Google blocked or removed 292 million policy-breaking reviews in 2025, according to its 2025 Trust & Safety Report. The fake one on your profile slipped past that filter anyway. And the reply you’re tempted to write could cost you more than the review does.
My team at Direction runs healthcare SEO for medical practices, and fake-review cleanup is a part of the process when it comes to working on local rankings. I’ll walk through removal the way it runs on a real case. Then the HIPAA rules that box in every public reply, and five templates you can post without calling your attorney first.
Why Fake Reviews Are a Bigger Problem for Medical Practices
Someone you’ve never treated describes a botched crown appointment that never happened, under a name not in your. A restaurant owner could answer easily. You can’t.
Under HIPAA, confirming or denying that a person was your patient counts as a disclosure. So does any detail about care, billing, or scheduling, even in your own defense.
Regulators treat this as settled law. In 2022, the Office for Civil Rights collected $23,000 from a California dental office in the New Vision Dental settlement. The practice answered online reviews with patient names, treatment specifics, and insurance information.
It also accepted two years of federal monitoring. Over replies.
We typically see fake review attacks on profiles come from former employees, billing disputes that turned personal, competitors in crowded markets, and paid campaigns.
What Google Will Remove, and What Stays Up
Google takes down reviews that violate its Maps user content policy. Nothing else comes down, no matter how unfair the review feels. Flagging it fifteen times won’t do anything.
So what kind of reviews does Google easily take down? Reviews from suspicious looking profiles is the big one. Conflict of interest catches a competitor or ex-employee with a grudge. Also, off-topic reviews that have crazy rants, harassment, and/or doxxing.
A one-star review from a real patient who waited 40 minutes? Real. Don’t flag it just because it’s a one-star review. Could hurt you down the road for a report you may need later against a review that does break policy. Don’t be the boy who cried wolf.
Also, Google bans review gating (filtering patients so only your happy ones get the review link), and it bans buying reviews. The FTC’s fake-review rule, in force since October 21, 2024, has fines up to $51,744 per violation.
Google Started Defending Profiles on Its Own in April 2026
On April 16, 2026, Google announced a set of profile protections worth knowing before you file anything. When its systems catch a sudden spike of spam reviews, Google now removes the fake content and pauses new reviews on that profile. A public banner tells searchers why contributions stopped, and the owner receives an alert.
Google is also targeting review-extortion scams. In these scams, someone posts several one-star reviews and demands payment to remove them. Google now screens for this activity before reviews are published. Do not pay the scammer; report the demand instead.
An attack can temporarily stop your review requests from reaching customers. Verified owners also get email alerts when their profiles change, so claim any unmanaged listings.
How to Confirm a Review Is Fake Before You Flag It
Check that a complaint is fake before flagging it. Check your schedule, call log, and patient records. No match anywhere Strong signal. The reviewer’s profile tells you the rest, starting with account age and review history.
An account created last month with only one review is suspicious. So does one that reviewed a dentist in Austin and a roofer in Tampa in the same week. Screenshot it all with the date visible.
Real complaints often include specific details, such as the provider’s name, the procedure, or the bill. Fake ones are vague (“terrible experience,” “horrible staff”) because the writer has nothing real to describe.
There’s a fourth pattern that’s common in dental and aesthetic markets: review clusters.
Four one-star reviews inside a week, sharing phrasing and lacking specifics, point to a paid campaign. That record changes how Google support reads your case, and it now matters double, since clusters are what trip Google’s automatic pause.
Whatever your check finds stays internal, and your team logs it. Date, who checked, which systems came back empty.
The moment a chart detail shows up in a public reply, you’ve traded a fake review for a federal complaint. The log shows the check happened without one.
How a Removal Case Moves Through Google
1. Screenshot first, while the review is still up
Take timestamped screenshots of the review and the reviewer’s profile. Record the account age, review history, and locations. Then identify the exact policy violation before reporting it.
Google’s screeners never see your patient records, and they shouldn’t, so you build the case from public evidence only.
2. Flag the review under the right category
Report the review from the three-dot menu or Google’s Review Management Tool. Use the tool to track the report and complete any follow-up steps. You must claim and verify your profile before you can access it.
Category choice is extremely important. I’ve run flags side by side, and a conflict-of-interest report backed by profile evidence beats a generic spam report every time I’ve tested it. Spam feels like the obvious pick, but I’d steer clear of it unless it’s a perfect fit.
