What the FTC Consumer Review Rule means for your business

What the rule actually is

The formal name is the Rule on the Use of Consumer Reviews and Testimonials, codified at 16 CFR Part 465. The Federal Trade Commission announced the final rule in August 2024 and it became enforceable on October 21, 2024. It applies to businesses of every size, in every industry, and it also reaches the people who sell reviews and social media engagement as a service.

The important change is procedural rather than moral. Fake reviews were already deceptive under Section 5 of the FTC Act, but Section 5 alone generally does not support civil penalties for a first-time defendant. A trade regulation rule issued under Section 18 does. That is the whole point of Part 465: it moves this conduct into penalty territory, and it lets the Commission seek money without first proving a company had been warned.

There is no private right of action. Your customers cannot sue you under Part 465 directly. What they can do, and what plaintiffs’ firms increasingly do, is plead the same conduct under state unfair-and-deceptive-practices statutes, most of which do allow private suits and statutory damages. State attorneys general enforce in parallel.

The prohibitions, section by section

Part 465 opens with definitions at §465.1 that are worth skimming once, because terms like “clear and conspicuous”, “manager”, and “immediate relative” are defined more broadly than you would guess. “Clear and conspicuous” in particular means the disclosure has to be unavoidable in the same medium as the claim, which rules out a footnote under a video testimonial. The operative bans then run as follows.

1. 1§465.2

   Fake or false reviews and testimonials

   You may not write, sell, buy, procure, or publish a review or testimonial from someone who does not exist, from someone who never had the experience they describe, or that materially misrepresents an experience they did have. The same applies to celebrity testimonials. The prohibition reaches you when you knew or should have known the review was fake, so wilful blindness toward a marketing agency or a review vendor is not a defence.

   The classic trap is a marketing contractor seeding reviews you never asked for. Under the knew-or-should-have-known standard, the reviews are still on your listing and still your exposure.

2. 2§465.3

   Buying positive or negative reviews

   You may not provide money or any other incentive conditioned, expressly or by implication, on a review expressing a particular sentiment. That covers negative reviews about a competitor as squarely as positive reviews about yourself. Note what is not banned: offering an incentive for a review of any kind is not itself a violation of this section, as long as the incentive does not depend on what the review says.

   The words "by implication" do the heavy lifting. A sign reading "leave us a 5-star review for 10% off" is conditioned expressly. A staff script saying "if you had a great time, scan this for your free dessert" is conditioned by implication.

3. 3§465.4

   Undisclosed insider reviews

   Reviews and testimonials written by your officers, managers, employees, or their immediate relatives must clearly and conspicuously disclose that relationship. A business may not publish such a testimonial without the disclosure when it knew or should have known the connection. Officers and managers may not solicit reviews from their own immediate relatives, and may not ask employees to review the business without instructing them to disclose the relationship and without telling them a positive review is not required.

   Small businesses fall into this innocently. The owner asks the team to "help get us started" on a new listing, nobody discloses, and every one of those reviews is a separate potential violation.

4. 4§465.5

   Company-controlled review sites posing as independent

   You may not misrepresent that a website or entity you control provides independent reviews or opinions about a category of products or services that includes your own. Owning a review site is not banned. Presenting one you control as a neutral third party is.

   Applies to comparison microsites, "best of" roundups, and reviewer personas run by the same company that sells the thing being ranked.

5. 5§465.6

   Review suppression

   Two separate bans live here. First, you may not use unfounded or groundless legal threats, physical threats, intimidation, or a false public accusation to force a reviewer to take a review down or to keep them from posting. Second, if you display reviews on your own site, you may not misrepresent that they are all or substantially all of the reviews submitted when you have suppressed reviews on the basis of rating or negative sentiment.

   The second half is the one that catches ordinary businesses. A testimonials page fed only by your happy customers is fine. A widget captioned "all customer reviews" that quietly filters out anything under four stars is not.

6. 6§465.7

   Fake indicators of social media influence

   You may not sell or distribute, and you may not buy or procure for your own commercial advantage, fake followers, fake views, or bot engagement, when you knew or should have known they were generated by bots or fake accounts. This is the section that reaches influencer marketing and social proof metrics rather than reviews.

   Relevant if you buy follower packages for a location page and then cite that audience size in advertising.

What the penalty exposure really is

Because Part 465 is a Section 18 rule, a knowing violation exposes you to a civil penalty per violation. Do not memorise a dollar figure for this, because there is no stable one to memorise. The statutory maximum is adjusted for inflation every January and published in the Federal Register, so any number quoted in an article is only as current as the year it was written, including any number quoted here. Look up the FTC’s current civil penalty adjustment before you rely on a figure. What is stable is the order of magnitude: it is tens of thousands of dollars per violation, and it moves upward each year.

