The Final Rule on the Use of Consumer Reviews and Testimonials (16 CFR Part 465) took effect on October 21, 2024, with civil penalties of up to $53,088 per violation. That number is per fake or paid review, not per case. A business that bought 50 fake reviews is looking at a theoretical maximum exposure of more than $2.6 million in federal penalties alone, separate from anything Google does to the account.

The short answer to the question is yes. In the United States, buying Google reviews has been illegal under federal law since October 2024. But the rule sweeps in a much broader set of practices than most business owners realize, and the line between "review marketing" and "an FTC violation" is narrower than it used to be. This article walks through what the rule covers, what Google does independently, and what you can still do legally to grow your review count.

What the FTC rule actually prohibits

The Final Rule on the Use of Consumer Reviews and Testimonials applies to advertisers generally, which the FTC defines broadly enough to include almost any business that sells goods or services in the US. The rule prohibits seven categories of conduct, but for small businesses the most important ones cluster around fake reviews and paid reviews.

It is illegal to create, buy, sell, or disseminate fake reviews. This includes reviews from people who never used your business, reviews fabricated by AI tools, reviews bought from review-farm services, and reviews written by your own staff or contractors posing as customers. It is also illegal to provide compensation or any incentive conditional on a customer writing a positive review or a review expressing a particular sentiment. That second part matters: even offering a small discount in exchange for a five-star review is a violation. The incentive has to be unconditional (open to anyone who reviews, regardless of what they say) and the relationship has to be disclosed.

If you would rather have someone handle your local search and reputation work in compliance with all of this, Optuno handles Google Business Profile management, review generation strategy, and local SEO for small service businesses across the country.

"Buying reviews" covers more than direct purchases

When people picture buying reviews, they usually think of Fiverr gigs that promise "10 five-star Google reviews for $50." That is the most obvious violation, but the FTC rule is much wider. Paying an employee a bonus for hitting a review quota is a violation. Asking a friend or family member to leave a positive review is a violation if they did not actually buy the service. Running a "leave us a review and get $5 off your next visit" promotion is a violation if the discount depends on the review being positive (and arguably even if it does not, depending on how Google reads it).

The rule also addresses what the FTC calls "review hijacking" and "review suppression." You cannot intimidate reviewers into removing negative reviews, threaten legal action without a genuine basis, or use contract clauses (sometimes called gag orders) that prohibit customers from posting honest reviews. Each of these counts as a separate violation pattern, and each carries the same per-violation civil penalty.

Insider reviews are permitted, but only if the relationship is clearly and conspicuously disclosed in the review itself. If your spouse writes a glowing review of your business and discloses that they are your spouse, that is allowed. If they do not disclose the relationship, it is a violation.

Google's own penalties are separate from federal law

Even before the FTC rule existed, Google's User Generated Content Policy banned fake, paid, and incentivized reviews. The April 2026 review policy update tightened those rules further by banning staff name mentions in reviews, employee review quotas, on-premises kiosks or tablets used to collect reviews, and all incentives including discounts, gifts, and loyalty points. Google's Gemini AI now actively enforces these rules in real time, and the platform removed 292 million policy-violating reviews in 2025 alone.

The platform consequences are immediate and do not require a court process. Google can remove reviews silently, suspend your Business Profile, deactivate Local Services Ads, and (in repeat-violation cases) permanently ban the business from the platform entirely. Unlike the FTC route, there is no fine, but losing your Google Business Profile is often more damaging to a service business than a five-figure penalty. The profile is usually the single largest source of new customer leads.

Why enforcement is real, not theoretical

The FTC has been pursuing review-related enforcement actions for years. Before the new rule, the agency obtained a multi-million-dollar settlement against a rental listing service over fabricated reviews. After the rule took effect, the agency now has explicit statutory authority and clear per-violation penalty amounts, which makes both investigation and enforcement significantly easier.

The agency has also stated that responsibility flows up the chain. A business owner cannot escape liability by claiming an agency or marketing vendor created the fake reviews. The rule explicitly makes advertisers responsible for the conduct of their employees and agencies. If a marketing vendor sets up a review-buying scheme and the business benefits, the business is liable regardless of whether the owner knew the specifics.

