Pirate boarding on Google Maps: 15 fake reviews in an hour with blackmail by DM
This is how I could summarize you, and making a simile with terms more typical of a movie of buccaneers and evil pirates, I am going to tell you what I experienced in my Seomar company profile on Google Maps during the last 24 hours and starting around 6 pm yesterday. In this post I tell you the step-by-step approach: how I detected the avalanche, why the “DM” was a trap, what I did to document and report it, and how Google responded so quickly. I finish with a small guard manual: warning signs, immediate actions and measures to shield your profile against future attacks.
(Updated on 12-10-2025 including:
- Link to Google’s article/help procedure for Report extortion attempts with negative reviews on your Business Profile. (updated to the last link provided by Google)
- Extortion of merchants: Receive reports form on Google.)
Like an impeccable ship in calm seas, the Google Maps profile was suddenly approached by a sheaf of a pirate with a false flag: 15 apocryphal reviews climbing the moorings in less than an hour. The ringleader, in a gesture of blackmail, threw a bottle into the sea with a message: “contact me by DM”. But before the panic set in, the coastguard from the Google business maps team arrived: in less than 20 hours they cleaned the deck and threw the impostors overboard, leaving the ship ready to sail again.
Índice de Contenidos
Chapter 1 — Calm Sea, First Signs
Yesterday, working Wednesday and the eve of the 9th of October holiday in the Valencian Community, around 6:00 p.m., everything was calm. The profile was running clean, with the usual rhythm of notifications and without any surprises. Suddenly, the sea changed. Emails began to pour in to the email associated with the Google Maps profile: “New review in your file…”, one after another, minutes – sometimes seconds – apart. When they were opened, the pattern jumped out at you: generic texts, more typical of product orders than real experiences, and signed by profiles with suspicious names, which have never been real or newly created customers.
Some signs that set off the alarms:
- Generic, repetitive and out of context content: “Dirty local”, “Worst experience of my life”, “They don’t answer the DM”, “Order shipment not resolved” (no reference to our actual service).
- Repetitions and templates: almost identical sentences, same grammatical errors and almost identical sentences.
- Profiles without history: 0 photos, 0 previous reviews, recent registration dates, suspicious names, and above all customers who have never existed.
- Unnatural cadence: reviews chained at 18:03, 18:06, 18:09… as if they were climbing the ladder one after the other.
I opened the Google Business console to confirm what already smelled of gunpowder: the timeline showed one post after another with no relation to real customers. On the horizon, suspicious sails. The calm was over. The boarding was approaching.
Chapter 2 — Boarding and Blackmailing with DM Contact to Remove Fake Reviews
In less than an hour, 15 fake reviews climbed the moorings. Each impact was a harpoon strike: 1-star ratings and texts out of context, very much copied from each other and more typical of a catalog than of a real experience. The media began to suffer and the cover was filled with noise: repetitions, twin errors, profiles with generic names and no history.
Among that hubbub, the ringleader’s gesture stood out: a “bottle to the sea” in the form of a message inside one of the reviews — “contact me by DM” — disguised as an offer to “solve it.” It was the perfect bait: to cause damage and, immediately after, to lay a direct line of contact to negotiate in the shadows. Extortion manual.
The pattern was clear: synchronized bursts, stories incongruous with our service and an identical call to action in several interventions. No reasonable doubts: it was an attempt to approach to force response and control. The watchword was not to take the bait; It would be time to organize the defense and call in the coastguard.
What did I feel? Obviously, disappointment and anger. Seeing fake profiles littering a map worked on for years — clean, honest, and full of reviews from satisfied real customers — hurts. Helplessness when seeing how sixty minutes of noise can call into question so much effort and care. And I know I wasn’t the only one: any professional who loves their job and their business—from the director of a dance school, to the owner of a restaurant, to any other professional and SEO consultant—would have felt the same knot in their stomach.
Because what is attacked is not just a token; it is reputation, trust and time invested.
I also worried about new customers who might be hesitant to see the note drop, and loyal customers who were confused by inconsistent messages that don’t reflect what we do. Added to that was the professional alarm: this had a modus operandi behind it, and the “bottle to the sea” of “contact me by DM” smelled of blackmail. I took a deep breath so as not to respond in the heat or take the bait. I decided to turn anger into a method: document each review, record times and patterns, notify the team and prepare, if necessary, a sober public message. From the initial blow I moved on to the focus: defending the deck and cleaning up the trail.
Chapter 3 — Ringing Off and Coast Guard
As soon as I confirmed the pattern, the blast sounded. I activated the protocol so as not to waste a minute or a piece of data. The priority: document, contain and scale.
- First, the dossier of evidence:
- Screenshots of each review with a visible date and time.
- Direct links to each review and profiles involved.
- Record in a spreadsheet with posting time, text, similarities, and repeated keywords (including the “contact me by DM”).
- Note of the impact on the mean and minute-by-minute evolution.
- Then, containment. I decided not to publicly respond to fake reviews so as not to fuel the noise.
