Nobody told you the review rules changed
Forty-five businesses have just been ordered to display an apology on their own premises for six months. Buying fake reviews is only the headline — the rules now cover things most small businesses do innocently, including what sits on their own testimonials page.
Last week, forty-five businesses in Singapore agreed to put a public apology on their own premises — somewhere customers can see it walking in — and leave it there for six continuous months. Same on their websites. Same on their social media.
They were clinics. Law firms. Restaurants. Hair salons. A funeral service.
What they had bought was a package: thirty-five five-star reviews over seven days, for about £130.
The reviews were engineered to pass
This is the part that explains why regulators have stopped being patient.
The service that sold them did not simply invent glowing paragraphs. It varied sentence structure. It inserted small grammatical imperfections, because real people type like that. It worked in local details only a genuine customer would mention. And rather than generating praise out of thin air, it trained on real reviews so that its output sat inside the normal distribution of human writing.
That is not a scam that gets caught by a platform filter. It was built specifically to survive one.
Roughly a hundred businesses had bought from the service. Forty-five admitted it and took the remedies. Two refused and are still under investigation.
The rules are much wider than “don’t buy reviews”
Here is where it stops being a story about other people.
Three regulators, three countries, same direction of travel:
- In the United States, a rule has been in force since October 2024 that explicitly bans AI-generated and fabricated reviews, with civil penalties running to more than $50,000 per violation.
- In the United Kingdom, fake reviews became illegal on 6 April 2025, with fines up to £300,000 or 10% of global turnover — and up to £150,000 for an individual. In March the regulator stopped warning and opened investigations into five named businesses, one of them accused of trading discounts for five-star ratings.
- In Singapore, the action above.
Now read the rest of what those rules cover, because almost nobody has:
- Asking only your happy customers. Cherry-picking who gets invited to review is itself a problem. The expectation is that you ask everyone.
- Incentives without disclosure. You may generally offer something for a review. Offering it for a positive review is a different thing entirely, and any discount, freebie or reward has to be disclosed.
- Staff and family reviews posted without saying who they are.
- Leaning on someone to take a bad review down — unjustified legal threats and intimidation are named explicitly.
- Bought followers and likes, as a misrepresentation of popularity.
- Trust badges and “as seen in” logos you cannot evidence.
And the part that matters most for this blog: in the UK the responsibility extends to the reviews you display on your own website, aggregate star score included.
Most of the people breaking these rules are not crooks
They are a salon owner who was told by someone doing their marketing that this is simply how it works. A café that put a card on every table saying leave us five stars, get a free coffee. A plumber whose brother-in-law wrote him a nice review in 2019 and never mentioned the relationship.
None of that feels like fraud from the inside. All of it is now in scope.
The genuinely unfair bit is that large chains have a compliance person whose job is to read rules like these. You have a Tuesday. The rule changed, the enforcement arrived, and the notification step in between did not happen.
Your testimonials page just became a regulated surface
Go and look at yours. Most small business websites have some combination of:
- a wall of glowing quotes with no names attached
- a star score pulled in from somewhere, unattributed
- “as seen in” logos from a mention that never quite happened
- an award badge from an outfit that sells award badges
- praise that was selected precisely because it was the best
Until recently that was ordinary marketing. It is now, variously, risky, disclosable, or prohibited.
The reframe worth sitting with: a wall of anonymous five-star praise is exactly what a fake looks like. It has become a weak signal through overuse and abuse. Four specific testimonials, named, with permission, about a particular job on a particular street, now do more work than fifty anonymous ones — and they are the version you can defend.
(General information, not legal advice — the detail differs by country, and if you think you have a real problem, ask someone qualified locally.)
The fair question
devkoi builds the page your testimonials sit on, so it is reasonable to ask what we do about it.
Honestly: devkoi’s own website has no testimonials on it at all. Not one customer quote, not one logo, not one star rating. The reason is the same one in this article — we do not have written permission from any customer to be named or quoted, and putting a fabricated or borrowed one on a page about honesty would be the worst possible trade.
It is a thinner-looking website for it. That was the right call anyway, and this month it looks like a considerably better one.
What to do this week
1. Audit the testimonials already on your site. For each one: do you know who said it, and do you have their permission to use it? Anything that fails both questions comes down.
“Take down the unattributed quotes on the homepage and leave the four I can name.”
2. Remove any badge or logo you cannot evidence. “As seen in”, awards, certifications, member-of schemes. If you cannot produce the link or the certificate, it goes.
“Remove the ‘as seen in’ logo strip from the footer.”
3. Change how you ask. Ask every customer, not the ones you think will be kind. Never condition a reward on the review being positive. If you do give anything at all, say so plainly.
“Add a line to the thanks page asking for an honest review, and say we offer 10% off for leaving one either way.”
4. Disclose the connected ones. If a review is from staff, family or a business partner and it is staying up, the relationship has to be visible.
5. Never threaten anyone over a bad review. It is named in the rules. Reply in public, briefly and well — a good reply to a bad review persuades more people than the review puts off.
6. If anyone ever sold you reviews, deal with it now. Get them taken down. Voluntary cleanup before a regulator calls is a different conversation from the one those forty-five businesses are having.
7. Put the proof you genuinely own on your own site. Named testimonials with permission. Dated, specific work. Real photographs. The things nobody else can post on your behalf, and nobody can manufacture for £130.
For twenty years, small businesses were told the five-star average was the thing that mattered, and then watched it become purchasable for the price of a weekly shop.
It is being cleaned up, and the clean-up is landing on the businesses rather than the people who sold the service. That is harsh, and it is also the actual situation.
The good news is modest but real: the signal that replaces a bought star rating is specific, attributable, verifiable truth — and that is the one thing you have more of than anyone who has ever tried to fake being you.