review management service handles monitoring, reporting and replies, and for larger or coordinated attacks our reputation crisis management team can take the lead. We can’t promise any review will be removed, since that decision belongs to the platform, but we can make sure every report is complete and every reply is right.

Frequently asked questions

Is review extortion illegal?

Demanding money under threat of harming someone’s business is generally treated as extortion or fraud, which is why the FBI’s Internet Crime Complaint Center accepts these reports. The exact charges depend on the facts and jurisdiction, so talk to a lawyer or law enforcement about your situation.

How do I report review extortion to Google?

Use the merchant extortion report form linked from Google’s Business Profile Help page “Report negative review extortion scams on your Business Profile.” Include screenshots of the demand, the sender’s contact details, links to the reviews and a short timeline. Also flag each review individually.

Will Google remove the fake reviews?

Google says it investigates extortion reports and notifies you of the result. Reviews that break its policies can be removed, but the decision is Google’s and there is no set timeline.

Should I reply to the extortion reviews?

A short, calm public reply is usually helpful for real customers reading your profile. Say you can’t find a matching record and that you’ve reported the review. Don’t accuse anyone or describe the extortion in detail.

What if the scammer contacts me again?

Don’t respond. Save the new messages, add them to your reports with Google and IC3, and report any new reviews as they appear.