Why does buying reviews look tempting?
You have eight reviews and the shop down the road has three hundred. Someone in your inbox offers fifty five-star Google reviews by Friday. It is easy to see the appeal, and it is not a rare thought: when we typed "buy google reviews" into Google on 6 November 2026, 9 of the 10 suggestions were about where and how to buy them, from a freelance marketplace to bulk packages; the tenth was review cards, which we come back to below. Typing "buying google reviews" brought up one more honest question among the ten: "is buying google reviews illegal".
Here is what the rules say, read at the source, and what happens to a Business Profile that is caught. It is not legal advice; if money or a lawsuit depends on it, ask a lawyer.
Is it illegal to buy Google reviews?
In the US, the EU and the UK, yes, and on Google it is against the rules everywhere.
| Where | Rule | What it says about bought reviews |
|---|---|---|
| Maps user content policy, fake engagement | Removes reviews “paid for, directly or in kind”; can restrict the whole profile | |
| United States | FTC rule on consumer reviews, 16 CFR 465.2 | Buying a review you knew or should have known was fake is an unfair or deceptive practice |
| European Union | Directive 2005/29/EC, Annex I point 23c (added by 2019/2161) | Commissioning false reviews is on the list of practices that are always unfair |
| United Kingdom | DMCC Act 2024, Schedule 20 paragraph 13 | Commissioning a fake review, and offering that service to traders, are banned practices |
The US rule is the most specific. Section 465.2(b) makes it an unfair or deceptive practice for a business to buy a review that it "knew or should have known" misrepresents whether the reviewer exists, whether they used the product, or what their experience was. "Should have known" matters: not asking the seller where the reviews come from does not get you out of it. The rule has been in force since 21 October 2024, and our article on the FTC fake reviews rule goes through the rest of it.
The EU rule does not care whether the reviews were paid for in money. Point 23c bans "submitting or commissioning another legal or natural person to submit false consumer reviews". The UK goes one step further and bans the sellers as well: paragraph 13 of Schedule 20 covers "offering services to traders" to write or submit fake reviews.
Does swapping reviews count as buying?
Under the US rule, yes. Section 465.1 defines buying a review as giving "something of value" in exchange for one, and lists money, gift cards, products, services, discounts, coupons, contest entries "or another review". So a group where business owners agree to review each other is buying reviews, even though no money changes hands. On Google, those reviews also fail the content policy, because the reviewers never used your business.
Section 465.8 covers fake followers and likes: buying or selling "fake indicators of social media influence" for a commercial purpose is banned too.
What does Google do to a profile with bought reviews?
First it removes the reviews. Google's content policy, read on 6 November 2026, lists reviews or ratings "that have been paid for, directly or in kind" as fake engagement, along with content posted from several accounts by one person and content that does not reflect a real experience. Its rating-manipulation section adds that "unusual volumes or patterns" of reviews are removed too, and fifty reviews in a week is the kind of pattern that wording describes.
Then it can restrict the profile. Google's help page on restrictions for policy violations lists three examples: the profile cannot receive new reviews for a set period, its existing reviews are unpublished for a set period, or customers see a warning that fake reviews were removed. Google says it emails the owner before applying a restriction, and the owner can appeal. A public warning is a worse look than eight honest reviews.
The money is gone either way. Removed reviews are not restored, as our article on Google reviews not showing up explains. And while they last, bought reviews tell you nothing about what real customers think, which is the part of reviews you can actually use.
What if the seller promises real accounts?
It changes nothing. Google's policy looks at why the review was written. A review "paid for, directly or in kind" is fake engagement whether it comes from a bot or from a real person with ten years of Maps history. The same goes for paying people to write reviews in a group or on a freelance site.
The US rule looks at what you knew. A business is liable if it bought reviews it "knew or should have known" were false, and a person who never used your business cannot write a true account of using it. The FTC's questions-and-answers page on the rule, read on 7 November 2026, adds that the rule "authorizes courts to impose civil penalties for knowing violations".
Are Google review cards the same as buying reviews?
No. When "buy google reviews" autocompletes to review cards, it means a card or stand with a QR code or NFC chip that opens your review page. That is just a way to ask, and it is allowed, with two limits from Google's policy: do not pressure people to review while they are still on your premises, and do not ask staff to collect a quota of reviews or to get themselves named in them. A free QR code does the same job as a paid card; our guide to a review QR code shows how to make one.
What works instead of buying reviews?
Asking every customer, the same way, with a link that goes straight to the review box. Google's policy allows you to "solicit or encourage" genuine reviews as long as you do not offer an incentive or try to influence the rating. A short email a few days after the purchase reaches the customers who were happy but did not think to write.
