How To Get More Google Reviews Without Breaking The Rules
David Roberts
Founder & CEO - ReVerb
10.11.2026
Almost every business wants more Google reviews, and almost every business is one bad decision away from losing the ones it has. The gap between a program that compounds for years and one that gets a profile flagged is not effort or budget. It is whether it stays inside Google’s published policies, which are blunter than most owners realize.
This guide has two halves. First the compliant playbook. Then the hard line: what Google bans, including one practice many review tools still quietly perform for customers, what happens when Google catches a business, and the federal rule behind it. Everything stated here about Google policy comes from Google’s own documentation.
Google reviews do three jobs at once. They are a ranking input for local results, alongside relevance, distance and prominence, though Google has never published the weighting. They are a conversion input, because the rating and count sit beside your name in the local pack and in Maps before anyone clicks. And they feed AI answers, since review text is most of what an assistant summarizes about a local business.
Google’s own framing is unglamorous. Its documentation notes that replying to reviews shows you value feedback, and that positive reviews and helpful replies can help a business stand out. That is the entire sanctioned strategy: earn genuine reviews, reply to them, repeat.
Find and shorten your Google review link
Most review programs fail at the first inch. The customer is willing, then is asked to open Google, search the business name, pick the right listing from three near duplicates, tap Reviews, tap Write a review and sign in. Every step sheds people. A direct link drops them straight into the review dialog on your listing.
Google generates that link for you. Per Google’s instructions, go to your Business Profile, select Read reviews, then Get more reviews, and copy the link. Google’s documentation also notes that the review QR code can only be generated in a computer browser, not on a mobile device, which catches out anyone setting this up from a phone. Agencies running many locations can build review URLs programmatically from the identifier returned by the Place ID Finder that Google Maps Platform publishes.
Shortening it safely
The copied link is too ugly to read aloud or print, so shorten it, with one condition. A safe short link is a pure redirect: someone taps yourbusiness.com/review and lands immediately in Google’s review dialog, with nothing in between. On your own domain you control it forever and can repoint it if your listing changes.
An unsafe short link intercepts. If it lands on a page asking how the experience was, then sends happy customers to Google while routing unhappy ones into a private form, you have built review gating, a direct policy violation covered below. The test: if your link does anything other than deliver everyone who taps it to the same Google review dialog, rebuild it.
QR codes and where they actually work
Review QR codes are oversold. They work well in a narrow set of situations and are near useless elsewhere. The deciding factor is whether the customer has a free hand, a reason to look at the surface the code is on, and a moment of goodwill at once. Google suggests displaying the code in store, on receipts, in thank you emails and at the end of a chat. Reasonable, but not equally effective.
Where QR codes convert
On the receipt or invoice. The customer is already looking at it, already holding their phone to pay, and the transaction just completed.
On a counter card at the point of departure. The till or reception desk on the way out, not the entrance, where nobody has an experience yet.
On a leave behind after service work. The customer is pleased the problem is solved and the card is right there.
Where they fail: window decals and entrance signage, since people walking in have nothing to review, and inside emails, since a phone cannot scan a code on its own screen.
The timing that actually gets responses
Timing is the highest leverage variable in a review program and the one businesses think least about. The request should land where satisfaction is highest and memory is most specific, which is usually sooner than people assume.
Business type
Best moment to ask
Why
Restaurant, cafe, retail
At payment, or within hours by receipt
Short visits fade from memory fast
Home services and trades
The moment the job is verified working
Relief the problem is fixed is peak goodwill
Professional services
Right after the outcome or case closes
The value is concrete and attributable
Two rules cut across all of it. Never ask before the outcome is known, because you are asking for a prediction rather than a review. And never ask a customer whose issue is still open.
One distinction people blur: choosing a sensible moment to ask everyone is timing, while choosing which individuals to ask based on how you expect them to rate you is selection, and Google prohibits it.
Asking in person and the script that works
An in person ask beats every digital channel, because it carries social weight and lands at the exact moment of satisfaction. Most businesses avoid it because the usual phrasing is bad. Three things fix that: be specific, give a reason, make the next step trivial.
“I’m really glad that worked out. Most people find us through Google, so reviews genuinely make a difference to us. If you had a minute, would you mind leaving one? I’ll text you the link right now so you don’t have to go looking for it.”
That names what went well, gives a reason, and removes friction on the spot. What to avoid:
Do not ask for five stars. Google prohibits requesting that specific content be included in a review, and asking for a rating is exactly that.
