Someone is threatening to post fake bad reviews unless I pay them. Is this a real scam?

Yes, and it is a documented, growing pattern, not an isolated incident. A message arrives, often from an overseas number or a throwaway account, saying a wave of one-star reviews will hit your Google Business Profile unless you send payment, usually through a gift card, crypto, or a payment app. Sometimes a handful of fake reviews are already posted as proof it is not a bluff. The target is never personal - the scammer has not used your business and has no complaint. They picked you because a local service business usually has few enough reviews that five or six fake ones can swing the average hard.

Should I pay to make the fake reviews stop?

No. Paying does not reliably make the reviews come down, since the person who posted them has no obligation to follow through once they are paid, and several owners who paid report being targeted again weeks later by the same account or a new one. Paying also confirms you are a business willing to pay, which is the one piece of information that gets a target re-attacked or passed to other scammers. Treat the demand as what it is - a threat with no enforceable agreement on the other end - and route your effort into reporting instead.

Is review extortion actually illegal?

In a lot of jurisdictions, demanding payment in exchange for not posting damaging reviews meets the legal definition of extortion, and it is distinct from a genuine customer simply threatening to leave an honest negative review over a real dispute, which is not a crime on its own. In practice, enforcement against individual scammers, especially ones operating from overseas numbers, is limited and slow. That does not make reporting pointless - it builds the pattern regulators and platforms use to act on repeat offenders, and your report may be the one that completes a case already in progress.

What should I actually do when this happens?

Screenshot everything first, including the phone number or account name, before anything can be deleted. Do not reply, negotiate, or engage with the sender at all. Report each fake review directly on your Google Business Profile using the option for content that violates policy - reviews posted by someone who was never a customer, or used as leverage to extract payment, are both explicitly against Google's review policies and reportable on those grounds. Then file a report at reportfraud.ftc.gov, and at ic3.gov if the sender appears to be overseas. If the message includes an explicit threat, a local police report creates a record even if no immediate action follows.

Can the fake reviews actually get taken down?

Often, yes, because they tend to violate Google's policies on their face - posted by an account with no record of being a customer, part of a short burst from unrelated accounts, or accompanied by a message that is itself evidence of extortion. That is a stronger starting position than an ordinary unhappy-customer review, where Google will not act just because you disagree with it. Report each one individually with specifics rather than a general complaint, and expect the review to stay up for a few days while it is reviewed.

How does having my own website help against a review extortion attempt?

It gives you a second place a nervous customer can land that is not the single Google rating the scammer is attacking. RunCabin builds a real website with AI from your answers to our questionnaire, a web developer finishes it, and it comes with your own domain, a photo gallery of real jobs, and reviews you choose to feature, so a short burst of fake one-star ratings on one platform is not the only thing a stranger finds about you. It starts at $499 to build, then $39.99 a month for hosting, with no long contract and no lead fees on what comes in through the site.

RunCabin Blog · Getting chosen

Someone is threatening fake reviews unless I pay. What do I do?

October 14, 2026 · 8 min read

Short answer: do not pay, and report it on two fronts at once - the specific reviews to Google, and the extortion attempt to the FTC. This has become a recognized scam pattern aimed squarely at businesses like yours - a stranger who was never a customer threatens a wave of fake one-star reviews unless you send money, usually through a gift card, crypto, or a payment app, often from an overseas number. If it is happening to you right now, the two moves above matter more than anything else in this post, so start there and come back for the rest.

This is not a disgruntled customer. It is a scam built for small businesses specifically

There is a real, separate situation where an actual customer gets angry mid-dispute and says something like "I'm leaving you a one-star review if you don't fix this for free." That is unpleasant, but it is a genuine customer with a genuine grievance, and it is a different problem with a different answer - we cover that one in what to do when a customer leaves a bad review.

What this post is about is different, and it has a distinct pattern. A message lands - text, email, or a form submission - from someone who has never hired you. They claim to represent a reputation service, or they just state it plainly: send payment, or your Google Business Profile gets hit with a batch of one-star reviews. Sometimes several fake reviews are already posted by the time you see the message, timed to land right before the demand, so it does not read as an empty threat. News coverage through 2026 has documented contractors, movers, dog trainers, dentists, and other small operators all hit with the same script, often traced to numbers and accounts based overseas.

The reason local service businesses get targeted so often comes down to arithmetic. A restaurant chain with eight hundred reviews barely notices five fake ones. A plumber with eleven reviews sees their average drop visibly the same afternoon, and a new customer scrolling Google sees it within the hour. Scammers know exactly which businesses a small attack actually moves, and a business with a thin review count and no other online presence is the easiest target on the list.

