Key takeaways
- The FTC's Consumer Reviews and Testimonials Rule took effect October 21, 2024, and bans fake reviews, buying reviews conditioned on sentiment, undisclosed insider reviews, review suppression, and fake social media metrics.
- Asking every customer for a review, and offering the same small incentive to everyone regardless of what they say, is still allowed under the rule.
- Timing the ask right after a good experience — not weeks later — gets more responses than a generic monthly blast.
- Automation should route unhappy customers to your support inbox before it routes happy ones to a public review site.
- This is general information, not legal advice — have a qualified attorney review your review-request process before you roll it out broadly.
Asking for reviews by hand doesn't scale — someone has to remember which customers finished a job this week, decide who to ask, and send a personal message to each one. It's exactly the kind of task worth automating: the trigger (a completed job or purchase) already exists in your system, and the message barely changes from customer to customer. The part that needs real care isn't the automation — it's staying on the right side of the FTC's rule on reviews, which took effect in 2024 and gives the agency real penalty authority for violations.
Why review requests are worth automating
Reviews compound. A steady stream of them, sent right after a good experience, tends to outperform an occasional manual push where someone remembers to ask a handful of favorite customers. Automating the request means every customer gets asked, not just the ones a busy staff member happened to remember — which also means your review profile reflects your actual customer base instead of a self-selected sample.
It also removes the awkwardness. Asking a customer for a review in person can feel transactional, especially for a small team that doesn't do sales for a living. A well-timed automated message does the same job without anyone having to make the ask out loud.
What the FTC's review rule actually bans
The FTC's Trade Regulation Rule on the Use of Consumer Reviews and Testimonials became effective October 21, 2024, and it authorizes courts to impose civil penalties for knowing violations — a meaningful change from the agency's earlier case-by-case approach. It bans six categories of conduct:
| Banned practice | What it means in practice |
|---|---|
| Fake or AI-generated reviews | Writing, buying, or selling reviews that don't reflect a real customer's actual experience — including using AI to fabricate one. |
| Compensated sentiment | Paying or offering an incentive that's conditioned on the review being positive, whether that condition is stated outright or just implied. |
| Undisclosed insider reviews | An officer, manager, or employee posting a review of their own company without disclosing the connection. |
| Fake review websites | Presenting a company-controlled site as an independent review source. |
| Review suppression | Using false legal threats, intimidation, or false accusations to get negative reviews taken down. |
| Fake social media metrics | Buying or selling fake followers or views when both sides know the numbers are fabricated and used to misrepresent influence. |
The rule applies to businesses of all sizes, not just large retailers, and it explicitly reaches "advertising agencies, public relations firms, review brokers, or reputation management companies" — so a review-management vendor doing any of the above on your behalf doesn't put you in the clear.
An automated system that only sends review requests to customers who gave a high satisfaction score, then routes everyone else to a private feedback form, isn't the same as suppressing negative reviews — but a system that discourages an unhappy customer from posting publicly while still counting them as "asked" starts to look like the rule's intent is being worked around. Keep the logic simple: ask everyone, and let people say what they'll say.
What's still fine to do
The rule is narrower than it might sound. It targets deception, not the act of asking for reviews. Under the rule, small businesses can still:
- Ask every customer for a review, without cherry-picking who gets asked.
- Offer a small incentive — a discount code, a raffle entry — for leaving a review, as long as the incentive isn't tied to what the review says.
- Respond publicly to negative reviews.
- Use software to automate the timing and sending of the request itself.
The line is simple: automate the logistics of asking, never the content or sentiment of what comes back.
Why the rule matters more now than before
Before this rule, the FTC generally had to pursue fake-review cases one at a time, under its broader authority against unfair or deceptive practices — a slower process that made large-scale enforcement rare. The 2024 rule changes that by giving the agency explicit authority to seek civil penalties for knowing violations, which means a business (or a review-management vendor working on its behalf) faces real financial exposure, not just the risk of a cease-and-desist letter.
