How to Find Who Wrote a Fake Google Review
A one-star review from a customer you have never served, a competitor hiding behind a made-up display name, or a former employee settling a score — fake Google reviews damage a real business, and the person who wrote it counts on staying anonymous. Google will not disclose a reviewer’s identity to a business owner, and the only route that ends in a name runs through a court applying a constitutional standard designed to keep anonymous speakers anonymous. This guide covers what Google’s own policies actually remove when you report a review, what the Dendrite and Cahill tests require before any judge unmasks a poster, and the cases where the honest answer is that you have no route at all.
Start With the Honest Answer
Start with the honest answer: you cannot buy a fake reviewer’s identity, and we will not sell you one. Google does not disclose who is behind a review to the business being reviewed, and no records firm has a back door into a Google account. What actually exists is a ladder with three rungs, and most business owners never need to climb past the first. Rung one is Google’s own policy machinery — a review written by an industry competitor, a current or former employee, or anyone with an undisclosed stake in your business is a named violation of Google’s conflict-of-interest rule, and reporting it under the right category can get it removed without anyone ever being identified. Rung two is a defamation claim, which requires a false statement of fact, not a harsh opinion; if what the reviewer said is true, or is plainly an opinion, there is no rung two and an honest guide tells you so. Rung three is the court: a “John Doe” filing followed by a motion to compel, where a judge applies the Dendrite or Cahill standard because anonymous speech is constitutionally protected. Only a court order pierces the account. Where a records firm legitimately helps is at the far end of that ladder — after disclosure has been ordered and your counsel is holding a subscriber name or an account email that still has to be resolved into a real, serveable person.
Watch: Reporting Beats Unmasking
Why the policy route solves most of these, and the court route solves the rest.
Watch Overview
Why a Fake Review Is Worth Tracing
A fabricated one-star is rarely random — and the person behind it is identifiable.
A genuine bad review is a customer-service problem; a fake one is something else entirely. When a review describes a transaction that never happened, names a service you do not offer, or appears in a cluster the same week a competitor opened down the street, you are not looking at an unhappy customer — you are looking at someone using an anonymous account as a weapon. The damage is concrete: a single fabricated one-star can drag a Google rating below the threshold where buyers stop calling, and an account that posts the lie can keep posting it under a new name next month if no one is ever held to account.
The reason it is worth identifying the author is that anonymity is the entire strategy. The person who wrote it is betting you will never connect the display name “J. Smith” to a real human being, so there is no risk and no consequence. Break that assumption and the calculus changes — a fake review tied to a named individual becomes evidence in a defamation claim, grounds for a cease-and-desist, or the basis for an injunction to take it down. The goal is never to publicly shame anyone; it is to convert an untraceable attack into an accountable one, lawfully, so a legitimate business can defend its name.
What Google Removes on a Report
The rung most owners skip — and the one that solves the problem without a name.
Before anyone talks about lawsuits, understand what Google’s own rules already forbid, because a fabricated review usually breaks one of them by name. Google’s Maps user-generated content policy prohibits, in its own words, “content that is based on a conflict of interest,” and it spells the term out: a conflict of interest “may include current or former employment, a contractual or consultory relationship, or other professional or personal affiliations that demonstrate a conflict of interest (such as industry competitors, familial relationships, etc.).” Read that against the three people who actually write fake reviews about a small business — a competitor, a fired employee, an ex-partner — and every one of them is a policy violation on the face of the definition, whether or not you can prove who they are. The same policy separately bars incentivized reviews, including content posted “following requests for revision or removal of a review or rating in exchange for an incentive,” and bars engagement produced through emulators or device-tampering services, which is how bought reviews from a farm are generated.
The reporting mechanics are specific and worth doing precisely. From the Business Profile you flag the individual review and select a reason; Google’s Business Profile Help states that review evaluation typically takes several days. The Reviews Management Tool is where you track it, and it returns one of a small set of statuses — flagged but not yet evaluated, “Report reviewed – no policy violation,” or “Escalated – check your email for updates.” A decision that goes against you is not final: Google allows a one-time appeal of a flagged review that did not qualify for removal, and the appeal form accepts up to ten reviews at once, which matters when you are dealing with a coordinated cluster rather than a single post. Separately, you can report the reviewer’s profile rather than the review, which is the right lever against an account posting the same attack across several listings. Merchants in the European Economic Area can also report third-party reviews that surface on a Business Profile from non-Google sources. And if the reviewer has demanded money to take the post down, that is not a review dispute at all — Google runs a distinct reporting path for negative-review extortion scams, and that is the one to use.