If you want a current snapshot of where your overall local search presence stands before you start ramping up legitimate review generation, Optuno's free local SEO report shows how your business is performing across rankings, listings, reviews, and on-site SEO.

What you can legally do to grow your review count

The rule does not prohibit asking customers for reviews. It prohibits paying for reviews or tying compensation to positive sentiment. There is a wide and useful gap between those two things.

You can ask every customer who buys from you to leave an honest review. You can send a follow-up email or text with a link to your Google Business Profile. You can train your staff to mention reviews at the end of a service visit. You can use review request software (Birdeye, Podium, NiceJob, and similar tools) as long as the software does not include "send to likely-positive customers first" gating logic, which is a separate FTC violation. You can offer general loyalty rewards that are not tied to writing a review at all. You can respond to negative reviews with factual rebuttals or service recovery offers.

What you cannot do is offer something specifically in exchange for a review (even an unconditional offer is risky and must be disclosed), gate which customers are asked based on predicted satisfaction, pay staff bonuses tied to review counts, or use any sort of contract clause that limits a customer's ability to leave a review.

A brief note for international readers

The FTC rule applies to US commerce, but similar regulations exist elsewhere. The European Union's Digital Services Act (DSA) imposes parallel obligations on platforms and businesses operating in EU markets, with significant penalty exposure. The UK's Digital Markets, Competition and Consumers Act includes review-related provisions that took effect in 2025. Canada, Australia, and several other jurisdictions also have consumer protection laws that cover deceptive reviews. The specific penalties and definitions vary, but the high-level rule is consistent: paying for or fabricating reviews is illegal in most developed markets, not just the US.

If you would rather hand the whole review and local search operation off and focus on running the actual business, Optuno's plans include Google Business Profile management, compliant review generation, and ongoing local SEO. No long-term contracts, no setup fees, and a dedicated contact who can step in to clean up review issues or build a legitimate strategy from scratch.

Frequently Asked Questions

Can I be fined if my marketing agency bought fake reviews without telling me?
Yes. The FTC rule makes the advertiser (the business that benefits from the reviews) responsible for the conduct of its employees and agents, including marketing vendors. Lack of knowledge is not a defense. The business is liable whether or not the owner personally directed the activity.

Is it illegal to ask employees to leave Google reviews of the business?
Asking employees to review the business is allowed, but the relationship must be clearly disclosed in the review itself. An employee writing "Great place to work!" without identifying themselves as an employee is a violation. The disclosure has to be clear and conspicuous, not buried in fine print.

What about offering a discount in exchange for any review, positive or negative?
The FTC rule prohibits compensation that is conditional on a positive review or a particular sentiment. An unconditional offer (review us and get $5 off, no matter what you say) is technically allowed under the rule, but most review platforms including Google ban incentivized reviews of any kind under their separate platform policies. The platform consequence is usually the bigger risk.

Will Google know if I bought reviews?
Often, yes. Google's review moderation uses Gemini AI to detect unusual patterns: clusters of new reviews in a short period, reviewers with no other activity, IP address patterns, language that matches known review-farm templates, and other signals. Reviews flagged this way are removed automatically, and repeat patterns can suspend the entire Business Profile.

Is buying reviews on platforms other than Google also illegal?
Yes. The FTC rule applies to all consumer reviews across any platform, including Yelp, Facebook, Tripadvisor, Better Business Bureau, industry-specific review sites, and AI tools like ChatGPT that surface review-based recommendations. The medium does not matter. The conduct does.

Can I sue a competitor who is leaving fake negative reviews of my business?
The FTC rule also prohibits fake negative reviews intended to harm competitors. Reporting suspected violations to the FTC is one route. A separate civil action for tortious interference or defamation may also be available depending on the specifics. A lawyer with consumer protection or defamation experience can advise on which approach fits the situation.

What if I just delete old reviews I do not like instead of buying new ones?
You generally cannot delete reviews customers wrote on Google, since the platform controls review hosting. You can report individual reviews to Google if they violate platform policy. Suppressing or paying customers to remove truthful negative reviews is a separate FTC violation under the review suppression provisions of the rule.