Yes, generally. For U.S. consumers, looking for signs that a review is inauthentic, comparing public reviews, and sending a good-faith report are ordinarily lawful activities.
Risk starts with the method and the wording. Bypassing access controls, collecting unnecessary personal data, or publicly declaring that a named business paid for fraud can create a very different situation. A pattern is a lead, not a verdict.
This is practical information, not legal advice.
Spotting a review and accusing someone are different acts
People often use "spot" and "expose" as if they mean the same thing. They don't. Private analysis asks whether a review looks unusual; a public accusation tells other people that someone committed misconduct.
That difference changes the risk. The main rules line up like this:
| Situation | What controls it | What it means for you |
|---|---|---|
| A business or broker creates, buys, or sells fake reviews | Federal consumer-protection law, including the FTC's review rule | The conduct may be an enforcement issue for the people involved |
| You publish a claim about a business or reviewer | State defamation and privacy law | A false factual claim can create personal legal exposure |
| You flag a review on Amazon, Google, Yelp, or another site | The platform's terms and moderation policies | The platform decides whether to remove, filter, or leave the review |
| You collect review data with software | Platform terms, privacy rules, and access laws | Public visibility is not blanket permission to bypass controls or harvest profiles |
A platform policy is not a statute. It can still affect your account and whether your post stays visible.
What the FTC rule actually covers
The federal rule targets deceptive conduct in the review market. The FTC's Consumer Reviews and Testimonials Rule took effect on October 21, 2024, and addresses fake or false reviews, including buying or selling them. You can read the FTC's announcement of the final rule and its questions and answers.
That makes a paid review scheme a potential enforcement issue for the business, marketer, or broker involved. It doesn't make every negative review fake, and it doesn't give a consumer permission to name someone without support.
One detail gets lost in online discussions: the FTC says the rule provides no private right of action. You can submit information to the agency, but the rule itself doesn't promise you damages, a takedown, or an investigation.
The FTC's rule is aimed at deceptive review practices. It doesn't turn ordinary review checking into unlawful conduct.
The main personal risk is a public accusation
Thing is, calling a review "fake" can sound like a factual claim, especially when you identify a business or reviewer and say who paid whom. A false statement that harms someone's reputation can expose you to a defamation claim under applicable state law.
Courts look at context and what an ordinary reader would understand. Adding "in my opinion" won't automatically protect a statement that implies unproved facts.
| Wording | Risk level | Why |
|---|---|---|
| "Several reviews posted this week use the same unusual phrase." | Lower | It describes something other readers can check |
| "I couldn't verify that these reviewers used the product." | Lower | It states the limit of your own investigation |
| "This company paid for fake reviews." | Higher | It asserts misconduct as a fact |
| "These reviewers are scammers." | Higher | It labels identifiable people as criminals or wrongdoers |
No wording is guaranteed to eliminate risk. Use observable details, avoid naming individuals, and report the suspected pattern privately before discussing it in public.
Public reviews, scraping, and personal data
Viewing a review page in a normal browser is different from harvesting thousands of profiles. Turns out, "public" doesn't mean free of all rules.
Automated collection may conflict with a site's terms and can raise access, privacy, and data-use questions. The answer can depend on what you collect, how you access it, why you use it, and which jurisdiction applies.
Keep the method boring. Use a platform API or permitted export where available, and don't bypass a login, CAPTCHA, rate limit, or other technical barrier. Avoid storing full names, profile photos, emails, phone numbers, or location details unless you genuinely need them.
Google's policy provides a useful example: contributions should reflect a genuine, unbiased experience, and personal information posted without consent is restricted. Review Google's prohibited and restricted content policy before copying or publishing material from Maps.
To be honest, most consumers don't need a scoring tool to make a safer purchase decision. A few saved examples and a focused platform report are often enough. Software doesn't change the analysis; a browser extension's existence isn't proof that every automated use is allowed.
A careful way to investigate and report
You don't need a courtroom file to flag a review. You do need a clean record of what you actually observed.
-
Decide what you need. If you're choosing whether to buy something, you can simply treat the review as unreliable and move on. You don't need to prove fraud to avoid a product.
-
Save the public record. Keep the review URL, the date you accessed it, and a screenshot showing the surrounding context. Don't crop away information that changes the meaning.
