Review bombing extortion: evidence, reports, response

Review bombing extortion is a scam in which a wave of one- and two-star reviews lands on your business profile, followed by a message offering to make the reviews disappear for money, goods or services. The defensive answer has four parts: do not pay or negotiate, preserve the evidence at once, report the demand to the platform's extortion channel, and report it to the police or the national cybercrime body in your country.

The attack works because it exploits panic: a rating that took years to earn drops in an afternoon, and the price of the demand is set lower than the cost of losing customers. It needs you to act before you think, and to treat a criminal demand as a negotiation.

This guide is about that specific situation: the demand, the evidence, the reporting routes and the public response. It does not repeat the general method for disputing a fake review that breaks a platform rule, which is a separate procedure, and it does not cover suing a genuine reviewer. Platform policies and laws change, so everything below describes the pages read for this guide, with the source named. Where a page could not be read, the text says so. This is information, not legal advice; your own counsel decides what applies to you.

How a review extortion attack is built

A review extortion attack has two parts, and the second part is what makes it a crime rather than a nuisance. First comes a burst of low ratings, often with short, similar or vague text, posted within a short window by accounts with little history. Second comes contact: an email, a message on a chat app, a note inside a review or a reply to your public response, offering to remove the reviews in exchange for payment.

Related readApple Maps and Bing Places Review Management

Google describes the pattern in its own help page on the subject: a sudden wave of 1- and 2-star reviews followed by a demand for money, goods or services to take them down. The page is written for Google Business Profile, but the shape of the scheme is the same wherever a rating influences buying decisions: restaurants, clinics, trades, hotels, agencies, app developers.

What the attacker is really selling

The attacker is not selling removal. Only the platform can remove a review, and whoever controls the accounts that posted it has no special power over moderation. What is for sale is the absence of further harm. That is why the demand is often followed by a second demand, or by a fresh wave once the first is paid.

Extortion, review bombing and a fake review campaign are different problems

Three situations look the same on a star chart and need different responses. The deciding question is whether anyone has asked you for something in return for stopping.

Mixed cases exist: an extortionist can time a wave to follow a genuine complaint so that it blends in. If a demand has arrived, treat the case as extortion whatever else is going on.

The first hour: preserve the evidence before anything changes

Preserve first and reply never. Reviews can disappear when the platform filters them, accounts can be deleted by their owners, and messages can be unsent. Google's help page on extortion reports says to collect evidence right away because earlier proof is more useful, and the list of what its form asks for is a good checklist for anyone, on any platform.

1. Capture the demand in fullScreenshot every message, email or note that asks for money, goods or favors, showing the date, time, sender name, address or number, and the platform or app it arrived on. Save the original email with its headers if you can.
2. Record every review linkCopy the direct link to each suspicious review and screenshot the review with the reviewer name, rating, date and text visible. Do this before you reply or report, because reporting can change what the page shows.
3. Write the timelineNote when you first saw the spike, how many reviews arrived and over what hours, and when the demand came. Add any earlier approach, even if you ignored it at the time.
4. Match against your recordsCheck each reviewer name against bookings, invoices, tickets or enquiries. A reviewer with no match is a data point; one with a match is a customer to answer, not to report.
5. Note the attacker's identifiersKeep usernames, email addresses, phone numbers and social profiles exactly as they appear. Do not contact them to learn more, and never call a number placed in a review.
6. Store copies somewhere safeKeep the files in one folder with a plain index. Share them only with the platform form, the police and your adviser.

What not to do in the first hour

Do not close the listing or change the business name in the hope of shaking off the reviews. Do not reply to the attacker, even to say you will report them: it confirms an active inbox. Do not ask staff or friends to post positive reviews to restore the rating. That is a fake engagement violation of its own, and it hands the attacker a reason to say your reviews are manipulated.

Related readRemove eBay Feedback: What Qualifies and How

Why you do not pay, and what paying actually buys

The reason not to pay is practical before it is moral. Payment buys nothing you can enforce. The person you pay has no authority over the reviews, no obligation to stop, and now knows you are willing to pay.

Google says plainly not to pay or engage with the attackers, because this can encourage more attempts and does not guarantee removal, and not to try to settle by offering money or services. That is the platform's own position.

A payment to an anonymous recipient may also be hard to trace or reverse. If you have already paid, say so in the report: police want the full picture, and the payment is evidence of the offense.

Beware the helper who contacts you second

Some attacks are followed by a stranger offering to remove the reviews or recover your money for a fee. The FBI's IC3 site warns that it does not work with law firms or crypto services to recover lost funds and never contacts you directly for information or money. Treat any unsolicited offer with the same suspicion as the original demand, and remember that a legitimate adviser works through the same official report forms you can use yourself.

