The Legal Guide to Google Reviews in Australia: What You Can and Can't Do (2026)

Why Most Australian Business Owners Are One Misstep Away From a Costly Legal Problem

Right now, somewhere in Australia, a well-intentioned business owner is about to break the law without realising it.

They might be offering customers a $20 voucher in exchange for a 5-star review. They might be filtering out unhappy customers from their feedback list. They might be threatening a reviewer with a defamation letter to scare them into deleting a one-star review. Or they might simply be sending review request SMS messages to a list of customers without the consent the Spam Act 2003 requires.

Every one of those moves is exposing them to a real, enforceable legal problem — and in 2026, the consequences are bigger than they've ever been.

From 28 March 2026, the maximum penalty for misleading or deceptive conduct under the Australian Consumer Law doubled from $50 million to $100 million under the Treasury Laws Amendment (Doubling Penalties for ACCC Enforcement) Act 2026. The ACCC has formally listed online reviews as a 2026–27 enforcement priority. Google's automated detection systems remove or block roughly one in five new reviews. And Australia's reformed defamation laws have introduced a "serious harm" threshold that has changed the legal landscape for both reviewers and the businesses they review.

The good news: the rules are clear once you know where to look. The bad news: most Australian business owners have never read them — and the ones charging for "review services" rarely read them out loud, because doing so would lose them the sale.

This is the complete 2026 legal guide to Google reviews in Australia — what you can do, what you can't do, what your customers can do, what Google can do, and how to build a review collection system that's compliant, profitable, and effectively bulletproof.

This article is written for general educational purposes. It is not legal advice. For a specific issue affecting your business, speak to a qualified Australian commercial lawyer.

---

The Legal Framework: Five Australian Laws Every Business Owner Should Know

Google reviews in Australia don't sit under a single law — they sit at the intersection of five. Most owners only know one of them. The ones who know all five rarely make compliance mistakes.

1. The Australian Consumer Law (Schedule 2, Competition and Consumer Act 2010)

This is the heavyweight. The Australian Consumer Law (ACL) prohibits misleading or deceptive conduct in trade or commerce, and it's the primary law the ACCC uses to prosecute review-related breaches. Posting a fake review, commissioning a fake review, publishing reviews you know to be misleading, selectively editing reviews to skew the picture, or representing your star rating in a misleading way are all ACL breaches.

Maximum penalty (from 28 March 2026): the greater of $100 million, three times the benefit obtained, or 30% of adjusted turnover during the breach period — whichever is highest. For individuals, $2.5 million per breach.

2. The Spam Act 2003 (Cth)

If you send review request SMS messages or emails, you are sending commercial electronic messages. The Spam Act requires three things for every message: consent (express or inferred), identification of the sender, and a functional unsubscribe mechanism. Breaching the Spam Act can attract penalties of more than $700,000 per day for repeat corporate offenders — and the Australian Communications and Media Authority (ACMA) has been actively enforcing this against businesses running review-collection campaigns.

3. The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs)

If your business has annual turnover above $3 million (or you fall into one of the special categories — health, credit, contractors to government, sale of personal information, etc.), you're subject to the Privacy Act. Even below the threshold, the Australian Privacy Principles increasingly inform best practice — and the 2024–25 reforms expanded individual rights and increased penalties. Customer contact details collected for review requests are personal information and must be handled accordingly.

4. Defamation Law (Model Defamation Provisions, as Reformed in 2021)

Defamation in Australia is state-based but operates under harmonised model provisions. The 2021 reforms introduced a "serious harm" threshold — a plaintiff must now prove the publication has caused, or is likely to cause, serious harm to their reputation. Defences include truth, honest opinion, and qualified privilege. Both reviewers and businesses can be defendants depending on the circumstances.

5. Google's Contractual Terms and Review Policies

Although not a "law" in the strict sense, Google's policies are contractually binding on every Australian business that operates a Google Business Profile. Breaching them isn't a court matter — it's a profile suspension, a public notification banner, or a complete loss of your local search visibility. In commercial reality, this often hits a small business harder than an ACCC fine ever would.

Together, these five frameworks set the rules of the game. The rest of this guide translates each of them into practical "you can" and "you can't" lists.

---

What You CAN Do: Legal Practices for Collecting Google Reviews in Australia

The vast majority of effective review collection is fully legal. Owners who think compliance has to mean a smaller pipeline are operating on outdated information.

✅ Ask Every Customer for an Honest Review

Google's policy and the ACCC's guidelines both confirm this clearly. You can ask every customer who has had a genuine transaction with your business for an honest review — verbally, in writing, by SMS, by email, in person, or via an NFC tap card. The compliance lever isn't whether you ask. It's *how* you ask, and whether you ask everyone equally.

