Online reputation protection

What to do when hit by a one-star review attack from competitors or bots

Action protocol for when your business receives mass fake one-star reviews: from competitors, bots, ex-employees or extortion.

Guide contentsEarly attack detectionPhase 1 (24h): document, do not reactPhase 2 (24-72h): report with methodPhase 3 (week 1): escalateWhat NEVER to doProfessional responsePrevention

A one-star review attack almost always follows the same pattern: several negative reviews within days, newly created profiles and generic text. If you detect it in hours and act with method, the damage can be contained and reversed.

1. Early attack detection

  • Several one-star reviews within days (5-10 in a week)
  • Newly created profiles or accounts with a single review
  • Generic text or the same phrases copied from each other
  • Reviews that do not describe a real experience (no service details)
  • Spikes matching a labor conflict, a competitor launch or an argument
  • The same text published on several platforms at once

Set up Google Alerts with your business name + "reviews" and enable Google Business Profile review notifications. Professional monitoring detects these patterns automatically.

2. Phase 1 — First 24 hours: DOCUMENT, DO NOT REACT

  1. Do not respond publicly yet: an emotional response stays forever.
  2. Capture everything: full screenshot of each review (URL, date, text) and the author's profile.
  3. Create a traceability table: review, URL, date, author, suspicious reason.
  4. Gather non-customer proof: bookings, invoices, records.
  5. Do not contact the author. In blackmail cases, keep the screenshots (evidence of a crime) and do not pay.

3. Phase 2 — 24-72 hours: REPORT WITH METHOD

  1. Report each review on its platform with the exact reason (spam, fake, conflict of interest, non-customer).
  2. Add the evidence: non-customer, pattern, suspicious profile.
  3. Do not report "everything negative": only what has real grounds.
  4. Keep a record of every report: date, number, reason.

4. Phase 3 — Week 1: ESCALATE if they do not act

  1. Second round of reports on each platform (sometimes the first one gets lost).
  2. Formal DSA notice if the content is illegal (defamation, slander, personal data).
  3. Out-of-court demand to the author if identifiable.
  4. Data protection authority if there is personal data; a lawyer if there is clear defamation or slander.
  5. Report the abuse pattern to your Google Business Profile trust manager.

5. What NEVER to do

  • Do not buy positive reviews to compensate: Google detects it and may suspend your profile
  • Do not respond aggressively: you turn the attack into a public show
  • Do not reveal customer data in your response (GDPR fine)
  • Do not publicly threaten legal action if you will not follow through
  • Do not delete or close your profile: you lose your entire history
  • Do not contact the author to "make a deal" in extortion cases

6. Professional response (while removal is being handled)

If the fake review is still visible, respond with objective facts, without accusing:

Template — fake non-customer review"Thank you for your comment. We want to clarify that there is no record of you being our customer (no booking or invoice under your name). We have asked Google to verify this review. If there is any misunderstanding, write to us at [email] and we will resolve it within 24h."

Show concrete action and move to private. Never argue in public.

7. Prevention

  • Ethical real review generation: ask satisfied customers right after the service (QR on the table or receipt, post-sale email)
  • Internal policy: who responds to reviews, how and within what deadline (48h)
  • Active monitoring to detect the pattern within hours
  • Diversify your reputation: the more real reviews you have, the less a fake one weighs
Prefer us to do it for you? Tell us your case and we will send you a diagnosis of what is removable, free.

Send request

Other guides