Someone Is Demanding Money to Remove Fake Google Reviews — What Should You Do?

You open your Google Business Profile and find a sudden run of one-star reviews. You do not recognise the names, and the comments are vague, obviously wrong or completely unrelated to your business.

Then a WhatsApp message arrives. Pay us and the reviews will disappear. Ignore us and more will follow.

This is not ordinary negative feedback. It is review extortion.

Google now has a dedicated reporting process for businesses targeted by this exact type of attack. Its guidance is explicit: do not engage with or pay the malicious individuals, gather evidence immediately and report the extortion promptly. Google’s current extortion-reporting instructions are here.

If this is happening to your business now, the order in which you respond matters.

If you are being targeted right now, do these five things

1. Do not pay.
2. Do not negotiate with the attacker.
3. Preserve every piece of evidence before anything disappears.
4. Report the extortion through Google's dedicated process.
5. Report the individual fake reviews and profiles where appropriate.

Then document what happened and monitor the profile for additional attacks.

Do not let the urgency of seeing your rating fall push you into doing something that makes the scam worse.

What does a Google review extortion scam look like?

Google describes a common pattern:

1. a business receives a sudden increase in one-star or two-star reviews;
2. a third party contacts the business;
3. the third party demands money, goods or services; and
4. the threat is that negative reviews will remain — or more will be posted — unless the business complies.

Google's November 2025 scams advisory similarly described organised review-bombing followed by payment demands, often delivered through third-party messaging apps.

The exact version can vary. You might receive:

• a demand for cryptocurrency;
• a request for gift cards;
• a demand for a bank transfer;
• a message offering to “fix” the reputation problem they created;
• a threat to post dozens more reviews;
• a demand for free goods or services; or
• a claim that they are an agency with special access to Google.

Why you should not pay

The instinct to pay can be powerful. Maybe your rating just dropped from 4.8 to 4.4, maybe your business depends heavily on local search, or maybe the attacker is demanding far less money than you fear the reputation damage could cost.

That does not make paying the sensible option.

There is no guarantee the reviews will disappear

You are dealing with somebody already willing to attack a business using fake reviews, so their promise is not a contract you can meaningfully trust.

Payment tells the attacker the business will pay

Google specifically warns that paying can encourage further attempts. Even if the first batch disappears, the business may now be more attractive for another demand.

You may destroy useful evidence

If negotiations move across disappearing-message platforms, accounts are deleted or communications vanish, your evidence becomes weaker. Capture it first.

Step 1: preserve the evidence immediately

Do this before arguing with anyone. Create a folder dedicated to the incident and capture:

• screenshots of every suspicious review;
• the reviewer's displayed name and profile;
• the review date and rating;
• links to the reviews if available;
• screenshots of WhatsApp, SMS, email, Telegram or other messages;
• phone numbers;
• email addresses;
• usernames;
• payment instructions;
• cryptocurrency wallet addresses;
• bank details;
• threats to post additional reviews;
• any claim that the sender controls the reviews;
• your Business Profile rating before and after the attack if known.

Google asks merchants reporting review extortion to provide evidence showing the communication, demands and related suspicious reviews.

Take full screenshots rather than cropping so tightly that dates, usernames or context disappear.

If messages are in another language, preserve the originals even if you also create translations.

Step 2: create a simple incident timeline

Write down what happened while it is fresh.

This may seem bureaucratic while you're stressed, but it makes the relationship between the fake reviews and the payment demand much easier for another person to understand.

Step 3: report the extortion to Google

Google has a specific merchant extortion report form for Business Profile review attacks, and its current guidance asks for details such as:

• your contact information and relationship with the business;
• the business name, address and Business Profile link;
• details of suspicious reviews;
• information about the malicious third party and their methods; and
• screenshots/files demonstrating the demand.

Use that route rather than treating the attack as merely five separate bad reviews; the extortion context is the important evidence.

Step 4: report the fake reviews too

You should also use Google's normal review-reporting tools where the individual reviews violate policy. Google makes an important distinction here:

A review is not removable merely because it is negative.

Google says businesses can flag reviews that violate its policies, but it does not get involved simply because a merchant disagrees with a customer, so your report needs to be precise. If the reviewer never had a genuine experience and is part of an extortion attack, explain that through the appropriate process.

Do not dilute a legitimate extortion claim by also reporting every real three-star customer review you dislike.

Our guide to identifying and reporting fake Google reviews covers the broader non-extortion situation.

Should you reply publicly to the fake reviews?

There is no universal answer. Preserve and report the evidence first, then consider how visible and damaging the reviews are while Google investigates.

If you do respond, keep it calm and factual. Do not publish a furious accusation naming the person you think is behind it unless you are extremely sure of your facts and understand the legal implications.

A restrained response might say:

We have no record of an experience matching this review and are currently reporting a group of suspicious reviews to Google. If you are a genuine customer, please contact us directly with your booking or job details so we can investigate.

That serves future readers without turning your profile into a public argument.

Do not disclose the attacker's phone number, personal information or private messages in a review response.

Should you tell customers you're being review-bombed?

Usually, do not turn your entire social-media presence into a crisis campaign immediately. Report the incident first and understand its scale.

If the attack becomes significant and customers begin asking about it, a factual statement can make sense. Something like:

We are aware of a group of suspicious Google reviews that appeared today alongside an extortion demand. We have reported the incident through Google's dedicated process and are preserving the evidence. Genuine customer feedback remains extremely important to us.

Do not ask your followers to retaliate against suspected attackers. Do not organise your own review bombing. Do not encourage people who have never used the business to flood you with five-star reviews to “cancel out” the attack, because those would also be inauthentic reviews.