3. Expect the first no, then check your status
Google automatically reviews reports first, and many are rejected. If yours is rejected, you can appeal. Check the status of your report and appeal in the Review Management Tool.
4. Write the appeal the way an attorney would
A rejected report gets one appeal. Up to 10 reviews at a time, and no second chance after that.
A clean appeal names the exact policy line and attaches the profile evidence. It states the described visit matches no record, worded so nothing about any real patient leaks through.
Clean appeals come back fast. I’ve had removals land in under 24 hours and watched sloppy cases sit for two weeks and lose. A typical case closes in about 11 days start to finish.
5. Escalate when the appeal fails
Frame a support case at Google Business Profile support around patient privacy, and a person reads it. Specialists handle healthcare disputes differently, and your evidence file from step 1 is the whole case.
Three or four staff members reporting the same policy-breaking review also raises your first-pass odds. I’ve watched that play out across client profiles.
Does the review state facts that are provably false and costing you patients? Google accepts defamation-based removal requests through its legal removal form, and courts have unmasked anonymous reviewers in cases built this way. Your healthcare attorney leads that path.
The legal route moves in weeks, though, so your public response matters while you wait.
The HIPAA-Safe Way to Respond While Removal Is Pending
Saying nothing reads as guilt to the next patient scrolling your profile, so the review needs a public answer, and the answer needs discipline. Acknowledge the feedback and invite offline contact. Nothing about care, billing, or patient status.
Your instinct to write “we have no record of this patient” is the expensive one. That sentence confirms or denies patient status, the exact disclosure the OCR settlements punished. Every template below survives that test.
One more rule before the templates. You post once, whatever the reviewer writes back.
A fake reviewer who answers your reply is fishing for the angry second response that hands them a screenshot. A real one who wants a fix calls the number you gave.
Template 1. General suspicious review
“Thank you for the feedback. We take each review seriously, and we’re committed to safe, attentive care for the people we treat. Privacy rules keep us from discussing specifics publicly, and we’d welcome a direct conversation at [phone].”
Template 2. The review describes a visit that never happened
“We appreciate feedback and look into every concern that reaches us. We aren’t able to respond to specifics here. Please contact us directly at [phone or email] and we’ll give this our full attention.”
Template 3. Coordinated or competitor review
“We’re committed to the patient experience at [Practice Name]. We haven’t been able to verify this review as a genuine patient experience, and we’ve submitted it through Google’s policy process. We welcome any legitimate concern at [phone].”
Template 4. The review makes a false clinical claim
“Patient safety guides everything we do. We can’t discuss clinical claims in a public forum, out of respect for the privacy of anyone who receives care here. If this reflects a real experience, please call [phone].”
Template 5. Likely former employee or known bad actor
“We take how patients experience our practice seriously. We’ve reviewed this submission carefully and reported it to Google through the policy process. For any genuine concern, our office is at [phone].”
Post from your practice account with your front-desk number, and keep provider cell numbers off the page. Stay inside the template wording, since improvising is where violations start.
After a removal lands, check the AI-generated summary at the top of your profile. Nobody knows Google’s refresh schedule, and the deleted review’s wording can hang around for who knows how long, unfortunately.
The Fake Google Review Removal Rules by Specialty
Dental Practices
Star ratings drive routine-care decisions, so dental profiles absorb the most attacks, usually rooted in billing disputes or crowded urban markets. Multi-location groups should run monitoring from one seat, because an attack on one location is sometimes the first visible piece of a wider campaign.
- Proactively request genuine reviews from satisfied patients after appointments. Real volume of authentic reviews is the best defense against isolated fake ones.
- Monitor your GBP weekly; don’t let fake reviews age without a response. The faster you report a review, the higher likelihood it will be removed.
- For multi-location dental groups, centralize review monitoring. Fake attacks on one location are sometimes a signal of a broader campaign.
Plastic Surgery and Aesthetic Medicine
Your patients research for months before a high-dollar procedure, which makes these profiles valuable targets. Outcome disputes need extra care, since answering any result claim publicly is HIPAA exposure.
A consent form with a review-and-media clause, signed before you document cases, gives you room you won’t have otherwise. Spreading your review volume across review directories such as RealSelf, Healthgrades, and Google blunts a single-platform attack.
- Before/after result disputes require special care, as responding to any clinical outcome claim publicly is a HIPAA exposure.
