The Alpana Scam: The New Face of Google Review Fraud Targeting Local Businesses

A new form of Google review fraud — nicknamed the “Alpana scam” by investigators after one of the early documented cases — has emerged as one of the most sophisticated attacks on small business reputations in 2026. Unlike blunt fake review campaigns or straightforward extortion, this scam involves multiple stages of social engineering designed to make business owners unknowingly participate in their own reputation destruction. Your Google reviews play a major role in how potential customers perceive your business.

Understanding how it works is the first step to protecting yourself.

How the Alpana Scam Works

Stage 1: The Approach

The scammer contacts the business owner posing as a “reputation management consultant” or “SEO specialist.” They offer a free audit of the business’s Google presence and point out real issues (low review count, unoptimized GBP, competitors outranking you) to establish credibility.

Stage 2: The Upsell

After the free audit, they offer a review generation service — typically $300–$1,500/month — promising to “get you to 100 reviews quickly.” The business owner agrees, hands over their Google Business Profile access credentials or pays upfront, and waits for reviews to arrive.

Stage 3: The Fake Reviews

The scammer delivers fake reviews — either purchased from review farms or generated via fake accounts they control. These reviews initially look legitimate. The business owner sees their count climb and is satisfied. Your Google reviews play a major role in how potential customers perceive your business.

Stage 4: The Trap

Here’s the new element that makes this scam particularly insidious: the scammer now controls the accounts that left those fake reviews. They contact the business owner again — sometimes months later — threatening to remove all the reviews (or convert them to 1-star reviews) unless ongoing payments continue. The business owner, now dependent on a review count they didn’t earn legitimately, is trapped.

Stage 5: Extraction or Destruction

Businesses that stop paying have their fake positive reviews either removed or replaced with 1-star reviews from the same accounts. Their rating collapses. If they’d built their entire reputation on those fake reviews, the damage can be catastrophic.

Why This Scam Is Particularly Dangerous

Traditional fake review attacks can be fought because you’re the victim — you have no connection to the fake reviews. In the Alpana scam, you agreed to receive them. This complicates the narrative when disputing reviews with Google and creates legal exposure under FTC guidelines for businesses that knowingly accepted fake reviews, even under duress. Your Google reviews play a major role in how potential customers perceive your business.

How to Identify a Suspicious “Reputation Management” Offer

Red flags that an unsolicited reputation service offer is fraudulent:

• Guaranteed review counts — legitimate services cannot guarantee specific volumes of organic reviews
• Unusually fast delivery — “50 reviews in 30 days” from a cold outreach service is almost certainly fake reviews
• Request for GBP login credentials — legitimate consultants use manager access, not owner credentials
• No verifiable business presence — no professional website, no LinkedIn profile, no verifiable business registration
• Payment via cryptocurrency, wire transfer, or gift cards — legitimate business services accept standard payment methods
• Pressure tactics — “Your competitors are getting 50 reviews per month, you need to act now”

Legitimate Reputation Management vs. Scam Services

Legitimate reputation management services do the following:

• Help you build systems for asking real customers for reviews (never providing fake ones)
• Monitor your existing review profile and alert you to new reviews
• Help you respond to reviews professionally
• Provide reporting on review volume and sentiment trends
• Offer Google Business Profile optimization

They do NOT provide reviews directly. Reviews must come from real customers — this is non-negotiable under Google’s terms and the FTC’s guidelines.

If You’ve Already Been Victimized

If you believe you’ve received fake reviews through a scam service:

1. Stop payments immediately — continued payment doesn’t protect you and funds further fraud
2. Change your GBP password and remove any suspicious manager access immediately
3. Flag all reviews you believe are fake — even if they’re positive — as you’re equally at risk from fake positive reviews (Google policy violation) as fake negative ones
4. Contact Google Business Profile support directly to explain the situation; they have processes for businesses that were victimized
5. File reports with FTC, FBI IC3, and your state attorney general
6. Consult an attorney about your liability exposure and potential remedies

Building a Defense Through Authentic Reviews

The best protection against scams that exploit review vulnerability is reducing that vulnerability: build a genuine, high-volume review profile that you earned through great service and consistent asking. A business with 300 authentic reviews doesn’t need to buy fake ones and isn’t desperate enough to fall for scams promising quick review growth.

See our complete guide to getting more Google reviews authentically and our breakdown of legitimate review automation tools that comply with all policies.