Do not prequalify. Opening with “you’d rate us five stars, right?” and asking only those who say yes is gating in conversational form.
Do not offer anything. No discount, free item, prize draw entry or loyalty points. The most common violation, and unambiguous.
Do not stand over them. Google says merchants should not require or pressure users to leave ratings or write reviews while on the premises.
Do not script the content. Suggesting what to mention, or asking them to name the staff member who served them, is prohibited.
Email and SMS follow up, and the right cadence
SMS is the strongest channel for most local businesses, because it is read within minutes and the link is one tap away on the device the person will write the review on. Send from a recognizable number, name the business up front, keep it to two sentences and one link. Make sure you have consent to text the customer and honor opt outs, since messaging consent is a separate legal question with its own penalties. A template: “Hi Sarah, it’s Tom at Northside Plumbing. Thanks again for having us out today. If you’ve got a minute, a quick Google review really helps us: [link]”
Email converts less well but carries more context, which suits longer sales cycles. One clear request, one link, no competing calls to action, never buried in a newsletter. Naming the service, date or person who handled it beats a generic “thanks for your recent visit.”
Cadence should be short and finite. One request at the right moment, then one reminder a few days later. Then stop, because a third message converts almost nobody and irritates people who already chose not to respond. Suppress anyone who has reviewed you, anyone with an open complaint, and anyone who asked not to be contacted, and for repeat customers ask once per relationship rather than once per transaction.
Training staff to ask without creating a violation
Staff asking is where review programs scale, and also where they quietly go wrong, because the incentive structure a manager designs can itself be the violation. Google’s policy is direct: merchants should not require that staff solicit a certain number of reviews, and should not ask staff to request reviews containing specific content, including content that identifies a staff member. That rules out the two most common designs, the review quota and the bonus for reviews that name you.
Train the moment, not the target. Teach staff to recognize the point where asking is natural, and to ask everyone who reaches it.
Give them the words and the tool, since most staff do not ask because they do not know how to phrase it or have nothing to hand over.
Measure asks, not reviews. Counting requests sent is legitimate. Counting reviews attributed to each employee pushes people toward exactly what Google prohibits.
Be explicit about the bans, so everyone knows offering anything of value, screening for happy customers or requesting a star rating are firing line issues.
Review request automation done properly
Automation turns a review program into a system. It is also the layer where a violation gets introduced by a vendor’s default settings without anyone deciding to break a rule. The architecture is simple: a completed job, sale or appointment in your POS, CRM or booking system fires an event, that triggers a request after a set delay, one reminder follows, suppression rules filter out who should not get it, and every request goes to the same place.
When you evaluate tools, and there is a large market of them covered in our guide to review management software, a few questions separate compliant platforms from the rest:
Does the request link go straight to Google for everyone? Any screening step or smiley face selector that routes people differently is gating. Ask to see the customer facing flow, not the sales deck.
What does the private feedback mode do? Collecting private feedback from everyone alongside the review request is fine. Collecting it instead of the review request from people who indicate dissatisfaction is not.
Can you disable incentive features? Some platforms ship with loyalty integrations that award points for reviews, which is a Google violation and a potential FTC problem.
Does it templatize review content? Prefilled or suggested review text does not represent a genuine independent experience.
Two cautions. Do not blast an entire historical customer list on day one, because a profile with nine reviews that suddenly gets two hundred in a week produces exactly the pattern Google’s systems look for. And do not run requests through a kiosk or shared device, for reasons in the next section.
Responding to every review, and why it lifts volume
Responding is the most underrated volume lever, because it works indirectly. Every response is a permanent public signal to the next reader that leaving a review here produces a human reply, which raises the perceived value of writing one. Google is explicit that replying shows customers you value their feedback.
Reply to all of them, not just the bad ones. A profile where only one star reviews have responses looks defensive.
Vary the wording and reference something specific, since twenty identical thank yous read as automated.
On negative reviews, be short, factual and unemotional. Acknowledge, offer a real contact route, do not argue in public. You are writing for the people who read the exchange later, not for the reviewer.
Never disclose private details. In regulated fields, publicly confirming that someone was a patient or client is a serious problem entirely separate from Google.
AI drafted responses are standard now and useful for volume, but they need a human pass. A reply that is fluent, warm and has clearly not understood the complaint reads worse than no reply at all.
Using your Google Business Profile properly
A neglected profile suppresses reviews before anyone gets near a request.
