Yes. Asking customers for reviews is legal, and every major review platform encourages it. What gets businesses penalized is how they ask: cherry-picking only happy customers, paying for reviews, or faking them. This article covers where US law draws the line, where Google, Tripadvisor, and G2 draw theirs, and what to actually do.
The one-sentence rule that keeps you safe everywhere: ask everyone, the same way, for an honest review, and never pay for the rating you want.
The safe playbook (do this)
If you only read one section, read this one. Nothing below is against any law or any platform's terms.
Ask every customer, in writing. SMS, WhatsApp, or email. Build the request into your automated flow so it goes to everyone the same way. The moment the system filters who gets the public review link based on predicted sentiment, that is gating (more below). Leaning on your happy customers with a personal ask on top of the flow is a different thing, and it is fine.
Run it as a flow, not a favor. A manual "remember to ask" never reaches everyone. Build the request into the customer journey so it fires automatically after the relevant moment (checkout, delivery, job completed, ticket resolved).
Lean on your happy customers. Ask everyone, but spend more energy on the customers who are clearly happy: a personal ask from the person who served them beats any automated message. Asking happy clients for public reviews more than unhappy ones is not gating, it is common sense. The line you cannot cross is blocking anyone from reviewing, not choosing where you spend your breath.
Incentivize your team, hard. Run contests, leaderboards, and bonuses tied to reviews collected, including bonuses for staff who get named in a review. It works, and it is how every business with a strong review profile actually operates. Google and Tripadvisor have rules on paper against review quotas and staff name-drops (see below), but they know how the sausage is made: those lines are barely enforced and barely enforceable. The only real limit is the customer experience. A forced, robotic ask backfires, so train the team to ask naturally and earn it. (This is about staff collecting reviews from real customers. Staff writing reviews about their own employer is a different thing, and it is a genuine line: see the law section below.)
Put the ask in every customer touchpoint. Receipts, email signatures, order confirmations, support sign-offs, the thank-you page. Volume is what protects your rating, and volume comes from asking constantly, not occasionally.
Flip negatives into positives. A single flipped 1-star is worth SEVEN extra 5-star reviews (the math is at the end of this article). Catch unhappy customers early, fix the problem, and many will update their review. This is explicitly allowed, and it is the highest-leverage review work you can do
💡 Tip: If you ask often enough, you never need the risky tactics. Most businesses reach for gating and incentives because they ask too rarely. Fix the asking and the temptation disappears.
The three lines you cannot cross
Across US law and every major platform, the same three things get you in trouble.
Faking reviews. Writing them yourself, having staff or family post them, buying them, or generating them with AI. Illegal under US law and banned everywhere.
Paying for the rating. Offering money, discounts, or gifts in exchange for a review (or for a positive review specifically). Illegal under US law when tied to a sentiment, and a terms violation on Google and Tripadvisor regardless of sentiment.
Gating. Filtering so that only happy customers get asked, or routing unhappy customers away from the public review. Risky under US law, and an explicit terms violation on Google and Tripadvisor
Everything in the rest of this article is detail on those three.
What US federal law actually says (FTC)
In October 2024 a new FTC rule took effect: the Rule on the Use of Consumer Reviews and Testimonials (16 CFR Part 465). It is real law with real teeth: knowing violations can carry civil penalties of up to roughly $53,000 per violation, adjusted for inflation.
Here is the part most blog posts get wrong, and it matters: there are two separate instruments.
The Rule (Part 465) is binding law with per-violation penalties. It bans the clear-cut stuff: fake reviews, buying reviews tied to a sentiment, undisclosed insider reviews, and certain review suppression.
The Endorsement Guides (16 CFR Part 255) are not standalone law. They explain how the FTC applies the general ban on "deceptive practices." Several things people call "illegal," like review gating and undisclosed incentives, live here. They can still get you sued, but through a different door and without that fixed per-violation penalty.
📌 Note: What gets enforced is what can be proven, and that is a much shorter list than what is technically banned. Paying for reviews leaves a trail. Most of the rest is far harder to detect than the policies suggest. The takeaway is not "cheat carefully," it is that asking everyone and earning reviews gets you the same result with none of the exposure.
