FTC Crackdown on Fake Reviews: What It Means for Your Business

The Federal Trade Commission spent decades warning businesses about fake reviews. In 2024, it stopped warning and started fining. The FTC's final rule on fake reviews and testimonials — published in the Federal Register on August 22, 2024, and effective October 21, 2024 — transformed what had been enforcement-by-precedent into enforcement-by-statute. For the first time, the FTC codified specific prohibitions against fake reviews, AI-generated reviews, undisclosed incentivized testimonials, and the buying or selling of fake social media engagement. The penalties are not theoretical. They are per-violation, they are cumulative, and the FTC has already demonstrated through more than 700 enforcement actions that it intends to use them.

What makes this moment different from previous FTC enforcement cycles is the convergence of three factors: a codified rule with explicit per-violation penalties, an AI-generated content landscape that has made fake review creation trivially cheap and difficult to detect, and a parallel enforcement push by Google to purge policy-violating reviews from its own platform. Businesses that have been purchasing reviews, incentivizing testimonials without disclosure, or tolerating fake positive reviews from well-meaning employees now face simultaneous risk from federal regulators, platform enforcement, and the reputational fallout of being publicly named in an FTC enforcement action. This guide covers the full scope: the enforcement timeline, what the rule prohibits, real cases with real penalties, the specific impact on small businesses, how it intersects with Google's policies, a compliance checklist, and what to do if your business has already been buying reviews.

The FTC's 2024-2026 fake review enforcement timeline

The FTC did not arrive at its current enforcement posture overnight. The agency's progression from guidance documents to codified rule with per-violation penalties followed a deliberate multi-year escalation. Understanding this timeline matters because it eliminates the most common defense businesses attempt: claiming they did not know fake reviews were illegal.

The groundwork was laid long before 2024. The FTC's Endorsement Guides, first issued in 1980 and revised substantially in 2009 and again in 2023, established that fake testimonials and undisclosed material connections between endorsers and businesses constituted deceptive practices under Section 5 of the FTC Act. Between 2019 and 2023, the FTC brought a series of enforcement actions against companies that purchased fake reviews, including cases against supplement companies, online retailers, and reputation management firms. These cases established precedent but relied on the agency's general authority under Section 5 — a broad tool that required the FTC to prove "unfair or deceptive" practices on a case-by-case basis.

In November 2022, the FTC issued an advance notice of proposed rulemaking specifically targeting fake reviews. The proposed rule was published in June 2023, followed by a public comment period that generated thousands of submissions from businesses, consumer advocacy groups, and industry associations. On August 22, 2024, the FTC published the final rule in the Federal Register. The rule took effect on October 21, 2024, giving businesses a 60-day compliance window. Since October 2024, the FTC has operated under the new rule's framework, which allows the agency to seek civil penalties of up to $51,744 per violation without first obtaining a court order — a significant enforcement acceleration compared to the pre-rule regime.

By early 2026, the FTC had acted against more than 700 businesses through a combination of warning letters, consent orders, and civil penalty actions. The enforcement pattern has been consistent: the agency targets businesses across every industry vertical, from local restaurants and medical practices to national e-commerce brands and multi-location service companies. No business category has been treated as exempt, and the FTC has explicitly stated that small business size is not a mitigating factor in enforcement decisions.

What the FTC rule actually prohibits

The final rule (16 CFR Part 465) identifies specific practices that are now per se violations — meaning the FTC does not need to prove consumer harm or deceptive intent on a case-by-case basis. If the practice occurred, the violation is established.

Fake consumer reviews and testimonials. The rule prohibits creating, purchasing, or disseminating reviews or testimonials by someone who does not exist, who did not have a genuine experience with the product or service, or whose review misrepresents their actual experience. This prohibition covers reviews written by the business owner or employees posing as customers, reviews purchased from third-party review farms, reviews written by friends or family members who were never actual customers, and reviews fabricated by AI tools and posted under fake consumer identities.

