Recognize the defining connection
Google describes review extortion scams as negative reviews followed by a demand for money, goods, or services in exchange for removal. A sudden cluster of low ratings can be suspicious, but the demand tying a benefit to removal is the critical evidence for the dedicated extortion process.
Do not label an angry customer seeking an ordinary remedy as an extortionist without careful review. Escalate the facts to the designated leader or legal adviser. The team should distinguish a service dispute from a malicious demand before making external claims.
Do not pay or bargain
Google advises businesses not to engage with or pay malicious individuals because payment can encourage further attempts and does not guarantee removal. Do not offer money, services, or favors in exchange for taking down the reviews.
Give frontline staff a simple instruction: stop the negotiation, preserve the message, and alert the incident owner. They should not threaten, taunt, investigate the person on their own, or recruit customers to offset the ratings with positive posts.
Capture communications with context
Save clear screenshots of emails, texts, chats, social messages, or other written demands. Include the sender information, date, time, platform, and surrounding conversation where possible. Preserve original files and do not crop away details that establish sequence.
Record the date and time the review spike began and when the demand arrived. Save direct links to every suspected review and the affected Business Profile. Limit evidence access to the response team because messages may contain private or sensitive information.
Use Google’s dedicated extortion report
Google provides a merchant extortion report form for cases involving a direct demand for money or favors in exchange for review removal. The form asks for business and contact information, suspicious review details, the third party’s methods, and supporting files.
Submit complete, organized evidence promptly. This channel is specifically for extortion. Reviews that seem spammy, off-topic, or otherwise prohibited without an extortion demand should use the standard review-reporting process.
Coordinate safety, legal, and platform actions
The Google report addresses the platform. It does not replace the business’s incident, legal, cybersecurity, or safety procedures. If the demand includes threats, account compromise, fraud, or immediate danger, involve the appropriate internal specialists and authorities.
Keep one incident owner and a timeline of decisions. Duplicate outreach can expose strategy or create inconsistent messages. Tell staff who may communicate with the sender and who may post a public response, if any.
Be careful with public replies
A public accusation of extortion can escalate the situation and expose facts relevant to an investigation. Consider whether a neutral, limited reply helps future readers: the business may state that it cannot identify the described experience and has referred the matter through appropriate channels.
Do not publish evidence, sender contact details, or internal theories. Continue to respond normally to unrelated legitimate reviews. A measured profile gives the incident less power than a feed filled with defensive counterclaims.
Prepare before an incident
Document the escalation path, evidence location, account owners, backup contacts, and Google form before a crisis. Enable review notifications and monitor unusual clusters across locations. Preserve access using individual owner and manager accounts rather than shared credentials.
Run a tabletop exercise: a location receives three one-star ratings and a payment demand. Ask who captures evidence, who reports, who handles safety, and who communicates internally. Preparation reduces the chance that an employee pays, deletes messages, or responds impulsively.
Include a communication rule for vendors and agencies. They should notify the incident owner immediately, preserve original messages, and avoid contacting the sender unless authorized. Contracts should make evidence access and timely cooperation possible after the commercial relationship ends.
TakeawayDo not pay; preserve the complete demand and review links, use Google’s extortion channel, and coordinate the wider incident response.
Check the current primary guidance.
Google’s policies and product workflows can change. Use the current source before acting on a specific review.