Leave rewards out of it on Google. The FTC rule allows a reward that does not depend on the rating, but Google's policy bans any incentive for a Google review, payment, discount or free product alike. Our article on offering a discount for a review sets out where each rule draws the line. Our guide to getting more customer reviews covers the asking itself.
Ask everyone, not just the customers you expect to be happy. Google's policy bans merchants from trying to "selectively solicit positive reviews from customers", and from requiring or pressuring people to leave a review while they are on your premises. The FTC's questions-and-answers page says its rule has no specific ban on asking only satisfied customers, but that the practice "could violate the FTC Act". A rule of thumb that keeps you inside both: the same request, at the same point, to every customer.
How does Formgong fit in?
Formgong does not sell reviews, does not post to Google and does not show Google reviews. It helps you ask real customers. Review request emails go to every buyer of a connected store, and our free Google review link generator makes a link and QR code that open your Google review box.
For reviews on your own website, a few defaults make a bought batch harder to slip in, though none of them can prove a review is genuine. In the modes that publish on their own, only three reviews a day from one visitor go out at once and the rest wait for you. On the Pro plan, the AI check holds a review with a link in the name or text as possible spam. Imported reviews arrive waiting for you, not published. The moderation docs list each mode.
Has someone offered you reviews?
If a seller has pitched you reviews, or you have seen a competitor's profile get a warning, tell us what happened at support@formgong.com. We will add what we can verify to this page.
Frequently asked questions
Is it illegal to buy Google reviews?
In the US, buying a review you know or should know is fake breaks the FTC's rule on consumer reviews. The EU and UK also ban commissioning fake reviews, and Google's policy bans paid reviews everywhere.
Can Google tell if reviews are bought?
Google does not publish how, but its policy removes paid reviews, reviews posted from several accounts by one person, and unusual volumes or patterns of reviews.
What happens if you get caught buying Google reviews?
Google removes the reviews and can restrict the profile: no new reviews for a period, existing reviews unpublished, or a warning to customers. It emails the owner first.
Is a review exchange with another business allowed?
No. The FTC rule counts another review as payment, and on Google the reviewers never used your business, so the reviews break the content policy.
Can I ask only happy customers for Google reviews?
No. Google's policy bans selectively asking for positive reviews. Send the same request to every customer.
Sources and documentation
Official references for this guide: Formgong: What the FTC fake reviews rule bans, Formgong: Can you offer a discount for a review?. Moderate reviews, where data is stored.
Related guides
- Lovable form submissions to email and Telegram
- HTML contact form without a backend: a working example
- How to send website form submissions to Telegram
- Contact form not sending email? Check where it stops
- Managing website leads in Telegram without a CRM
- Form backend for Lovable, Bolt, v0, Cursor
- Telegram bot for a contact form: build or skip?
- GDPR form backend: 7 checks before you choose
- Lovable form not sending email? 6 fixes
- Netlify Forms not working? React and Bolt fixes
- Stop contact form spam without a CAPTCHA
- GitHub Pages contact form: a working setup
- Mailto Form in HTML: Why It Fails and What to Use
- HTML form to Google Sheets: 2 free methods
- Webflow form submission limit: what to do at 50
- Turnstile vs reCAPTCHA vs hCaptcha for forms
- Contact Form 7 and Elementor forms to Telegram
- Squarespace contact form not sending email?
- Shopify contact form: where do messages go?
- Google Form to Telegram: free Apps Script way
- Wix contact form not sending email? Fixes
- EU / GDPR Formspree alternatives compared
- HTML form action attribute explained
- How do HTML forms work? The HTTP request
- Types of Injection Attacks on Web Forms (2026)
- Indirect Prompt Injection in MCP
- MCP Rug Pull Attack: Detect Tool Changes
- Form without a backend: 7 ways that work
- Thank-you page after form submission (HTML)
- Indirect Prompt Injection Examples (2023–2026)
- Indirect Prompt Injection via Email
- What Is Tool Poisoning in MCP?