- With the dossier ready, I moved on to climbing. From the Google Business Profile (formerly Google My Business) I went to the Reviews section and marked each one as “False content or fraudulent activity”.
- Next, I used the official support channel (Help > Contact) to open a single case, attaching all the evidence and describing the modus operandi: 15 reviews in less than an hour, cloned texts, profiles with no history and a call for contact by DM that evidenced extortion intent.
- You can report any similar cases of fake reviews to Google Maps here: Link to Google Article/Google Help Procedure for Reporting Extortion Attempts with Negative Reviews on Your Business Profile. (updated to the last link provided by Google) was previously on https://support.google.com/business/workflow/9945796?hl=en
- Extortion of merchants: form for receiving reports on Google.
The follow-up was constant: I responded to the case email with the complete list, added new screenshots and made clear the immediate damage to the reputation. It was not necessary to insist much. In less than 16 hours, Google’s “coastguard” acted: the takedown notifications began to fall and, when reviewing the file, the fake reviews had disappeared. The average stabilized and the profile got back on track. Thank you to the Google business maps team for acting fast and their help.
Chapter 4 — Safe Course: Lessons and Actions
The approach passed; it is time to reinforce the helmet and standardize the guard. Here are the practices that became clear and how to apply them.
- Never respond to blackmail or DMs
- Do not contact the attacker, do not negotiate, and do not move the conversation outside of official channels.
- Keep everything as evidence and focus on the formal report.
- If the message involves explicit extortion, consider reporting and keep evidence.
- Alert signals that activate protocol
- Burst reviews in minutes.
- Cloned, generic, or out-of-context texts with your service.
- Profiles with no history (0 previous reviews, no photos, alphanumeric names).
- Calls to “contact me by DM” or similar.
- Document and report fast, with evidence
- Full screenshots with date/time and visible URLs.
- Checksheet with: post time, link to review and profile, text, similarities and keywords.
- Business Profile Review: Report > as “False Content or Fraudulent Activity.”
- Open case in Google Support (Help > Contact) attaching a dossier and describing the modus operandi.
- Case follow-up: Respond to the ticket with new evidence and describe the impact on the media. If there is no response, repeat to 48–72 h and use the Business Profile Help Forum.
- Sober and reassuring public communication
- Avoid direct accusations. Message type: “We have detected anomalous activity in our reviews and have already reported it to Google. Thank you for your patience.”
- If a customer asks, it offers an official direct channel (phone/email) and confirms that the service continues normally.
- Don’t debate with dubious profiles or feed the thread.
- Set up alerts and roles
- Enable notifications of new reviews in email and mobile. Create rules in the email to highlight “New Review” as a priority.
- Review Business Profile access: remove old users, enforce 2FA, and define minimum necessary roles.
- Maintain a backup manager and a replacement protocol on vacations or holidays.
- Train the team and prepare templates for the future
- 1-page internal guide: red flags, how to capture evidence, who to escalate to.
- Sober public response and supported communication templates.
- It simulates a quarterly drill: detect, document, report.
- Continuous reputational reinforcement
- Consistently respond to real reviews.
- Invite satisfied customers to give their opinion without incentives and in compliance with policies.
- Diversify your presence: website, networks and sectoral directories so as not to depend on a single channel.
- Legal and Escalation Plan B
- If there are signs of extortion, save everything (screenshots, email headers, profile IDs) and consider reporting it to the competent authorities.
- Document the impact (average drop, estimated loss of visibility) in case you need to prove damage.
With these measures, the ship is better equipped: early surveillance, clear procedures and a crew prepared for any new swell.
Final recommendations, thanking the public and an APP that I have discovered and that I love
Practical recommendations
- Monitor and act fast: check reviews daily (or trigger alerts) and apply a clear protocol when you see strange signs.
- Rules in your email: highlight “New review” as a priority and create a specific folder/tag for incidents.
- Checklist of evidence: captures with date/time, URL of the review and profile, repeated pattern and evolution of the average grade.
- Templates and roles: prepare sober public responses, define who documents, who reports and who follows up on the case.
- Basic security: 2FA in Business Profile, cleaning up old users, and a backup manager.
- Reputational reinforcement: ask for reviews from satisfied customers organically and constantly; Respond regularly to actual opinions.
Public Appreciation and Resources:
-
Updated on 12-10-2025:
- You can report any similar cases of fake reviews to Google Maps here: Link to Google Article/Google Help Procedure for Reporting Extortion Attempts with Negative Reviews on Your Business Profile. (updated to the last link provided by Google) was previously on https://support.google.com/business/workflow/9945796?hl=en
- Extortion of merchants: form for receiving reports on Google.
- Thank you to the Google Business Profile support team (Google Maps/Google Business) for the speed in removing fraudulent content.
- Special mention to a professional in capital letters, Xavier Colomés, for his shared resources: https://www.linkedin.com/in/xaviercolomes/ and his wonderful APP for mobile phones, LocalBoss in its web version for agencies.
- The mobile version is very curdled, you have it here available for download, and it complements especially well with the existing resources on Google business maps.









Leave a Reply
Want to join the discussion?Feel free to contribute!