Two limits deserve equal weight. First, Google’s automated spam systems remove reviews on their own and occasionally take down legitimate ones, so a review that vanishes is not evidence anyone acted on your report. Second, and more important, Google draws a hard line that a lot of reputation advice pretends does not exist: “Do not report a review just because you disagree with it or dislike it. Google doesn’t get involved in conflict between businesses and customers.” A negative review that describes a real experience is not a policy violation, is not defamation, and has no removal route — and repeatedly flagging it is a waste of the one appeal you get.
Where a Reviewer’s Identity Is Actually Recorded
Even an anonymous account leaves layers of evidence pointing back to a person.
| Source | What It Gives You | How to Get It | Limitation |
|---|---|---|---|
| The reviewer profile | Display name, profile photo, review history, and the other businesses the account has rated. | Open the reviewer’s public Google profile directly from the review. | Names and photos are often fake; useful as a cross-reference, not proof on its own. |
| Account metadata | When the account was created, posting patterns, and behavioral signals that flag a throwaway. | Compare the review date and account age against the timeline of your dispute. | Visible only in fragments; the full record sits inside Google. |
| Google account data | The email, recovery details, and crucially the IP address used to create the account or post. | A court-ordered subpoena to Google after filing a John Doe defamation suit. | Requires a lawsuit and a judge meeting the Dendrite or Cahill standard first. |
| Internet provider records | The real subscriber name and service address behind the IP address Google produces. | A follow-on subpoena to the ISP that controls the IP block. | IP may be shared, mobile, or routed through a VPN, adding a step. |
| Google’s policy machinery | No identity at all — but removal of the review, and sometimes action against the account. | Flag the review, or the reviewer’s profile, under a named policy category such as conflict of interest. | Gives you an outcome without an answer; evaluation takes several days and you get one appeal. |
Notice the pattern down the right-hand column: the open sources hand you clues and a strong suspicion, and nothing more, while the conclusive identifier — the IP address — sits behind a legal door that only a court order opens. That distinction is the whole page. A suspicion is enough to report a conflict-of-interest violation and enough to brief an attorney; it is never enough to accuse someone, and it is not something we will convert into a name on a business owner’s say-so. Our companion guide on what to do after a subpoena returns an email or an IP on a fake Yelp review covers the opposite end of the same process — Section 230, the evidentiary dossier, and resolving a disclosed breadcrumb into a serveable person — while this page stays on Google’s removal machinery and the standard a judge applies before disclosure is ordered at all. The constitutional questions are identical when you try to identify the owner of an anonymous social account behind a smear.
Why a Suspicion Is Not an Identification
The signals point somewhere. They do not close the loop, and treating them as if they do is how owners get sued.
People who post fake reviews assume a new Google account and a fake name erase the trail, and in one sense they are wrong: the account frequently betrays its motive. A glowing five-star left for your nearest competitor the very same week. A review that quotes a detail only a former employee would know. Wording that echoes a specific person’s way of talking, or a complaint that surfaces days after a firing. Those signals are genuinely useful — they are exactly what a conflict-of-interest report to Google is built on, and exactly what an attorney needs in order to plead a claim with particularity rather than a bare allegation.
What they are not is an identification. The gap between “this reads like our old shift manager” and “this is our old shift manager” is the gap that the entire body of anonymous-speech law exists to police, and it is not one that any amount of open-source correlation closes on its own. Acting on the strong hunch — confronting the suspect, naming them in a social post, sending a demand letter to the wrong person — converts your grievance into their claim. This is where we hold a firm line rather than sell you something: we do not take instructions to unmask an anonymous reviewer, and we do not build a “likely author” dossier for a business owner to act on. Our work on this kind of matter begins after a court has ordered disclosure, when the records in hand are a name, an email, or a subscriber address that still has to be resolved and verified — the ordinary discipline of professional skip tracing and people search, applied to a defendant a judge has already permitted you to identify. The same boundary governs the related problem of locating a person known only by a fabricated name.
Why the Author Is Hard to Pin Down
The usual reasons a quick look at the profile leads nowhere.