✅ Make the Review Process as Easy as Possible

Removing friction is explicitly encouraged. Linking customers directly to your Google review page, providing a QR code, handing them an NFC card that opens the review screen on tap — these are not just permitted, they are exactly what Google's policies were designed to support. The customer chooses whether to write the review and what to write. You are simply opening the door.

✅ Send One Review Request and One Polite Follow-Up

Provided you comply with the Spam Act (consent, identification, unsubscribe link), you can send an initial review request and one gentle reminder roughly seven days later if there's no response. Some platforms allow a third reminder at 14 days. Beyond that, you're harassing rather than serving — and you're inviting both spam complaints and a sharp dip in conversion.

✅ Respond to Every Review — Positive and Negative

Owner responses are not just allowed, they're a documented local search ranking signal. You can thank a positive reviewer, address a negative reviewer professionally, correct factual misstatements, and invite the reviewer to take the conversation offline. Just don't reveal personal information about a real customer in a public reply — that crosses a privacy line and, in some industries (health, financial advice), can be a regulatory breach.

✅ Report Reviews That Violate Google's Policies

Google's review policies prohibit spam, off-topic content, conflict-of-interest reviews, hate speech, harassment, illegal content, sexually explicit content, deceptive content, and impersonation. If a review breaches any of these, you have every right to flag it through your Google Business Profile, escalate via the Google Reviews Management Tool, or contact Google Business Profile support directly with evidence.

✅ Pursue Defamatory Reviews Through Lawful Channels

If a review contains false factual statements (not opinions) that have caused or are likely to cause serious harm to your reputation, defamation action may be available. The 2021 serious harm threshold has raised the bar — but the path is still open. A cease-and-desist letter from a defamation lawyer often resolves the issue without court action. The ACCC may also be the right channel where the fake reviews are part of a competitor's broader misleading conduct.

✅ Use NFC Review Cards or Printed QR Codes

A tap-to-review NFC card is hardware. It does not filter customers, gate reviews, incentivise reviewers, or generate review content. It simply opens your Google review page when tapped, with no app download or login from scratch required. This is the single most legally safe high-conversion review collection tool available to Australian businesses — and it sits squarely inside Google's "remove friction for genuine customers" guidance.

---

What You CANNOT Do: Practices That Will Get You Penalised in Australia

The list of prohibited practices has expanded considerably in the last 18 months. Many practices that were grey areas in 2022 are now unambiguous violations in 2026.

❌ Buy, Commission, or Sell Fake Reviews

This is the single largest risk surface for Australian businesses today. Buying reviews from Telegram channels, freelancer marketplaces, "review services", or any source where the reviewer has not actually used your business is a breach of the Australian Consumer Law and Google's Rating Manipulation policy. The ACCC has prosecuted multiple Australian businesses for this exact behaviour:

Business	Year	Penalty	Conduct
Bloomex Pty Ltd	2026	$1 million	Misleading star ratings on its website
HealthEngine	2020	$2.9 million	Editing patient reviews and selectively suppressing negatives
Meriton Property Services	2017	$3 million	"Masking" — falsifying email addresses to suppress likely negative reviewers
Service Seeking	2019	$600,000	Publishing reviews that misled consumers
Citymove	2018	$6,600	Copying testimonials from unrelated review websites

These cases predate the 2026 penalty increase. The same conduct today carries a maximum penalty up to $100 million for the most serious breaches.

❌ Offer Anything of Value in Exchange for a Review

Discounts, gift cards, free products, free services, prize draw entries, loyalty points, "thank-you gifts", waived fees — every form of incentive in exchange for a review is now prohibited under both Google's policy and the ACCC's guidelines. The policy treats the incentive itself as the violation, regardless of whether the resulting review is positive, negative, or neutral.

This includes the very common practice of offering a small discount "for leaving a review of any kind". It's still an incentive. It's still prohibited.

❌ Filter or "Gate" Customers Based on Predicted Satisfaction

Review gating — the practice of asking only happy customers for public reviews while routing unhappy customers to a private feedback form — was tolerated for years. It is now an explicit violation under both Google's policy and increasingly under ACCC guidance, because the resulting public review profile misrepresents the business's true customer experience.

The penalties are severe. Google may remove the gated reviews, demote your local search ranking, apply a public notification banner visible to every searcher, or fully suspend your Google Business Profile. The ACCC may also pursue misleading conduct claims under the Australian Consumer Law. Internationally, the precedent is clear — the US FTC fined Fashion Nova $4.2 million for suppressing reviews below four stars, and similar enforcement is now operating in Australia.

❌ Use AI to Generate Review Content for Customers

This is the most important policy change most Australian businesses have not registered. Google now explicitly prohibits AI-generated review content — even when the underlying customer experience was genuine. If a customer uses ChatGPT, Gemini, Claude, or any other model to write the review for them, the review violates Google's policy. Google's Gemini-powered detection systems actively identify and remove these reviews.