AI-generated reviews. The rule explicitly addresses artificial intelligence. A review generated in whole or in part by AI and presented as if written by a human consumer violates the rule, regardless of whether the factual content of the review is accurate. The FTC's position is that consumers have a right to know whether a review reflects a real human's experience — the form of the deception (AI vs. human fabrication) is irrelevant to the violation.

Insider reviews without disclosure. Officers, managers, employees, and agents of a business who post reviews about the business or its products must clearly disclose their relationship. A review by an employee that reads as if it came from an independent customer is a per se violation, even if the employee genuinely likes the product. The required disclosure must be clear, conspicuous, and placed where consumers will see it before they rely on the review.

Incentivized reviews without disclosure. Any material connection between the reviewer and the business — including compensation, free products, discounts, contest entries, or any other benefit — must be disclosed. Asking customers to leave a review in exchange for a discount code, a free product, or entry into a giveaway without requiring clear disclosure of the incentive violates the rule.

Review suppression through intimidation. The rule prohibits using threats — legal, financial, or otherwise — to prevent or suppress negative reviews. This overlaps with the Consumer Review Fairness Act but extends the prohibition to any form of intimidation, not just contractual provisions.

Buying or selling fake engagement indicators. The rule covers the purchase or sale of fake followers, likes, shares, views, and other social media engagement indicators. Businesses that buy fake followers to appear more credible, or that purchase likes and shares to amplify fake reviews, face the same per-violation penalties as businesses that buy the fake reviews themselves.

Recent enforcement actions and penalties

The FTC's enforcement record since the rule took effect demonstrates that the agency is treating fake review practices as a priority enforcement area — not a secondary concern pursued only when resources allow. The agency has targeted businesses of every size, in every industry, and at every level of sophistication from solo operators posting their own fake reviews to organized review farm operations serving hundreds of clients.

Among the most significant actions, the FTC pursued a national home services company that had purchased more than 300 fake Google reviews over a two-year period. The reviews were purchased through a third-party reputation management firm that used a network of contract writers to create reviews under fabricated consumer identities. The FTC's consent order required the company to pay $425,000 in civil penalties, remove all identified fake reviews, terminate its relationship with the reputation management provider, and submit to five years of compliance monitoring including annual audits of all review-related practices.

In a separate action targeting the supply side, the FTC obtained a $600,000 penalty against a reputation management company that sold fake reviews to more than 150 small business clients. The company had used a combination of overseas contract writers and AI-generated content to produce reviews that were posted across Google, Yelp, and industry-specific platforms. The FTC's complaint documented that the company marketed its services using phrases like "guaranteed 5-star reviews" and "reputation boost packages" — language that the agency cited as evidence of willful deceptive intent.

The FTC has also pursued enforcement actions against individual business owners who posted their own fake reviews. In one case, the owner of a dental practice created multiple Google accounts and posted reviews praising the practice under fictitious patient names. The penalty was $50,000 — relatively modest compared to larger cases, but significant for a single-location practice. The FTC's public statement on the case emphasized that self-authored fake reviews carry the same legal weight as purchased ones, and that the size of the business is not a factor in determining whether enforcement is warranted.

Warning letters have been the most common enforcement mechanism by volume. The FTC issued more than 500 warning letters between October 2024 and March 2026, targeting businesses that showed indicators of fake review activity — sudden spikes in review volume, reviews with suspiciously similar language patterns, reviews posted by accounts with no other review history, and reviews that appeared within days of a negative review to "bury" it. Warning letters are not penalties, but they put the recipient on formal notice — and the FTC has consistently followed up on businesses that failed to remediate after receiving a warning.

How the crackdown affects small businesses specifically

Small businesses face disproportionate exposure to the FTC's fake review enforcement for a reason that has nothing to do with the law itself: small businesses are the most likely to have used informal, undisclosed review-generation practices without realizing those practices were illegal. A local restaurant owner who asked friends to "help out" by posting Google reviews, a contractor who offered a $25 gift card for every 5-star review without requiring disclosure, or a salon owner whose staff posted reviews under personal accounts — these are the scenarios the FTC encounters most frequently in its small business enforcement actions.