Two qualifications matter more than the headline number. First, that is a ceiling, not a fine schedule. A court sets the actual amount using factors like the degree of harm, the violator’s ability to pay, whether the conduct was repeated, and whether the business acted in good faith. Second, the FTC has to establish knowledge, which for Part 465 means actual knowledge or knowledge fairly implied on the basis of objective circumstances. That is a real bar, and it is also why the audit trail in the checklist below matters so much.

The reason the number frightens people is the multiplier. The Commission has taken the position in review cases that each deceptive review, and in some framings each consumer exposed to one, can count separately. Fifty fabricated reviews is not one violation with a five-figure ceiling. Treat it as fifty.

Penalties are also not the only remedy. The FTC can seek injunctive relief, consumer redress, and compliance monitoring, and it did exactly that in review cases brought under Section 5 before Part 465 existed. Two are worth knowing because they show what the Commission cares about: a 2019 action over reviews written by a company’s own employees and posted as customers, and a 2022 settlement over a retailer that published only its four and five star reviews while holding back the rest. Both are the conduct now written directly into §465.4 and §465.6.

Separately, in October 2021 the FTC sent a Notice of Penalty Offenses concerning endorsements and testimonials to several hundred large companies. Receiving that notice independently exposes a recipient to civil penalties for the practices it describes. If your company received one, your exposure predates Part 465 entirely.

Review gating: what it may and may not do

Gating means surveying a customer first and routing them differently based on the answer, so satisfied customers get a public review link and dissatisfied customers get a private form. It is the single most misunderstood practice in this category, partly because half the industry sells it and the other half calls it illegal.

Here is the precise position, and it has two halves that people routinely collapse into one. Google’s review policies prohibit gating. That is a platform policy fact, not a matter of interpretation, and for most local businesses it is the half that actually bites. Separately, the FTC’s 2024 rule does not name gating as a per se violation: the Commission declined to codify an express prohibition when it finalised Part 465. That is not affirmative permission. Review suppression can still be reached under §465.6 and under Section 5 depending on the facts, and the Commission has never blessed the practice. Anyone telling you the FTC allows gating is reading a decision not to write a specific ban as though it were a licence.

The defensible practice is the one that does not depend on how that ambiguity gets resolved: ask every customer, and offer a private feedback channel in addition to the public ask, never instead of it. Below are the three paths where a gate stops being triage and becomes a violation on its own facts.

What survives all three: asking every customer, in the same way, with the same offer if any; putting the public review link in front of every branch rather than only the happy one; and using the survey answer to decide who additionally hears from a manager, not who gets to speak. A flow built that way is doing triage rather than suppression. Note that this is also the only shape that satisfies Google, which prohibits selective solicitation outright regardless of where federal law lands.

Platform rules are stricter than federal law

This is the part most compliance write-ups skip. Part 465 sets the legal floor. The platforms your reviews actually live on set their own rules on top of it, and those rules are enforced far more often, far faster, and with no due process at all. A practice can be perfectly legal and still get your listing suspended. Handle each platform on its own terms. The summaries below reflect each platform’s published policies as read in July 2026. Platforms rewrite these pages without announcement and without version numbers, so treat every summary here as a pointer to the policy rather than a substitute for reading it.

The practical consequence: if you operate on Google, Yelp, and TripAdvisor at once, the strictest rule governs your process, because you cannot run three different request flows off one point-of-sale system without eventually sending the wrong one to the wrong customer. Design for the tightest platform and you are compliant everywhere.

The audit you can run this week

None of this requires a lawyer to start. Work through these in order. Steps one and two remove the most common exposure in under an hour.

1. 1

   Pull every review-bearing surface you control.

   Your website testimonials page, homepage star widget, printed collateral, ad creative, and any embedded review carousel. List the source of each quote. Anything you cannot trace to a real, identifiable customer submission comes down today.

2. 2

   Check the caption on every review widget.

   If a widget on your own site is filtered by rating and the label implies completeness ("all reviews", "what our customers say", "customer reviews"), either remove the filter or change the label so it is accurate. This is the most common §465.6(b) exposure for a small business and it takes ten minutes to fix.

3. 3

   Read your own review-request message out loud.

   Does it ask for a review, or does it ask for a good review? Phrases like "if you were happy", "5 stars means the world", and "only takes a second if you loved it" turn a neutral request into a sentiment-conditioned one the moment any incentive is attached.

4. 4

   Separate incentives from sentiment, completely.

   If you give anything of value for a review, the same offer must reach every reviewer regardless of what they write, and the offer must say so. Also confirm the platform allows incentives at all, because several do not.

5. 5

   Inventory insider reviews.

