NYC Google One-Star Review Scheme Exposed: How to Protect Your Business from Review Extortion

In early 2026, federal investigators exposed a sophisticated extortion ring operating primarily in New York City that had been targeting local businesses with a simple but devastating scheme: post coordinated one-star Google reviews, then demand payment for their removal.

The operation affected hundreds of restaurants, medical practices, law firms, and retail businesses. Several paid — ranging from $200 to $5,000 per incident — before law enforcement intervention. Some businesses paid multiple times to the same extortionists. Your Google reviews play a major role in how potential customers perceive your business.

This isn’t an isolated incident. Variants of this scheme are active in cities across the country. Every local business with a Google Business Profile is a potential target. Here’s what happened, how to recognize the pattern, and exactly what to do if it happens to you.

How the NYC Extortion Scheme Worked

The scheme followed a consistent pattern:

1. Reconnaissance — Operatives identified businesses with high ratings (4.5+ stars) and significant review volume, knowing a rating drop would be most painful for these businesses
2. Attack — 5–15 coordinated one-star reviews were posted over 2–3 days from accounts created specifically for the purpose
3. Contact — The business owner received a message (sometimes via email, sometimes via an anonymous contact form) offering to remove the reviews for a fee
4. Escalation — Businesses that didn’t pay or reported the reviews received additional waves of fake reviews
5. Collection — Businesses that paid found the reviews removed within days, reinforcing the payment cycle

The federal charges included extortion, wire fraud, and conspiracy. The lesson: paying doesn’t just waste money — it confirms that your business is a viable target for repeat attacks. Your Google reviews play a major role in how potential customers perceive your business.

Recognizing a Review Extortion Attempt

Red flags that a negative review wave may be extortion rather than organic feedback:

• Multiple one-star reviews in 24–72 hours with no corresponding service complaints or customer records
• Reviewer accounts with zero prior review history — created recently with no other Google activity
• Generic, non-specific review content — “Terrible service, would never recommend” without any details
• Contact from an unknown party offering to “help” with your reviews for a fee
• Reviews referencing services you don’t offer or situations that don’t match any customer records
• Multiple reviewers who checked in at your location on the same day with no corresponding transaction records

What to Do When You’re Targeted

Step 1: Do Not Pay

This cannot be emphasized enough. Payment signals that your business will pay, invites repeat attacks, and funds the criminal enterprise. Payment also rarely ends the problem permanently — businesses in the NYC case that paid were often targeted again.

Step 2: Document Everything

Screenshot every fake review with the reviewer’s profile visible. Screenshot any extortion communications with timestamps. Document the dates and content of every suspicious review. This evidence is essential for Google’s appeals process and for law enforcement.

Step 3: Flag Every Fake Review on Google

1. Open your Google Business Profile
2. Click on the fake review
3. Click the three-dot menu (⋮) next to the review
4. Select “Flag as inappropriate”
5. Choose the most applicable reason: “Off-topic,” “Conflict of interest,” or “Not a real experience”
6. Submit

Google’s review removal process is slow (can take 2–4 weeks), but for coordinated fake campaigns Google Business Profile support can expedite the process. Contact support directly and explain the situation. Your Google reviews play a major role in how potential customers perceive your business.

Step 4: Report to Law Enforcement

• FBI Internet Crime Complaint Center — ic3.gov — for online extortion
• FTC — reportfraud.ftc.gov — for fraudulent business practices
• Local police — file a local report for documentation purposes even if jurisdiction is complex

Individual reports feel futile, but law enforcement builds cases from patterns. Your report, combined with others, is what enables prosecutions like the NYC case.

Step 5: Respond to Fake Reviews Publicly

Don’t leave fake reviews sitting silently. Respond professionally:

“We have no record of this customer in our system. We take all feedback seriously and invite anyone with genuine concerns to contact us directly at [email]. We are actively reporting this review through Google’s policy violation process.”

This response signals to future customers that you’re aware and responsive, without inflaming the situation.

Step 6: Launch a Review Generation Counteroffensive

The fastest way to recover from a fake review attack is to generate a wave of legitimate reviews. Contact your most recent happy customers immediately and send your direct Google review link. Even 10 new legitimate reviews can restore your rating and push the fake reviews further down the list. Your Google reviews play a major role in how potential customers perceive your business.

Prevention: Making Your Business a Hard Target

Extortionists target businesses where a rating drop would cause maximum pain. The best prevention is building so much review density that a 10-review fake attack is statistically insignificant:

• A business with 50 reviews drops from 4.8 to 4.4 after 10 one-star fake reviews (significant damage)
• A business with 500 reviews drops from 4.8 to 4.77 after 10 one-star fake reviews (barely visible)

Review volume is your best insurance policy. See our guide to building your review base and learn about removing fake reviews when they do appear.