Mitigating WhatsApp Review Extortion: A Playbook for Local Businesses

Google Business Profile review extortion represents a growing threat for service-area businesses and brick-and-mortar storefronts alike. Last updated February 18, 2025, reports from the small business community indicate a rise in coordinated attacks where anonymous actors demand payment via WhatsApp to prevent a flood of 1-star ratings.

We observe that these attackers often target businesses during peak hours or holiday seasons, leveraging the high stakes of local rankings to pressure owners into quick, untraceable payments. While the instinct may be to engage or pay, our editorial position is that documentation and formal reporting remain the only sustainable paths to account recovery and profile integrity.

The mechanics of the WhatsApp extortion threat

A typical scenario involves a business—such as a dental practice in Leeds or a 12-location HVAC operator in Chicago—receiving an unsolicited message on WhatsApp. The sender usually claims they have a network of accounts ready to post negative feedback unless a specific sum, often in cryptocurrency, is paid immediately.

Unlike traditional spam, which is often generated by bots, these threats are frequently human-led, making them harder for Google's automated filters to catch before they go live. The attackers rely on the fact that Google's systems are reactive; the damage to a local business's star rating often happens before the review moderation team can intervene. Compared to previous iterations of review spam, which were largely random, this specific method uses direct communication to establish a sense of fear and urgency.

How to handle Google Business Profile review extortion attempts

The most critical step when facing an extortion attempt is to refrain from replying. Engaging with the attacker confirms that the phone number is active and that the business owner is monitoring the threat. Instead, we recommend immediate documentation. Capturing high-resolution screenshots of the WhatsApp messages, including the sender’s phone number and the exact time of the threat, is essential for any future appeal with Google Support.

We have found that Google’s automated review management tool is the primary gateway for these disputes. However, if the reviews have not yet been posted, the business should prepare a spreadsheet to track any sudden influx of negative feedback. This log should include the reviewer's name, the date of the post, and a link to the specific review. This documentation provides a clear timeline that correlates the WhatsApp threat with the subsequent activity on the profile.

Can Google remove reviews before they are posted?

One of the most frequent questions we receive is whether a business can preemptively block a coordinated attack. Currently, Google does not offer a mechanism to "lock" a profile against incoming reviews based on a threat alone. The platform operates on a post-moderation basis, meaning the content must exist before it can be evaluated against the Prohibited and Restricted Content policies.

However, by establishing a support ticket immediately after receiving the threat, a business creates a paper trail. If the 1-star reviews eventually appear, the operator can reference the existing ticket number, showing that the activity is part of a previously reported extortion attempt. This is significantly more effective than reporting reviews individually after the fact, as it allows Google's internal teams to look for patterns across the multiple accounts used in the attack.

Utilizing the 'Manage your reviews' tool for crisis response

For an operator managing multiple locations, the Google Business Profile Help Center offers a specific "Manage your reviews" tool. This interface allows for a more streamlined reporting process than the standard "Report a review" button found on Google Maps. When using this tool, businesses should select the reason "Legal issue" or "Conflict of interest" if the extortion involves a clear threat of harm or a demand for money.

Unlike the standard reporting flow, which is often handled by basic algorithms, legal-related reports may undergo a more rigorous manual review. If the initial automated request is denied, we suggest escalating the case through the Google Business Profile Help community, where Product Experts can sometimes facilitate a secondary look by Google employees, provided there is clear evidence of extortion.

What this means for local businesses

Facing a coordinated attack is a stressful event for any operator, but maintaining a clinical, documented approach is the best way to ensure the long-term health of a profile. We suggest the following action plan:

1. Do not pay or respond. Paying the ransom identifies the business as a "soft target," often leading to repeated extortion attempts by the same or affiliated groups.
2. Capture all metadata. Save the WhatsApp sender’s phone number, profile photo, and the exact timestamps of the messages. Export the chat log if the platform allows.
3. Initiate a Support Ticket. Contact Google Business Profile support immediately via the "Help" menu. Report the threat under "Harmful Content" or "Legal" to establish a record before the reviews arrive.
4. Monitor for patterns. If reviews begin to appear, look for commonalities such as accounts with no prior review history or multiple reviews posted within the same hour.
5. Audit your digital footprint. Ensure that your business phone number is not unnecessarily exposed in areas where it can be scraped by automated tools used by extortionists.

Sources

• Reddit r/GoogleMyBusiness: Threatened with fake Google reviews unless we pay
• Google Business Profile Help: Prohibited and Restricted Content
• Google Business Profile: Manage your reviews tool