Review extortion used to feel like a rare local SEO problem. By late 2025, it had become a national business issue. Owners were being threatened with fake bad reviews, often through messaging apps, and told to pay to make the problem go away.

For restaurants, clinics, dental offices, and other local practices, this is no longer just a review problem. It is an incident-response problem.

TL;DR

• Do not pay, bargain, or panic when someone threatens your business with bad reviews.
• Save the evidence first: screenshots, review links, phone numbers, usernames, dates, and messages.
• Report through Google, then involve law enforcement if there is a demand for money, repeated contact, identity misuse, threats, or financial loss.

What review extortion looks like?

Review extortion small business cases usually follow a few clear patterns. The details change, but the goal is the same. Someone tries to use your public reputation to force money, goods, services, or refunds from you.

Pattern 1: The threat comes before the reviews

This is the “pay us, or we post” version.

A scammer contacts the owner, manager, front desk, or social media account. They may say they were hired to post negative reviews. They may claim a batch of 10, 20, or more one-star reviews is coming.

This pattern gained wider attention in 2025 after major media covered cases where local businesses received WhatsApp threats tied to fake Google reviews. Whitespark’s Q3 2025 local search roundup noted that review extortion had moved beyond industry chatter and into mainstream press coverage, including a case involving a Los Angeles contractor who was told that 20 negative reviews had been ordered against the business: Whitespark, 18 Local Developments You Need to Know About from Q3 2025.

The safest move is simple: do not engage beyond what is needed to preserve evidence.

Pattern 2: The review appears first 

This is the “damage first, ransom second” version.

A business may wake up to several one-star reviews from people it cannot identify. A restaurant may see complaints about menu items it never served. A clinic may see claims that do not match appointment records. A contractor may see reviews from people outside the service area.

Then the message arrives. The sender offers to remove the reviews if the business pays. 

Google now has standalone guidance for this situation.  Whitespark’s Q4 2025 roundup noted that Google had published specific review extortion guidelines after many businesses reported being hit with negative reviews followed by payment demands: Whitespark, 17 Local Developments You Need to Know About from Q4 2025.

Pattern 3: A real customer turns a complaint into leverage

This version is more sensitive.

A real customer may be upset. They may have a valid complaint. But the situation changes when the customer says they will post or keep a bad review unless the business gives them money, free service, a refund, a discount, or special treatment.

Not every angry customer is committing review blackmail. We should still handle real service failures fairly.

But we should not trade money for silence.

A good rule is this: solve legitimate problems, document threats, and avoid any deal that requires the customer to remove or withhold a review.

What the law says

 

This is not legal advice. It is a practical starting point for owners and operators.

At the federal level, threats and extortion can fall under laws dealing with blackmail, threats, and interstate communications. The federal code includes provisions on extortion and threats under 18 U.S. Code Chapter 41.

State law also matters. Depending on where the business is located, the same conduct may be described as extortion, blackmail, coercion, theft by threat, harassment, intimidation, or cyber harassment. FindLaw maintains a useful state-by-state starting point for extortion laws: State extortion laws.

State-by-state notes for local business 

The legal label can change by state. The practical facts usually matter more than the label.

A report is stronger when you can show:

• A clear demand for money, free service, goods, refunds, gift cards, or crypto
• A threat to damage the business’s reputation
• Fake reviews have already been posted or threatened
• Repeated contact after you asked the person to stop
• Use of fake names, stolen identities, or impersonation
• Financial loss, canceled appointments, lost bookings, or staff disruption

For restaurants, keep order records, reservation logs, staff notes, camera timestamps if relevant, and screenshots of the reviews.

For healthcare practices, preserve the evidence but be careful in public replies. Do not confirm whether someone is or is not a patient. Do not share appointment details, treatment details, billing facts, or anything that could create a privacy issue.

For more on safe public replies, see Article 6. For building a stronger review program before a crisis happens, see Article 9.

The reporting path inside Google’s business conduct form

Google now gives users more specific ways to report review-related abuse. 

Whitespark’s Q4 2025 roundup highlighted Google’s newer Report business conduct form, which lets people report businesses that pressure or incentivize customers to leave reviews. This form is mainly for reporting review pressure, review incentives, and other business conduct problems.

For a business that is being targeted by review extortion, Google also has a dedicated help path: Report negative review extortion scams on your Business Profile.

Use the right path for the situation.

