How to handle online review bombs: a crisis response plan for pubs, restaurants and hotels

Recognise the attack before you reactLink

A bad review is not automatically fake.

Some guests have a poor experience. That is part of hospitality. Your job is to investigate it, fix the cause and respond professionally.

A review bomb is different. Look for a pattern.

Do not publicly accuse people of fraud because a profile looks suspicious. That creates a second crisis.

First, check your records. Search your reservation system, EPOS, hotel PMS, event bookings and incident log. Confirm whether the reviewer could have visited.

Classify every review into one of three groups. That classification determines the next move.

• A sudden spike in one-star reviews
• Multiple reviews posted within minutes or hours
• New profiles with little or no review history
• Similar wording across several accounts
• Reviews referring to an event that did not happen at your venue
• Reviewers who appear to live nowhere near the area
• A political or social issue being repeated across the reviews
• A direct demand for money or compensation to stop further reviews

1. Genuine complaint — investigate and resolve it. 2. Unverified complaint — respond carefully and invite the reviewer to contact management. 3. Likely fake, coordinated or extortionate review — preserve evidence and report it.

Freeze the evidence immediatelyLink

Capture everything before you respond to anything.

Do not start deleting posts, arguing in comments or asking staff to respond from personal accounts.

Capture everything first.

Create a simple incident timeline. Record when the first review appeared, how many followed, what triggered the attention and which platforms are affected.

Save the evidence in one folder. Use a spreadsheet to track each review, its platform, its status and the action taken.

This matters because individual reports can look like ordinary complaints. A timeline shows the pattern.

• The reviewer's name and profile
• The star rating
• The full review text
• The date and time
• Any photographs or attached media
• The review URL
• Related social posts, messages or emails
• Any demand for money, refunds, discounts or free services

Follow the 72-hour response protocolLink

An order of operations, not a scramble.

Within the first two hours, appoint one owner. Put one person in charge, usually the owner, general manager or a trusted marketing lead.

Do not allow five people to improvise five different explanations. Mixed messages make a venue look guilty, chaotic or both.

Check Google, TripAdvisor, Facebook and any major booking platforms. Establish the baseline rating, review volume and current review velocity. Then brief the team.

• Platform reporting
• Public responses
• Staff instructions
• Media enquiries
• Internal updates
• The evidence file

Within 24 hours, report the violations. Google does not remove a review simply because you dislike it. It removes reviews that breach its policies.

Use Google's official review reporting process. Open your Business Profile, select Read reviews, report each policy-violating review and choose the most accurate reason. Use the evidence, but keep the explanation factual.

• “No matching guest or booking record.”
• “Seven reviews posted within 35 minutes.”
• “Reviews use near-identical wording.”
• “Reviewer has no connection to the reported incident.”
• “Review is linked to a demand for money.”

If a person is threatening reviews in exchange for payment or benefits, treat it as extortion. Do not negotiate. Do not pay. Do not offer a free meal to make the problem disappear.

Keep every message and report the matter through the appropriate UK fraud or police channels where necessary.

Report the matching content on TripAdvisor, Facebook and other platforms as well. One report rarely fixes a coordinated attack. A complete evidence trail gives moderators something usable.

Within 48 hours, respond publicly, without starting a fight. Silence looks like an admission. Anger looks like instability.

Respond to visible reviews with short, controlled replies. Do not reveal guest information. Do not publish booking records. Do not name staff members. Do not write a courtroom transcript in the review box.

Keep the wording consistent. Do not copy and paste the same reply under every review. Adjust the first sentence so the responses do not look automated.

• Use Google's official review reporting process
• Use Google's guidance for negative review extortion scams

Sample replies and the 72-hour holding statementLink

Controlled language for three different situations.

For an unverified review, use language like this:

For a genuine complaint:

• We are sorry that your visit fell below the standard we expect. The issue with [specific problem] has been discussed with the team. Please contact the manager directly so we can understand what happened and put it right.