- WordPress contact form without a plugin
- Send email from frontend JavaScript
- How to Prevent Indirect Prompt Injection
- Honeypot Form Field: How to Add One That Works
- Contact Form with File Upload (HTML, No PHP)
- Angular contact form without a backend
- Send form submissions to Slack or Discord without Zapier
- Verify a form webhook signature (HMAC-SHA256)
- Contact forms that send nothing: 793 AI-built sites tested
- v0 contact form that actually sends: 3 ways
- How we tested AI-built contact forms, and 12 bugs we hit
- Cloudflare vs Netlify free plan: hosting that never pauses
- EmailJS 412 “Gmail_API: Invalid grant”: reconnect Gmail
- Resend “You can only send testing emails”: verify a domain
- Supabase Edge Function blocked by CORS policy: 3 causes
- Formspree “Form not found” and other errors: fixes
- Web3Forms errors: “Invalid access key” and 403 explained
- How to add customer reviews to your website for free
- Getform not working? “This form has been deleted” and more
- Next.js contact form not working? 6 errors, reproduced
- Webflow form not sending email? What to check, tested
- FormSubmit not working? “This form needs Activation” fix
- Contact form “TypeError: Failed to fetch”: causes and fixes
- WooCommerce product enquiry form
- Contact Form 7 vs WPForms
- Gravity Forms alternative free
- WordPress contact form block
- 535-5.7.8 Username and Password not accepted (Gmail)
- 535 5.7.3 Authentication unsuccessful: Office 365 SMTP
- Nodemailer “Missing credentials for "PLAIN"”: the fix
- Nodemailer “Greeting never received”: port 465 fix
- Nodemailer SSL “wrong version number”: the port fix
- Nodemailer “self-signed certificate in certificate chain”
- Nodemailer ECONNREFUSED 127.0.0.1:587: missing SMTP host
- SendGrid “authorization grant is invalid”: 401 fix
- Mailgun 401 Forbidden: why the API rejects your key
- “Edge Function returned a non-2xx status code”: the fix
- Next.js “Body exceeded 1 MB limit”: Server Action fix
- Unexpected token '<', "<!DOCTYPE "... is not valid JSON
- “TypeError: Body is unusable”: body has already been read
- Turnstile “timeout-or-duplicate” and other siteverify errors
- Turnstile vs hCaptcha vs reCAPTCHA: speed and size tested
- Judge.me reviews not showing on Shopify: how to fix it
- Judge.me review carousel not showing: how to fix it
- Yotpo reviews not showing on Shopify? Check the app embed
- Loox reviews not showing on product page: how to fix
- Shopify reviews not showing: what to check first
- How to show reviews on Shopify
- GDPR for website forms: what each type of form needs
- WooCommerce reviews not showing: how to fix it
- Stamped.io reviews not showing on Shopify: how to fix it
- Etsy reviews not showing: why and what to do
- Trustpilot widget not loading: how to fix TrustBox
- Yotpo problems in 2026: what merchants report
- Contact Form 7 “error trying to send your message” fix
- Elementor form “Your submission failed because of an error”
- Framer form not sending email or not working: what to check
- Carrd contact form not working: plans, spam and errors
- Google review link not working: what customers see and why
- tawk.to widget not showing on your website: causes and fixes
- How to add questions and answers to your product page
- “Failed to send a request to the Edge Function”: fixes
- Next.js “Failed to find Server Action”: what it means
- Brevo “unauthorized: Key not found” 401: the fix
- Amazon SES “Email address is not verified”: the fix
- Shopify contact form not working: how to fix it
- Judge.me alternative for WooCommerce after the 2025 shutdown
- Free WooCommerce review plugins compared on the free version
- WooCommerce review reminder emails without a paid plugin
- Add Voice Recording to a Website Form
- Contact Form 7 spam: how to stop it
- WPForms not sending email: how to fix it
- Contact form emails going to spam: how to fix it
- HTML form not submitting: how to fix it
- Contact form not working: how to find the fault
- Webflow form spam: how to stop it
- Website form to Notion: how to set it up
- Website form to WhatsApp: what works and what does not
- What 1-star reviews say about AI support chatbots
- Which free form backend gives you the most submissions?
- Elfsight reviews widget not showing? Check the view limit
- Next.js contact form backend vs Server Actions
- Review stars not showing in Google search results
- How to stop duplicate form submissions
- How to see which form leads came from ChatGPT
- What happens when a form webhook fails
- When to send a review request email after an order
- How to collect video testimonials for free
- Add contact form sign-ups to Mailchimp or Klaviyo
- How to migrate from Formspree without losing submissions
- How to get a Google review link for your business
- What is a headless form backend?
- Is it safe to put a form access key in your HTML?
- AI chatbot that answers only from your website
- Minified React error #441 in Next.js
- Squarespace product reviews after Judge.me
- Accessible contact form checklist for WCAG 2.2
- How to ask a client for a testimonial by email
- How to respond to negative reviews, with examples
- 429 Too Many Requests on a contact form
- MCP server for forms in Cursor and Claude
- Can you offer a discount for a review?
- Do EU stores have to say if reviews are verified?
- Webflow form backend options compared
- How to add review schema JSON-LD to a product page
- How to turn a customer review into an Instagram post
- How to make a QR code for Google reviews
- Live chat or chatbot for a small business website
- Why people abandon your contact form halfway
- Which form backend do AI assistants pick? 54 answers
- PHP mail() not sending email, even when it returns true
- What “Failed to fetch” means, tested in three browsers
- 405 Method Not Allowed when you submit a form
- Send a contact form to more than one email address
- What is review syndication, and who needs it?
