The FTC's Fake Review Rules: What Every Small Business Owner Needs to Know
The Federal Trade Commission finalized a rule in August 2024 that makes fake reviews punishable by civil penalties up to $51,744 per violation. Most small business owners haven't read it. Here's the plain-English version — what's banned, what the fines look like, and what you can still do to collect genuine reviews without risk.
For years, fake reviews operated in a gray zone. Businesses bought them, competitors weaponized them, and platforms played whack-a-mole trying to filter them out. The FTC had tools to go after the worst offenders — Section 5 of the FTC Act covers deceptive practices broadly — but there was no rule that specifically said "fake reviews are illegal, and here's the fine."
That changed on August 14, 2024, when the Commission published its final rule on the "Use of Consumer Reviews and Testimonials." The rule took effect in October 2024, and it applies to every business operating in the United States — from solo contractors to Fortune 500 companies.
This isn't a crackdown on asking customers for feedback. Requesting honest reviews is still perfectly legal. The rule targets specific deceptive practices: fabricating reviews, buying them, suppressing negative ones, and misleading consumers about who's writing them. If you're collecting reviews the right way, this rule actually helps you — it levels the playing field against competitors who cheat.
What the FTC Actually Banned (and Why It Matters Now)
The rule covers four major categories of deceptive review practices. Each one carries its own set of risks, and some are more common among small businesses than you'd expect.
Fabricated and AI-Generated Reviews
The most straightforward prohibition: you cannot create reviews that don't reflect genuine customer experiences. This includes writing reviews yourself, having staff write them, hiring freelancers to produce them, or using AI tools to generate fake testimonials.
The AI angle is newer, but the FTC was explicit about it. Using ChatGPT, Jasper, or any other text generator to create reviews attributed to people who don't exist — or who never used your product — falls squarely under this ban. It doesn't matter how convincing the output is. A fabricated review is a fabricated review, whether a person wrote it or a machine did.
This also covers "review seeding" — the practice of creating fake accounts on Google, Yelp, or other platforms to post reviews that appear organic. Platforms have their own detection systems, but now the FTC has an independent enforcement mechanism too.
Buying, Selling, or Procuring Reviews
Purchasing reviews is explicitly banned. This covers the full supply chain: buying reviews from a broker, paying a "reputation management" firm that provides them, compensating individuals for writing specific reviews, or offering payment tied to a particular star rating.
The rule also targets the sellers. Businesses that sell fake reviews face the same penalties. So if you're using a third-party service that promises "50 five-star Google reviews for $299," both you and the service are potentially liable.
One nuance worth understanding: offering a general incentive for leaving a review (any review, regardless of content) is treated differently than paying for positive reviews specifically. The former is allowed on some platforms but prohibited on others — Google, for instance, bans incentivized reviews entirely. The latter violates the FTC rule regardless of platform.
Insider Reviews Without Disclosure
If someone with a material connection to your business writes a review — an employee, a business partner, a family member, an investor — that relationship must be clearly disclosed. A review from your store manager that reads like it came from a regular customer is deceptive under the new rule.
The FTC defines "material connection" broadly. It covers financial relationships, employment, family ties, and any connection that could affect the weight a consumer gives to the review. The disclosure doesn't need to be a legal disclaimer — a simple "I work at this business" at the start of the review is sufficient. But it must be there.
This creates a practical obligation: if you know that employees or associates have reviewed your business without disclosing their connection, you need to address it. Either add disclosures or remove the reviews.
Review Suppression and Intimidation
The rule prohibits using threats, intimidation, or false legal claims to prevent or remove negative reviews. Sending a cease-and-desist letter to a customer who left a legitimate 1-star review? That's suppression. Including a clause in your service contract that forbids customers from posting reviews? Already illegal under the Consumer Review Fairness Act of 2016, and now reinforced by this rule.
Suppression also covers subtler tactics. Burying negative reviews by flooding a listing with fake positive ones counts. Using a review platform's dispute process to fraudulently flag legitimate negative reviews for removal counts. The FTC is looking at outcomes: did the business take actions designed to distort the overall picture consumers see?
The Core Principle
If a consumer would change their purchasing decision by knowing a review was fake, paid for, written by an insider, or that negative reviews were suppressed — the practice is deceptive. That's the standard the FTC applies.
Review Gating — The Practice Most Businesses Don't Realize Is Banned
Review gating is one of the most widespread violations, partly because many business owners don't know it has a name, and partly because some review management tools build it in as a feature.
Here's how it works: a business sends a feedback request to a customer. If the customer indicates they had a positive experience, they're directed to a public review platform like Google. If they indicate a negative experience, they're directed to a private form — and they never see the option to post publicly. The result: only happy customers leave public reviews.
That's gating. And it's a form of review suppression under the FTC's rule.
How Gating Differs from Routing
There's a legitimate version of this workflow, and the distinction matters. A compliant review funnel asks every customer for feedback and offers unhappy customers a private channel to resolve their issue — but it never prevents them from posting a public review if they choose to. Both paths are available. The customer picks.