Throwaway Account
A brand-new Google account with one review, a generic name, and no other footprint to trace by hand.
Fake Display Name
The name and photo are invented, so a search on what you see returns the wrong person or nobody at all.
VPN or Mobile IP
The post routed through a VPN or a shared carrier address, so the raw IP needs an extra step to resolve.
Review-Farm Origin
The review was bought from a paid network, hiding the customer who ordered it behind a stranger’s account.
Multiple Sock Puppets
One person runs several accounts to post a cluster of reviews, scattering the trail across fake identities.
Deleted After Posting
The reviewer pulls the account once it has done its damage, making a captured screenshot essential evidence.
From a Review to a Named Author
The four rungs, in the order they actually have to happen.
Preserve the Record
Full-page screenshots of the review, the reviewer profile, and the visible date, plus your own booking or sales records. A reviewer can delete an account after it has done its damage.
Report It to Google
Flag the review, and where warranted the profile, under the specific policy it breaks. Track it in the Reviews Management Tool and hold your single appeal in reserve.
Counsel Decides on a Claim
If the statement is false rather than unflattering, an attorney files against a John Doe and moves to compel disclosure. That motion is the only thing that opens the account.
We Resolve What the Court Produces
Once disclosure is ordered, the sign-up name, email, or subscriber address that comes back is a lead, not a person. We resolve and verify it, or document a diligent search that dead-ended. Once a court has ordered disclosure, send us what the provider returned and we work it against public and licensed records.
When It Takes a Subpoena to Google
The legal route that compels disclosure when open investigation is not enough.
Google will not hand a business the identity behind a review on request — its policy protects user data, and that is by design. When a review is genuinely false and defamatory, though, the law provides a path around that wall: a “John Doe” lawsuit. You file a defamation claim against the unknown author, and once the case is on file you can ask the court to issue a subpoena compelling Google to produce the account records — including the IP address used to create the account or post the review. A second subpoena to the internet provider that owns that IP block then ties the address to a real subscriber. Step by step, “anonymous” becomes a name.
Two practical points shape whether that route is even open to you. The first is the clock, and it is shorter than most owners assume. Defamation carries one of the tightest limitation periods in civil law: California allows one year for an action for libel or slander under Code of Civil Procedure section 340(c), New York the same one year under CPLR 215(3), and Illinois provides that actions for slander or libel “shall be commenced within one year next after the cause of action accrued” at 735 ILCS 5/13-201. A business owner who spends eight months arguing with Google’s appeal process before speaking to a lawyer may find the claim gone in three of the largest states in the country. Check your own state, because the periods differ and a handful run longer. The second point is that Google’s published legal-process policy describes what US government agencies must do to compel disclosure — a subpoena for basic subscriber registration information and certain IP addresses, a court order for other non-content records, a warrant for content. Google publishes a separate page for civil subpoenas and other civil requests, and it is blunter than most business owners expect: requests to identify users by real names or IP addresses, it says, may be declined. So the policy sets a ceiling, not a procedure. What a private litigant in a defamation case actually obtains is decided by a judge, under the standard set out below — which is precisely why the court order, and not the request, is the thing that opens the account. The same reality governs an attacker who hides behind an email address rather than a review account.
The Test a Judge Applies Before Unmasking Anyone
Anonymity is not a loophole the reviewer is exploiting. It is a protected interest the court is weighing.
The reason a subpoena to Google is not a formality is that the person on the other end has a constitutional interest of their own. In McIntyre v. Ohio Elections Commission the Supreme Court held that an author’s decision to remain anonymous is an aspect of the freedom of speech protected by the First Amendment, and noted that the choice may be motivated by fear of economic or official retaliation, by concern about social ostracism, or merely by a desire to preserve privacy. That principle applies with obvious force to a customer who criticizes a business they still have to live near. A court asked to strip anonymity from a reviewer is not processing paperwork; it is deciding whether your claim is strong enough to justify overriding a protected right.
