By Justin Stone, RTN staff writer - 12.21.2025
There’s bad publicity, and then there’s what’s happening right now to restaurants on Google Maps: a wave of fake one-star reviews that goes beyond unfair feedback and straight into extortion territory.
Restaurant operators have always had to deal with the occasional unhappy diner leaving a scathing review. What they shouldn’t have to deal with is organized bad actors posting sudden clusters of fake negative reviews and then contacting owners with direct demands: pay us and we’ll make them go away. That’s exactly what dozens of small business owners, including restaurants, are reporting nationwide. These aren’t disgruntled diners. They’re impersonators posting bogus ratings, often from accounts with no history, followed by messages through WhatsApp, email or social media demanding payment or threatening to add more damaging reviews if ignored.
For restaurants, this tactic is especially harmful. Dining decisions are highly visual and instantaneous: a potential guest browsing Google Search or Maps can decide in seconds whether to walk through your doors. A sudden dip in stars, even if built on fake signals, can divert that decision to your competitor next door. That’s why some operators describe this not as a nuisance but as a direct business threat.
Until recently, restaurants hit by this kind of campaign had few clear avenues for recourse. Flagging individual reviews as “inappropriate” or “spam” often feels slow and piecemeal when an extortion attempt is underway. An attacker’s leverage relies on speed and urgency, pressuring owners to act before their ratings suffer irreparable harm.
Google seems to have recognized this problem in a more structured way. Last month, the company began rolling out a dedicated reporting path for businesses facing review-based extortion. A “merchant extortion” form tied to Google Maps/Business Profiles now allows restaurants and other merchants to report not just the fake reviews but the extortion attempt itself. That distinction matters. Instead of shoehorning a complex scam into Google’s generic review-flagging workflows, a business can now signal to Google’s Trust & Safety team that it is under active threat, attaching screenshots of communications and links to suspicious reviews in a way that’s specifically designed for this kind of abuse.
In Google’s own help documentation, the company explains that these scams may involve a sudden increase in one- and two-star reviews followed by someone demanding money, goods, or services in exchange for removing or stopping the negative reviews, and it explicitly labels such behavior as a policy violation. Google also cautions businesses not to pay or negotiate with these actors, both because it encourages further attacks and because it doesn’t guarantee removal.
Calling this enforcement “new” is accurate but only half the story. The reality is that extortion via fake reviews has been gaining traction for years, with threat actors experimenting with scale and messaging. Until now, Google’s response was largely limited to manual review removal and policy enforcement against fake content broadly. A dedicated reporting mechanism is a step toward recognition that this is not a content quality problem. Rather, it’s a security and fraud problem that requires evidence, escalation and human review.
Still, the rollout raises new questions. Several local SEO practitioners and operators have reported that the form does exist and that it appears to yield results faster than old workflows, with some fake reviews removed within days of a submission. But processing times can still lag, especially when businesses submit supplemental evidence after the initial filing. In practice, the gap between a scam’s first impact and Google’s action can still span crucial, revenue-sensitive days for a restaurant.
From a broader perspective, this development highlights how restaurant reputation management is evolving into a form of digital risk management. Customer reviews were always a proxy for quality and experience. Today, they’re also a weapon that malicious actors can wield in systemic ways. The introduction of a specialized extortion reporting channel is an acknowledgment that platforms like Google must treat reputation as infrastructure. It must be defended as much as curated.
Operators should remain vigilant. Reporting through Google’s new merchant extortion form is now essential, but documenting the full scope of an attack, including fake reviews and the accompanying demands, is what gives the platform the context it needs to act. Engaging calmly, preserving evidence and avoiding payment are all critical. But the larger trend is clear: reviews are no longer just feedback. They are a strategic asset that needs to be vigilantly defended from increasingly organized abuse.