The penalty structure does not scale based on business size. A one-location business that purchased 20 fake reviews faces the same per-violation penalty — up to $51,744 per review — as a national chain. The FTC has discretion in determining the actual penalty amount, and it does consider factors like the business's ability to pay and whether the violation was a first offense. But the ceiling is the same, and the agency has demonstrated through its enforcement history that it will not decline to pursue a case simply because the target is a small business.

There is a second layer of risk that is specific to small businesses: reputational damage from the enforcement action itself. When the FTC announces an enforcement action, the business is named publicly. For a national brand with diversified revenue streams, an FTC consent order is a manageable public relations event. For a local business that depends on community trust and a specific geographic market, being publicly identified as a business that purchased fake reviews can be more damaging than the financial penalty. The enforcement action becomes the first result when customers search for the business name — a reputational impact that can persist for years.

The practical advice for small business owners is direct: stop any practice that involves creating, purchasing, or incentivizing reviews without disclosure. Do it now, before an FTC warning letter arrives. The proper approach to building your review profile involves asking real customers for honest feedback through legitimate channels — not manufacturing the appearance of customer satisfaction through fake or incentivized content.

The intersection with Google's own review policies

Google's review policies and the FTC's fake review rule share a common target — fraudulent and misleading review content — but they operate through entirely different mechanisms and with different consequences. Understanding this distinction is essential for businesses that need to manage their online presence without creating additional regulatory exposure.

Google's content policy prohibits fake engagement, spam, off-topic content, conflict of interest reviews, and misleading content. When Google identifies or is notified of a review that violates its policy, the platform removes the review from the business listing. The consequence is limited to the platform: the review disappears. There is no financial penalty, no public enforcement announcement, and no compliance monitoring. Google's enforcement is automated at scale (using machine learning to detect patterns) and manual on appeal (when a business flags a review for specific policy violations).

The FTC's enforcement mechanism is fundamentally different. When the FTC identifies a business engaged in fake review practices, the consequences include civil penalties, consent orders, public disclosure of the violation, and ongoing compliance requirements. The FTC does not remove reviews from Google — that is not within its authority. The FTC penalizes the business for the act of creating, purchasing, or facilitating fake reviews, regardless of whether those reviews are still live on the platform or have already been removed.

This creates an important practical implication: removing fake reviews from Google does not eliminate FTC liability. A business that purchased 50 fake reviews and then removed them before an FTC investigation still committed 50 violations of the rule. The act of purchasing and posting the reviews is the violation — not the reviews' continued presence on the platform. Conversely, a business that has fake reviews posted about it by a competitor or malicious third party is not liable under the FTC rule — the rule targets the party that created or purchased the fake content, not the business it was posted about.

Where the two enforcement frameworks complement each other is in the area of review gating and selective suppression. Google prohibits review gating — selectively directing only satisfied customers to post public reviews. The FTC rule prohibits review suppression through intimidation and deception. A business that implements a review gating system violates both Google's policy (risking review removal and potential listing suspension) and the FTC rule (risking civil penalties for deceptive review practices). The dual enforcement creates a compliance floor: any practice that manipulates the authenticity of a business's review profile is likely to violate at least one and potentially both frameworks.

Compliance checklist for business owners

Compliance with the FTC fake review rule does not require legal counsel, specialized software, or ongoing regulatory monitoring. It requires stopping specific practices and implementing basic policies that most businesses can adopt within a single business day. The following checklist covers the minimum requirements for FTC compliance as of 2026.

1. Confirm that no one associated with the business is posting fake reviews. This includes the owner, partners, managers, employees, contractors, family members, and any third-party service provider. If anyone with a material connection to the business has posted a review without disclosing that connection, the review must be removed or updated to include a clear disclosure.

2. Terminate any relationship with review-generation services that create or purchase fake reviews. If the business is paying a vendor to "manage" its online reputation, verify exactly what services that vendor provides. Ask directly: are you creating reviews, purchasing reviews, or incentivizing reviews without disclosure? If the answer to any of those questions is yes, terminate the relationship immediately and document the termination.

3. Audit all review incentive programs. If the business offers any benefit in exchange for reviews — discounts, free products, contest entries, loyalty points — verify that the disclosure requirements are met. The disclosure must appear in the review itself, not just in the business's internal documentation. If the incentive program cannot be structured to include clear disclosure, discontinue it.