State courts turned that principle into two workable tests, and between them they cover most of the country. The New Jersey Dendrite framework, from a case in which a software company sought to unmask critics posting on a message board, asks a plaintiff to make reasonable efforts to notify the anonymous poster and give them time to respond, to identify the exact words complained of rather than gesture at the review as a whole, to set out a prima facie claim supported by actual evidence on each element, and finally to let the court balance the strength of that showing against the speaker’s interest in staying anonymous. Delaware’s Doe v. Cahill, decided in 2005, streamlines the same idea into a notification requirement plus a demanding evidentiary threshold — the plaintiff must put forward evidence sufficient to survive a motion for summary judgment on each element within their control. Jurisdictions vary in which version they follow and how strictly, so the state you file in genuinely changes your odds. What does not vary is the shape of the burden: the strength of the underlying claim is what unlocks identity, which means the claim is what to invest in first.
There is a statutory layer underneath as well, and it is regularly described backwards. Section 2702 of title 18 of the United States Code bars a provider from divulging the contents of a communication, which is why no one will ever hand you a reviewer’s emails. But its restriction on non-content subscriber records is written against governmental entities; subsection (c)(6) expressly permits a provider to disclose such records “to any person other than a governmental entity.” The statute permits what a support desk will tell you it forbids — it simply does not compel it, and Google does not volunteer. So a private litigant’s subpoena in a defamation case is not self-executing: the provider objects or gives notice, the anonymous poster may appear to quash, and a judge resolves it under Dendrite or Cahill. One further procedural trap is worth knowing. Google treats a policy report and a legal report as separate tracks and says so plainly: reporting content through a content or product policy path “does not substitute for reporting it through a legal path and does not serve as legal notice.” If you have a court order or a formal defamation notice, it has to be filed through the legal channel, on its own, or it does not count.
When the Honest Answer Is That You Have No Route
The cases where the right advice is to stop — and where we decline the work.
A great deal of money is spent by business owners chasing reviews that were never actionable in the first place, and the industry that sells that chase does not lead with the disqualifiers. So here they are. A negative review is not defamation. A customer who genuinely waited ninety minutes and says so has stated a fact that happens to be true, and truth is a complete defense; there is no claim, no subpoena, and no identification. A customer who calls your food terrible, your prices a rip-off, or your staff rude has stated an opinion, and opinion is not a false statement of fact no matter how much revenue it costs you. Google’s own guidance says the quiet part out loud — do not report a review simply because you disagree with it or dislike it, because Google does not get involved in conflict between businesses and customers, and a negative review can highlight something worth fixing. A review you would rather did not exist is a business problem to answer in public, not a legal problem to solve in private.
The second disqualifier is the calendar. If the post is older than your state’s limitation period, the claim is time-barred and nothing downstream of it is available, however unfair that feels. The third is proportion: a John Doe filing plus a contested motion to compel plus a second subpoena to an internet provider is a real litigation budget spent on a defendant who may be judgment-proof, out of state, or behind a VPN that resolves to nothing. Counsel should price that honestly before you commit, and if the honest number exceeds what the review is costing you, the answer is to report it, respond to it publicly, and move on.
Our own boundaries follow the same logic. We are a public-records and skip-tracing research firm operating under permissible-purpose rules. We work public records and licensed data. We do not accept an instruction to unmask an anonymous reviewer, we do not deliver a suspect list for a business owner to act on, and we do not contact or approach the subject of a search. There is no doxxing here and no support for harassment of any kind: nothing we produce is a public dossier, nothing is published, and findings go to counsel rather than to a client who wants to confront someone. And where a “review dispute” is a cover for something else — where the aim is to locate a person who has deliberately gone quiet, or where the facts suggest domestic violence, stalking, a protective order, or any situation in which the safety of the person being sought is in question — we decline the work outright and refer the requester to counsel or to law enforcement. Those are the cases where a wrong answer is not a bad outcome; it is a dangerous one, and no fee is worth it.
Who This Guide Is Written For
Different readers get off this ladder at different rungs.
Small Businesses
Usually finish at rung one
Defamation Attorneys
Post-disclosure identity resolution
Professionals
Doctors, lawyers, and clinics targeted
Franchise Owners
Clustered reports and one appeal
Reputation Firms
Policy categories, not unmasking
Court-Ordered Locates
Serving a Doe once named
Whoever you are, the wall is the same, and pretending otherwise helps nobody: you cannot defend your name against an attacker a court has not yet allowed you to identify. Most readers of this page should spend their effort on the report, the policy category, and the appeal, because that is the rung where the problem is usually solved. The minority with a genuine false statement of fact should be spending money on counsel and on the strength of the claim, not on an investigator, because the claim is what moves a judge. When a court does order disclosure, that is our lane: the record that comes back is rarely a person, and resolving a sign-up name or a subscriber address into a verified, current, serveable individual — or documenting a diligent search that dead-ended — is ordinary skip tracing done to a standard a court will accept. The same work supports serving a witness in a lawsuit once a defamation case is under way. We do not contact the reviewer, we do not publish anyone’s information, and for a legitimate matter with a disclosure order behind it, a first pass typically comes back within 24 hours.