Use the business conduct form when

Use Google’s business conduct form when the issue involves a business:

• Offering incentives for reviews
• Pressuring customers to leave reviews
• Discouraging honest negative reviews
• Creating a review process that appears manipulative

Use the review extortion process when

Use Google’s review extortion guidance when your own business is being threatened with bad reviews or has already received suspicious reviews followed by a demand.

Before you submit, collect:

• The Google Business Profile link
• Direct links to each suspicious review
• Screenshots of the reviews
• Screenshots of messages, emails, texts, or DMs
• Sender phone numbers, email addresses, profile URLs, or handles
• Dates and times
• Any payment demand or removal offer

Then report the issue through Google’s review extortion process. If the reviews are already live, flag them inside Google as well.

Do not accuse the reviewer of a crime in a public reply. Keep the response calm and limited.

A safe public response might be:

“We cannot match this review to our records. We have reported it to Google for review and welcome direct contact through our official business channels.”

When to involve law enforcement

Involve law enforcement when there is a clear demand for value.

That includes money, refunds, free meals, free treatment, free services, gift cards, cryptocurrency, or anything else of value.

You should also consider a police report if:

• The person keeps contacting your staff
• The same reviews appear across multiple platforms
• The attacker uses fake identities
• The attacker impersonates customers or employees
• The message includes threats beyond reviews
• The business loses revenue or bookings
• The issue involves a healthcare practice or sensitive customer information

For online fraud and cyber-enabled threats, the FBI’s Internet Crime Complaint Center accepts reports at IC3.gov. Fraud patterns can also be reported to the FTC at ReportFraud.ftc.gov.

Keep the report factual. Avoid long explanations.

Use language like:

“Our business received a demand for payment connected to fake negative Google reviews. We did not pay. We preserved screenshots, review URLs, sender details, timestamps, and our Google report confirmation.”

How to harden your practice so you are not a soft target

Review extortion works best when owners panic. A written process lowers the panic.

1. Move the sensitive contact away from personal phones

Do not list an owner’s personal cell number where it can be scraped and used on WhatsApp or text. Use a business phone line, call tracking number, or front desk account.

Customers still need to reach you. Scammers do not need a direct line to the owner.

 

2. Monitor reviews every business day

Restaurants and healthcare practices should not discover review attacks weeks later.

Assign one person to check Google, Yelp, Facebook, and any industry-specific review sites. For healthcare, include platforms where patients commonly leave feedback.

3. Keep an evidence folder

Create a simple folder for reviewing incidents.

Save:

• Screenshots
• Review URLs
• Profile links
• Message logs
• Appointment or order records
• Staff notes
• Google case confirmations

Do this before reviews disappear or profiles change.

4. Train staff not to negotiate

Front desk staff, hosts, managers, and call handlers should know what to do.

The script can be simple:

“Please send any concerns to our official business email so we can review them through the proper process.”

After that, stop. Do not argue. Do not bargain. Do not offer payment.

5. Build a steady stream of legitimate reviews

A strong review profile is not just a marketing asset. It is a defense.

When real customers leave reviews over time, a sudden fake review burst is easier to spot. It also gives future customers more context.

Stay within platform rules. Do not pay for reviews. Do not offer discounts for reviews. Do not ask only happy customers. Do not block unhappy customers from leaving honest feedback.

6. Prepare your public response rules

Write response rules before you need them.

For healthcare, never reveal patient information. For restaurants, avoid personal arguments. For all businesses, stay brief, factual, and calm.

A good response should protect the brand without making the situation bigger.

Conclusion

Review extortion is now a real risk for local businesses that depend on trust. Restaurants, clinics, dental offices, home service companies, and other local practices should treat it like any other business threat.

We cannot stop every scammer from sending a message or posting a fake review. But we can make the business harder to exploit.

The right response is clear: document first, do not pay, report through the right Google path, and involve law enforcement when the facts support it.

If your practice has been threatened with a bad review, start by preserving the evidence. Then review your public contact setup, your review monitoring process, and your staff response plan before the next incident happens.

Sources

• Whitespark, “18 Local Developments You Need to Know About from Q3 2025”
• Whitespark, “17 Local Developments You Need to Know About from Q4 2025”
• Google Maps Help, “Report business conduct”
• Google Business Profile Help, “Report negative review extortion scams on your Business Profile.”
• Legal Information Institute, “18 U.S. Code Chapter 41: Extortion and threats”
• FindLaw, “State extortion laws.”
• FBI Internet Crime Complaint Center

FTC, ReportFraud.ftc.gov