The FTC fake review rule, two years in: what actually got enforced
Jul 30, 2026 · 9 min read · Updated Oct 21, 2026
The FTC’s Consumer Reviews and Testimonials Rule, the “fake review rule,” took effect October 21, 2024. Two years later the scoreboard reads: three complaints that plead it, one ten-letter warning mailing, one final order with real money attached ($750,000), and a per-violation penalty that is still $53,088 because a government shutdown ate the inflation adjustment. Year one was the FTC clearing its throat. Year two is when it said who it was talking to.
And the answer, if you run a small business, is uncomfortable: the three companies actually sued were a business-opportunity scam, a supplement seller and a fake-listings mill. The ten that got letters were property managers, personal injury law firms and an accountant. The lawsuits went to fraudsters. The letters went to businesses that look like yours.
What the rule bans, in one paragraph
Buying or selling fake reviews, including ones written by software for a customer who does not exist. Reviews from insiders (owners, employees, their relatives) without clear disclosure of the relationship. Company-run review sites dressed up as independent. Suppressing negative reviews through threats or intimidation. Incentives that are conditioned on a positive review. And buying fake social-media engagement to inflate influence. None of this was exactly legal before; the rule’s contribution is that each instance now carries that five-figure civil penalty, per violation, without the FTC needing to prove a prior order was violated first.
Year one, briefly
For fourteen months, nothing. Then on December 22, 2025, the FTC sent its first warning-letter sweep to ten companies it declined to name, and in January 2026 it announced a settlement with Growth Cave, the first case to allege a violation of the rule: a $48,597,538 judgment, largely suspended for inability to pay, and a permanent ban from selling business opportunities.
The useful detail in Growth Cave was never the headline number. It was that, among the income lies, the complaint alleged the company re-used the same customer testimonials across different products and ran testimonials from insiders without disclosure. Recycling a good quote onto a new service page is a marketing habit thousands of ordinary businesses have, and the first rule case in history turned partly on it.
Year two’s enforcement record
The ten letters got names, quietly. The FTC did not identify the December recipients when it announced the sweep. Months later, after an industry analyst filed a FOIA request, the letters themselves appeared on ftc.gov, and according to the posted copies the ten were six property management companies, three personal injury law firms and one accounting firm. The conduct flagged was not a fake-review farm. It was paying employees for five-star reviews from their friends and family, offering incentives only for positive reviews, and “gating”: asking the happy customers for a public review and routing everyone else to a private form. If you have read any reputation-software sales page in the last five years, you have been offered that exact feature.
TruHeight, April and July 2026. The FTC’s headline complaint against the supplement seller was about unsupported claims that its vitamins made kids taller. Riding along were rule counts: the FTC alleged that until at least November 2024 the company’s own website carried several thousand five-star reviews written by employees and presented as customers, that other reviews came from buyers given a free product or a discount for five stars, and that more than 150 social-media profiles praising the product were bots. The final order on July 15, 2026 set a $4 million judgment, suspended down to a $750,000 payment for inability to pay, and bans fake or incentivized reviews outright. That $750,000 is, as far as we can find, the only money anyone has actually paid in a case carrying a rule count.
Premium Home Service, May 2026. On May 11 the Justice Department, suing for the FTC, and the Illinois attorney general filed against B.E.S.T. GDR, LLC, doing business as Premium Home Service, and its owner, in federal court in Chicago. The allegation: more than 15,000 fake business profiles on Google Search and Maps, each posing as a local home-repair company and each decorated with fabricated five-star reviews that diluted the one-star reviews from real customers, with more than 100,000 consumers deceived since 2018 by the complaint’s count. The counts under the rule are for creating fake reviews, buying them, and procuring them from insiders. Minnesota’s attorney general filed a parallel state case the same day.
Premium Home Service is also the rule’s first real legal test. In July the defendants moved to dismiss, arguing in part that the example reviews quoted in the complaint date from early 2024, before the rule took effect. We could not find a ruling as of mid-October 2026. Whatever the court decides about those specific reviews, the argument is about timing, not about whether fake reviews are legal, and anything posted since October 21, 2024 is squarely covered.
And one more, this month. An October 2026 FTC complaint against the operator of a “sextortion relief” service alleges, among much worse things, that employees in India wrote its glowing reviews and that it bought positive reviews from Uber drivers who had never used it. Whether the FTC pleaded the rule there or just the FTC Act, we could not confirm from the release. The pattern holds either way: fake reviews keep turning up as a count inside bigger deception cases, not as cases of their own.