Verify the profile and keep ownership secure, since an unclaimed profile is one you cannot manage or defend.
Get name, address, phone and hours exactly right. Wrong hours generate genuine one star reviews from people who turned up to a closed door.
Choose the most accurate primary category and list the services you actually offer.
Resolve duplicate listings, which split reviews and send customers to a profile nobody watches.
Check the review link still resolves after any merge, move or category change.
Multi location businesses should give each location its own link and request flow.
What Google’s policies actually forbid
Google’s contributed content and Business Profile policies set out the prohibitions in short, direct language, under the heading of fake engagement.
Incentives and anything of value
Google prohibits reviews or ratings that have been paid for, directly or in kind, and states that merchants must not offer incentives such as payment, discounts, free goods or services in exchange for posting any review, or for revising or removing a negative review.
Read the scope carefully. “In kind” covers things that are not cash: a free dessert, a prize draw entry, loyalty points, a discount on the next visit, a donation made per review. And it applies to any review, not only positive ones, so “leave an honest review and get 10% off” is still a violation. Google expressly allows merchants to solicit or encourage content that represents a genuine experience, without offering incentives. Asking is fine. Paying for it is not.
Review gating
Review gating means filtering customers before the request, so people likely to be positive go to Google while people likely to be negative are diverted into a private form. It usually starts with a preliminary question: how was your experience, thumbs up or down. Google prohibits it explicitly. Merchants may not discourage or prohibit negative reviews, or selectively solicit positive reviews from customers. Gating is the selective solicitation of positive reviews with extra steps.
This deserves emphasis because gating remains widespread and is usually sold as a feature rather than presented as a violation, under names like reputation funnel, smart routing, feedback first and review filtering. An owner switching on something a vendor recommended may have no idea a line was crossed. It is crossed anyway, and the business owns the profile, not the vendor.
The compliant version is a parallel path rather than a fork. Send every customer the same Google review request, and separately send every customer a private feedback survey if you want internal data. Nobody is routed on predicted sentiment, and you still get your operational feedback.
Buying reviews
Buying reviews from a service, marketplace or freelancer is the clearest violation on the list, covered by the ban on paid content and the ban on content not based on a real experience. Sellers promise aged accounts, drip delivery and local IP addresses, but that changes only how long detection takes. Our guide on how to spot fake reviews covers the tells, and the same tells are visible to Google’s systems at vastly greater scale.
Soliciting from people who were not customers
Asking friends, your professional network or other business owners who have never used your business produces content not based on a real experience, which Google prohibits outright. A customer from many years ago is a gray area worth avoiding. Someone who never bought anything is not gray at all.
Employee and family reviews
Google treats reviews affected by a conflict of interest as problematic, naming current or former employment, contractual or consultancy relationships, and other professional or personal affiliations as examples. Staff reviews, owners reviewing their own business, family members and suppliers all fall here, and names and social footprints make them easy to spot. The FTC rule below treats insider reviews differently, requiring disclosure rather than banning them, but these are separate obligations and you have to satisfy both.
Review swaps
An agreement with another business to review each other is a paid arrangement in kind, since each review is compensation for the other, and it usually fails the genuine experience test too because neither party is a customer. Local business groups sometimes organize these openly and call it mutual support, but the label does not change what it is.
Kiosks, shared devices and bulk collection on site
A tablet by the exit inviting customers to review before they leave creates two problems. The first is policy: Google states that merchants should not require or pressure users to leave ratings or write reviews while on the premises, and a staff member standing beside a review tablet is pressure by construction.
The second is detection. A run of reviews from the same network and often the same device produces the clustered pattern automated systems treat as suspicious, and Google removes content showing unusual volumes or patterns of contributions indicative of efforts to manipulate a place’s rating. A well meaning kiosk can generate that signature. Send the link to the customer’s own phone.
What happens when Google catches it
Enforcement used to mean quiet review removal. It no longer does. Google’s documentation on Business Profile restrictions for policy violations states that where a business violates the fake engagement policy it might place restrictions on the profile, and names three: the profile may be unable to receive new reviews or ratings for a set period, existing reviews or ratings may be unpublished for a set period, and the profile may display a warning to let consumers know that fake reviews were removed. Google says it notifies owners by email beforehand, and provides an appeal route.
Sit with the third one, because it changes the risk calculation. A consumer facing warning does not merely remove the reviews you paid for. It tells every prospective customer who looks you up that Google caught you, on the profile that appears when they search your name.
