The Google Business Review Extortion Scam: How to Fight Back

In the world of local SEO, a business’s reputation is its most valuable asset.  When consumers search for a business or service, the rating on their Google Business Profile is one of the first things they see.  When that rating does not reflect the true story, the business is significantly impacted.  Leads dry up, people click on the profile less – it’s a cascade of issues that lead to less income for the business owner. 

 We have seen a significant rise in a sophisticated review extortion scam targeting small businesses, from plumbers to dental clinics.  This was prevalent enough that Google has created a dedicated form to report these attacks.

These are not just vague, negative ratings. They are coordinated attacks designed to tank your star rating and pressure you into paying a “fee” to have them removed.  In the example below, you can see each of the reviewers has the same profile picture, and the image contains the WhatsApp number.

How the Scam Works

The attack usually follows a specific pattern. Within a 24-hour period, a business is flooded with fifteen or more 1-star reviews. These reviews often contain fabricated, detailed accounts of poor service or unprofessionalism.

The scammers behind these attacks operate as follows:

• The Network: Reviews are posted from a network of fake profiles. Often, these profiles include WhatsApp phone numbers or suspicious links directly in their bios.

• The Extortion: Shortly after the reviews appear, the business owner is contacted via WhatsApp or email. The scammer offers to remove the negative reviews—for a price.

• The “Alternative”: In some cases, scammers offer to replace negative reviews with fake 5-star reviews, essentially turning their extortion into a “reputation management” service.

According to research from the Federal Trade Commission (FTC), fake reviews and deceptive endorsements are a growing concern, costing the economy billions in lost consumer trust and diverted revenue.

Why Google Often Fails to Act

While Google uses automated systems to detect spam, these coordinated attacks often slip through the cracks. Because the reviewers write full paragraphs and mimic the tone of a real customer, Google’s AI may not flag them as fraudulent immediately. This leaves the burden of proof entirely on the business owner.

For the local business owner, this is emotional and financial. When the phone stops ringing because your rating dropped from a 4.8 to a 3.2 overnight, it’s not just a tech issue; it’s a threat to your livelihood.

Three Steps to Remove Fake Review Attacks on Google

If your business is currently being targeted, do not engage with the scammers or pay them. Instead, follow these three steps to force a manual review and get the content removed.

Step 1 – Flag Every Individual Review

Do not just flag one of the reviews. You must flag every single fake review in the attack.

• Click the three dots next to the review.
• Select “Report Review.”
• Choose “Spam or Off-topic.”
• Tip: Have staff members or trusted associates also flag these reviews from their own devices to signal to Google that there is a problem.

Step 2 – Report the Reviewer Profiles

Scammers often reuse the same accounts to attack multiple businesses. Reporting the profile itself is often more effective than reporting the review.

• Open the Google Maps app on your phone.  You can only report a reviewer’s entire profile from the mobile app.
• Tap the reviewer’s name to open their profile.
• Click the three dots in the top right corner.
• Select “Report profile”.

Step 3 – Use the Google Merchant Extortion Form

Google has created a dedicated channel specifically for businesses dealing with blackmail. While response times vary, this form places your case in a dedicated queue for extortion. The last step here is to submit your case through the Google Merchant Extortion Contact Form.

Community action is the most effective tool we have. By documenting patterns, such as the same WhatsApp numbers appearing across different business profiles, we can publish the details, prompting Google to act on the evidence needed to take down these networks.

In every case where the business owner diligently followed these three steps, the fraudulent reviews were eventually removed.

Have you seen these patterns on your own business profile? Share your experience in the comments below so we can continue to track and expose these networks.