Can Employees or Family Review Your Business? The Insider-Review Rules

Writing a review of your own business as an employee, owner or relative is treated as an "insider review" by regulators, and posting one without disclosing the connection is on the list of conduct the FTC warned companies about in its December 2025 letters. In the UK, the CMA is investigating whether a funeral company asked staff to write positive reviews. The safe default is simple: do not review your own employer or family business, and never ask your team to.

#What counts as an insider review?

An insider review is a review written by someone with a relationship to the business, such as an owner, employee, contractor, relative or business partner, that presents itself as an ordinary customer's opinion. The FTC's Consumer Review Rule lists reviews from staff or relatives without a disclosed connection as one of the prohibited practices.¹

The key word is disclosed. A review that says "I work here, and this is my honest take" is a different thing from a review that hides the link. The first can still carry less weight with readers, but the second is the one regulators have in view.

#Is it illegal for employees to review their employer?

It can be, depending on the country and the facts. In the US, the FTC cited undisclosed insider reviews among the practices that could expose a company to lawsuits and civil penalties of up to $53,088 per violation.¹ The agency's letters said it had reason to believe ten unnamed companies were violating or had violated the rule. That is a warning, not a ruling, and the letters did not name anyone.

In the UK, the CMA announced on 27 March 2026 that it was investigating whether Dignity asked staff to write positive reviews of its crematoria services. The investigation has not produced a finding, and Dignity has not been found to have done anything wrong.² What the case shows is that asking staff to post is itself a question regulators will examine, separate from whether any individual review was honest.

#Why do platforms and detection tools care?

Because insiders post under their own accounts, from their own phones, in an ordinary-looking pattern. The review text can be entirely sincere and still mislead a reader who assumes it came from a customer.

Detection therefore leans on timing and account history rather than wording. In our scoring, three things make a cluster look coordinated: several reviews landing within a day or two, reviewer accounts with almost no history elsewhere, and reviews that never mention a specific visit. Our guide to the low-activity account signal explains why thin accounts matter, and the explainer on review bursts covers the timing side.

Across the dataset, as of October 2026, low-activity accounts account for 118,406 flagged reviews and bursts for 19,038, out of 133,691 flagged reviews among 645,096 we have scored.³ A single employee review does not trigger anything. Ten posted in a week after a staff meeting might.

#What can a business do instead?

Ask real customers, make it easy, and treat every answer the same way. The legal limits on that are covered in our post on how to ask customers for reviews legally. A short checklist for owners:

• Tell staff not to review the business or its competitors from their personal accounts
• If staff or family do post, require a plain statement of the connection in the review itself
• Send the same review request to every customer, not only the happy ones
• Never offer a reward that depends on a positive rating
• Keep a record of when and how you asked, in case a platform or regulator queries it

Sending the request only to happy customers is review gating, which has its own rules; see whether review gating is illegal.

#How should a reader treat reviews that might come from insiders?

Look for what a customer would know and an insider might skip: a date of the visit, a dish or service by name, a complaint alongside the praise. Vague enthusiasm repeated across several reviews, written within days of each other by accounts with one or two reviews, is the pattern worth a second look. None of that proves an insider wrote them, and plenty of real customers write short reviews.

The cheaper check is the spread of dates. If a listing's reviews are steady over months, a few suspicious ones matter little. If most of its five-star reviews arrived in a single week, scroll to the reviewers' other activity before trusting the average. Our guide to spotting fake Google reviews at restaurants shows what to look for on a real listing.

#What if a competitor or ex-employee posts as a customer?

That is a different problem, and you are the target rather than the source. Document the posts, report them through the platform's flagging tool, and do not respond by posting counter-reviews from your own team, which would turn a defensible position into an insider-review problem. Our owner's playbook for fake one-star attacks lists the steps in order.

If you want to see how your own listing looks to an outside reader, run it through our free review checker and read the evidence behind the score.

#Frequently asked questions

#Can my family leave me a Google review?

Google's rules aside, regulators expect any connection to be disclosed, and a review from a relative is exactly the kind of insider review the FTC lists. It is safer to ask them to recommend you in person.

#Can I ask my staff to review us if they disclose they work here?

Disclosure helps, but asking staff to post is what the CMA is examining in the Dignity case. The investigation has produced no finding, so treat it as a caution rather than a rule.

#Will a few employee reviews get my listing flagged?

Probably not by themselves. Our scoring looks for clusters in time, thin reviewer histories and repeated wording, not individual reviews.

#Do the FTC warning letters name any companies?

No. The FTC did not disclose the ten recipients, and the letters are not findings of a violation.