A Google review extortion scam calls for three moves, in this order: refuse to pay or negotiate, save every message and review link, and report it on Google's merchant extortion report form, a channel Google reserves for extortion. The rest of this page is detail on those three moves, plus the ones that make an attack worse.
Facts on this page were checked against Google's help pages and blog on 2026-10-21. Where the wording matters, we quote Google.
What does a Google review extortion scam look like?
Google's help page on extortion scams calls them "a serious policy violation" and describes the pattern: "a sudden increase in 1-star and 2-star reviews on your Google Business Profile, followed by someone demanding money, goods, or services in exchange for removing the negative reviews."
Google's November 2025 fraud and scams advisory fills in the mechanics. The attack opens with "review-bombing," where bad actors try to get past Google's moderation and flood a profile with fake one-star reviews. Then the scammer contacts the owner, "often through third-party messaging apps, to demand payment," and threatens that the reviews will stay, or the attack will escalate, if the owner refuses. The same advisory announced the dedicated report channel this page walks through.
Google also says its "moderation systems catch most suspicious activity." An attack that gets through is the case the form exists for.
Which Google path fits your situation?
Three situations look alike in the first hour and go to three different places. Pick your row before you click anything.
| What's happening | Where it goes | Google's line |
|---|---|---|
| Someone demands money, goods or services to remove reviews | The merchant extortion report form | "exclusively for cases where you've been directly subjected to an extortion attempt" |
| Reviews break policy (spam, off-topic, profanity, fake), with no demand | A report from your profile or the Reviews Management Tool | Only reviews that violate Google policies "are eligible for removal" |
| A real customer had a bad experience | A reply, with no report | "Do not report a review just because you disagree with it or dislike it." |
A bad week of reviews with no demand attached goes to the standard flag, covered below.
What should you do first?
Stop talking to the scammer. Google's first instruction reads: "Do not engage with or pay the malicious individuals. This can encourage further attempts and doesn't guarantee the removal of reviews." Its second: "Do not try to resolve it yourself by offering money or services."
Then collect the evidence while it still exists. Google's words: "Gather all evidence immediately. The sooner you collect proof, the better." Messages get deleted and accounts get closed, so screenshot first and sort later.
Here's the packet we use, yours to copy. It follows the live form field by field, so every answer is in one place when you open it.
REVIEW EXTORTION REPORT PACKET
(mirrors Google's merchant extortion form as of 2026-10-21)
ABOUT YOU
[ ] Your name, email and phone number
[ ] The email address that manages the Business Profile
[ ] Your relationship to the business
ABOUT THE PROFILE
[ ] Business name exactly as it shows on Google Search and Maps
[ ] Business address
[ ] Business Profile ID (your Business Profile > More >
Business Profile settings > Advanced settings)
[ ] The Maps link (find the business on Google Maps, open it,
copy the full URL)
[ ] More than one location hit: the form takes a spreadsheet
ABOUT THE REVIEWS
[ ] Date range of the suspicious reviews (first and last)
[ ] How many suspicious 1-star and 2-star reviews there are
[ ] The text of each review, or the reviewer names
[ ] A direct link to each review
[ ] Date and time you first noticed the spike
ABOUT THE DEMAND
[ ] Date of the first extortion attempt
[ ] How they reached you: email, WhatsApp, Telegram, Facebook,
Instagram, phone call, other
[ ] Their email, phone number, social profile links, usernames
[ ] Exactly what they demanded: money, goods or services
[ ] Any earlier attempts like this one
UPLOADS (PNG, JPG, JPEG or PDF)
[ ] A screenshot of every demand, with date, time and
sender visible
[ ] A screenshot of each review, in case it changes or vanishes
[ ] Your police report, if you filed one
Two capture notes. To copy a link to one review, Google's steps are: open Google Maps, search your business name and city, select Reviews, then select More next to the review, Share review, Send a link and Copy link. And frame each screenshot so the date, time and sender's contact details show, because Google asks for exactly that.
How do you file the merchant extortion report?
Open the form, fill it from the packet, upload the screenshots, and read the declaration before you tick it. It says false or misleading claims, "including but not limited to fabricating evidence, attempting to remove genuine customer reviews," may lead to restrictions or other action against your own Business Profile. Use the form for a real demand and only for that.
After you submit, Google says its team "thoroughly investigates the claim and notifies you about the results of the investigation." It adds that it "can't share specific details about the investigation" for privacy and security reasons. Google publishes no timeline for this channel, so we won't guess one.
