One-Star Review Attack (Review Bombing) on Google — How to Stop It and Protect Your Rating

Quick answer: A review attack is a burst of fake low ratings — often from new accounts with no photos, no other reviews and vague or copied text — posted within hours or days. Don't reply angrily or delete your profile. Screenshot every review with dates and reviewer names, report each one from your Business Profile as fake or conflict of interest, then contact Google Business Profile support describing the pattern (dates, count, accounts) and ask for review protection. If someone demands money to stop, don't pay — report it to Google as extortion and to the cyber crime portal. Meanwhile keep collecting genuine reviews so the attack is diluted.

Review bombing happens more often than owners expect: a rival business, an ex-employee, a customer with a grudge, a social media pile-on, or a "reputation agency" threatening you until you pay. The damage is real — a 4.6 rating can fall below 4.0 in a day. But Google has processes to remove fake engagement, and a calm, documented response works.

How to recognise an attack

An attack usually looks different from genuine unhappy customers:

Signal	Genuine negative reviews	Attack
Timing	Spread over weeks	Many within hours or a few days
Reviewer accounts	Mixed history, photos, other reviews	New accounts, no profile photo, no other reviews
Text	Specific experience, dates, items	Empty, vague, copied, or about things you don't sell
Language	Matches your customers	Sometimes odd language or foreign names
Your records	You can find the visit or bill	No matching customer

If most of these match, treat it as an attack.

Step 1: document everything

Before anything changes, record evidence:

• Screenshots of each review showing reviewer name, date and text.
• A simple list: date, reviewer name, stars, text, any link to their profile.
• Any messages, calls or WhatsApp threats demanding money or favours.
• Your sales or booking records showing whether these people were customers.

This evidence helps Google support, and the police if needed.

Step 2: report each review

From your Business Profile, open each review → Report review → choose the closest reason (fake engagement, conflict of interest, off-topic, offensive). Use Google's Reviews Management Tool to track the status of each report (remove a review). Report every review individually — bulk reasons help support see the pattern.

Step 3: contact Google Business Profile support

Use the Help Centre's contact option for review issues. Describe:

• How many reviews, over what dates
• Why they look fake (new accounts, no visits, copied text)
• Any extortion attempts
• That you have reported each review

Ask them to review the pattern and remove fake engagement. Google says it may remove reviews and temporarily limit new reviews on profiles facing unusual activity. Be patient and follow up politely if nothing happens in a week.

Step 4: reply carefully (or not at all)

You don't have to reply to obvious fake reviews. If you do, keep it short and factual:

"We can't find any record of your visit. If you were our customer, please contact us at [phone] so we can help."

Never accuse anyone by name publicly, never post personal details and never threaten. Calm replies show future customers that you're professional (reply mistakes).

Step 5: extortion demands

If someone contacts you saying "pay ₹X and the reviews disappear":

• Don't pay — it rarely stops, and it funds the next attack.
• Keep the messages.
• Report it to Google using its review-extortion process (review extortion).
• Report to the National Cyber Crime Reporting Portal (cybercrime.gov.in) or helpline 1930, and your local police cyber cell.

Step 6: dilute with genuine reviews

While Google reviews your reports, keep collecting genuine reviews from real customers. Ask every satisfied customer, use QR codes and WhatsApp links (how to get more reviews). Genuine volume limits the damage and speeds recovery (rating dropped).

What not to do

• Don't post fake positive reviews to fight back — it can get your genuine reviews removed and your profile restricted.
• Don't delete your profile — you lose genuine reviews and ranking (can you turn off reviews).
• Don't publicly attack the suspected competitor.
• Don't flood customers with requests to "save us" — ask normally.

Legal options

For persistent, organised attacks or defamatory content, a lawyer can send a legal notice or seek a court order; Google may act on valid legal requests. Use this only for serious cases — it's slow and costly.

Protect your profile from the next attack

• Turn on review notifications so you see attacks within hours (notification settings).
• Check your reviews every day during risky periods (disputes, staff exits, viral posts).
• Keep a steady flow of genuine reviews — a profile with 500 reviews is far harder to damage than one with 30.
• Keep records of customers (bills, bookings) so you can prove who was a real customer.
• Keep your Google account secure with two-step verification (hacked or lost access).

Example: a sweet shop during Diwali

A sweet shop in Indore received 23 one-star reviews in two days from new accounts after a dispute with a former supplier. The owner screenshotted everything, reported each review and contacted Google support with the list. Most reviews were removed within three weeks. Meanwhile Diwali customers left over 150 genuine reviews and the rating recovered to 4.6.

Example: an extortion attempt

A clinic received a WhatsApp message offering to "remove bad reviews for ₹15,000" after five fake reviews appeared. The doctor refused, reported the messages to Google and the cyber crime portal and replied briefly to each review. Google removed the reviews, and the clinic's rating returned.

Checklist

• Recognise attack signals
• Screenshot and list every review
• Report each review
• Contact Google support with the pattern
• Reply briefly or not at all
• Report extortion
• Keep collecting genuine reviews

Key takeaways

• Attacks can be reversed with evidence and reporting.
• Never pay, never fake, never delete your profile.
• Genuine review volume is your best protection.

Sources and further reading

• Google Maps — prohibited and restricted content: support.google.com/contributionpolicy
• National Cyber Crime Reporting Portal: cybercrime.gov.in

Frequently asked questions

How long does Google take to remove fake reviews?

From days to a few weeks; complex attacks may take longer.

Can Google stop new reviews during an attack?

Google may temporarily limit new reviews when it detects unusual activity.

Should I reply to every fake review?

Not necessary; brief factual replies are fine if you choose to reply.

Can I find out who posted the reviews?

Google doesn't reveal identities without legal process.

Will my ranking suffer during an attack?

A temporary rating drop can affect visibility, but recovery usually follows once fake reviews are removed.

Is review bombing illegal in India?

Extortion, defamation and online harassment can be criminal; report threats to the cyber crime portal.