Incentivizing customers with money or discounts
Under the FTC Rule, you may offer an incentive for a review only if you do not condition it on a particular sentiment. You can say "leave an honest review, positive or negative, and get $5." You cannot say "leave us a five-star review and get $5," and you cannot imply it either. The FTC's own example of an illegal implied condition: "Tell us how much you loved your visit and get a coupon." Adding a disclosure does not fix a sentiment-conditioned incentive: it is still a violation.
On top of that, if you do incentivize honest reviews, the FTC's Endorsement Guides require you to disclose the incentive clearly. Free or discounted products count as a material connection even when you ask for nothing in return.
That is the federal floor. But platform terms are stricter, and that is what usually bites first (next section).
Incentivizing your own staff
Employees and managers can leave reviews about their own business only with a clear, conspicuous disclosure of the relationship, and never if the review misrepresents that they are a real, independent customer. Even with disclosure, if insider reviews noticeably lift your average rating, the FTC can still treat it as deceptive, because most people read the star number and not the individual reviews.
So under US law, staff writing reviews about their own employer is a minefield, and paying them for positive ones is illegal. That is completely different from paying staff to collect reviews from real customers, which is clean and which the playbook above covers. Contests, leaderboards, and bonuses for reviews collected are about your team getting genuine customers to post. The law only bites when the review itself is fake or written by an insider posing as a customer.
Review gating
The FTC Rule does not contain a specific line banning "ask only happy customers." But the Endorsement Guides make it a potential deceptive practice, with one precise test (Example 11): gating is a problem "if it results in the posted reviews being substantially more positive than if the marketer had not engaged in the practice." Inviting all customers to review, even while openly hoping for good ones, is explicitly fine.
In plain terms: the line is the outcome. Skew your public reviews by filtering who you ask, and you are exposed. Ask everyone, and you are not.
What the platforms say
This is where it gets interesting, because the same action is banned on one platform and built into another.
Google<
Google's contributed-content policy bans, under "fake engagement":
Reviews "not based on a real experience."
Reviews "that have been paid for, directly or in kind."
Offering incentives "such as payment, discounts, free goods and/or services, in exchange for posting any review." Note this is broader than the FTC: Google bans incentives for any review, even an honest, sentiment-neutral one.
"Discourage or prohibit negative reviews, or selectively solicit positive reviews from customers." That is review gating, named and prohibited.
Reviews based on a conflict of interest, including current or former employees, contractors, competitors, and family.
Google's policy also now prohibits "merchants requesting that staff solicit a certain number of reviews" and reviews "that identify a staff member." That is the policy on paper. In practice it is among the least enforced lines Google has, for the simple reason that a review naming the employee who helped you is indistinguishable from a genuine one (because it usually is genuine).
Google does want you to ask. Its own guidance tells businesses to share a review link or QR code, and permits soliciting reviews "without offering incentives or attempting to influence the rating or the contents of the review." Asking is encouraged; cherry-picking and paying are not.
Penalties escalate from removing individual reviews, to disabling new reviews on your profile, to a public warning banner telling visitors that fake reviews were removed, to full profile suspension. Google reports removing hundreds of millions of policy-violating reviews a year.
Tripadvisor
Tripadvisor is the strictest of the three, and the most explicit. From its review integrity guidelines:
Incentives, banned outright regardless of rating: "It is against our guidelines to offer or promise anything in exchange for any reviews, irrespective of rating. Examples include offers for free drinks, discounts, entry into a contest, making donations to a cause in the name of a customer, etc."
Staff incentives, banned by name: it is a violation "to offer incentives designed to reward employees for encouraging reviews, e.g., a bonus for being mentioned in a review, or a contest for the highest number of reviews."
Affiliated reviews, banned: "Any person affiliated with a property listed on our site, in any way, may not write a review of that property."
Gating, banned, with a parity rule: "If any survey or external website ultimately directs users to submit a review on Tripadvisor, the user interface and experience for submitting positive and negative reviews must be identical." So you cannot send happy guests to your Tripadvisor page and unhappy ones to a private complaint form.
Penalties include ranking drops, exclusion from awards, and a public red badge warning travelers of suspected review manipulation. A flagged review can trigger a ranking penalty lasting 365 days, and multiple violations stack.
⚠️ Warning: Tripadvisor will usually warn before penalizing, but not always. At least one hotel has reported a red badge with no prior warning. Treat the first warning as the last one you will get.
