A Bristol takeaway owner opened his phone one morning in July to eleven new one star reviews, all posted within twenty minutes, none from anyone who had ever placed an order. An hour later a WhatsApp message landed: pay four hundred pounds in crypto and the reviews would vanish. He is not an isolated case. Google has now built a dedicated reporting form specifically for this scam, because it has become common enough to need one. Review extortion has quietly become one of the ugliest tactics aimed at small businesses, and most owners have never heard of it until it happens to them.
1. What review extortion actually looks like
The pattern is consistent enough to spot once you know it. A cluster of one star reviews appears in a short window, often overnight, from accounts with no order history, no photos and no prior reviews anywhere else. The wording is vague: bad service, would not recommend, never again, with no specifics a real customer would naturally include. Shortly afterwards, contact arrives away from the review platform itself, usually via WhatsApp, Telegram or a burner email address, offering to remove the reviews for a fee. The demand is often in cryptocurrency, which makes it close to untraceable. If the business refuses, the threat is more of the same, sometimes escalating to dozens of reviews within days.
2. Why small businesses are the easiest target
A one person salon or a family run restaurant has no legal team, no PR department and no time to fight a drawn out dispute with a platform. The financial pressure is also immediate and well documented. Research from Harvard Business School on Yelp ratings found that a single star movement in either direction is associated with a five to nine percent swing in revenue for the businesses affected. When your entire rating can tip on a coordinated burst of a dozen fake reviews, four hundred pounds can start to look like a rational price to pay. That reaction is exactly what the scammers are counting on, and paying rarely ends the problem. There is no obligation on an anonymous extortionist to keep their word, and businesses that pay once are frequently targeted again.
3. The response that actually works
Speed and documentation matter more than anything else. Five steps, in order:
- ● Do not pay, and do not engage in negotiation over WhatsApp or Telegram. Paying confirms the account is live and worth targeting again.
- ● Screenshot everything the moment you notice it: the reviews, the timestamps, the reviewer profiles, and every message from the person demanding payment.
- ● Use the platform's specific extortion reporting route rather than a generic spam flag. Google now has a dedicated form for review extortion that asks directly for proof of a payment demand, and cases submitted this way are treated differently to routine complaints.
- ● Report it to Action Fraud, the UK's national reporting centre for fraud and cyber crime. This creates an official record even if no individual prosecution follows, and patterns across multiple reports help build enforcement cases.
- ● Reply calmly and briefly to the reviews themselves, on the record, noting that the business has no matching transaction and has reported the activity. Genuine customers and Google's own systems both use this kind of context to judge authenticity.
4. Regulators and platforms are starting to catch up
The legal backdrop has shifted quickly. The Digital Markets, Competition and Consumers Act made fake and misleading reviews a specific offence from April 2026, and the Competition and Markets Authority opened its first five investigations under the new law in March, spanning car sales, food delivery and funeral services. The CMA has signalled an update on those cases for September 2026, and businesses found in breach face fines of up to ten percent of global turnover. Google has separately committed to warning labels on profiles showing suspicious review activity and to banning accounts that repeatedly post fake or extorted reviews. None of this removes the burden from the business being targeted today, but it does mean documentation submitted now feeds into a system that is finally paying attention.
The table below sets out the signals that separate a genuine bad review from an extortion attempt, since telling the two apart quickly shapes how you respond.
| Signal | Genuine negative review | Extortion attempt |
|---|---|---|
| Reviewer history | Established account, other reviews over time | New or empty account, no other activity |
| Detail in the review | Specific to your business or order | Vague, generic, could apply anywhere |
| Timing | Spread out, tied to real visits | Cluster of reviews within hours |
| Follow-up contact | None, or a direct complaint to you | Message via WhatsApp, Telegram or email demanding payment |
| Payment request | Never present | Explicit fee, often in cryptocurrency |
5. Building resilience before it happens
The businesses that recover fastest from an extortion attempt are usually the ones with a steady, genuine flow of reviews already in place. A dozen fake one star reviews landing on top of three hundred real ones barely dents the average and is obvious to anyone who looks closely. The same dozen landing on a thin, patchy review history can do real damage and looks far more plausible to an algorithm with little else to compare it against. Keeping a habit of responding to every review, good and bad, also means you already have a documented pattern of normal activity to point to the moment something abnormal appears.
Conclusion
The extortion racket only works because a good rating still means something to customers and to the platforms that surface local businesses. That is exactly why it is worth defending, calmly, quickly and on the record, rather than quietly paying and hoping it does not happen again. It usually does.