- Have a patient consent form that includes a social media and review clause for documented outcomes. This gives you more flexibility if a review dispute involves a patient you can identify.
- Invest in review generation across multiple platforms, essentially diluting the impact of a single platform attack
Mental Health Clinics and Therapy Practices
The privacy bar sits highest here. Your reply can’t hint at treatment status even obliquely, so one trained staff member should own every response you post. Telehealth groups running profiles in multiple states should expect attacks to cross state lines with them.
- The HIPAA response constraint is especially important here. Never hint at a patient’s mental health history or treatment status.
- Group practices should designate a single staff member for review response to ensure consistency and compliance.
- Telehealth providers operating across state lines may face fake reviews targeting multiple geographic profiles simultaneously.
Primary Care and Specialty Medicine
Fake reviews here usually describe front-office experiences (billing, wait times, phone conduct), which makes them easier to disprove against your appointment records. Track reviews by provider name if you run a multi-physician group, since attacks sometimes target one doctor for personal reasons. Hospital-affiliated practices can pull compliance into formal removal requests
- Multi-physician practices should track reviews by provider name, as fake reviews are sometimes targeted at a specific physician for personal reasons.
- Hospital-affiliated practices may have additional resources through their compliance or legal department for formal review removal requests.
What One Fake Review Star Does to 15 Reviews Vs 200
One fake one-star review barely dents a 4.8-star profile with 200 recent reviews. On a profile with 15, the drop is obvious. And recency matters more than volume: hundreds of outdated reviews offer less protection than a steady stream of fresh ones.
Building a steady flow of reviews starts with your patient experience. Send a quick follow-up text within 24 hours of a positive visit, have your front desk ask happy patients at checkout, and include a review link in your patient portal and email signature.
No incentives, anywhere. Paid or rewarded reviews sit inside the FTC rule covered above. Google’s spam systems watch a sudden five-star burst the same way they watch a one-star cluster.
Review signals also feed the local pack rankings, the map results that decide which three practices a nearby patient sees first. Reputation sits inside the healthcare SEO program Direction runs. My team analyzed 102,392 leads for the 2026 healthcare lead-sources study, and profile strength kept showing up in which channels booked patients.
Answers to Common Questions About Fake Google Review Removal
Can a medical practice respond to a Google review without violating HIPAA?
Yes, but only with strict guidelines. Your reply can’t confirm or deny that the reviewer was a patient, and it can’t reference diagnoses, procedures, visits, or billing. Acknowledge, invite offline contact, and stop, since the five templates above already hold that line for you.
How long does it take Google to remove a fake review?
Three business days for a first decision, in my experience, and most first decisions are rejections. Appeals resolve anywhere from under 24 hours to two weeks. Defamation cases through Google’s legal process run weeks or longer, so post a HIPAA-safe public response while you wait.
Can I sue someone for leaving a fake Google review on my medical practice?
Sometimes, when the review states provably false facts and you can show real harm, since opinions don’t qualify. Courts have ordered platforms to unmask anonymous reviewers in coordinated-attack cases. Your evidence file from the removal process becomes the core of that suit, one more reason to keep it.
What should a medical practice do when fake reviews appear to be from a competitor?
Records first, meaning timestamped screenshots, the reviewer profiles, and the pattern across dates. Flag under conflict of interest, then bring your full file to Google support. A cease-and-desist from your attorney, paired with those records, has moved stubborn cases faster than any flag I’ve filed.
Can you just delete a bad Google review yourself?
No. Only the reviewer or Google can take one down, and reviews can’t be switched off for your profile. Anyone selling you guaranteed deletions is selling something Google doesn’t offer, and the FTC rule reaches services like that too.
The Practices That Win This Fight Never Fight It Alone
A fake review caught on day one, with the evidence file started before your anger fades, comes down in days. Caught a month later, after a defensive reply went public, it can cost a five-figure settlement plus federal monitoring. The difference is a person on the profile every week.
Someone who knows the policy lines, writes appeals that survive a specialist’s read, and notices the cluster before Google’s banner does.
That’s the work Direction runs for medical practices. We’ve been healthcare-focused since 2016, so the team knows an operatory from an exam room, and you’ll see your full plan before you sign anything. We measure the engagement in booked appointments.
If your profile is under attack, or you want it defended before one lands, book a discovery call with Direction.