The penalty did not move, and not for a good reason. The $53,088 figure is supposed to rise with inflation every January. In 2026 it did not: the FTC’s September 15, 2026 Federal Register notice says the 2025 amounts stay in force because OMB cancelled the year’s adjustment (memo M-26-11, April 17, 2026) after the Bureau of Labor Statistics, shut down last autumn, never produced the October 2025 price index the formula needs. Expect the number to catch up in early 2027. Nobody should plan around a penalty ceiling that stopped rising because the statisticians were sent home.
What did not happen. No court struck the rule down or narrowed it. No amendment was proposed. The FTC issued no new AI-specific guidance, because it did not need to: the rule already treats a review attributed to a person who does not exist as fake, however it was generated, and the agency’s questions-and-answers page on the rule is still the working guide. If you were waiting for the law to settle before fixing anything, it settled in 2024.
What a normal business actually changes
Six items. Most businesses need two or three of them.
- Testimonials stay attached to what they praised. A review of your teeth-whitening service doesn’t promote your new aligner program. Audit your site: every testimonial tied to the product it described, with nothing invented and nothing borrowed. This is the Growth Cave lesson and it has not aged.
- Insider reviews get disclosed or deleted. Employee and family reviews without disclosure are violations, and the business that solicited or knowingly kept them carries the exposure. TruHeight’s several thousand employee-written reviews are the extreme case; the warning letters’ “ask your friends and family for five stars” bonus is the ordinary one. The full mess of employee reviews has its own guide.
- Ask everyone, in the same words, with the same link. Gating is what the letters were about. If your process asks “how did we do?” and only shows the Google link to the people who said “great,” you are the one holding the liability, not the software vendor who built the feature. The compliant version is in our guide to asking for reviews without violating policy.
- Never buy reviews, obviously, but also never buy “review removal.” Services promising to delete negatives often operate through fraudulent takedown claims, and the suppression provisions cut close to that territory.
- Don’t threaten reviewers to make negatives disappear. Legal-sounding letters demanding removal of honest opinions are a named federal no-no, not just a bad look. A clause in your own service agreement that bans customer reviews is a different law’s problem: the Consumer Review Fairness Act voided those in 2016.
- Incentives can’t be conditioned on positivity. “Leave us a 5-star review for 10% off” was already a platform violation; it is now the exact conduct in the TruHeight order. The details live in our piece on whether discounts for reviews are legal.
A worked example of how cheap compliance usually is (a composite, details changed): Juniper Lane, a three-chair salon-spa in Asheville, ran its audit in February 2026 after the Growth Cave coverage. Findings: a “client love” page with 20 testimonials, 14 of which had been copied from its old massage-only location onto pages for services that location never offered, plus two reviews from a stylist’s sister. The fix took an afternoon: 14 testimonials removed, 6 re-homed to the right service pages, two awkward texts sent. Total cost: zero dollars and one slightly thinner testimonial page that now can’t hurt them.
The year-two version is a property manager. Cedar Row, 212 doors across Chattanooga, read about the letters in the spring and found its leasing agents earned $25 for every five-star Google review a new resident left in their first month. Four stars or fewer earned the agent nothing: a sentiment-conditioned incentive with an employee in the middle. The fix: the bonus went away, every resident gets the same review email at day 30 however move-in went, and the maintenance survey stopped doubling as a filter. Review volume dropped by about a third. The average held at 4.3.
The part nobody tells you
The rule covers fake reviews you receive, not just ones you commission. If a review is from an insider or is plainly fabricated and you know it, featuring it in your marketing (screenshots in ads, quotes on the homepage) moves the liability to you. The safe posture is boring: treat your review profile as evidence you didn’t curate. Respond to everything, promote the aggregate (“4.7 across 300 reviews”), and let individual quotes carry dates and service names.
Then do the arithmetic the headlines skip. TruHeight’s “several thousand” fake reviews, at $53,088 each, is a theoretical exposure north of a hundred million dollars. The company paid $750,000, because the FTC settles for what a defendant can pay. So the penalty figure is leverage, not a forecast. The real cost of a rule case is the order: years of compliance reporting and a permanent public record that your reviews were fake, which is the one thing a review profile cannot survive.
And notice what the rule still conspicuously doesn’t regulate: your responses. The reply box under every review remains the one lever that’s unlimited, free, and entirely yours. The negative review playbook covers how to use it, and if you’re staring at a review you suspect is fake, there’s a template set for responding to suspected fakes without accusing anyone of anything you can’t prove.
Two years in, the rule has its name on three complaints and one ten-letter mailing. None of the three defendants was an ordinary small business. All ten of the letters went to one.