Google review extortion and how to protect your business

Review extortion follows a recognisable pattern: a sudden burst of one- and two-star reviews, then a message offering to remove them for money, gift cards or free services. Google treats it as a serious policy violation and has a dedicated report form. The most important rule is simple — do not pay.

Written by Konrad Weber · Reviewed by Andrew Foster, Review Removal Specialist · Updated 2026-10-11

How review extortion usually works

Google’s help page on the subject describes the typical sequence: a rise in low-star reviews on a Business Profile, followed by a demand for money, goods or services in exchange for removing them. The demand may arrive by email, SMS, WhatsApp, social media or a messaging app, and sometimes poses as a “reputation management” offer rather than an open threat.

Variations include threats to post negative reviews unless a payment is made, demands from someone claiming to be a dissatisfied customer who wants a refund well beyond any real dispute, and messages offering to remove reviews the sender has no connection to. All of them rely on the business believing that payment is the quickest way out.

Why paying is a mistake

• Google advises not to engage with or pay the people making the demands. It says paying can encourage further attempts and does not guarantee removal.
• There is no way to verify that the person controls the accounts, or that they will not return.
• Payment marks your business as a willing target.
• Offering money or services in connection with removing reviews can itself breach Google’s rating manipulation policy, which covers incentives linked to removing negative reviews.

Step 1: Preserve the evidence immediately

Google stresses that earlier evidence is more useful. Before anything is deleted:

• Screenshot every suspicious review with the reviewer name and date, and copy each review link
• Screenshot every message containing the demand, showing the sender’s name, number, email or username, and the timestamp
• Note when you first noticed the spike and when the demand arrived
• Record any payment details provided (account numbers, crypto wallet addresses, gift card instructions) without acting on them
• Note any earlier, similar attempts

Our evidence checklist covers how to store this safely.

Step 2: Report it to Google through the extortion form

Google’s Business Profile help centre links to a merchant extortion report form. Google says the form asks for your contact details and relationship to the business, the business name, address and Profile link, details of the reviews and the third party’s contact methods and tactics, and attachments showing the communications and demands. Google investigates and notifies you of the outcome, but says it cannot share specific investigation details for privacy and security reasons.

Google is clear that this channel is only for direct extortion — demands for money or favours in exchange for removing reviews. Reviews that breach other policies, such as spam or off-topic content, should be reported through the normal process in the Reviews Management Tool. In practice, a business facing extortion often does both: the extortion report for the scheme, and ordinary reports for individual reviews.

Step 3: Report it in Australia

Demanding money with threats can be a criminal offence under Australian state, territory and Commonwealth law. Depending on what happened, the following channels may be relevant:

• ReportCyber, the Australian Cyber Security Centre’s online reporting service at cyber.gov.au, which refers reports to the relevant police agency for assessment.
• Your state or territory police, particularly if threats extend beyond reviews or you feel unsafe. Call 000 in an emergency.
• Scamwatch, run by the National Anti-Scam Centre within the ACCC, which collects scam reports to help disrupt scams and warn others. Scamwatch reports are not police reports.
• Your bank, immediately, if any money has already been paid.

A police or ReportCyber reference number can also be worth including in your report to Google, as independent confirmation that you have treated the matter seriously.

Step 4: Manage the profile while it is being dealt with

• Do not reply to the extortion messages beyond what is necessary, and never negotiate.
• Consider a short, neutral reply to the reviews — for example, that you have no record of the reviewer and have reported the reviews to Google — but avoid accusations you cannot prove.
• Brief staff so that anyone who receives a demand passes it on rather than responding.
• Keep monitoring for new reviews; extortion often comes in waves, similar to review bombing.

Telling extortion apart from a genuine dispute

Not every unhappy customer who asks for a refund and mentions a review is an extortionist. For example, imagine a customer who writes, “I want my deposit back — I’ve already left a one-star review and I’ll keep warning people.” That may be an angry customer exercising consumer rights, not a scheme. Extortion is marked by demands disconnected from any real transaction, multiple reviews from accounts you cannot trace, and offers to make reviews disappear for payment. If in doubt, deal with the genuine consumer issue on its merits and seek advice.

G-DEFENCE regularly helps businesses document and report clusters of fake reviews through Google’s official channels, including reviews linked to extortion attempts. We will never ask you to pay anyone to remove a review, and under our pricing you pay us nothing unless a review is removed. If your profile is under attack, request a free assessment using the form below.

Sources

• Google Business Profile Help – Report review extortion
• Google Business Profile Help – Manage customer reviews (reporting and appeals)
• Google Maps – Prohibited and restricted content policy
• Google – Reviews Management Tool