Google Review Extortion Scam: What to Do When Someone Demands Payment

Overview

A one-star review is not automatically extortion.

A fake review is not automatically extortion either.

Google’s current merchant-extortion guidance describes a more specific pattern: suspicious negative reviews are connected to a demand for money, goods, services or another favor in exchange for removing them.

That distinction matters because Google now has a dedicated reporting channel for review extortion.

If you are dealing with that pattern, stop treating it as ordinary reputation management. Your first job is to preserve evidence.

What counts as Google review extortion?

A practical definition is:

Negative-review activity plus an explicit demand for value in exchange for removing or stopping the reviews.

Google’s current guidance gives the example of a sudden increase in one-star or two-star reviews followed by someone demanding money, goods or services to remove them.

Common patterns can include:

The demand is the important separator.

• several suspicious low-star reviews appearing in a short period;
• an email, text, WhatsApp message, Telegram message or social-media message claiming responsibility;
• a demand for money;
• a demand for free goods or services;
• a demand for another favor in exchange for removing reviews;
• a threat to continue posting negative reviews if you refuse.

What is not review extortion?

Do not use the extortion workflow just because a review is painful.

First 15 minutes: preserve evidence, do not negotiate

An extortion attempt creates emotional pressure. That is the point.

Your best first response is procedural.

Build one incident folder

Create a folder with a simple structure.

What Google currently asks you to provide

Google’s merchant-extortion report asks for information such as:

Google’s evidence guidance also asks for direct links to suspicious reviews and contextual details such as when the negative-review activity and extortion demand began.

Prepare this before opening the report form.

• your contact information;
• your relationship with the affected business;
• the business name and address;
• a link to the affected Business Profile;
• details about the suspicious negative reviews;
• information about the malicious third party;
• the method used to make the demand;
• screenshots and files showing communications and demands.

Use Google’s dedicated merchant-extortion report

For an actual extortion attempt, use Google’s merchant-extortion reporting channel rather than relying only on ordinary review flags.

Google’s current help page specifically says the dedicated channel is for cases where the business has directly experienced a demand for money or favors in exchange for review removal.

What not to include in the report

More evidence is not the same as more noise.

Avoid filling the report with:

A compact evidence package with a clear timeline is easier to understand.

• unrelated old customer disputes;
• theories about who the attacker “must be” without evidence;
• screenshots with no dates or context;
• long emotional descriptions of lost revenue;
• accusations you cannot support;
• personal information that is not relevant to the case.

Should you reply publicly to the fake reviews?

Be cautious.

A public response is visible to customers, the reviewer and anyone else watching the profile.

If you choose to respond while the case is unresolved, keep it factual and non-accusatory.

A safe structure is:

We cannot match this review to a customer record or service interaction based on the information provided. We have reported the activity through the appropriate Google process and will not discuss private details publicly.

Adjust that only if it is true for your situation.

Do not publicly post the sender’s phone number, email, personal address or other identifying data.

Do not turn the Business Profile into a public investigation board.

If the attacker keeps messaging

Continue preserving evidence.

Do not get drawn into an argument about whether you will pay.

Update the incident timeline with:

If you receive threats involving personal safety, property damage or another immediate real-world danger, treat that as a broader safety issue rather than only a Google review problem. Use appropriate local emergency or law-enforcement channels based on the circumstances.

This guide is about the Google Business Profile reporting workflow, not legal advice.

• new messages;
• new review links;
• new demands;
• changed usernames;
• new phone numbers;
• dates and times.

If more reviews appear after you report

Add them to the evidence set.

Do not submit a flood of contradictory explanations.

Keep one incident record and preserve support case IDs or confirmation emails connected with the report.

Google says it investigates submitted extortion claims and notifies the reporter of the result, but it does not promise a specific investigation deadline or disclose all investigation details.

What if the review is fake but there is no demand?

Use the standard Google review-reporting process.

Google’s current workflow lets a business flag a review that appears to violate policy through the Business Profile or Reviews Management Tool.

The tool can show statuses such as:

If Google finds no policy violation, the current process may allow a one-time appeal for eligible reported reviews.

That is the right route for ordinary spam, profanity, off-topic content or another review-policy problem without an extortion demand.

• Decision pending;
• Report reviewed - no policy violation;
• Escalated - check your email for updates.

What if legitimate reviews disappeared during the incident?

Do not combine that with the extortion report unless it is directly relevant to the attack.

Google has a separate missing-review workflow.

A missing review can be caused by moderation delay, profile merge, reinstatement or automated spam filtering. Those cases require a different diagnosis.

Treat each support problem clearly so the evidence does not become tangled.

Protect the business after the incident

Once the immediate attack is documented and reported, run a broader reputation check.

A practical review-extortion evidence checklist

Before submitting the report, confirm that you have:

Do not wait until messages disappear or accounts are deleted to start saving evidence.

1. the affected Business Profile link;
2. direct links to suspicious reviews;
3. screenshots of the reviews;
4. screenshots of the payment/favor demand;
5. dates and times where possible;
6. sender email, phone number, username or social profile where available;
7. a short chronological timeline;
8. previous similar incidents, if genuinely connected;
9. relevant case IDs;
10. a factual explanation of why the reviews and demand appear connected.

A sample incident timeline

Here is a simple format.

Keep your reputation bigger than one review platform

A Business Profile can be an important discovery and trust channel, but your own website should also explain your services, show real proof and offer a clear next step.

OneStudio can combine website content, booking, CRM, payments, media and other business tools depending on the project. Explore OneStudio features.

Questions businesses ask