- How to save HTML form data to a database
- NetworkError when attempting to fetch resource
- Send product reviews to Google Merchant Center
- PHPMailer not working on a live server
- AI review reply generator: does it help?
- React 19 contact form with useActionState
- Astro Actions or a form backend?
- Is no-reply@wixsiteautomations.com legit?
- Where to find the Judge.me review widget code
- AI review summaries: what shoppers actually see
- Photo reviews for WooCommerce, and the GPS inside them
- Review request email templates you can copy
- Reviews in AI search: what ChatGPT and Perplexity cite
- Lead capture form with UTM tracking, built and tested
- Form design best practices, with our own form data
- Client intake form template with file upload
- What is social proof? Meaning and examples
- What is user-generated content (UGC)?
- Benefits of negative reviews for your store
- How to get your first reviews as a new store
- How to use customer reviews in your marketing
- How to get more customer reviews
- React form validation without a library, tested
- jQuery submit form with validation
- reCAPTCHA v3 setup with the server score check
- Shopify social proof that shoppers can check
- HTML file input: accept, multiple, capture and size checks
- How to add hCaptcha to a form, with the server check
- How to add invisible reCAPTCHA to a form
- Bug report form template with browser details
- What the FTC fake reviews rule bans for online stores
- How to show reviews on your homepage
- Do reviews increase sales? What the studies show
- HTML input types and what each one sends
- HTML textarea, tested in a real form
- HTML dropdown menu in a form, tested
- Do reviews help SEO? What Google says and shows
- How to add a review carousel people can read
- Product review examples that help shoppers decide
- Which trust badges actually mean something
- Customer satisfaction survey with CSAT and NPS
- JavaScript FormData and what fetch actually sends
- JavaScript form validation without a library
- Server-side form validation and what it catches
- Email validation in JavaScript, tested on 33 addresses
- Zod form validation with FormData, tested
- Store reviews vs product reviews
- How to send review requests through Klaviyo
- How to tag customer reviews by topic and mood
- Custom review form questions worth asking
- Online reputation management for small businesses
- HTML radio button groups and what they send
- HTML label tag and what screen readers hear
- HTML autocomplete attribute, tested with Chrome autofill
- HTML fieldset and legend, and what disabled leaves out
- HTML button tag and what a form button sends
- Vite contact form that still works after the build
- How to test a contact form, end to end
- How to embed a Google Form, and what it loads
- Customer feedback questions that get real answers
- How to convert a file to base64 in JavaScript
- FilePond with a form backend, and when to skip it
- Bootstrap form validation and server errors
- Tailwind form validation, tested in three browsers
- Donation form in HTML, and where the payment goes
- How to ask for a review in person or by text
- Which review sites matter for your business
- What are customer reviews, and which kinds count
- Online review statistics, checked at the source
- Best review app for Shopify and WooCommerce
- Why Gmail sends your self-hosted mail to spam
- htmx contact form that sends to another domain
- AI form builders tested, from prompt to sent form
- Headless WordPress forms with Contact Form 7, tested
- React Hook Form watch vs useWatch, and what gets sent
- Elfsight widget not working? It vanishes when views run out
- Jotform not sending emails? Check Jotform's bounce list
- Typeform not working? A white box means a blocked script
- Positive review response examples that don't sound copied
- How to remove a Google review when you can't delete it
- Google reviews not showing up? 8 causes to check in order
- Which reviews can you hide? A review moderation checklist
- Average star rating: what 4.8 from 5 reviews means
- Reviews on a product page: where and how many to show
- SaaS testimonials: 3 of 27 had a number in them
- Do reviews reduce returns? Not when they're too good
- Testimonial examples for business: what makes one believable
- Testimonial questions to ask clients, by type of business
- Testimonial page design: a page or a section?
- Testimonial advertising rules: what the FTC requires
- Form submission canceled because the form is not connected
- Input type date format dd/mm/yyyy: what you can change
- How to disable textarea resize, or allow only vertical
- How to prevent Enter from submitting a form
- form.submit() vs requestSubmit(): what submit() skips
- Custom HTML checkbox CSS that doesn't break required
- How to reset a form after submit, and what reset() keeps
- Input type number maxlength not working? What to use
- How to create an HTML form, step by step
- Best form builder: free plans and branding, checked
- Best WordPress contact form plugin: 10 free ones compared
- How to increase form conversion rate: start with the count
- Form backend vs form builder: which one do you need?
- WordPress contact form not sending email? 3 plugins tested
- Contact Form 7 webhook? Turning it on switched our email off
- Gravity Forms webhook: what it sends and the URLs it rejects