For a coordinated wave: “We are aware of a number of recent reviews that do not appear to relate to genuine customer visits. We have reported the activity to the relevant platform and are cooperating with its review process. Genuine guest feedback remains welcome and is reviewed by our management team.”

Within 72 hours, publish one holding statement if the story is spreading. If the issue has moved onto social media or local news, put a short statement on your website or main social channel. State what you know, what you are doing, where genuine customers can contact you, and what you will not discuss publicly.

Do not over-explain. Every extra sentence creates another claim for people to dissect.

If the original incident was real, address it honestly. A review bomb does not erase poor service, unsafe conduct or a badly handled complaint. Fix the operational failure while challenging the fake activity. That is the difference between reputation management and reputation theatre.

Protect your rating without manipulating itLink

A single bad night can dominate your profile.

Ratings are simple arithmetic. If a venue has 40 reviews averaging 4.6 stars, ten new one-star reviews can drag the visible average down sharply. That can reduce clicks, calls and bookings while the platform investigates.

Your answer is not a fake review campaign. Never buy reviews. Never ask staff, friends or suppliers to pose as guests. Never offer a reward in exchange for a positive rating. That creates a policy problem and can breach UK consumer protection rules.

Instead, return to normal, legitimate review collection. Do not pressure guests to remove criticism. Do not selectively ask only people you know will leave five stars.

The goal is a reliable stream of authentic feedback. That gives future guests context and makes one suspicious spike less dominant over time.

Your Google Business Profile and local SEO setup must also stay accurate. Check your hours, menu, photographs, booking links, room information and contact details. A crisis is the worst time to send potential guests to an outdated profile.

• Ask real guests for honest feedback after a visit
• Send a post-stay email to genuine hotel guests
• Put a review link in the booking confirmation or receipt
• Train staff to invite feedback without scripting the outcome
• Make the process easy on mobile
• Respond to every review, not only the bad ones

• See our Google Business Profile and local SEO setup

Repair the operation that caused the genuine complaintsLink

A review crisis often exposes two separate problems.

Fake reviews attacking the business, and real customers identifying a weak point. Deal with both.

List the genuine complaints by theme, then assign an owner and deadline to each fix. If the same complaint appears three times, it is not bad luck. It is a process failure.

• Slow service
• Wrong orders
• Poor room cleanliness
• Noise
• Confusing deposits
• Inaccurate menus
• Unclear cancellation terms
• Unanswered booking enquiries

Use your social media management and content process to communicate useful updates, not defensive slogans. Show current food, clean rooms, accurate opening hours and real service improvements. The public does not need a polished statement about values. It needs evidence that the venue is operating properly.

• Use our social media management and content process

Build a permanent defence before the next attackLink

Prepare this before you need it.

Your website is part of the defence. It should clearly show who you are, what you offer, where you are and how to contact management. A slow, confusing website gives a review bomb more power because potential guests cannot find better evidence.

The principle is simple: make the genuine business easier to verify.

• A daily review-monitoring routine
• A named crisis owner
• Platform login access and recovery details
• An incident timeline template
• Approved holding statements
• A list of internal escalation contacts
• A process for checking bookings and EPOS records
• A staff rule banning personal responses
• A monthly review of recurring service complaints

• If your website is leaking enquiries, JetAds
• provides website, landing-page and local SEO support for local businesses. If you want a practical audit of local visibility and lead capture, VU1's free website audit tool
• is worth running. For independent pubs specifically, PubLandlord

Rebuild trust through visible consistencyLink

You do not repair a damaged reputation with one post.

You repair it through several weeks of ordinary, competent delivery.

Track hard outcomes. Monitor profile views, phone calls, website bookings, direct room nights, cancellation rates and average booking value. Do not celebrate impressions while the phone stops ringing.

A review bomb is an attack on trust. Trust is rebuilt when the online evidence matches the real-world experience again.

• Accurate information
• Fast responses
• Consistent service
• Fresh genuine reviews
• Clear booking paths
• Prompt handling of complaints
• No public arguments
• No inflated claims