The rest follows. Violating reviews are removed, so the money spent on them is gone, and legitimate reviews sometimes disappear in the sweep, because automated removal works on patterns rather than intent. Repeat violations attract harsher restrictions. Detection is not luck either: sudden volume changes against a baseline, reviewer accounts with no other history, clusters of accounts reviewing the same businesses, geographic mismatch and shared text patterns are structural signals, and a business buying reviews generates them all at once.
The FTC rule on fake reviews and testimonials
Platform policy is no longer the only exposure. In the United States, the Federal Trade Commission’s Rule on the Use of Consumer Reviews and Testimonials, at 16 CFR Part 465, took effect on 21 October 2024, and a violation can support civil penalties.
Fake or false reviews and testimonials. Creating, writing, buying, selling or disseminating reviews that misrepresent the reviewer’s existence or experience.
Buying positive or negative reviews. The rule prohibits compensation or other incentives in exchange for, or conditioned expressly or by implication on, reviews expressing a particular sentiment, positive or negative. The trigger is conditioning on sentiment. Google’s policy is stricter, banning incentives for any review, so a business collecting on Google has the tighter standard to meet.
Insider reviews and testimonials. Reviews by officers, managers, employees and their immediate relatives require clear and conspicuous disclosure of the relationship. FTC guidance treats generalized solicitations sent to all purchasers as an exception, another argument for asking everyone the same way.
Company controlled review websites. Misrepresenting that a site providing reviews about your products is independent when you control it.
Review suppression. Unfounded legal threats, physical threats, intimidation or false accusations used to force removal of a review, and misrepresenting that the reviews on your own site are all or most reviews when negative ones were suppressed. Replying publicly and contacting customers to resolve complaints are not suppression.
Fake indicators of social media influence. Buying or selling fake followers, views or engagement, where the buyer might misrepresent their influence.
The translation is short. The incentive a consultant called a harmless nudge is now potentially a federal rule violation as well as a Google one, purchased reviews that used to risk deletion now risk a regulator, and testimonials on your own website fall under the same rule as reviews on Google. This is general information rather than legal advice, and any business with a complicated history should take it to a lawyer.
What to do about the reviews you already have
Two cleanup jobs sit here. The first is reviews you or a previous agency obtained improperly, since incentivized, purchased or insider reviews keep the exposure live under both Google’s policy and the FTC rule. You cannot delete what someone else posted, but you can stop the practice, pull incentive offers out of your marketing, ask anyone with a material relationship to disclose it or remove their review, and remove any rewarded or undisclosed insider testimonial from your own site. If a vendor ran a gated flow for you, switch it off and record when.
The second is reviews about you that violate Google’s policies: fake negatives from competitors, reviews from people who were never customers, personal attacks, off topic content, or reviews aimed at the wrong business. Google’s documented process is to report the review from your Business Profile or through the reviews management tool and choose the violation reason, and Google notes that evaluation typically takes several days. If a report comes back with no policy violation found, Google offers a one time appeal through the same tool.
For how to frame a report so it succeeds, and what to do when the appeal fails, our guide to removing a Google review walks through the process and its limits. The same problem appears elsewhere with different rules, and we cover the two most common in our guides to Yelp review removal and Facebook review removal.
One honest caveat. Most genuine negative reviews will not be removed, and should not be, because an accurate if unflattering review violates no policy. The answer is a good response and enough new genuine reviews that one bad experience sits in proportion. That is a reputation problem, not a removal problem, and it is the ground covered across our wider reputation management resources.
Conclusion
The compliant path to more Google reviews is neither complicated nor slow. Put a direct review link in front of customers at the moment they are most satisfied, ask in plain words without asking for a rating, follow up once, train staff to ask everyone rather than chase a number, trigger requests from the systems you already run, and reply to everything. Businesses that do only that out-collect competitors who are improvising, with no exposure at all.
The other half matters just as much. Google prohibits paid and incentivized reviews, discouraging negative reviews or selectively soliciting positive ones, content that does not reflect a genuine experience, pressuring customers on the premises, and staff review quotas. Its published consequences run to blocking new reviews, unpublishing existing ones and displaying a warning to consumers that fake reviews were removed. Since October 2024 the FTC rule has added civil penalty exposure on top.
So the calculation has changed. Shortcuts that once risked a few deleted reviews now risk a public warning on the profile customers see first, with a federal rule behind it. The slow method is now the cheap one.
