Google review policies that actually work — and the traps that cost you reviews
You already know the basics: don't buy reviews, don't ask employees to write them, don't get caught faking anything. What's harder to know is where the line actually sits on a Tuesday afternoon, when a happy customer is standing at your counter and someone on your staff wants to seize the moment.
Google's Prohibited & Restricted Content policy is the reference document for what's allowed on a Business Profile. It's written the way policy documents get written — for the adjudicators who enforce it, not for the person running your front desk. That gap matters more than it should. Most policy violations that hurt small businesses don't come from bad intentions. They come from staff who never read the policy page, because nobody handed it to them, because it reads like a legal filing and not an instruction sheet.
Here's the version that actually shows up at the counter: a well-meaning employee tells a happy customer "we'd love a five-star review," and in that one sentence has just violated Google's policy by requesting a specific rating. Nobody involved thought they were doing anything wrong. The customer left happy either way. But the review that follows — solicited with specific-star language — is now a policy violation sitting on your profile, discoverable the same way any other violation is.
This article is the reference you actually want on hand. It walks through the six policy categories that hit review management most often, what Google's enforcement actually looks like at 2025 scale, how the appeal process works when Google removes something that should have stayed up, and where the FTC's federal rule sits on top of Google's platform rules — because those are two different systems, and conflating them costs people time when they need to move fast.
What Google actually prohibits — the six categories that hit review management
Google's Prohibited & Restricted Content policy (support.google.com/business/answer/7400114) covers a lot of ground. Six categories account for nearly everything that touches review management for a US small business.
Fake engagement. Google's language is direct: "Content that is not based on a real experience or does not accurately represent the location or product in question." The policy also names paid reviews specifically: "Reviews or ratings that have been paid for, directly or in kind." A review from anyone who wasn't a customer is off the table — so is an AI-generated review with no real experience behind it.
Rating manipulation — incentives and gating. The policy prohibits offers to "offer incentives – such as payment, discounts, free goods and/or services - in exchange for posting any review or revision or removal of a negative review," and attempts to "discourage or prohibit negative reviews, or selectively solicit positive reviews from customers." It's specific about the moment of the ask too: "When soliciting reviews, merchants should not require or pressure users to leave ratings or write reviews while on the premises, nor should they request that specific content be included." No discount for a review. No "we'd love a five-star review." No tablet at the counter.
Rating manipulation — the April 2026 additions on staff. Google tightened this further this year, prohibiting "merchants requesting that staff solicit a certain number of reviews" and "merchants requesting that staff solicit reviews that include specific content, including content that identifies a staff member." Staff review quotas are out. "Ask for Sarah at the front desk" is out. The Day 72 article covered the specific finding behind this change — this section is the reference you come back to when you need the policy language itself.
Conflict of interest. Google's policy: "A conflict of interest may include current or former employment, a contractual or consultory relationship, or other professional or personal affiliations that demonstrate a conflict of interest (such as industry competitors, familial relationships, etc.)." You don't review your own business. Neither do your employees or your family — and your competitors don't get to review you either.
Impersonation and misrepresentation. The policy prohibits "content posted or shared seeking to impersonate any person, group, or organization," and separately prohibits "false or misleading accounts of the description or quality of a good or service." A "customer" review written by your marketing agency under someone else's name violates this — so does a review inventing a service you don't offer.
Off-topic content and advertising or solicitation. Google restricts reviews to actual experiences: "Only post content that is based on your experience or questions about experiences at a specific location. We don't allow content which contains general, political, or social commentary or personal rants." Separately, the policy prohibits "posting email addresses, phone numbers, social media links, or links to other websites in your reviews." A political rant using your business as the venue is off-topic. A reply pushing another product or discount code is a violation on your side.
These six categories are what Google's systems are looking for on every profile, every day. The next section covers how that enforcement actually runs.
How Google enforces — the AI stack behind removal
Day 72 covered the salon owner story — a business that lost reviews to enforcement it never saw coming. The scale behind that story is public: Google's own 2025 Trust & Safety Report, published as part of an April 16, 2026 Maps blog post titled "New ways we're protecting businesses on Maps," puts real numbers on what's actually being caught.
In 2025, Google blocked or removed over 292 million policy-violating reviews. In the same year, more than 1 billion helpful reviews were published. Google also blocked 79 million inaccurate or unverified edits to Business Profiles, placed posting restrictions on more than 782,000 policy-violating accounts, and removed over 13 million fake Business Profiles.
Do the math and Google's own numbers imply that roughly one in five review attempts on Maps in 2025 was classified as violating — a scale that only makes sense if the enforcement is automated, not a human team reading complaints one at a time.
