Review bombing: what it is, and what the platforms do about it

What each platform does about a wave

Three platforms, three different answers, and only one of them is written down properly.

Google. Its 2026 post on protecting businesses on Maps sets out what happens on a sudden spike in spam reviews. Google says it will quickly remove the fake content, pause new reviews on the profile, alert the Business Profile owner, and show consumers a banner explaining the pause. Its posting restrictions policy covers the same ground more formally. Google says it may limit or suspend user-generated content for a place after a spike in irrelevant or offensive content, and lifts the restriction when the abuse subsides.

What Google does not publish is any number. No threshold for what counts as a spike, no duration for a pause, and no way for a business to ask for one. The same post reports Google's 2025 volumes: more than 292 million policy-violating reviews blocked or removed, against more than a billion published. Those and the other platform figures are on our online review statistics page.

Yelp. The most documented of the three. Its Consumer Alerts page says that an unusual spike in activity on a business page brings an Unusual Activity Alert, with posting temporarily disabled. Yelp says moderators remove the alert and clean up the page when activity returns to normal. It runs a separate Public Attention Alert for waves that follow an accusation against someone connected to the business. Yelp also states plainly that reviews written as social commentary are not useful to people relying on Yelp.

Trustpilot. Nothing. We looked. Its help centre and legal pages carry no page on review bombing, review storms or sudden spikes. Its Action We Take document does not use the words coordinated, spike, surge or influx. What it does publish is per-review: its detection technology checks new reviews before they appear and flags unusual patterns. There is no profile-level pause and no consumer-facing notice that a flood happened.

That absence shapes what you can do. On Google and Yelp, part of the answer is waiting for a mechanism that exists. On Trustpilot, the whole answer is the work below.

Step 1: attack or failure?

Look at your own data for the same 48 hours before you decide anything.

Many waves are partly both. A real incident gets picked up on social media, and people who were never customers pile on.

Health brands should expect the real-failure case more often than they would like. A cold-chain failure, a pharmacy backorder or a billing run that charged cancelled accounts reaches hundreds of customers in a day. See why telehealth brands get more 1-star reviews.

Step 2: if it is a real failure

These reviews are genuine experiences. They stay, and flagging them is misuse.

1. Fix the cause and say so. A short public statement on your site, and an email to affected customers.
2. Reply to each review once, in general terms, with a private channel. Health brands must not confirm that anyone is a patient. See HIPAA-safe replies.
3. Apply your refund policy without conditions. Never tie a refund to a review. Trustpilot treats that as an incentive, and the FTC named it in its NextMed case.
4. Keep inviting every customer in the normal way. TrustScore weighs recent reviews most, so a fixed process shows up in the score over the following weeks.

Step 3: if it is an attack

Document before you act

Capture each review: a screenshot, the link, the date, the reviewer's profile and review count. Note what ties the reviews together, such as the post that started it. Our guide on how to document a fake review has a log format.

Know which rules the reviews break

Source: Trustpilot's flagging reasons. Trustpilot's reviewer rules also say a person cannot review a topic that is trending in the news or on social media. Our guide to how Trustpilot defines and detects fake reviews covers the proof that works.

Flag carefully, not quickly

This is the hard part. Trustpilot lists flagging in bulk over a short period as misuse, because it suggests targeting by sentiment. Its automated systems also scan for flagging abuse. A team that flags eighty reviews on a Monday morning can end up with a warning on top of the attack.

• Flag the clearest breaches first, a few at a time.
• Use the right reason for each review and highlight the exact words.
• For genuine experience cases, send the Request information step first. It is required.
• Do not re-flag reviews Trustpilot has decided to keep.

Tell Trustpilot about the pattern

Trustpilot says anyone can report suspicious behavior through its contact form and that it investigates reports sent through its whistleblower function. A short, factual report with your evidence of coordination is worth sending. Trustpilot does not publish how it handles a specific surge, so we do not describe one.

Expect a Consumer Alert

If the wave follows press coverage, Trustpilot may place a Consumer Alert on your profile to tell readers the business has had significant media attention. An alert does not mean you did anything wrong. It is different from a Consumer Warning, which is for misuse. Our Consumer Warning guide explains both.

Step 4: if the wave is on Google

The work is the same shape, and three things differ.

Report one by one, with the right policy. Google removes reviews that break one of its content policies and keeps the rest. A wave driven by a news story usually falls under off-topic or spam, and reviews from people who were never customers fall under fake engagement. Our guide to spotting and reporting a fake Google review lists the evidence to gather first. Our guide to reporting a Google review covers the grounds and the form, and there is one appeal per decision, covering up to ten reviews.

Do not wait for a pause that may not come. Google says it pauses new reviews on a profile when it sees a spike in spam, and that it tells the owner. It publishes no threshold, so you cannot know whether your wave qualifies. Report the clear breaches while you wait rather than instead of waiting. Our Google review removal work for health brands follows the same one-by-one method.

Watch for the banner. If Google does pause posting, consumers see a notice explaining why. That is Google's statement, not yours, and it is worth more than anything you write in a reply. Do not remove or contradict it.

The rest carries over. Do not bulk-report reviews that break no rule, because a report that fails teaches Google nothing and costs you the appeal. Do not run a counter-review drive. Reply once, in public, in general terms, and for a health brand confirm nothing about who the writer is.

The mistakes that make it worse

• Bulk flagging. Misuse, with penalties up to a Consumer Warning and a hidden TrustScore.
• Counter-review drives. Asking staff, friends or selected happy customers breaks Trustpilot's rules. Fake or incentivized reviews break the FTC's Consumer Review Rule.
• Arguing in replies. It feeds the thread and gets screenshotted.
• Legal threats sent by your own team. Groundless threats to get reviews removed are a violation of the FTC rule. If there is real defamation, speak to a defamation lawyer.
• Deleting your account. Trustpilot does not delete profiles. You would only lose the ability to reply and flag.

Our guide to Trustpilot's flagging misuse rules goes through the penalties in detail.

Where a removal service fits

A wave is when pacing and evidence matter most, and when a stressed team is most likely to flag everything. We sort the wave into reviews that break a rule and reviews that do not, build the evidence, and flag at a pace Trustpilot does not treat as misuse. We do not promise that any review will be removed.

Start with the free audit, or read how the process works on the main Trustpilot review removal page.

If you would rather hand the work over, see our Trustpilot review removal service and what each removal costs.