You cannot offer customers an AI tool that "writes their review for them". The review must come from the customer, in the customer's own words.

❌ Pressure Customers On-Site

Asking a customer for a review while they're still in your shop or job site is allowed. Pressuring them is not. Standing over the customer while they write, watching the screen, refusing to release the receipt or the product until a review is posted, or insisting on a 5-star rating are all explicit violations under the 2026 policy update.

The lawful approach: hand over the card, explain how it works in one sentence, and walk away. The review belongs to the customer.

❌ Ask Customers to Mention Specific Keywords or Staff Names

A new 2026 rule that is widely violated. You cannot ask customers to "please mention Sarah in your review" or "please mention our Brunswick location" or "please include the word emergency plumber". The rationale: it produces unnatural review content that signals manipulation to Google's pattern-detection systems.

You can ask for an honest review of the experience. You cannot direct the content of the review.

❌ Set Staff Review Quotas

Tying staff performance metrics to a hard target of weekly reviews is now an explicit violation. Quotas drive coercive behaviour, unnatural review patterns, and on-site pressure. You can build a review-collection culture inside your team. You cannot turn it into a KPI tied to retention or pay.

❌ Have Employees, Suppliers, Family or Friends Review Your Business

Anyone with a professional or personal connection to the business is prohibited from reviewing it. Google's account-clustering detection identifies these patterns automatically — shared IP addresses, shared device signatures, similar account creation dates, overlapping review histories. The reviews are removed, often along with collateral damage to surrounding genuine reviews.

❌ Send Review Request SMS or Email Without Spam Act Consent

Many Australian businesses bulk-message historical customer lists without thinking about the Spam Act. The Act requires consent (express or, in many cases, inferred from a continuing customer relationship), clear sender identification, and a functional unsubscribe mechanism in every message. ACMA has issued substantial penalties for breaches in adjacent industries, and review-collection campaigns are not exempt.

❌ Threaten or Intimidate Reviewers

Threatening a customer with a defamation suit, a debt collector, or any other consequence to coerce them into removing a review is a serious mistake. It can constitute unconscionable conduct under the ACL, undue harassment under the Australian Consumer Law's Part 3-1, or, in extreme cases, criminal behaviour under state laws on threats and intimidation. It's also reputationally devastating once it leaks (and these things always leak).

❌ Delete Genuine Negative Reviews Through Manipulation

You cannot delete a genuine negative review you simply disagree with. You also cannot use technical tricks (mass-flagging, coordinated complaint campaigns, fake counter-reviews) to suppress legitimate criticism. The lawful response to a genuine negative review is a calm, professional public reply and a private effort to resolve the underlying issue.

---

What Customers Can and Can't Do: The Reviewer's Side of the Law

Australian consumer protection law cuts both ways. Customers also have clearly defined rights — and clearly defined limits.

✅ Customers CAN

• Post honest opinions about a genuine experience, even if the opinion is harsh.
  
• Use strong language to describe their experience, provided it doesn't cross into false factual claims.
  
• Refer to objectively verifiable facts (delays, pricing, product condition, staff conduct) — provided those facts are accurate.
  
• Compare a business unfavourably with a competitor, provided the comparison is honest.
  
• Decline to be contacted by a business after posting a review.
  
• Edit or delete their own review at any time.

❌ Customers CANNOT

• Post false factual claims about the business — for example, alleging illegal conduct that didn't occur.
  
• Defame an identifiable individual (manager, owner, staff member) where the publication has caused or is likely to cause serious harm under the 2021 reformed defamation provisions.
  
• Post reviews for businesses they have not actually transacted with, in coordination with another party.
  
• Be incentivised by the business — accepting a discount or gift in exchange for a 5-star review puts the customer in breach of consumer protection norms, not just the business.
  
• Publish personal information about staff members that breaches the Privacy Act or workplace safety obligations.
  
• Engage in a sustained, coordinated campaign of false reviews — this can amount to malicious harassment and, in extreme cases, criminal stalking under state law.

The Defamation Line for Australian Businesses

The 2021 defamation reforms made it harder to sue for minor reputational damage. The serious harm threshold requires the publication to have caused — or to be likely to cause — serious harm to the business's reputation. For a corporation, the equivalent is "serious financial loss".

In practice, this means:

• A single one-star review, even an unfair one, will rarely meet the serious harm threshold.
  
• A review containing specific false factual allegations (claims of illegal conduct, fraud, food poisoning that didn't happen, professional misconduct) may meet the threshold.
  
• A sustained campaign of false reviews from an identifiable source (an ex-employee, a competitor) is much more likely to meet the threshold.
  
• Defences include truth, honest opinion, and qualified privilege. A reviewer who can establish that their review was genuinely held opinion based on disclosed facts has a strong defence.