Why paying does not fix it

The instinct to just send the fifty or hundred dollars and make it go away is understandable - a handful of fake one-stars sitting on an otherwise clean profile feels like an emergency. But there is no contract on the other end of this. The person demanding payment is not bound to remove anything once paid, and there is no platform, bank, or court that will make them follow through. Owners who have paid report the reviews staying up anyway, or a second demand arriving from the same account a few weeks later, or their name getting passed along as a confirmed payer to a different scammer running the same script.

That last part is the real cost of paying. It does not end the problem - it marks you as a business that pays when pressured, which is the one signal that gets a target re-attacked instead of left alone.

Is it actually illegal?

In a meaningful number of US jurisdictions, demanding money in exchange for not posting damaging reviews meets the legal definition of extortion. The distinction that matters: a genuine customer who says "I'll leave an honest bad review if this doesn't get fixed" is describing their right to speak about a real experience, which is not a crime. A stranger demanding payment to withhold reviews about a service that never happened is a different thing entirely, and it is the kind of conduct state extortion statutes are written to cover.

What that does not mean is fast resolution. Enforcement against individual scammers, particularly ones operating through overseas numbers and accounts, moves slowly and case-by-case, and the FTC's public guidance on fake and extortionate reviews acknowledges enforcement remains limited relative to how common the scam has become. Reporting is still worth doing. Regulators and platforms build patterns out of individual reports, and a single filing can be the one that connects an account to a larger case already underway.

What to actually do, in order

Screenshot everything before you do anything else. The message, the sender's number or account name, the fake reviews themselves, and any proof-of-payment instructions. These tend to get deleted or edited once a scammer realizes you are not paying, so capture it first.
Do not reply, negotiate, or engage. There is nothing to negotiate with someone who has no actual claim against you, and a reply only confirms a human is reading the messages, which can invite more of them.
Report each fake review individually on your Google Business Profile. Use the report option on the specific review and flag it as a policy violation - reviews from someone who was never a customer, and reviews used as leverage to extract payment, are both explicitly against Google's review policies on their face, which is a stronger footing than an ordinary negative review gets.
File a report at reportfraud.ftc.gov. It takes a few minutes and feeds the FTC's broader case-building against this exact pattern.
File at ic3.gov if the sender looks to be based overseas. The FBI's Internet Crime Complaint Center is the right venue for cross-border fraud attempts, which this usually is.
File a local police report if the message contains an explicit threat. It rarely leads to an arrest on its own, but it creates an official record, which matters if the same account targets other local businesses and a pattern needs to be shown later.

Getting the fake reviews removed

This is one of the few cases where Google's review removal process actually works in your favor quickly, because the reviews you are reporting genuinely do violate stated policy rather than just being unflattering. Reviews posted by someone with no record of being a customer, a short burst of one-star ratings from unrelated accounts landing within hours of each other, or a review whose content is itself evidence of an extortion attempt - all of these fall squarely inside what Google states it will remove. Report each one individually and specifically rather than filing one general complaint about "fake reviews," since a reviewer working through individual reports with distinct reasons has more to act on than a vague summary. Expect it to take a few days, and a first response that does not resolve everything is common - the appeal path exists for exactly that.

The part worth sitting with afterward

Once the immediate reviews are reported and the adrenaline wears off, it is worth noticing what made this attack effective in the first place: your entire online reputation was sitting on one platform you do not control, with a review count thin enough that a handful of fake entries could move the average in an afternoon. That is not a flaw in how you run the business. It is just what happens when a Google Business Profile is the only place a stranger can go to check you out.

A real website does not stop someone from attempting the scam, and it will not get a fake review taken down any faster. What it changes is what a worried customer finds in the ten seconds after they notice the rating dipped. If the answer is nothing beyond the profile under attack, the fake reviews are the whole story. If the answer is your own site, with recent job photos, your license and insurance stated plainly, and real reviews you have chosen to show, a stranger reading a suspicious cluster of one-stars has somewhere else to look before they decide what to believe - the same point we made in whether customers actually check your website before they hire you, and it applies just as directly here.

Where RunCabin fits

We build done-for-you websites for local service businesses, and a review extortion attempt is a clean example of why that matters beyond just looking professional. The attack targets a single rating on a single platform precisely because, for a lot of small businesses, that rating is the whole online presence. A site on your own domain, with a photo gallery you control and a contact form that sends every inquiry straight to your inbox, is a second surface that is not available to attack the same way, because nobody but you can post to it.

It starts at $499 to build, then $39.99 a month for hosting - you answer our questionnaire, we build the site with AI, a web developer finishes it, and your own domain and a photo gallery are included, with no long contract and no lead fees on anything that comes through it. It will not make a scammer's message disappear. It does mean the message is not the only thing a worried customer finds when they go looking.

Don't let one rating be your whole reputation

Answer our questionnaire and we build your site - your name, your work, your city. It's built with AI and finished by a web developer. Starting at $499 to build, then $39.99 a month.

Start our planner →