Two steps belong alongside the report. Google's advisory tells merchants to preserve "all records (screenshots, emails, chat logs) of their demands as evidence for law enforcement." Extortion is a crime, so file a police report and add it to the packet. You can also flag each review the usual way: Google says "You can report any review, but only those that violate Google policies are eligible for removal."
What should you never do?
Most of these are Google's own policies, so breaking them can cost more than the attack.
- Never pay, negotiate or trade a service for removal. Google's advisory says paying "only encourages further attacks."
- Never offer the reviewers a refund, discount or freebie to take the reviews down. Google's Maps policy bars merchants from offering "payment, discounts, free goods and/or services" for the "revision or removal of a negative review." The policy makes no exception for a reviewer you believe is fake.
- Never bury the attack under bought or friendly reviews. Google's policy bans reviews "paid for, directly or in kind" and reviews from a conflict of interest, which includes staff and family. Its restrictions page lists examples of what can follow a Fake Engagement finding: a pause on new reviews, existing reviews unpublished for a set period, and a warning telling customers fake reviews were removed. That can turn the victim into the profile with the warning label.
- Never answer the attack by soliciting only your happiest customers. Google's policy rules that out directly: merchants may not "selectively solicit positive reviews from customers." Keep asking every customer, the same way each time.
- Never retaliate on a competitor's profile, even if you're sure who's behind the attack. Google's policy bars merchants from posting content "on a competitor's place or business to undermine that business' or product's reputation."
- Never post the scammer's details or accusations in a public reply. Google's reply guidance says: "Never share a reviewer's private information or engage in personal attacks."
- Never file the extortion form for reviews that are just bad. The declaration names that case in its own words.
- Don't rush your one-time appeal. That one is our advice, explained below.
Should you reply to the fake reviews?
You can, and if you do, keep it short. One calm line tells real customers reading the profile that you noticed: "We can't find a record of this visit and have reported this review to Google." Write that only if it's true. Leave out names, the demand and any guess about who's behind it. Google checks replies against its content policies before they post, and the reader you're writing for is the next customer.
What if Google leaves the reviews up?
Then the standard process takes over. Report each review from your Business Profile (Read reviews, then Report next to the review) or in the Reviews Management Tool, which also tracks status. Google says "Review evaluation typically takes several days." The tool shows one of three statuses:
| Status | What it means |
|---|---|
| Decision pending | Flagged, not yet evaluated |
| Report reviewed - no policy violation | Evaluated, no violation found. You can file a one-time appeal |
| Escalated - check your email for updates | The appeal is with Google, and the final decision comes by email |
To appeal, choose "Check the status of a review I reported previously and appeal options" in the tool, then "Appeal eligible reviews." Google's page says "You can select up to 10 reviews." A review that breaks policy comes down after the appeal. One that complies stays live. Because Google calls it a one-time appeal, we'd hold it until the extortion investigation reports back, then appeal whatever is still up. Google's page states no appeal deadline.
Two more tools exist. You can report the reviewer's own profile in the Google Maps app (Business, Reviews, tap the reviewer's name, then More and Report). And if a real customer's review disappears during the cleanup, Google says its automated spam detection "may also mistakenly remove legitimate reviews" and points you to Business Profile support.
Do you need to hire someone for this?
No, and we sell local SEO. The form is free, there's no paid version of it, and it asks for evidence only you hold: your messages, your profile, your dates. Hiring someone, us included, doesn't buy a faster or surer answer from Google. If a stranger offers paid removal in the middle of an attack, treat the offer as part of the attack until you can prove it isn't.
The work that pays off comes afterward. Reviews are part of what customers, Google and AI assistants read about a local business, which our guide to local SEO for AI search covers, so the lasting defense is a steady flow of real ones. Ask every customer, the same way, every time, the habit we lay out in local SEO in Jacksonville. Volume also blunts the arithmetic. Google says your review score is "the average of all ratings published on Google," so twelve fake one-star reviews pull a 4.8-star profile with 400 reviews to about 4.7, and a 4.8-star profile with 40 reviews to about 3.9. And keep your profile's facts accurate everywhere they're read, as in our one-source-of-truth inventory.
Review systems that earn real reviews, with no purchased or incentivized ones, are part of our local SEO services for businesses in Jacksonville, Northeast Florida and across the US.