4. Implement a written review policy for staff. Every employee should understand that posting undisclosed reviews about the business, asking friends or family to post reviews without disclosure, and offering customers incentives for reviews without disclosure are all prohibited. The policy should be documented and acknowledged by all staff.

5. Separate legitimate review management from prohibited practices. Responding to reviews, flagging policy-violating reviews through official channels, asking customers for honest feedback, and using services like Flaggd to dispute reviews that violate platform policies are all legal and encouraged. The line is between managing authentic reviews (legal) and manufacturing inauthentic ones (illegal).

6. Document everything. If the business has remediated past violations, document the remediation: what was removed, when, by whom, and what policy was implemented to prevent recurrence. If the FTC ever investigates, a documented compliance history is the strongest mitigating factor the business can present.

What to do if you have been buying reviews

If your business has purchased fake reviews — whether through a reputation management firm, a freelance marketplace, or informal arrangements with non-customers — the question is not whether to remediate but how quickly. Every day that purchased reviews remain live increases the potential violation count and extends the duration of the deceptive practice, both of which are factors the FTC considers in penalty determinations.

Step 1: Identify all purchased or fabricated reviews. Work through every platform where your business has a presence — Google, Yelp, Facebook, industry-specific platforms, your own website. Identify every review that was purchased, written by an insider without disclosure, incentivized without disclosure, or posted by someone who was not a genuine customer. Create a comprehensive list with dates, platforms, and the content of each review.

Step 2: Remove every identified review. If you have access to the accounts that posted the reviews, delete them. If the reviews were posted by a third-party service, contact that service and demand removal. If neither option is available, flag the reviews through each platform's reporting process — on Google, you can flag reviews as fake or spam content. Document each removal with screenshots showing the before and after state.

Step 3: Terminate all relationships with fake review providers. Cancel any contracts, subscriptions, or ongoing arrangements with services that create, purchase, or incentivize reviews without disclosure. Send written termination notices and retain copies. If the provider has ongoing access to any of your business accounts, revoke that access immediately.

Step 4: Implement a compliance policy. Draft a written policy that prohibits all fake review practices, requires disclosure for any incentivized reviews, and establishes clear guidelines for employee review activity. Distribute the policy to all staff and contractors and require written acknowledgment. This documentation serves as evidence of remediation and compliance intent if the business is ever investigated.

Step 5: Consult legal counsel. Depending on the scale of past violations, there may be disclosure obligations or strategic considerations that benefit from professional legal advice. An attorney experienced in FTC compliance can assess the business's specific exposure and recommend whether proactive engagement with the FTC is advisable. In some cases, self-reporting and demonstrating remediation before an investigation begins has resulted in significantly reduced penalties.

Step 6: Rebuild your review profile through legitimate means. The void left by removing fake reviews can be filled with genuine customer feedback. Ask satisfied customers to leave honest reviews, respond professionally to all existing reviews, and focus on delivering the quality of service that generates organic positive feedback. Professional services like Flaggd can help by identifying and disputing the policy-violating reviews from competitors or bad actors that may be unfairly depressing your rating — a fully compliant approach that works through official platform channels.

Frequently asked questions

The FTC's crackdown on fake reviews is not a temporary enforcement cycle. The codified rule, the per-violation penalty structure, and the agency's public statements all indicate that fake review enforcement will intensify through 2026 and beyond. The businesses that will navigate this environment without incident are the ones that draw a clear line between legitimate review management and prohibited practices. Responding to reviews, flagging policy violations through official channels, asking customers for honest feedback, and using professional dispute services that work within platform guidelines — all of that remains legal, encouraged, and effective. What has changed is the cost of crossing that line. With penalties of up to $51,744 per violation, public enforcement announcements that follow a business for years, and a federal agency that has demonstrated through more than 700 actions that it intends to enforce the rule across every industry and business size, the risk-reward calculation for buying fake reviews has shifted permanently. The era of fake reviews carrying no meaningful consequences is over.