Review Extortion Is Now Organized. Here's What a Small Service Business Can Actually Do.
A stranger leaves a one-star, then offers to remove it for cash. It's a coordinated racket now — and there are real, free steps that work. Don't pay, report it the right way, and know what the new FTC rule changed.
By The RivL Team
If a stranger just left you a one-star review and then messaged offering to make it disappear for a fee, here is the short answer: do not pay. Report it through the platform's dedicated channel, reply once in public without engaging the demand, and save every message. Paying doesn't clear your profile — it marks you as an owner who pays, and the same crew, or the next one, comes back. Below is the full playbook, all of it free to do yourself.
Extortion reviews are a business problem with a business answer: document, report, respond, and out-publish. The one move that always backfires is reaching for your wallet.
What the racket looks like now
This used to be a lone angry stranger. Increasingly it's coordinated. The pattern, documented by BrightLocal and by search-marketing firm Sterling Sky, is a burst of one-star reviews from accounts that were never customers, followed by a direct message: pay up and the reviews come down. It's a shakedown dressed up as feedback. Some trades get hit harder and on a schedule — trade press for the heating and cooling industry has reported scammers targeting HVAC companies during peak summer, when a contractor is slammed and a wave of one-stars does the most damage.
Rule one: never pay
Paying feels like the fast way out. It isn't. As Sterling Sky lays out, paying confirms two things to the extortionist: the reviews hurt you, and you'll open your wallet to stop the pain. That puts you on a list of people worth hitting again. There's also no guarantee the reviews come down, and nothing stopping a fresh batch next month. The money doesn't buy a solution; it buys a reputation as a payer.
Report it the right way
Fake reviews violate every major platform's policies, and extortion is its own category. Google now has a dedicated form to report review-related extortion — use that specific channel, not just the generic “flag as inappropriate” button, and keep screenshots of the messages demanding money. Then reply once, publicly and calmly, to the review itself: state that you have no record of this person as a customer and that you've reported the matter to the platform. You're not writing to the extortionist. You're writing to the next real customer who reads it.
The law changed in your favor
You have more backing than you did a couple of years ago. The Federal Trade Commission's Rule on the Use of Consumer Reviews and Testimonials took effect on October 21, 2024, and it bans buying, selling, and writing fake reviews — the exact machinery behind an extortion campaign. The FTC has started enforcing it: legal analyses report the first warning letters going out in December 2025, with civil penalties that can reach into the tens of thousands of dollars per violation. Worth knowing the rule cuts both ways: it also bans buying positive reviews, which means padding your own profile with friends-and-family five-stars is now a legal risk, not just an ethical one. The clean path is the only safe one.
When the threat comes from a real customer
A close cousin of extortion is the customer who threatens a bad review to shave the invoice. Contractors trade these stories constantly — one PlumbingZone thread is entirely about customers using the threat of a one-star to renegotiate a bill after the work is done, and a ContractorTalk thread runs the same play at change-order time. Here's the counterintuitive part: a threat put in writing is leverage for you. A review posted after “pay me or I'll trash you online” is a conditioned review, which most platforms treat as a policy violation — so keep the texts, stay factual, and don't let the threat panic you into caving.
Don't sue
The instinct to take a defamer to court is understandable and almost always a mistake. The cautionary tale is Dietz v. Perez: a contractor sued a homeowner over negative reviews, and the lawsuit itself became the story — far more damaging to his reputation than the original reviews ever were. Legal threats tend to draw exactly the attention you were trying to avoid. Report, respond, and out-publish instead.
The platforms are more fragile than you think
It's worth holding all of this loosely, because the platforms themselves aren't stable ground. In July 2026, a Google glitch caused legitimate reviews to vanish from business profiles en masse. Your review count is not a vault; it's a number on someone else's server that can move for reasons that have nothing to do with you. That argues for two habits: keep your own records, and don't stake everything on a single platform.
The part almost nobody does: watch
Every step above works better the earlier you start it. The real problem with a review attack is timing — most owners don't find out until days later, when they happen to check, by which point the one-stars have sat on the profile through a weekend of prospective customers. Catching a bombing in its first hour lets you report it, respond, and rally real reviews while it's still small. The only way to catch it that early is to look often — which, for a busy operator, means either a daily calendar reminder to check your profile (and your competitors', since the same crews work a whole market) or a tool that watches for you.
One honest limit: if you've never seen a fake review and you're a one-truck shop with a handful of loyal customers, this may be a problem you never face — bookmark it and get back to work. But if you're in a trade that gets targeted, or you've been hit once already, treat detection as the cheapest insurance you have. If you'd rather not refresh your profile by hand every morning, that daily watch is the specific thing RivL automates.