Your rating dropped a full star overnight. The reviews came in a cluster. Most of them are one star, several have no text at all, and none of them match a customer you recognize. This is known as review bombing, and it’s become common enough that Google now treats it as a named category of abuse with its own reporting channel.
The response that works is being methodical rather than fast. Document the pattern, report through the right channel for each platform, and rebuild deliberately. The response that backfires is arguing publicly with every fake reviewer, which adds visibility to the attack and gives participants something to react to.
Request a Free Consultation
Key Takeaways
- Review bombing is a coordinated flood of negative reviews, usually unconnected to any real customer transaction.
- Sudden volume, repetitive wording, and reviewer accounts with no history are the clearest warning signs.
- Google confirmed in November 2025 that review bombing is often the opening stage of an extortion scheme.
- Coordinated fake reviews violate platform policies on every major site and can carry legal consequences.
- Document everything before you report, because platforms weigh evidence of coordination heavily.
- Recovery depends more on steady legitimate review volume than on removing every individual attack review.
What Is Review Bombing?
Review bombing is a coordinated campaign to flood a business, product, or service with negative reviews in a short window of time. This kind of attack is typically designed to damage a company’s rating rather than to describe a real customer experience.
The reviews arrive together, often within hours, and the people posting them usually have no transaction history with the business.
The term originated in gaming and entertainment, where fans mass-downvoted a title after an unpopular decision. Since then, it’s migrated to local business platforms, where the consequences are both financial and reputational. A restaurant, contractor, dental practice, or law firm that loses a full star on Google can lose visibility in local results as well as experience a major dip in consumer confidence.
Why Businesses Get Review Bombed
Attacks trace back to a handful of recurring motives:
- Backlash after a price change, policy change, or public statement
- Political or cultural controversy attached to the owner or the brand
- Competitor sabotage, sometimes purchased through review-for-hire services
- Retaliation from a former employee or a disputed customer
- Extortion, where the reviews are the pressure behind a payment demand
Motive matters because it shapes the response. A protest wave from real people who dislike a policy is handled differently from a purchased attack by accounts that have never visited your business.
How Review Bombing Differs From Ordinary Negative Reviews
The difference is volume, timing, and the absence of a matching transaction.
A genuine bad review describes something specific that happened. It arrives on its own schedule and traces back to someone who actually did business with you. On the other hand, review bombing produces a spike that has no relationship to how many customers you served that week.
Three tests separate the two. First, compare review volume against transaction volume for the same period. Then, read the reviews for specific details, because coordinated reviews tend to be generic complaints that could apply to any business. Finally, check whether the complaints reference an event, a controversy, or a news story rather than a product or a visit.
This distinction is worth getting right before you act. Reporting genuine negative feedback as coordinated abuse damages your credibility with the platform and can restrict your profile. Responding to legitimate criticism is a different discipline, and platforms expect businesses to know the difference.
How to Tell If Your Business Is Being Review Bombed
Look for a cluster of signals rather than any single one. Individually, these can appear in normal review activity, but together they indicate a coordinated campaign.
That last signal deserves attention. Contact information embedded in a review is almost always a policy violation on its own, and it frequently indicates the reviewer wants you to reach out. Do not call the number.
Catching the pattern early changes what you can do about it. Businesses that watch their review profiles continuously tend to file reports while the evidence is still complete. This is why ongoing reputation monitoring matters more for prevention than for cleanup.
When Review Bombing Is an Extortion Attempt
Review bombing crosses into extortion when the reviews are followed by a demand for payment. On November 6, 2025, Google’s Trust and Safety team published a Fraud and Scams Advisory describing the sequence directly: Bad actors flood a business profile with fake one-star reviews, then contact the owner through third-party messaging apps to demand payment, with a threat to escalate if the business refuses.
Google’s advisory used the term “review-bombing” for the opening stage of that scheme. Alongside it, the company rolled out a dedicated form so merchants can report extortion attempts directly to its Trust and Safety team rather than filing them as ordinary spam. Google’s guidance to affected businesses is unambiguous on one point: Do not engage with or pay the people making the demand, because payment does not reliably end the attack.
The practical distinction is that an extortion case needs different evidence than a standard fake review report. You’re documenting a link between the reviews and a demand, which means the messages matter as much as the reviews.
Treat this as a security incident rather than a customer service problem. Businesses facing an active campaign with an escalating threat should also consider whether the situation warrants crisis management support. This can be especially helpful when the attack is drawing press attention or spreading across multiple platforms at once.
Speak with a reputation specialist about an active attack: 800-200-3000
Is Review Bombing Illegal?
It depends on who posted the reviews and what they said.
A large number of people leaving genuinely held negative opinions, even in a coordinated way, is generally considered protected expression. Fabricated reviews from people who were never customers occupy different legal territory.
Several bodies of law can apply when reviews are false rather than merely unfavorable:
- Defamation covers false statements of fact that damage a business reputation.
- Tortious interference can apply when someone deliberately disrupts commercial relationships.
- Harassment statutes may apply when review activity accompanies threats or targeting.
- Extortion is a criminal matter in every US jurisdiction when payment is demanded under threat.
The Federal Trade Commission (FTC)’s 2024 rule on consumer reviews and testimonials prohibits creating, buying, or selling fake reviews, and provides for civil penalties. That rule primarily targets the people producing and trafficking in fake reviews rather than the businesses they attack, which is relevant if a competitor is behind the campaign.
Our explainer on the FTC ban on fake online reviews covers what the rule reaches and how to report violations.