Review gating removes the public option for negative respondents entirely. That's the line. If a customer rates you 2 stars in your feedback form and the only thing they see is a private complaint box with no link to Google, you're gating.
Our guide to review funnels explains the compliant version of this workflow in detail, including how to route feedback without blocking anyone from public platforms. If you've already built a funnel, our breakdown of common review generation mistakes will help you audit it for compliance.
Why the FTC and Google Both Prohibit It
Google's own policies independently ban selective solicitation — asking only satisfied customers for reviews. The penalty from Google is review removal or, in severe cases, listing suspension. The FTC rule adds a federal enforcement layer on top of that, with financial penalties attached.
Yelp takes an even harder line. Businesses caught gating reviews on Yelp may receive a "Consumer Alert" badge on their listing — a public warning that stays visible for 90 days. Combined with the FTC's per-violation fines, gating has become one of the riskiest review practices a business can engage in.
The Penalty Structure — What's Actually at Stake
The FTC's rule is enforced through civil penalties, not criminal charges. But the numbers are significant enough to threaten a small business's survival.
Per-Violation Civil Penalties
The maximum civil penalty under the FTC Act, adjusted for inflation, stands at $51,744 per violation as of the 2024 adjustment. Each fake review counts as a separate violation. A business that purchased 20 fake Google reviews is theoretically exposed to over $1 million in penalties.
In practice, the FTC typically seeks penalties proportional to the harm and the business's ability to pay. But even a fraction of the maximum would be devastating for a local business. A $50,000 fine — less than a single violation's maximum — is enough to close many small operations.
The compounding risk is what catches businesses off guard. One fake review is risky. Twenty is catastrophic. And because fake reviews sit on public platforms indefinitely, the violation is ongoing until the reviews are removed.
Beyond Fines — Reputational and Platform Consequences
FTC enforcement isn't the only risk. Platform-level consequences can be equally damaging:
- Google can remove all your reviews (not just the fake ones), suspend your Business Profile, or demote your listing in local search results.
- Yelp places "Consumer Alert" badges on profiles where it detects review manipulation, warning potential customers before they even read a review.
- Amazon and Trustpilot have sued sellers and businesses directly for review manipulation, adding private litigation on top of federal enforcement.
Then there's the reputational damage. News coverage of FTC enforcement actions is public. A local business named in an FTC complaint becomes the cautionary tale in every industry article about fake reviews. The fine might be survivable; the Google search results featuring your business name next to "fake reviews" are harder to recover from.
Collect Reviews the Compliant Way
Generate a direct review link for your Google listing — no gating, no purchased reviews, no compliance risk. Then create a free account to manage reviews across every platform from one dashboard.
Testimonials and Endorsements — The Disclosure Rules
The fake review rule works alongside the FTC's existing Endorsement Guides (16 CFR Part 255), which were updated in 2023. Together, they create a clear framework for when a review crosses into "endorsement" territory and requires disclosure.
A review becomes an endorsement when there's a material connection between the reviewer and the business that could affect the review's credibility. Common triggers:
- The reviewer received a free product or service in exchange for the review
- The reviewer was paid, even if no specific content was requested
- The reviewer is an employee, contractor, or business partner
- The reviewer received a significant discount tied to leaving feedback
The disclosure must be "clear and conspicuous" — not buried in hashtags or hidden at the bottom of a long post. On review platforms, this typically means stating the connection in the first line of the review. On social media, it means using #ad or #sponsored at the beginning of the post, not the end.
For most small businesses collecting organic reviews from paying customers, these disclosure requirements won't apply. They matter when you're running influencer campaigns, product seeding programs, or any initiative where reviewers receive something of value beyond the product or service they purchased.
How to Collect Reviews Without Crossing the Line
The FTC rule doesn't make review collection harder for honest businesses. It makes deceptive tactics riskier — which means the businesses that were already doing things right now have a competitive advantage. Here's how to stay on the right side of the rule.
Ask Every Customer (Not Just Happy Ones)
The fastest way to trigger a review gating violation is cherry-picking which customers you ask. Send the same feedback request to everyone — the customer who raved about your work and the one who seemed lukewarm. Equal opportunity requests aren't just compliant; they actually produce a more credible review profile.
If you need help with the ask itself, our tested review request email templates include options for every timing window and tone — all designed for equal distribution across your full customer base.
Never Offer Incentives Tied to Content or Ratings
"Leave us a 5-star review and get 10% off your next visit" violates the FTC rule. So does "mention our new product line in your review for a free sample." Any incentive that conditions a reward on specific review content or a specific rating is off-limits.
What's allowed varies by platform. Google prohibits all incentivized reviews, regardless of whether you specify the content. Other platforms may allow generic incentives ("leave a review — any review — and enter a drawing"), but the FTC still requires that the incentive be disclosed in the review itself. The safest approach: don't incentivize. Ask, and let the quality of your service motivate the response.