Should you ask real customers for reviews while an attack is happening?

Continue your normal, neutral review-request process.

Do not suddenly message everyone in your database saying:

We're under attack — please give us five stars now.

That risks turning genuine review collection into rating manipulation.

If you already ask every completed customer for honest feedback at a consistent point, keep doing that.

Authentic recent reviews can help make your profile more representative over time, but they should not be manufactured as counter-fire.

Report the incident beyond Google where appropriate

Google notes that scam victims can also report suspicious activity to relevant government agencies.

The appropriate authority depends on your country and the nature of the demand.

If there are credible threats, significant financial loss, repeated harassment or organised extortion, consider reporting the incident to law enforcement or your national fraud-reporting service.

If you are unsure whether communications create a legal risk, obtain qualified legal advice.

This article is a practical reputation-response guide, not legal advice.

Protect staff from accidentally making the situation worse

Once an attack starts, make sure everybody who manages the business's:

• Google profile;
• email;
• WhatsApp;
• social media;
• customer support;

knows what is happening.

Give them one instruction:

Do not negotiate, pay, threaten or delete evidence.

Route new communications to one person.

That prevents a well-meaning employee from replying:

Fine, how much do you want?

before management even knows the message arrived.

Secure the Business Profile itself

Not every review attack involves account compromise, but a reputation incident is a good time to check access.

Review the owners and managers on the Business Profile and remove people who no longer require access. Make sure each authorised user has their own account rather than sharing passwords, and check the security of the Google Accounts that manage the profile.

Google states that owners and managers can manage Business Profile information and responses, while only owners can perform certain access-management actions.

What if the attacker claims to work for Google?

Treat unsolicited demands for payment with extreme suspicion. Google's scam guidance warns about people who claim to represent Google or another company while using unrelated email addresses, suspicious links or demands for payment.

Creating and maintaining a standard Google Business Profile does not require you to pay a stranger who contacts you out of nowhere.

Do not provide:

• your Google password;
• verification codes;
• payment-card details;
• remote computer access;
• Business Profile ownership;
• personal identity documents;

to somebody merely because they claim they can remove reviews.

What happens after you report it?

Do not expect every suspicious review to disappear instantly. Google has moderation systems and investigation processes, and the timing and outcome will depend on the evidence and the circumstances.

Continue preserving new evidence while the report is open.

If:

• more reviews arrive;
• the attacker sends another demand;
• they change accounts;
• they threaten other locations;

add that information to your incident record and use the appropriate follow-up route available to you.

How to distinguish extortion from an ordinary bad review

Not every cluster of negative reviews is an attack. A business can genuinely have a bad weekend, a viral customer complaint can send real customers to share their own experiences, and an event can go wrong for many people at once.

Extortion becomes much clearer when there is a direct link between suspicious reviews and a demand for money, goods or services.

Look for evidence, not merely a belief that:

“There is no way five people could dislike us.”

Google removes policy violations, not criticism.

Build an incident pack before you ever need one

Most businesses will never experience a serious review-extortion attack, but preparing costs almost nothing. Create a one-page internal procedure containing:

1. who owns Business Profile incidents;
2. where screenshots should be stored;
3. who is authorised to communicate externally;
4. Google's extortion reporting link;
5. your profile URL;
6. contact details for legal/fraud support if needed.

During an attack, people make worse decisions when nobody knows who is responsible.

Do not let an attack define your wider review strategy

Review extortion is frightening precisely because reputation matters. But your long-term defence is not obsessively protecting a perfect 5.0; it is building a broad, recent and genuine body of customer feedback.

A business with:

• hundreds of authentic reviews;
• consistent review recency;
• thoughtful owner responses;
• clear customer evidence on its website;

has a more resilient reputation than one relying on twelve perfect reviews gathered three years ago.

Where appropriate, display genuine Google feedback on your own website too. GR Widget can automatically show your current reviews in customisable layouts, so potential customers do not have to leave your website to understand the reputation you have built.

Build your free Google reviews widget →

Frequently asked questions

What should I do if someone demands money to remove Google reviews?

Do not pay or negotiate. Preserve screenshots and other evidence, report the extortion through Google's dedicated merchant extortion process, and report policy-violating reviews through the appropriate review-reporting tools.

Does Google have a special report form for review extortion?

Yes. Google Business Profile has specific guidance and a merchant extortion reporting process for cases involving suspicious negative reviews combined with demands for money, goods or services.

Should I respond to fake one-star reviews while Google investigates?

You can respond if the reviews are visible and potentially influencing customers, but keep the response calm, factual and brief. Avoid public threats or publishing private information. Preserve evidence and report the attack before becoming drawn into arguments.

Will paying make the reviews disappear?

There is no guarantee. Google specifically advises businesses not to pay malicious individuals, noting that payment can encourage further attempts and does not guarantee removal.

Can I ask customers to post five-star reviews to offset an attack?

Continue any normal process that neutrally asks genuine customers for honest reviews. Do not ask people who have not used your business to post ratings, and do not pressure real customers to leave a specific five-star rating simply to counter suspicious reviews.

Can Google remove a negative review just because it is false?

Google removes reviews that violate its policies. Ordinary disagreements between a business and a customer are not normally enough. In an extortion case, the payment demand and coordinated suspicious activity can provide important context.

Bottom line

A review-extortion attack is designed to make you panic. The attacker wants the falling star rating to feel more urgent than the consequences of paying.

Do not give them that advantage.

Preserve the evidence. Do not pay. Report the extortion through Google's dedicated process, report the policy-violating reviews and keep your public communication factual.

And continue building the kind of genuine reputation that is much harder for a handful of malicious reviews to define.