Report to the platform: the Google extortion form and its limits

On Google, the correct channel is a dedicated merchant extortion report form, separate from the normal button that reports a review for breaking content rules. Google's help page says to use the form, attach screenshots and files showing the communications and demands, and provide the details as fully as you can.

According to that page, the form asks for:

Related readAirbnb review removal: what qualifies and how

• Your contact details and your relationship to the business.
• The business's full name, address and Business Profile link.
• Details of the suspicious negative reviews.
• The attacker's contact information and the methods they used.

Google says it investigates and tells you the outcome, but does not share specific details of its investigation for privacy and security reasons. Do not expect a running commentary, and do not read silence as refusal.

Report the reviews too

The extortion form deals with the attempt. It is sensible to also report the individual reviews through the standard route for a policy violation such as fake engagement or conflict of interest, using the matching you did in the first hour. The specific procedure, wording and appeal are covered in the general guides to removing fake reviews and to the platform in question, so they are not repeated here. Keep the two reports consistent: the same facts, the same dates, no contradiction between what the form says and what the content report says.

Other platforms

Trustpilot, Yelp, Tripadvisor, app stores and marketplaces each have their own report channels. The dedicated extortion pages for those platforms could not be read for this guide, so no specific form is described. If you are hit on one of them, look in the business help center for a section on extortion, threats or abuse, and use the general report route with the demand attached if none exists. State in the first line of the report that a payment was demanded, so a person triaging it understands it is not a normal dispute.

Report to the police: what the law says in outline

An extortion attempt over reviews is a crime in most legal systems, and the report to law enforcement is separate from, and does not replace, the platform report. The wording and penalties differ by country and by state, and the two examples below show the shape of the law rather than a complete picture.

Related readAvvo review removal: what lawyers can dispute

In England and Wales, section 21 of the Theft Act 1968 defines blackmail as making an unwarranted demand with menaces, with a view to gain for oneself or another or with intent to cause loss to another. The statute says the nature of the act or omission demanded is immaterial, and the maximum penalty on conviction on indictment is imprisonment for a term not exceeding fourteen years. Read the text on legislation.gov.uk. Scotland and Northern Ireland have their own law and procedures, which were not read for this guide.

In the United States, 18 U.S.C. 875(d) covers a person who, with intent to extort any money or other thing of value, transmits in interstate or foreign commerce a communication containing a threat to injure the property or reputation of the addressee or another. The text provides for a fine or imprisonment of up to two years, or both. See the statute text at Cornell Law School. States have their own extortion laws, and the federal statute is one possible route, not the only one.

Where to report

In the United States, the FBI's Internet Crime Complaint Center takes complaints through its site. Its home page says to file even if you are unsure whether the complaint qualifies, and its terms state that any investigation is at the receiving agency's discretion and that IC3 will not contact you. In the United Kingdom, Action Fraud is described on its site as the national fraud and cybercrime reporting center, with an online reporting tool; the page read for this guide did not mention blackmail or Scotland, so confirm the right body for your nation before you file. For Australia, the national cybercrime reporting page could not be read for this guide, so check the official government route before you file. In every country, local police are the fallback, especially if the demand includes threats against people or property.

Related readRemove BBB complaint: what BBB will and will not do

What a report is for

Expect a record rather than a quick result: police may not be able to identify an overseas operator, and agencies do not promise outcomes. The record still matters. It supports a platform escalation and any later dispute over a payment you made. Ask for a reference number and keep it with the file.

When there is no demand: review bombing by a crowd

Not every wave of one-star reviews is an extortion attempt. A business that appears in a news story, a viral video or a public argument can receive hundreds of ratings from people who never used it. No one asks for money. The aim is expression, not profit, and the response differs.

First, do not search for a villain: the accounts may belong to real people with real feelings about the event. Second, report content, not people: reviews that talk about the news rather than the service are off-topic under the platform's written rules, and a reviewer who writes about an event instead of an experience is the easiest case to explain. Third, expect the platform to filter some of the wave itself. Platforms run their own filters, so some of a wave may be removed without action from you, but no page read for this guide says how much.

If the cause is a real event, speak on your own site or channel with one short, factual statement, not in fifty review replies. Arguing with reviewers one by one shows a business fighting a crowd.

Protect the public record while the reports run

The goal during the investigation is to keep the next customer's view sensible. You cannot remove reviews faster than the platform decides, but you can decide what the page says around them.