That shift matters most for anyone using automation or AI in their review process, because the rule specifically calls out AI-generated fake reviews as a banned practice. If your automated review system is only automating the ask — sending a real request to a real customer and letting them write what they actually think — none of this changes anything for you. The exposure shows up when automation drifts into generating, filtering, or shaping the content of reviews rather than the timing of the request.
When to ask
Timing matters more than most businesses expect. Asking for a review right after the experience — while it's still fresh and, ideally, while the customer is still feeling good about it — gets meaningfully more responses than a request sent weeks later as part of a batch.
| Business type | Best moment to ask |
|---|---|
| Service business (repair, cleaning, contractor) | Within a few hours of the job being completed and paid for. |
| Retail or e-commerce | A few days after delivery, once the customer has had time to use the product. |
| Appointment-based (salon, dental, medical) | Same day, after the visit — a short link sent by text works well here. |
| Recurring service (subscription, maintenance plan) | After a meaningful milestone — a renewal or a completed year — not every single visit. |
Copy-ready review request templates
Keep the ask short, make it about the customer's experience, and put the link front and center.
Notice the last template's second sentence — it opens a private door for an unhappy customer before pushing them toward a public review, which is both good customer service and the safer pattern under the rule. It's worth writing these templates in your own voice rather than using them word-for-word forever; a message that sounds obviously copy-pasted tends to get ignored, while one that sounds like it came from an actual person at the business gets a noticeably better response.
Route unhappy customers somewhere useful
A well-built automated flow gives every customer the same request, but gives an unhappy one an obvious way to reach a person first — not instead of the review, but before it, so a fixable problem doesn't have to become a public complaint to get attention. This isn't suppression: the customer can still leave whatever review they want. It's simply offering a faster path to a resolution, which most unhappy customers actually prefer.
This is the kind of recurring, rules-based task — trigger, message, branch on response — that's easy to automate correctly once and then forget about, and it's exactly the pattern behind our workflow automation work. If a similar repetitive task is eating time on your team, that's the whole idea behind our automation projects — got a job that's a total jerk? We'll automate the whole thing.
Common mistakes
- Only asking happy customers. Filtering who gets the request based on a prior satisfaction score is the pattern the FTC's rule is aimed at — ask everyone.
- Tying an incentive to sentiment. "Leave us 5 stars and get 10% off" is exactly the compensated-sentiment practice the rule bans, even if it's phrased as a friendly suggestion.
- Letting an employee post an undisclosed review. If someone on staff genuinely wants to leave a review, they need to disclose the connection.
- Treating negative-review pushback as suppression's fine line. Asking a customer to fix things privately is fine; threatening or pressuring them to remove a posted review is not.
- Skipping legal review. This guide explains the rule in plain language — it isn't a substitute for a lawyer reviewing your specific review-request process.
- Assuming a review-management vendor handles compliance for you. The rule reaches vendors acting on a business's behalf, so it's worth asking any review or reputation-management tool directly how its process stays within the rule.
◆ Small Business AI Kickstart
Get AI ready today.
Before it's too late.
yforest AI Labs comes to your company, trains your team, and ships your first tools.
FAQ
When did the FTC's rule on fake reviews take effect?
The Consumer Reviews and Testimonials Rule took effect October 21, 2024, and it authorizes courts to impose civil penalties for knowing violations.
Can we offer a discount for leaving a review?
Yes — offering an incentive for leaving a review is allowed as long as it isn't conditioned on the review being positive, stated or implied. The incentive has to apply regardless of what the customer says.
Is it against the rule to only ask happy customers for reviews?
The rule doesn't name this specific practice, but automatically filtering who gets asked based on a prior satisfaction score runs against the spirit of the rule, which is aimed at making review profiles reflect real, representative experiences. Asking every customer is the safer, and simpler, approach.
Can an employee leave a review of the business they work for?
Only with clear disclosure of their connection to the business. The rule specifically bans officers, managers, and employees posting reviews without revealing that insider status.
Does this rule apply to a small, local business?
Yes. The rule applies to businesses of all sizes, and it also reaches agencies, review brokers, and reputation-management vendors acting on a business's behalf — using a vendor doesn't shift the responsibility away from the business.
Sources
This guide is general information, not legal advice. Have a qualified attorney review any policy before you adopt it.