Don't Write, Edit, or Coach Reviews
Once you've sent the review request, your involvement ends. Don't draft reviews for customers to copy and paste. Don't email them "here's what you might say." Don't stand over their shoulder at the counter suggesting specific phrases. The review needs to be theirs — their words, their experience, their rating.
You can make the process easier by providing a direct link to your review page, which removes friction without influencing content. That's what tools like review link generators and QR codes for review collection are designed to do — reduce the steps between the ask and the review without touching the content.
Use Compliant Tools That Generate (Not Fabricate) Reviews
There's a world of difference between a tool that generates fake reviews and one that generates genuine reviews through compliant processes. The former creates text. The latter creates pathways — a direct link, an automated follow-up email, a printed QR code — that make it easy for real customers to share real experiences.
A compliant review generation system does three things: it asks every customer, it provides a frictionless way to leave feedback, and it routes responses without blocking anyone from public platforms. If your current setup does all three, you're already ahead of most businesses. If it doesn't, our guide to building an automated review funnel walks through the full setup.
A Quick Compliance Checklist
Run through this list against your current review practices. If you can answer "yes" to every item, you're operating within the FTC's guidelines.
- Every review on your profiles comes from a real customer who actually purchased your product or used your service.
- You have never purchased reviews from a broker, freelancer, or "reputation management" service.
- No AI tools are being used to generate fake review text attributed to customers who don't exist.
- Your review request goes to every customer equally, not just those you expect will leave positive feedback.
- Unhappy customers can still post public reviews — your feedback system doesn't block or hide the option for negative respondents.
- No incentives are tied to specific ratings or review content. You're not offering discounts for 5-star reviews or rewards for mentioning specific products.
- Any reviews from employees, partners, or family members clearly disclose the relationship.
- You have never threatened or intimidated a customer over a negative review, including through legal threats or contract clauses.
- You're not using fake dispute claims to get legitimate negative reviews removed from platforms.
- Your review collection process is documented — if the FTC asked how you get reviews, you could explain it clearly.
If You Found a Gap
Don't panic — fix it. Remove fake or undisclosed insider reviews, update your feedback workflow to ensure both positive and negative respondents can reach public platforms, and discontinue any incentive programs tied to ratings. Proactive cleanup is far cheaper than enforcement.
The Rule Rewards Honest Businesses
The FTC's fake review rule doesn't penalize businesses for collecting reviews — it penalizes them for faking, buying, or suppressing them. If you're asking real customers for honest feedback through legitimate channels, you're not just compliant. You're in a stronger position than every competitor still relying on purchased reviews or gated funnels, because those tactics now carry five-figure-per-violation risk.
Start with the basics: generate a free direct review link for your Google listing, print a QR code for your physical location, and set up a post-transaction email that goes to every customer — not just the happy ones. Then create a free ReviewGen.AI account to track incoming reviews across Google, Yelp, Facebook, and every other platform from one place. Compliant review collection isn't harder — it's just honest.
Frequently Asked Questions
Can the FTC fine a small business for fake reviews, or only large companies?
The FTC rule applies to businesses of all sizes. A single-location shop faces the same per-violation penalties as a national chain. The Commission has historically pursued smaller companies when evidence of deceptive practices is clear — particularly businesses that purchased bulk reviews or posted fake testimonials on their own listings. Size doesn't provide a shield.
Is it legal to ask customers to leave a review?
Yes. Asking customers for honest feedback is perfectly legal and encouraged. The FTC rule targets fabricated, purchased, or selectively solicited reviews — not genuine requests for feedback. The key requirement is that you ask all customers equally, not just the ones you think will leave positive ratings, and that you don't condition the request on a specific outcome.
What happens if an employee leaves a review for the business without being asked?
The FTC rule requires that reviews from insiders — employees, officers, managers, or anyone with a material connection to the business — include a clear disclosure of that relationship. Even if the employee acted independently, the business has a responsibility to ensure the review either includes a disclosure or is taken down. Ignorance of the review isn't a reliable defense if the FTC investigates.
Do I need to disclose if I gave a customer a discount before they left a review?
If the discount was given specifically in exchange for or as an incentive to leave a review, yes — that's a material connection that requires disclosure under the FTC Endorsement Guides. If the discount was part of a normal promotion unrelated to the review (a first-time customer coupon, for example), no disclosure is needed. The test is whether the discount could influence the review's credibility in a reasonable consumer's eyes.
What should I do if I previously bought fake reviews?
Remove them. Identify which reviews were purchased or fabricated, and delete them from every platform where they appear. If you used a third-party service, discontinue it immediately. Going forward, build your review profile with genuine customer feedback using compliant methods — direct review links, QR codes, and post-transaction follow-up emails. The FTC rule applies to ongoing violations, so cleaning up your existing listings reduces your exposure.
About the Author
The ReviewGen.AI team helps small businesses collect, manage, and respond to customer feedback across every platform — Google, Yelp, Trustpilot, Facebook, TripAdvisor, and beyond. Our tools are built for compliant review generation: no gating, no purchased reviews, no shortcuts that put your business at risk.