Whether any of this applies to your situation depends on facts a platform report will not resolve. NetReputation does not provide legal advice. Businesses considering defamation claims, subpoenas to unmask anonymous accounts, or court orders compelling removal should consult an attorney. Reviewers on the other side of that question can learn more in our guide to when a bad review can lead to a lawsuit.
How to Report Review Bombing on Each Platform
Report through the platform first. Removal by policy enforcement is faster and cheaper than any escalation path, and most platforms treat coordinated activity as a clear violation once you show the pattern.
Before you file anything, capture the evidence. Screenshot each review with the date, time, star rating, reviewer name, and profile visible. Record your average rating and total review count before the attack. Note when the first suspicious review appeared. Platforms decide these cases on pattern evidence, and the pattern is easiest to prove while the reviews are still live.
You can report reviews that violate policy from your Business Profile using the report function on each individual review.
Report every review that arrived as part of the attack rather than selecting a few. If the reviews came with a payment demand, use the merchant extortion reporting channel instead, which routes to a different review queue.
Our walkthrough on how to dispute a Google review covers the standard process in detail.
Yelp
Yelp’s content guidelines prohibit reviews not based on a firsthand consumer experience and reviews posted as part of a coordinated effort to influence a rating. You can file a report from the Reviews section of your Yelp for Business account.
Yelp also places temporary alerts on business pages experiencing unusual review activity tied to public attention, which suppresses the affected reviews while the situation settles.
Trustpilot
Trustpilot allows businesses to flag reviews for investigation and asks for supporting detail on why a review does not reflect a genuine experience. The process and evidence expectations are covered in our guide to removing fake Trustpilot reviews.
Better Business Bureau
The BBB handles complaints rather than star reviews for most disputes, and its retention policies differ substantially from review platforms. See how to remove a BBB complaint for the specific process.
Ripoff Report
Ripoff Report rarely removes posts under any circumstances, which makes it the hardest surface in a multi-platform attack. Our guide to Ripoff Report removal explains the arbitration and suppression options that exist instead.
Recommendations are reported from the post itself through the reporting menu, following the same evidence approach as the other platforms.
What to Expect After You Report
Expect the review process to take days rather than hours, and expect partial results. Platform moderation runs on a queue, and reviewers assess each report against policy rather than against your account of events. Some reviews come down quickly, some are declined, and some sit unresolved.
Nobody can promise a specific removal outcome, including any reputation firm that tells you otherwise. What improves the odds is a well-documented pattern, reports filed on the full set rather than a sample, and accurate categorization. Filing genuine negative reviews as coordinated abuse is the fastest way to lose credibility with a moderation team.
If reports are declined and the reviews are demonstrably false and causing measurable harm, your remaining paths are legal escalation or suppression. Our overview of removing negative Google reviews covers what each option realistically involves.
How to Recover Your Rating After an Attack
Recovery comes mostly from volume, not from removals. Every review that stays up is diluted by legitimate reviews that follow it, and a steady stream of authentic feedback restores an average faster than a partial takedown does.
Ask satisfied customers for reviews through normal channels, and ask all of them. Filtering requests so that only happy customers are invited to post is called review gating. It violates Google policy and can restrict your profile. The request has to go to everyone.
Respond publicly to a small number of the fake reviews rather than all of them, using a short, factual, unemotional note that you have no record of the interaction and have reported the review. This is written for the next customer reading the page, not for the person who posted it. Skip the argument entirely.
Keep monitoring after the wave passes. Businesses hit once are frequently targeted again, particularly when the first attack produces a payment or a visible reaction. Structured online reputation repair and an ongoing review management program address the underlying exposure rather than the individual reviews.
[MEDIA: Timeline graphic showing attack detection, documentation, reporting, and recovery phases]
Frequently Asked Questions
What is review bombing?
Review bombing is a coordinated campaign to post a large number of negative reviews about a business, product, or service in a short period, usually to damage its rating rather than to report a real customer experience. The reviews typically come from accounts with no transaction history with the business.
Is review bombing illegal?
It depends on the content and the conduct. Coordinated negative opinions from real people are generally protected expressions. Fabricated reviews can support defamation or tortious interference claims, and demanding payment to remove reviews is criminal extortion. The FTC’s 2024 rule on consumer reviews also prohibits creating and selling fake reviews. NetReputation does not provide legal advice, and specific situations should be reviewed with an attorney.
How can you tell if reviews are fake or coordinated?
Look for several signals together: a cluster of reviews arriving within hours, ratings that are almost all one star, repeated phrasing across different accounts, reviewer profiles with no history, locations outside your service area, and complaints that reference a controversy rather than your product or service.
Can Google remove review-bombed reviews?
Google removes reviews that violate its policies on fake engagement and coordinated rating manipulation, but removal is not guaranteed and each report is assessed individually. Reports supported by documented evidence of coordination have a stronger chance than reports without it. Reviews accompanied by a payment demand should be filed through Google’s dedicated merchant extortion channel.
How long does it take to recover from review bombing?
Platform review of a report generally takes several days, and complex cases take longer. Rating recovery depends less on removals than on the volume of legitimate reviews that follow, so businesses with steady review generation recover an average faster than those relying on takedowns alone.
Should you respond publicly to review bombing?
Respond selectively rather than to every review. A short, factual response noting that you have no record of the interaction and have reported the review is useful for future readers. Arguing with attackers publicly extends the attack, adds visibility, and can attract further participants.
Request a Free Consultation