G2 and B2B: a different world
G2, the B2B software review site, runs incentivized reviews as a core feature. From its community guidelines: "G2 will occasionally offer incentives (such as gift cards or a donation) for honest reviews," and "eligibility to receive an incentive is never based on the opinions, positive or negative, expressed in the review."
The same action that gets you penalized on Google is the engine that makes G2 work. The reason is not that G2 cracked some clever compliance code. It is that B2B reviews barely exist without an incentive. Almost nobody writes up the procurement software they use at work for fun. Take the incentive away and the reviews dry up, so the entire B2B category runs this way: G2, Capterra, TrustRadius, Gartner Peer Insights, all of them pay for reviews in one form or another.
What keeps it within the rules is mechanics, not virtue: the platform (not the vendor) hands out the incentive, it does not depend on the rating, and incentivized reviews are labeled. G2 also verifies reviewer identity, checks reviews manually, and bars reviews from your own staff or competitors.
The takeaway for you: incentivizing is normal and fine where the platform has built it in, which in practice means B2B. On consumer platforms like Google and Tripadvisor it is banned, and you cannot bolt your own version onto them. Same action, opposite rules, decided entirely by the platform.
Why review gating is a bad idea even where you could get away with it
Gating is the mechanical version: a survey wall that screens customers before you ask, or a flow that routes unhappy ones to a private form instead of the public review page. We advise against it. The legal risk is real, but it is not even the main reason:
It is lazy. It treats your rating as something to manufacture instead of earn.
It is dishonest. You are deliberately shaping what future customers see. That is the part regulators actually care about, and the part you should too.
The upside is tiny. Ask everyone, often, and your genuine happy majority already carries your rating. Gating adds almost nothing on top.
There is a better version of the same instinct. What gating tries to do (keep bad experiences off your public profile) is better achieved by catching the unhappy customer, fixing the problem, and earning the good review honestly. That is allowed everywhere, and it works better
The clean alternative: ask every customer often enough for a public review. Nobody wants to go on Google and rant about your business. People do this sort of thing only when they feel like they're out of options, and they're not being listened to. And to be fair, it usually works. Write a 1 star review, and problems suddenly start being fixed. Play the part, fix the problems. Treat 1 star reviews like cries for help, and ask your customers how you're doing often enough that they can tell you without having to go to Google.
A flipped 1-star is worth seven new 5-star reviews
Here is the math.
Take a profile with 500 reviews and a 4.5 average. One unhappy customer leaves a 1-star review. To hold your 4.5 average, you now need seven new 5-star reviews to cancel it out.
Why seven: a 5-star sits 0.5 above your 4.5 average, a 1-star sits 3.5 below it, and 3.5 ÷ 0.5 = 7. The number does not depend on whether you have 500 reviews or 5,000. One careless 1-star costs you seven hard-won 5-stars, every time, just to stay flat.
So instead of letting that review stand and chasing seven new ones, catch the customer, fix the problem, and get them to leave 5 stars instead of 1. You skip the 1-star, you skip the seven makeup reviews it would have cost, and you bank a genuine 5-star on top. One conversation does the work of seven separate happy-customer asks. The unhappy customer in front of you is the highest-leverage review you will touch all month, and you can only flip them if you catch them in time.
💡 Tip: This is why monitoring matters more than blasting requests. You cannot flip a negative you never saw. The businesses that protect their rating are the ones that get alerted to a bad review fast enough to fix it while the customer still cares.
How Reviewflowz fits
Everything in the safe playbook is something you can do by hand. Reviewflowz exists to make it automatic and safe:
Ask everyone, in writing, automatically. Review request flows over SMS, WhatsApp, and email, sent to every customer the same way, so you stay on the right side of the no-gating line by default.
Catch negatives in time to flip them. Monitoring and instant alerts across 200+ review platforms, so a 1-star reaches you while there is still time to fix the problem and earn the update.
Respond and track everywhere. Manage and reply to reviews across every platform from one place.
Ask constantly, ask everyone, and fix problems fast. You will never need the tactics that get businesses penalized.
This article is general information, not legal advice. Rules change and enforcement varies by jurisdiction and platform. When in doubt, check the linked source pages or ask a lawyer.