It is automated. Google's Gemini AI models run pre-publication moderation on both review content and profile edits. The same blog post describes what happens when Google's systems detect a spam-review spike on a profile: the suspicious reviews get removed, new reviews on the profile get paused, the Business Profile owner gets an alert, and a public notification banner appears telling consumers why contributions are temporarily paused.
The signals behind that detection aren't a published formula, but Google's own policy language and product documentation point at the shape of it: linguistic clustering, velocity spikes, shared device or IP signatures, account activity history, and content similarity across submissions.
The consumer-facing banner is the part that lands hardest. A profile displaying language to the effect of "some reviews were removed because they violated Google's policies" is a trust signal working against you at the exact moment a customer is deciding whether to call.
I built Ominvo for this specific problem. Google's enforcement is faster than your review pipeline, and if a review disappears you should know within the hour, not the week you happen to check your dashboard. Ominvo watches your profile continuously, flags removals with the timestamp and the affected review, and gives you the context to file an appeal that has a chance. Ominvo is $79 lifetime for the first 100 customers — no upsells, no per-location fee. That's the mention. Back to the article.
When the enforcement gets it wrong — when a review that should have stayed live gets caught in the filter — the appeal path in the next section is what you use to get it back.
When Google removes a legitimate review — the appeal path
The Google Business Profile appeals tool is the official channel for pushing back on an enforcement decision, and it handles three different situations: content decisions, profile restrictions, and full suspension appeals.
For content decisions — a review removed that should have stayed, or a review Google refused to remove that clearly violates policy — the Reviews Management Tool is where you start. After you submit an appeal, you're prompted to add optional evidence through a linked form. Google is specific about the window here: the evidence has to be submitted within 60 minutes of opening the evidence form, or it won't attach to the appeal.
Per Google's own documentation, appeal reviews and decisions can take up to 5 business days. Outside the EEA, you get one appeal per decision — submitting multiple appeals for the same issue before you've received a decision doesn't speed anything up, and isn't allowed. EEA and UK businesses have additional options, including out-of-court dispute settlement bodies, that businesses elsewhere don't.
That's the documented process. The practitioner reality on the ground runs longer. Local search practitioners have reported real-world reinstatement backlogs of four to six weeks or more — well past the 5-day window Google describes. The appeal tool's status messages are also static: if you get a profile reinstated through some other channel — a direct escalation, a contact at Google — the tool itself may still show "Approved" or "Not approved" without updating to reflect what actually happened.
What moves an appeal isn't volume, it's quality: a government-issued business license, a current utility bill matching your business name and address, storefront photos showing permanent signage, and a one-page narrative explaining what the violation was and what you fixed. Four specific things beat a folder of everything you could find.
One thing appeals cannot do: bring back a review that Google removed because it actually violated policy. The appeals path exists for legitimate content caught by aggressive AI filtering, and for suspended profiles that need to prove the business behind them is real. For readers who want to understand where federal regulation sits above Google's own platform rules, the FTC breakdown covers that layer directly.
The FTC layer — where federal regulation lives above Google
Everything above is Google policy — platform rules enforced by Google, on Google's own systems, with Google's own consequences. The FTC runs a separate, federal enforcement regime on top of that, and the same review practice can trigger both at once.
The FTC's Consumer Review Rule (16 CFR Part 465) took effect October 21, 2024. It prohibits six categories of conduct: fake or false consumer reviews and testimonials, buying positive or negative reviews, insider reviews without disclosure, company-controlled review websites, review suppression, and misuse of fake social media influence indicators.
The civil penalty is currently up to $53,088 per violation. That figure was set in a January 17, 2025 Federal Register adjustment, and it stays in effect through January 14, 2027 — the 2026 inflation adjustment was cancelled under OMB Memo M-26-11 (April 17, 2026), after the October 2025 government shutdown prevented the Bureau of Labor Statistics from publishing the October 2025 CPI-U data the adjustment depends on.
The FTC has started enforcing. On December 22, 2025, it issued 10 warning letters to companies for potential violations of the Consumer Review Rule — the first public enforcement sweep under the rule. The FTC's own business blog framed the letters plainly: they "confirm that companies using fake reviews or providing incentives for 5-star reviews misrepresent consumer experiences and opinions — and may be subject to FTC enforcement actions and civil penalties. (Civil penalties that, at up to $53,088 per violation, can quickly add up.)"
Here's what that split means for you. Google's enforcement is about your profile — reviews removed, banners displayed, restrictions placed. The FTC's enforcement is about your business — civil penalties per violation, under federal jurisdiction, regardless of what Google does on its own platform. If you're compliant with Google's policy, you're compliant with the FTC's rule too. Both regimes are looking for the same six patterns, from different sides of the same profile.