Review Bombing: What It Is and How to Stop It

Review bombing is a sudden surge of coordinated, mostly one-star reviews meant to hurt a rating rather than describe real experiences. It often follows a viral post or news story. You handle it by documenting the pattern, reporting reviews that break platform policy, replying calmly in public, and collecting honest reviews from real customers.

Not every burst of bad reviews is an attack, and not every attack can be removed. The useful question is whether the reviews describe real experiences. If the attack is one piece of a wider flare-up, our reputation crisis management page explains how we handle the whole situation. This guide stays on the reviews: what platforms' own documentation says and what you can do yourself.

We are not a law firm, and this is general information, not legal advice. Platform rules change, so check each platform's current policy before you file. Where we describe a rule below, it comes from the platform's or the FTC's own page, linked in the sources at the end.

What review bombing is

Review bombing is a coordinated surge of reviews, usually one-star, posted to damage a rating or make a point, not to report an experience. The writers are often people who never used the product or visited the location. The trigger usually sits outside the business: a social media post, a news story, a dispute with a former employee or customer, a controversy, or a rival.

The term comes from games, where it is well documented. Valve's Steam documentation for developers describes a review bomb as a large number of players using reviews to voice unhappiness and lower a score. It refers to an anomalous change in volume and sentiment, says Steam buckets and labels these reviews, and says off-topic bombs do not count toward the overall score. Local businesses face the same pattern on Google, Yelp and other sites.

Review bombing is not the same as fake reviews in general. Fake reviews are written to mislead, either to inflate a rating or to hurt a competitor, and they can trickle in over months. Review bombing is defined by speed and coordination.

How to tell review bombing from genuine criticism

The test is not whether the reviews are negative. It is whether they come from real experiences. The signals below are our editorial judgment, not a platform formula, and no single one proves anything.

• Timing

  Points to review bombing

  Many reviews within hours or days, often right after a post, story or dispute

  Points to genuine criticism

  Spread over weeks, or tied to a service problem you can identify

• Wording

  Points to review bombing

  Similar phrases, repeated claims or copied text

  Points to genuine criticism

  Varied wording with specifics such as a date, a staff member or an order

• Reviewer history

  Points to review bombing

  New accounts, few other reviews, or reviews of unrelated places

  Points to genuine criticism

  Established accounts with a normal mix of reviews

• Link to your records

  Points to review bombing

  No matching visit, order, booking or account

  Points to genuine criticism

  Matches a transaction, appointment or support ticket

• What is described

  Points to review bombing

  Opinions about the owner, a news story or a cause

  Points to genuine criticism

  What happened at your business

• Outside trigger

  Points to review bombing

  A thread, post or video that sent people to your profile

  Points to genuine criticism

  None you can find

Be honest about the gray zone. Real customers sometimes join a pile-on because they are angry about something that did happen, and a review from a real customer about a real experience is not review bombing, even if it feels unfair. Platforms generally leave honest negative opinions up. Google's policy, for example, allows content that describes negative experiences in a respectful manner. If you cannot tell, treat the review as genuine until your records say otherwise.

What platform policies say

We read each platform's own pages. What follows is limited to what they say, and policies change.

• Google

  What its documentation says

  Reviews must reflect a genuine experience. Fake engagement, conflict-of-interest content, repeated content and off-topic rants are not allowed, and content showing unusual volumes or patterns of review contributions is removed when it is meant to manipulate a rating

  Why it matters during an attack

  These are the grounds to cite when you report a coordinated attack

• Yelp

  What its documentation says

  Content belongs on the page for the location you visited or contacted. Yelp's Consumer Alerts include an Unusual Activity alert for a sudden spike in activity after a business becomes the subject of media attention, and Yelp says it temporarily disables posting on the page

  Why it matters during an attack

  Yelp may act on the page rather than review by review. The Unusual Activity alert is listed for the U.S. and Canada only

• Steam

  What its documentation says

  Valve says off-topic review bombs do not count toward the overall score, and developers who suspect one should contact Valve

  Why it matters during an attack

  A platform-level fix exists here. Most other platforms rely on reports

Google's policy also limits what a business may do. It does not allow merchants to discourage or prohibit negative reviews, to offer payment, discounts or free goods in exchange for a review or for the removal of a negative review, or to selectively solicit positive reviews. Keep that in mind for the what-not-to-do section below.

None of these pages promises that a review will be removed because a business is under attack. A report has to show a policy violation, and a review that is harsh but honest does not violate one.

Step 1: Document before you report

Reviews can be edited, removed or buried, and you cannot prove a pattern once the evidence is gone. Build the record first.

- Capture each review. Screenshot it with the reviewer name, star rating, text and date, and save the review or profile URL.

- List the recent history. Note how many reviews arrived, when, and from which accounts, next to your normal weekly volume.

- Compare wording. Highlight repeated phrases and copied text across reviews.

- Check your own records. Search bookings, orders, accounts and support tickets for each reviewer. Keep customer information inside your business and do not post it.

- Record the trigger. Save the post, thread, video or article that sent people to your profile, with the date.

- Keep a log. Write down when you reported each review, how you reported it, and what the platform answered.

