A dozen one star reviews landed on a client’s Google Business Profile in under two hours on a Friday afternoon. No names we recognized, no mention of any real work, no history behind any of the accounts. Then came a DM from a brand new Instagram account with no followers. Messaging the business directly, they sent a screenshot of the one star reviews stacking up in real time and said someone had hired them to post thirty reviews and get the profile suspended, with more on the way unless the owner paid to make it stop.
A review bomb, a flood of fake one star ratings built to crater the review score, scare off anyone comparing options in the map pack, and in this case pressure the owner into paying to end it. These attacks are far more common than most owners realize.
What is a fake review attack?
A fake review attack, sometimes called review bombing, is a burst of fraudulent reviews posted to a Google Business Profile that are almost always one star. The accounts behind them are throwaways: no profile photo, no history, no other Maps activity. The reason businesses are hit with these kinds of attacks varies. Sometimes it’s a competitor or a former employee with a personal grudge. Sometimes it is a shakedown, where a scammer floods your profile and then offers to make it stop for a price. The goal is always the same: tank your star rating, rattle customer confidence, and push you down in local search, where your review score can have a real impact on consumer trust and profile rankings.
How do you know the reviews are fake?
The first clue you’re under attack is timing. Real reviews come in at a steady pace, whereas an attack arrives in a cluster, ten or twenty inside a couple of hours. Review bursts aren’t always unnatural behavior, but an unsolicited burst of 1 star reviews is almost always an attack. If you check the profiles that left the reviews, you may find accounts with no photo, a few reviews all posted the same day, and ratings scattered across businesses in various cities. The reviews themselves are usually a bare star with no text, or a vague line that could describe any company and names nothing specific. When a complaint cannot point to the job, the date, or one real detail, it likely did not come from a real customer.
How do you remove fake Google reviews?
There is no phone line that pulls fake reviews. Removal runs through a reporting and appeal process, backed by documentation. Because this scam has become so common, Google has established a specific process for exactly this scenario, and the faster you take action, the better. Here is what to do the moment an attack starts:
Document all reviews and any communication received. Screenshot your Google Business Profile review count, and each fake review with its timestamp.
Report each fake review individually through the profile, flagging it as a violation of Google’s content policy.
File a separate report with the Google Business Profile Merchant Extortion form and include the documentation.
Monitor daily and report anything Google may have missed on the first sweep.
A clean, well documented report gives you the best odds of a fast removal.
Does Google catch fake reviews on its own?
It does, and it has gotten noticeably better at it. Google now runs Gemini, its AI, across Maps and Business Profiles, trained to recognize the fingerprints of a coordinated attack: a sudden spike in ratings, reviews from accounts with no real history or verified connection to the business, and batches of profiles created in the same narrow window. Google reported blocking or removing more than 240 million reviews that violated its policies in 2024, the large majority before a single customer ever saw them, and it has started alerting businesses when it removes fakes from their profile.
That detection is also why the worst thing you can do is try to buy your way back. When a sinking rating tempts you to order a batch of five star reviews to even the score, remember that the model hunting fake negatives is watching for unnatural positives just as closely. A sudden run of glowing reviews from unconnected accounts is exactly the pattern Gemini is built to flag, so you can trip a filter or a penalty on your own profile while the original attack is still clearing. Let the detection do its work, keep reporting, and keep earning real reviews from real customers. That is the only kind of five star rating that survives contact with Google’s AI.
Should you respond to fake reviews?
While the attack is active and under review, don’t respond to any suspected fraudulent reviews. Focus on good documentation, which is what actually gives you the best chance of clearing the reviews. Save your replies for legitimate feedback, where a calm, professional response from the owner reads as confidence and wins people over.
How long does it take Google to remove fake reviews?
This answer depends on the request volume that Google Support is dealing with, but it’s typically longer than you want and there is no timeline. Some reviews vanish within a few days. Others sit there for weeks, and a stubborn few survive the first report and only come down after you flag them a second or third time with fresh documentation. Google never explains which is which, so the job is persistence: keep flagging, keep the documentation current, and do not treat one submission as the end of it. Meanwhile the rating climbs back on its own as the fakes drop off and real customers keep posting, which is the best argument for building a steady stream of genuine reviews before you ever need them. An established profile with hundreds of real reviews barely flinches at a dozen fakes. A thin one takes the full hit.
Why a trusted agency matters in a review attack
This is the part that is hard to appreciate until you are living it. The client in this story never had to work any of it out alone on a Friday afternoon. We caught the spike early because we watch our clients’ profiles, we knew the process, and the documentation was filed before anyone had time to panic.
An owner facing this solo usually loses the first and most valuable hours, either missing it until the rating has already slipped or reacting in ways that make removal harder. A trusted agency can help change the outcome in three ways: someone is watching, so it gets caught fast; someone knows the real removal path instead of guessing; and someone keeps the response steady when every instinct says to lash out.
Your reputation is one of the most valuable assets your business owns. It deserves people who have seen this before and know exactly what to do next.
If your Google presence matters to your business, and it does, make sure someone is actually watching it. If you would like that someone to be us, let’s talk.
