New Google Scam Alert: When Bad Reviews Are a Shakedown, Not Feedback

The Scenario: A Wall of One-Star Reviews Overnight

Most small business owners check their Google reviews before they check their bank balance. It is how you know the business is healthy. So imagine logging in on a Tuesday morning and finding fifteen new one-star reviews, all posted within a few hours, none of them from anyone you recognize as a customer. Then, a day or two later, someone emails or messages you offering to “make the reviews go away” for a fee.

That is not a bad week. That is a scam, and Google just put a name on it.

What Google Actually Said

In a fraud advisory published in November 2025, Google described a scheme it calls review-bombing extortion. Here is the plain-language version: bad actors flood a business’s Google profile with fake negative reviews, and once the star rating has tanked, they contact the owner demanding payment to stop the attack or remove the reviews. Google is rolling out a reporting tool so business owners can flag these extortion attempts directly, rather than fighting the reviews one at a time through the normal appeals process.

This is worth taking seriously because Google is the source, not a rumor forwarded in a group chat. It is also worth taking seriously because the mechanics of the scam are simple enough that almost any business with a public profile is a target, from a law firm in Marietta to a dental practice in Cartersville to a small manufacturer tucked into an industrial park in Bartow County.

How the Scam Actually Works

It runs in two stages, and both stages depend on you reacting fast and emotionally instead of methodically.

Stage one: the flood. A batch of fake one-star reviews shows up, usually in a short window, usually with vague or copy-paste complaints (“terrible service,” “never going back,” “rude staff”) that do not match anything you can trace to a real appointment, invoice, or job. Your average rating drops fast because Google reviews are weighted, and a sudden pile of ones drags the number down hard.

Stage two: the demand. Once the damage is visible, someone reaches out, sometimes by email, sometimes through a form on your own website, offering to stop the reviews (or get them removed) for a payment. Sometimes they frame it as a service. Sometimes it is a flat threat: pay up or the reviews keep coming.

A five-star reputation built over years can look damaged in a weekend, and that is the entire point of the scam. It is designed to create panic fast enough that you pay before you think it through.

Why Small Businesses Are the Target, Not the Big Chains

A national chain has a marketing department, a legal team, and enough review volume that fifteen fake ones barely move the needle. A dental practice in Cartersville with 40 total reviews does not have that cushion. A handful of fake reviews can visibly drag the average rating, and that rating is often the first thing a new patient, client, or customer sees before they ever call.

Small businesses also tend to have fewer people watching the front door. There is no dedicated staff member whose job is to monitor the Google Business Profile daily. Owners and office managers are running the business, not refreshing review pages, which means the flood can sit there unnoticed (and unreported) for days, giving the scam room to work.

Red Flags That It Is Extortion, Not Real Feedback

Real negative reviews usually reference something specific: a date, a service, a staff name, a price. Extortion review-bombing tends to look different. Watch for:

• A sudden cluster. Several one-star reviews landing within hours or a single day, especially overnight, is not how organic complaints usually arrive.
• Vague, generic language. “Worst company ever” with no detail is a lot easier to fake than a review that mentions your actual receptionist by name.
• No matching record. You check appointments, invoices, or job tickets and cannot find any customer who matches the reviewer name or the timeline described.
• Reviewer accounts with no history. Brand-new Google accounts, or accounts with only one review ever posted (yours), are a strong signal.
• A follow-up contact demanding payment. This is the tell that removes all doubt. Legitimate unhappy customers do not email you an invoice to make their complaint disappear.

If you see two or more of these together, treat it as an attack, not customer service feedback.

What to Do This Week

Do not pay. Paying confirms the account is active, confirms the tactic works, and does nothing to guarantee the reviews actually get removed. It also marks you as a target for round two.

Instead, work through this:

1. Document everything immediately. Screenshot every fake review, the reviewer profile, the timestamp, and any message demanding payment. Extortion attempts tend to get edited or deleted once the target does not comply, so capture the evidence before it disappears.
2. Use Google’s reporting tool for extortion attempts. This is separate from the standard “flag as inappropriate” review process and is specifically built for this scam. It routes to a different review process on Google’s end.
3. Notify your team now, before it happens. Whoever answers your phones, checks your email, or manages your online presence should know this scam exists and know the answer is always “we don’t pay, we report and document.” A front desk staffer who is caught off guard is far more likely to panic and forward payment information to a scammer.

A Simple 3-Step Plan for the Front Desk

Print this and keep it near the phone or the front desk computer:

1. See a sudden wave of one-star reviews? Screenshot everything before doing anything else.
2. Get a message demanding payment to stop or remove reviews? Screenshot it. Do not reply, do not pay, do not negotiate.
3. Report the extortion attempt through Google’s reporting tool, then let the owner or office manager know so the business can watch for follow-up activity.

That is the whole plan. It does not require a lawyer, a big budget, or a technical team. It requires someone knowing what the scam looks like before it lands in their inbox.

The Bottom Line

Your star rating on Google is part of the business, the same way your phone system and your bank account are part of the business. It deserves the same level of attention: someone checking it regularly, and a plan in place before an attack happens, not after. A wave of fake one-star reviews followed by a payment demand is not a reputation problem you fix with customer service. It is a scam you report and document, then move on from.

This week, take five minutes to do one thing: check your Google Business Profile for anything unusual, and tell whoever answers your phones or manages your online presence that this scam exists.

If you want a second set of eyes on how your business handles threats like this, or you just want a plain-English look at where your technology and online presence have gaps, PeachByte offers a free IT strategy review and security assessment for small businesses along the I-75 corridor. No sales pitch, no jargon, just a straight look at what is working and what is not.