Fifteen one-star reviews overnight, then a text asking for $200.

Google's own description matches the cases exactly: a sudden increase in 1-star and 2-star reviews on your Business Profile, followed by someone demanding money, goods, or services in exchange for removing them. The reviews usually arrive in a tight burst. An Orlando roofing company was hit with roughly 60 negative reviews in four hours in August 2025, per ClickOrlando's reporting. Sterling Sky, the local search agency that has tracked this wave closely, describes the signature as fifteen or more one-star reviews inside a single 24-hour window, often with fabricated but detailed complaints, from accounts with identical profile pictures and contact details parked in their bios.

Then comes the demand. In the documented 2025 and 2026 cases it arrives over WhatsApp, SMS, or email, and the amounts cluster between $100 and $250. Google's VP of Trust and Safety, Laurie Richardson, described the mechanics when Google launched its reporting tool: bad actors flood a profile with fake one-star reviews, then contact the owner directly, often through third-party messaging apps, to demand payment.

There are variants worth recognizing. One is the pre-attack shakedown: a text claiming the sender was hired to post 35 negative reviews and has already posted one, so pay up before the rest land. Another is the fake five-star replacement offer, where the scammer proposes to swap the one-stars for glowing fakes. And in a November 2025 wave that hit Chicago remodelers, a follow-up round used fake three-star reviews instead of one-stars. Treat them all as the same scam wearing different clothes.

Start with Google's own instruction, verbatim in spirit: do not engage with or pay the malicious individuals, because it can encourage further attempts and does not guarantee removal. That is not theory. It is what the documented cases show.

The one payer in the national coverage is a Los Angeles contractor who, per reporting syndicated from The New York Times, paid $250 in two payments after twenty fake reviews dragged her rating from 5.0 to 3.6. The reviews were not her problem after that. The follow-up demands were, because more extortion attempts arrived from new numbers. Meanwhile every documented refuser came out fine. A West Palm Beach mover refused a $200 demand, reported it, and got his 4.9 rating back, per WFLX. The Orlando roofer refused and, per ClickOrlando, the reviews came down about a day after reporting. An owner on Local Search Forum in November 2025 refused a demand of roughly $100, used Google's dedicated form, and saw every fake removed in about two days.

One more trap: the fake five-star replacement offer is not a way out, it is a second crime. Accepting makes you a buyer of fake reviews, which violates Google's fake engagement policy and exposes you to the FTC's fake-review rule, where civil penalties run up to $53,088 per violation. The scammer's fix converts you from victim into violator.

And do not reply at all, even to say stop. Coverage of the SMS variant makes the reason plain: any response confirms a live target.

Your instinct will be to start flagging reviews immediately. Resist it for one hour and build the evidence file first, because Google's extortion form asks for specifics and a complete first submission is what gets fast action.

Screenshot everything. The demand messages with the sender's number or address visible, with dates and times. The burst of fake reviews, including reviewer names and the review text. Your review count and rating before and after, if you can reconstruct them. Note the date and time the spike started and the date the first demand arrived, because the form asks for both.

Then work the three reporting layers in order: flag the individual reviews from your profile, report the reviewer accounts, and submit the Merchant Extortion form. Sterling Sky, which has walked clients through this repeatedly, reports that in every case where the owner diligently did all three, the fraudulent reviews eventually came down.

Google quietly launched a dedicated extortion report form in late 2025, announced in its November 2025 fraud advisory. Most of the advice you will find online predates it, which is why so many owners still grind through the generic review-flagging queue for a problem that now has its own lane into Google's Trust and Safety team.

The form asks for your contact information and your relationship to the business, the business name and address with a link to the profile, the date range of the suspicious reviews and how many landed, the review text or reviewer names, the date the extortion contact started, how they contacted you, what they demanded, and screenshot uploads. There is a spreadsheet option for multi-location attacks. Screenshots are required, which is why the documentation hour comes first.

Set expectations honestly. Google publishes no timeline and says only that it investigates and notifies you of the result. But the practitioner reports are consistent: Search Engine Land reported an SEO whose test case was removed within days in November 2025, a commenter on Sterling Sky's write-up said the form has worked for every affected client, usually within a few days, and the Orlando and Chicago cases resolved in roughly one to two days once reported.

One warning printed on the form itself deserves respect: false or misleading claims, including fabricated evidence or attempts to remove genuine customer reviews, can bring restrictions against your own account. This form is for real extortion. It is not a side door for laundering legitimate one-stars you happen to dislike.

Extortion is a crime, not just a policy violation, and the FBI's Internet Crime Complaint Center at ic3.gov takes exactly this kind of report. File it the same day you file Google's form. The two filings want different things, so do not assume one covers the other.

IC3 wants your business information, every identifier you have for the scammer, exact payment details if any money moved, and a timeline of the incident. It does not accept attachments, so paste the message text into the complaint and keep your screenshots for Google and your own records.

Will the FBI chase a $200 WhatsApp demand from overseas? Individually, probably not. But these operations recycle the same accounts across hundreds of businesses, and the watchdog research that traced identical scammer accounts hitting businesses in Florida, New Jersey, and three other countries is exactly the kind of pattern complaint data builds. Your twenty minutes contributes to the case that eventually matters.

Even in the success stories the reviews did not vanish instantly. The West Palm Beach mover did everything right and still watched fourteen fake one-stars sit on his profile for four days while customers were getting quotes. Plan for that window instead of being surprised by it.

Do not reply to the fake reviews individually. A public argument with a bot account helps nobody, and engagement signals a live, rattled target. If your real customers or your regulars ask, tell them plainly: the profile was hit by a review scam, it is reported, and Google is removing the fakes. Honesty here costs nothing and reads far better than silence.

Keep collecting real reviews through the window unless Google has paused submissions on your profile. Steady, legitimate review flow is the signal that looks nothing like the attack, and every specific, real review that lands makes the wall of blank one-stars look more like what it is.

Here is the part nobody selling panic wants to say: the same attack lands completely differently depending on the profile it hits. The West Palm Beach mover dropped from 4.9 to 4.3 when fourteen fakes landed on a profile of about seventy reviews. Put those same fourteen fakes on a profile with three hundred reviews and the needle barely moves. Put them on a profile with eighteen reviews and the business looks destroyed.

A deep bench of real, detailed reviews is the one defense you can build before anyone targets you, and it works twice. It cushions the average, and it makes the fakes obvious, because template-written attack reviews sit in an uncanny valley that stands out badly next to specific accounts of real jobs written by real customers.

That second part is where small Talk lives. It walks your customers through a few short questions about the job and drafts a review from their answers, which they edit and post themselves. The result is a profile full of specific, honest, clearly human reviews. That is worth having for its own sake. The day fifteen blank one-stars land on it, it is also armor.