Fake News: The Compliance Risk That Can Destroy Trust Overnight
One careless review campaign could cost far more than the sales it was meant to generate.
Your Reputation Is Now a Compliance Issue
Most business owners still see online reviews as a marketing matter. That view is now dangerously out of date.
Since 6 April 2025, fake reviews and concealed incentivised reviews have been expressly banned under the Digital Markets, Competition and Consumers Act 2024. The Competition and Markets Authority (CMA) can investigate businesses directly, decide whether consumer law has been broken and impose substantial penalties without first having to take the business through the courts.
For a serious breach, the maximum penalty can reach 10% of the company’s global annual turnover. For an SME turning over £750,000, that creates a potential exposure of up to £75,000. At £1 million turnover, it rises to £100,000. That is before legal advice, management time, lost customers, platform restrictions and reputational repair are taken into account.
Why This Matters to SMEs
Reviews influence whether a potential customer clicks, calls or walks away. They can affect conversion rates, pricing confidence and whether a business appears credible beside its competitors.
That is precisely why regulators are treating manipulation seriously. A false five-star review can give a business an unfair advantage. A hidden incentive can make a paid endorsement look independent. A misleading overall rating can create a picture that genuine customer feedback does not support.
The risk is not limited to businesses running large review platforms. It can begin with something as ordinary as displaying testimonials on a website, asking a marketing agency to “improve” online ratings or offering a discount in return for a positive review without making the incentive clear.
The Biggest Risk Isn't Usually Deliberate
Most SME owners are not sitting in a back office inventing customer testimonials. The problem is usually less obvious and more believable.
A well-meaning employee asks friends or relatives to leave reviews. A manager encourages the team to post positive feedback without explaining that they work for the company. A marketing supplier guarantees a stream of five-star ratings. A customer is offered a voucher, discount or free service but the published review does not disclose the incentive. Old testimonials are shortened, polished or reused until they no longer reflect what the customer actually said.
None of those actions may feel like serious misconduct at the time. But “we did not realise” is a weak defence when the business is responsible for what is published or commissioned on its behalf.
Real Businesses Are Already Being Investigated
In March 2026, the CMA opened investigations into five businesses over suspected practices relating to online reviews. The businesses included Dignity, Pasta Evangelists, Autotrader, Feefo and Just Eat.
The CMA is investigating whether Dignity asked staff to post positive reviews of its cremation services, potentially creating a misleading impression of genuine customer feedback. Pasta Evangelists is being investigated over allegations that customers were offered discounts in exchange for five-star reviews without the incentive being made sufficiently clear.
These are investigations and, at the time of writing, the CMA has not made final findings against those businesses. That distinction matters. However, the investigations also send a very clear message: fake and misleading reviews are no longer a theoretical compliance issue. The regulator is actively looking at how businesses request, reward, collect, moderate and present customer feedback.
The Fine Is Only One Part of the Bill
No final fake-review penalty has yet been announced under the new provisions. That does not make the risk remote.
The CMA has already demonstrated how strongly it is prepared to use its new direct consumer-enforcement powers. In April 2026, it fined the AA £4.2 million in a separate consumer-law case concerning drip pricing and required more than £760,000 to be refunded to learner drivers. The breach was different, but the enforcement machinery is the same.
For an SME, the damage from a review investigation could include:
• a financial penalty linked to turnover;
• legal and professional fees;
• hours spent gathering evidence and responding to the regulator;
• refunds or redress for affected customers;
• removal or suspension of reviews and online profiles;
• loss of access to advertising or marketplace platforms;
• damaged relationships with customers, suppliers and referral partners; and
• the permanent search-engine footprint created by public enforcement action.
The fine may be the headline. The loss of trust can be the part that hurts for years.
Your Marketing Agency Does Not Carry All the Risk
Outsourcing marketing does not outsource accountability.
A business can still be exposed where a freelancer, agency, reputation-management company or member of staff posts or commissions fake reviews on its behalf. A promise of “twenty new five-star reviews this month” should not sound impressive. It should trigger questions.
Who are the reviewers? What genuine experience did they have? Has anyone been rewarded? Is that reward disclosed? Who approved the campaign? What evidence is retained?
The CMA’s guidance makes clear that traders cannot simply appoint a third party and then assume the responsibility has disappeared. Businesses need proportionate controls over the activity carried out in their name.
AI Has Made the Problem Faster and Harder to Spot
Artificial intelligence can produce convincing reviews in seconds. It can vary tone, spelling, length and detail, making fabricated feedback look as though it came from different customers.
That creates risk from both directions. A supplier or employee can generate false praise at scale. A competitor, disgruntled former employee or malicious individual can produce large numbers of negative reviews designed to damage a business.
The answer is not to become suspicious of every customer comment. It is to know where reviews are appearing, who is responsible for requesting and publishing them, what happens when something looks wrong and whether the business could produce evidence quickly if challenged.
A Review Problem Usually Reveals a Wider Control Problem
Fake reviews rarely exist in isolation. They often point to the same weaknesses seen elsewhere in growing businesses: unclear responsibilities, undocumented approval processes, inconsistent staff training, poor supplier oversight and records that cannot be produced when they are needed.
That is why this is bigger than a marketing policy.
Could you show who approved your latest testimonial campaign? Could you prove that an incentivised review was labelled? Do staff know they must not review their own employer? Does your agency agreement prohibit fabricated or misleading endorsements? Is someone checking Google, Trustpilot, Facebook, Checkatrade and other relevant platforms for unusual activity?
You do not need a fifty-page manual. You do need enough control to know what is being done in your business’s name.
What Strong Businesses Do Differently
Strong businesses do not wait for a complaint, a journalist or a regulator to reveal the gap.
They periodically step back and test whether the controls they believe are operating are actually working. They check whether responsibilities are clear, whether staff and suppliers understand the boundaries, whether incentives are visible and whether records would stand up to external scrutiny.
An independent review adds value because an outsider is not influenced by “the way we have always done it”. They ask awkward questions before those questions are being asked under investigation.
The objective is not more bureaucracy. It is to protect sales, reputation and the value of the business.
The Bottom Line
A five-star rating is worthless if customers cannot trust how it was earned.
The new rules turn fake and concealed incentivised reviews into a direct financial and governance risk. For an SME, one badly controlled campaign could mean a five-figure penalty, legal costs, weeks of management distraction and a public stain on the brand.
The businesses best protected are not the ones that assume their reviews are genuine. They are the ones that can prove how they know.
Do Not Wait Until the CMA, a Customer or a Competitor Finds the Gap
You have worked too hard to build your reputation to leave it exposed to an employee’s good intentions, an agency’s shortcuts or a review process nobody owns.
Book a complimentary call with The Efficiency Method. We will discuss where hidden compliance and control gaps may be putting your business, your income and your reputation at risk — before they become an expensive public problem.
https://calendly.com/hello-tem101/lets-have-a-chat
hello@tem101.com
www.theefficiencymethod.com
#FakeReviews #SMECompliance #BusinessRisk #ReputationManagement #BusinessGovernance
Sources and Accuracy Note:
This article was written using the CMA’s fake-review guidance, its March 2026 announcement of five investigations, the Digital Markets, Competition and Consumers Act 2024, and the CMA’s April 2026 direct-enforcement update. The investigations referred to above are ongoing; no final findings against the named businesses have been stated at the time of writing.