Step 2: Report through the platform's own channel

Google. Google's Business Profile help page describes reporting a review from the reviews section of your profile, or through the Reviews Management Tool, by choosing a reason and submitting. The page describes reporting one review at a time and lists three statuses: decision pending, report reviewed with no policy violation, and escalated. It says evaluation typically takes several days. If Google finds no violation, you can submit a one-time appeal, and the page says you can select up to 10 reviews in a single appeal. Choose the reason that matches the policy actually broken, and explain the pattern in the appeal form.

Yelp. Yelp's Consumer Alerts page says Yelp investigates before placing an alert. We could not verify a way to request one, so do not count on it. Use Yelp's own reporting option on each review you believe breaks its guidelines, and keep your evidence ready.

Steam. Valve's documentation tells developers who suspect a review bomb to contact Valve so its team can assess the reviews.

Everywhere else. Use the reporting option in the platform's help center and name the specific policy. If the attack was organized on a thread or post that itself breaks the rules, report that as well. Our pages on negative social media removal and Reddit thread removal cover those cases. Report only reviews that break a rule.

Step 3: Reply in public, once, calmly

A public reply is for the next reader, not the attacker. Reply once, keep it short, and do not argue.

If you cannot find a record of the reviewer, say that without accusing anyone. A reply along these lines works: We take every review seriously. We cannot find a visit or order under this name, so we cannot address the details here. If you have worked with us, please contact [name] at [phone or email] so we can look into it.

Do not state that the person is a fake or a liar. The FTC's question-and-answer page says a business can respond publicly to reviews, but must not make false accusations about reviewers that it knows are false or makes with reckless disregard for the truth. If you run a healthcare practice or another regulated business, also avoid confirming that the reviewer was ever a patient or client. Our healthcare review-bombing case study covers that constraint, and our guide on how to respond to negative reviews has more reply wording.

What not to do

- Do not post fake positive reviews to drown the attack out. The FTC's rule on fake reviews took effect on October 21, 2024. The FTC's question-and-answer page says a business can be liable for writing fake or false reviews, or buying reviews it knew or should have known were fake, and that reviews from insiders must clearly disclose the relationship. Praise from employees, friends or a vendor that does not reflect real experiences also breaks platform rules.

- Do not buy reviews or fake followers. The same FTC page says the rule covers purchasing fake indicators of social media influence, such as bot followers.

- Do not pay or reward anyone for taking a review down. Google's policy bars merchants from offering payment, discounts or free goods in exchange for removal of a negative review. The FTC page says paying for changes to truthful negative reviews may violate the FTC Act.

- Do not threaten or intimidate reviewers. The FTC page says the rule covers unfounded or groundless legal threats, physical threats and intimidation used to get reviews removed. A real legal claim belongs with a lawyer, not in an angry reply.

- Do not retaliate. No digging up reviewers' personal details and no recruiting followers to counter-attack. Google's policy bans harassment and doxxing.

- Do not ask only your happiest customers for reviews. Google's policy says merchants may not selectively solicit positive reviews. Ask everyone the same way.

The FTC page is staff guidance. It says it is not definitive and does not provide a safe harbor. Ask your own counsel about anything borderline.

When removal is realistic

Removal is realistic when a review breaks a platform's rules or the law. Typical grounds are reviews from people with no experience of your business, conflict-of-interest reviews from competitors or former employees, repeated or copied content, harassment or hate speech, and unsubstantiated allegations of criminal wrongdoing, which Google's policy names as not allowed. Documented coordination makes the case clearer, but it does not guarantee a result.

What does not qualify matters just as much:

- Honest negative reviews from real customers, even when they are one-sided or unfair.

- Reviews that are blunt or rude but stay within the platform's rules.

- Reviews you believe are wrong but that describe something that did happen.

Our negative review removal service works only on reviews that qualify, and it is 100 percent results-based: you pay only after removal is confirmed. For reviews that do not qualify, removal is not on the table and we say so up front. Responding, rating rebuild and suppression are separate work, scoped in writing, and none of it is guaranteed. We have worked in online reputation since 2013, are A+ accredited with the BBB and are a Google Partner. That does not change what a platform decides, and no one can promise its decision or a date.

On timing, Google's help page says evaluation typically takes several days, and Valve says review bomb surges typically calm down after a few days. To see how a pattern-based approach played out, our anonymized healthcare case study describes one, and our guide to removing a negative Google review walks through the single-review route.

Rebuilding the rating honestly

The rating recovers as real reviews accumulate, not through tricks. Give every recent customer the same easy path to your profile, with no incentive and no screening of who gets asked. Platforms differ on solicitation. Yelp's guidelines, for example, say businesses should never ask customers to write reviews, so check each platform's rules first. The FTC page says contacting customers to resolve issues is allowed, and so is asking satisfied customers to update their reviews. A reward for a better rating is not.

Set up a simple early-warning routine

A light routine is enough for most businesses:

- Turn on notifications for new reviews on every profile you control.

- Check the review count against your normal week once a week, and daily during a news event.

- Name one owner and one backup who will start the evidence folder.

- Keep one approved reply on file so nobody improvises under pressure.

If the attack is part of something bigger, our guide on what crisis management is and our crisis management page cover the wider picture, and our guide to a social media crisis plan covers the first hours when a post is driving the reviews.