Our Commitment
We will tell you when you have no route, and we will not take money to unmask an anonymous reviewer for a business owner. Where we do work is behind a disclosure a court has already ordered — resolving what the platform or the internet provider produced into a verified, serveable person, or documenting a diligent search that did not. No doxxing, no harassment, no public dossier, and a lawful permissible purpose stated before anything opens. Lawful, court-ready identification for counsel since 2004.
Frequently Asked Questions
Can you find out who wrote a fake Google review?
Not on request, and you should be wary of anyone who says otherwise. Google does not disclose a reviewer’s identity to the business being reviewed, and no records firm has access to a Google account. The only route that ends in a name is a court order obtained by your attorney in a defamation case. What you can do without a name is get the review removed under Google’s policies, which is where most of these matters actually end.
Will Google tell me who left an anonymous review?
No. Google’s published legal-process policy describes what US government agencies must serve to compel disclosure — a subpoena for basic subscriber registration information and certain IP addresses, a court order for other non-content records, a warrant for content. A business owner is not a government agency, and a private litigant’s subpoena is resolved by a judge, not by a support desk. Note too that Google treats a policy report and a legal report as separate tracks: a policy report does not serve as legal notice.
What is a John Doe lawsuit and how does it unmask a reviewer?
It is a defamation claim filed against an unknown defendant so the court’s subpoena power becomes available. It is not automatic. Courts apply the Dendrite or Cahill standard, which generally requires you to try to notify the anonymous poster, to identify the exact words complained of, and to put forward real evidence on each element of the claim rather than an allegation — because anonymous speech is protected by the First Amendment. Only if that showing is made does disclosure follow.
How can I tell a review is fake before trying to trace it?
Look for a brand-new account with few other reviews, a review describing a transaction that never happened or a service you do not offer, a cluster posted the same week, or the same account leaving glowing five-stars for a competitor. More usefully, check whether it fits a named Google policy category: a review from an industry competitor, a current or former employee, or a family member is a conflict-of-interest violation, and that is reportable regardless of what you can prove about identity.
Is it legal to investigate who wrote a review about my business?
Researching public records for a legitimate purpose is lawful, but the framing matters. Assembling a suspect list and acting on it is how a business owner turns a grievance into someone else’s claim against them. We decline instructions to unmask an anonymous reviewer and we do not deliver likely-author dossiers. Once a court has ordered disclosure, resolving the records that come back into a verified person is ordinary, lawful work.
What if the review is negative but true?
Then you have no route, and that is the correct answer rather than a discouraging one. Truth is a complete defense to defamation, and an unflattering opinion is not a false statement of fact. Google’s own guidance says not to report a review simply because you disagree with it or dislike it, because it does not get involved in conflict between businesses and customers. A truthful bad review is answered in public, not litigated in private.
How long do I have to act on a defamatory review?
Less time than most owners assume. California allows one year for libel or slander under Code of Civil Procedure section 340(c), New York one year under CPLR 215(3), and Illinois one year under 735 ILCS 5/13-201. Periods differ by state and a few run longer, so check yours. Preserve a dated screenshot immediately, because a reviewer can delete the account once it has done its damage.
How fast can you help, and what do you need?
If a court has ordered disclosure and you are holding a sign-up name, an account email, or a subscriber address from an internet provider, send that along with the review and your case reference; a first pass typically comes back within 24 hours. If you are still at the reporting stage, there is nothing for us to do yet — work Google’s policy route and speak to counsel about whether a claim exists.
Already Hold a Disclosure Order?
If a court has ordered disclosure and you or your attorney are holding a sign-up name, an account email, or a subscriber address that still is not a person, that is the work we do — resolved and verified, typically a first pass within 24 hours. Still at the reporting stage? Start with Google’s policy route above. Contact us when the order is in hand.
Start Your Request →