   Search your listings for reviews from staff, family, and former employees. Where they exist and carry no disclosure, ask the author to add one or to remove the review. Then write the instruction into your onboarding: staff may review the business, and if they do they must say they work here.

6. 6

   Audit anyone who touches your listings on your behalf.

   Ask your marketing agency, SEO vendor, or reputation tool in writing where the reviews come from, whether any are solicited from non-customers, and whether any incentive is offered. Keep the answer. The knew-or-should-have-known standard makes their practice your problem.

7. 7

   Stop sending legal threats over reviews you dislike.

   A defamation letter over a genuine opinion is exactly the conduct §465.6(a) names. If a review is factually false or from a non-customer, use the platform dispute process and document the evidence rather than threatening the author.

8. 8

   Keep the paper trail.

   Retain the request templates you sent, the timestamps, the recipient list, and any incentive terms, for as long as your record-retention policy runs. If the FTC or a state attorney general ever asks how you collect reviews, the answer should be a file, not a memory.

A second illustration: the insider review problem

The insider provision at §465.4 catches more honest businesses than the fake review provision does, because nobody thinks of it as fake. Consider an illustrative example. A new clinic, Fernbrook Family Dentistry, opens with an empty Google listing. The practice manager, Tobias Ferngrove, asks eight staff members and his sister-in-law to leave a review so the listing does not look abandoned. Every review is sincere. Every one of them is a potential violation, because none discloses the relationship, because a manager solicited a review from an immediate relative, and because the staff were never told a positive review was not required.

The fix is not complicated. Staff may review the business if they disclose that they work there, in the review itself, and if nobody told them what to say. An owner asking a spouse or sibling for a review is off the table entirely. Fernbrook Family Dentistry and Tobias Ferngrove are invented for this example.

If you run a practice, the same care applies to how you respond. Confirming that a reviewer was a patient can be its own problem under health privacy rules, which is why the dental reputation playbook handles responses differently from the home services one. Regulated verticals stack obligations rather than replacing them: law firms add confidentiality duties, property management adds fair-housing exposure to every public reply, and restaurants have the volume problem without the privacy one.

What this means if you use software

Reputation tools sit exactly where the risk is. They decide who gets asked, when, with what wording, what happens to unhappy responses, and what appears on your website afterwards. Before you buy any of them, ask four questions and get the answers in writing: does the negative branch tell the customer they may still post publicly, is any incentive logic sentiment-aware, does the website widget filter by rating, and can you export a full log of every request the tool sent on your behalf.

Ask us the same four and judge the answers yourself. Factually, in Praisly today: when the feedback flow is switched on, the request email states in so many words that the recipient can post publicly either way, and it states it in the invitation itself rather than only after the survey has sorted them; there is no incentive feature in the product, so there is nothing to condition on sentiment; Praisly does not ship a website review widget at all, so the filtered carousel problem is one you own on your own site rather than one we create; and every survey, dispute submission, voice consent, and AI generation is logged with timestamps and provenance. Our FTC compliance page sets out feature by feature what the timing engine, the feedback flow, the response generator, and the voice callbacks each do and do not do, including the parts where we deliberately made the product less aggressive than it could be. Whether any given setup is compliant depends on how you configure it and on facts we cannot see, so that page describes behaviour rather than certifying an outcome. We hold our own marketing to the same standard, which is why this site has no testimonials on it.

If you want to check your current position before changing anything, the free reputation scan shows your rating, review velocity, and response rate without a signup. The review response generator drafts replies in your own voice, and the Google review link generator produces the one-tap link and QR code you should be handing to every customer rather than only the ones you expect to be pleased. Plans and terms are published on pricing, month to month, no notice period.

Where to read the primary sources

Do not take a vendor’s word for a regulation, including ours. The rule text is short enough to read in one sitting, and everything above is checkable against it.

• 16 CFR Part 465 on eCFR

  The operative text, always the current version. Read §465.1 for the definitions and then the six prohibitions in order.

• FTC business guidance

  The Commission’s own guidance for businesses, including its published material on the Rule on the Use of Consumer Reviews and Testimonials, which walks through examples the Commission itself endorses.

• Federal Register, Federal Trade Commission

  Where the final rule and its Statement of Basis and Purpose were published, and where the annual civil penalty inflation adjustments appear. Search within it for “Rule on the Use of Consumer Reviews and Testimonials” for the final rule, and for “Adjustments to Civil Penalty Amounts” for the current per-violation maximum.

The Statement of Basis and Purpose is the best single source on the borderline cases, because it is where the Commission set out its reasoning on the practices it chose not to name expressly, gating among them. Read the reasoning rather than anyone’s summary of it, this page included.

This guide is general information, not legal advice, and it does not create any professional relationship. Rules change and penalty ceilings move every January. For a decision that carries real money, ask a lawyer who can look at your actual request flow.