Related readHealthgrades review removal: what the policies allow

1. Post one calm reply under the most visible attack review, or a pinned reply where the platform allows it. State that the profile has been targeted, that the matter has been reported, and that anyone with a genuine experience can contact you directly. Do not mention the demand, the amount or a suspect.
2. Reply individually to any review that matches a real customer, with the facts of their visit.
3. Keep asking customers for reviews in the way you always have: all customers, no reward, no filter on who is asked. A sudden burst of requests aimed at restoring the rating can look like manipulation itself, and the platform rules on rewards and selective asking still apply.
4. Tell staff what is happening and give one person ownership of messages. Attackers sometimes contact several people.

Monitor for a second wave

An attacker who gets no reply may try another account, channel or set of reviews. Set alerts on your profile, watch your inboxes and log each new contact in the same evidence file. Ongoing monitoring of search and AI answers is covered on our reputation monitoring page.

What fails and what backfires

Tactics that feel active tend to make the situation worse. Each of these has a specific risk.

What the FTC says about threats against reviewers

The US Federal Trade Commission's rule on consumer reviews and testimonials reaches the victim's side of the story too. In its staff questions and answers on the rule, the FTC says a business's response to a review should not use physical threats or intimidation to get it removed or changed, and that intimidation is not limited to physical threats: the examples include abusive communications, stalking and character attacks. The rule also prohibits an unfounded or groundless legal threat used to stop a review or get it removed. The FTC page says courts can impose civil penalties for knowing violations, though it states no figure. Read the FTC questions and answers before you write to any reviewer.

The practical point: the person who attacked you may be a criminal, but a retaliatory message to a genuine reviewer is still your own conduct and can be judged on its own. A legal route against a real defamatory review exists, and it goes through a lawyer and a court, not a threatening message.

A worked scenario and a realistic timeline

This is an invented scenario with generic parties. A small clinic has a 4.7 rating over a few hundred reviews. On a Monday morning, twelve one-star reviews appear within three hours, none with detailed text. At noon the owner receives a message from an unknown sender, who writes that the reviews can be removed for a stated sum in cryptocurrency, and that more will follow if there is no payment by Friday.

Related readZillow agent review removal: what agents can do

The owner does not reply. She screenshots the message with its sender details, copies the twelve review links, and checks the names against the booking system: none match. She submits the platform's extortion form the same afternoon with the evidence, files a police report through the national cybercrime route, and notes the reference. She posts one short reply under the most visible review and tells reception staff to forward any similar contact.

The timings are our experience of how such cases usually run, not promises. Google's page says only that it investigates and notifies you of the outcome. The scenario assumes no review matches a customer; any that did would be answered as real feedback.

If this is happening to you now

Reputation Partners can help you map what the attack has put into search results and what remains after the platform acts. It cannot remove a review from a platform, and no one outside the platform can. What matters in the next week is an orderly evidence file, two reports filed and a public page that reads sensibly to a customer who has never heard of the attack.

Questions people ask

Is review bombing the same as extortion?

No. Review bombing is a wave of low ratings, often from a crowd reacting to news or a dispute, with no demand attached. Extortion adds a demand: payment, goods or services in exchange for stopping or removing the reviews. The demand is what turns it into a crime and what sends you to the platform extortion form and the police rather than the ordinary content report.

Should I pay once to make it stop?

Do not. The person has no power to remove reviews from a platform, and paying shows you will pay again. Google advises against paying or engaging and says it can encourage more attempts without guaranteeing removal. Keep the demand as evidence, report it, and let the platform and police work from the record.

Will the reviews come down after I report?

Possibly, but nobody can promise it. Google says it investigates extortion reports and notifies you of the outcome without sharing details. Reviews that clearly belong to an abusive pattern are the strongest candidates, but a review from a real customer stays even if it arrived during the wave. Report the pattern and the individual reviews, then answer genuine feedback.

Can I find out who is behind the accounts?

Not reliably, and you should not try by contacting them or naming suspects. Account and subscriber data sit with the platform and can often be obtained only through a police request or a court order. What you can do is preserve usernames, addresses and numbers exactly, and give them to the investigators in your report.

Is it worth telling my customers?

Usually a short public reply is enough. Say the profile has been targeted and reported, and invite anyone with a genuine experience to contact you. Do not name a suspect, mention the amount demanded or accuse reviewers. If customers ask directly, give the same short, factual account and avoid speculation.

What if the extortionist contacts me again after I report?

Keep ignoring the message and add it to the evidence file with its date and sender details. Send the new material to the same platform form and to the police officer or agency holding your reference number. A second contact usually adds detail an investigator can use, such as a new address or payment instruction.