-
Compare several signals. Look at publication timing, repeated phrases, generic details, and the review history visible on the platform. None of these signals proves who wrote a review or whether it was paid for.
-
Test ordinary explanations. A product launch can produce a burst of reviews, and a shared template can explain similar wording. Ask what evidence would change your mind.
-
Write a neutral report. Identify the review, describe the pattern, and name the platform rule you think may apply. Say "these reviews appear coordinated" rather than stating that a specific person committed fraud.
-
Use official channels. Start with the platform's report or flag tool. For suspected deceptive business conduct affecting U.S. consumers, you can use the FTC's Report Fraud portal. Include the exact links and a short explanation. A report does not guarantee a reply or removal.
-
Think twice before posting publicly. If you publish, distinguish what you saw from what you suspect, redact personal details, and don't encourage a pile-on. Disclose any relationship you have with the business or product.
Public exposure is optional. Reporting is usually enough.
Where to report on major platforms
Use the platform's own channel first. It gives moderators context and keeps you from turning a suspicion into a public fight.
| Platform | Practical route | Keep in mind |
|---|---|---|
| Amazon | Use the reporting option shown on the review, if available, or contact customer support | Review rules can vary by marketplace; don't submit duplicate or mass reports |
| Use the report-review flow in Maps or the Business Profile | Google expects genuine, unbiased experiences and restricts prohibited content | |
| Yelp | Use the platform's flag or report mechanism | Describe the policy concern without publicly naming or harassing the reviewer |
| Other marketplaces | Look for an abuse, help, or report-review channel | Menus and standards vary; no platform must accept your conclusion |
Menus change. Open the platform's current help page from your account instead of relying on an old screenshot.
If a suspicious review affects your business
Business owners face a second temptation: answer the accusation with one of their own. Don't. Keep the public reply short, avoid revealing customer records, and invite the reviewer to discuss the matter through a normal support channel.
A neutral reply might say that you'd like to investigate and ask the person to share order details privately. Calling the reviewer a competitor, fraudster, or liar creates another factual claim that may be difficult to defend.
Don't recruit other people to post scripted or compensated counter-reviews. The FTC rule addresses deceptive review practices, and coordinated retaliation can also violate a platform's rules.
Keep this evidence, and not more than you need
Good records help a moderator understand the pattern. They also create a privacy responsibility, so redact anything irrelevant before sharing.
- [ ] Review URL and the date and time you accessed it
- [ ] Screenshot showing the review in context
- [ ] Exact phrases, timing patterns, or account details that prompted concern
- [ ] Relevant platform rule or report category
- [ ] Messages, invoices, or incentive offers, if lawfully obtained
- [ ] Report confirmation and any response
- [ ] Your own relationship to the business or product
Don't obtain evidence by impersonating someone, entering an account without permission, or tricking a reviewer into sharing private information. If your records contain personal data, share the minimum necessary.
This answer is U.S.-focused
The FTC rule governs U.S. federal enforcement. The EU Digital Services Act, GDPR, state law, and marketplace policies can change the answer if you live elsewhere or collect information about people abroad.
Don't assume a right to publish a name or scrape profiles simply because the review is visible. Cross-border investigations and threatened legal claims deserve advice in the relevant jurisdiction.
FAQs
Can I say a review is fake online?
Usually, you can discuss your concerns. The safer approach is to describe observable facts and explain why the review seems suspicious. Labels do not eliminate defamation risk.
Does the FTC rule let me sue over a fake review?
No. The FTC says its review rule provides no private right of action. Other legal theories may exist depending on the facts and state law, but those are separate questions.
Is a review-analysis tool automatically legal?
No. The software itself isn't the answer. Check how it accesses data, what the platform permits, what personal information it collects, and whether it bypasses technical controls.
Will Amazon, Google, or Yelp remove a review after I report it?
There is no guarantee. Each platform makes its own moderation decision under its policies. A focused report citing exact facts is more useful than repeated flags or a demand to remove every negative review.
Do I need proof before reporting a suspicious review?
You don't need to prove a case before making a good-faith platform report. You should have stronger evidence before making a public allegation, naming a person, or describing suspected misconduct as certain.
For one suspicious review, save the URL and access date, write down three observable signals, and send a narrow report through the platform's own tool. Then stop there unless new evidence supports a regulator complaint or professional legal advice.