For most Australian businesses, defamation action is the last resort. It's slow, expensive, and uncertain. The far better strategy sits below.

---

Why Your Best Legal Defence Is a Strong Review Collection System

Here's the strategic insight that separates businesses constantly fighting reputation fires from businesses that quietly dominate their suburb.

You cannot prevent every fake review, every defamatory comment, or every disgruntled ex-customer. You can make all of them statistically irrelevant.

A single 1-star fake on a profile with 18 reviews drops your average from 4.9 to 4.7. The same fake on a profile with 247 reviews drops it from 4.9 to 4.89. Future customers don't notice. Google's algorithm doesn't care. The attack lands on a target so well-armoured that nothing happens.

Compare two Australian businesses competing for the same suburb:

Metric	Business A	Business B
Total Google reviews	22	248
Average rating	4.4★	4.9★
Most recent review	3 months ago	Yesterday
Effect of one fake 1-star	Drops to 4.2★	Stays at 4.89★
Local Pack risk	Drops out	No movement
Defamation legal threshold	Lower (more fragile reputation)	Higher (more resilient)

Both businesses provide great service. The difference is the review-collection system in the background — and the size of the moat it's built around their reputation.

A business collecting four new genuine reviews per week accumulates over 200 trust signals in 12 months. Each one is keyword-rich content for local SEO, fuel for AI search engine recommendations (Generative Engine Optimisation), and another brick in a wall that fake reviews and unfair criticism can't get through.

The challenge has never been customer willingness — it's friction. Most happy customers, even ones who say "yeah, I'd happily leave a review," never get past the eight-step process of finding your business on Google, locating the listing, scrolling to reviews, signing in, choosing a star rating, and writing something. The motivation is real. The friction is fatal.

This is the gap an NFC review card closes — and it does so while staying perfectly inside every legal and policy line.

---

The NFC Review Card: The Legally Safest, Highest-Converting Review Tool in Australia

A professionally printed credit-card-sized card with an embedded NFC chip and a printed QR code on the front. When a customer taps the card on their smartphone — or scans the QR code — their phone opens your Google review page in two seconds. No app. No wifi. No searching. No login from scratch.

It's the legal gold standard for one simple reason: it doesn't filter, gate, incentivise, coerce, generate AI content, or violate any line in any of the five legal frameworks above. Every qualifying customer can be offered the same card with the same neutral wording, regardless of how the interaction went. The customer chooses whether to tap. The customer chooses what to write. The customer's review is theirs alone.

That's the standard:

• ✅ Compliant with Google's review policies
  
• ✅ Compliant with the Australian Consumer Law
  
• ✅ No Spam Act exposure (no electronic message is being sent)
  
• ✅ Minimal Privacy Act exposure (no personal data is collected by the card itself)
  
• ✅ Encourages honest, voluntary, in-the-customer's-own-words reviews
  
• ✅ Removes friction without manipulating behaviour

Why It's the Highest-Converting Compliant Option

A digital follow-up sent two days after the service might convert at a small single-digit percentage. An in-person tap-to-review ask, presented at the Peak-End moment of the customer experience, converts at multiples of that — because every drop-off point in the traditional review-request funnel has been eliminated.

You're capturing the review while the customer is still in front of you, while the experience is still fresh, while the motivation is still peak. And you're doing it through a hardware tool — so there's no automation pattern for Google's enforcement systems to flag, no SMS list to manage under the Spam Act, no email database to protect under the Privacy Act, and no review gating risk under the ACL.

Free Delivery Australia-Wide — Whatever State or Territory You're In

Whether your business is in Melbourne's CBD, the suburbs of Sydney, the heart of Brisbane, a beachside precinct in Perth, the shopping strips of Adelaide, or a regional town anywhere across Victoria, New South Wales, Queensland, South Australia, Western Australia, Tasmania, the Northern Territory, or the ACT — there is no barrier to getting started.

We offer free delivery on all NFC products to every state and territory in Australia, including regional and rural areas. Every NFC review card we ship is:

• ✅ Professionally printed — clean universal design or fully branded with your business
  
• ✅ Embedded with a reliable NFC chip compatible with all modern smartphones (iPhone 7+, all modern Android)
• ✅ Printed with a backup QR code for 100% device compatibility
  
• ✅ Pre-configured to your specific Google review page — zero technical setup required
  
• ✅ Designed for daily use in real Australian business environments
  
• ✅ Backed by Australian-based support — Melbourne-based, Australia-served

👉 Shop NFC Review Cards — Free Delivery Australia-Wide

---

Your Compliance Action Plan: Eight Steps to a Legally Bulletproof Review Strategy

Here's the practical playbook for an Australian business that wants every benefit of a strong review profile without any of the legal or policy risk:

1. Audit your current review collection today. If anything pre-screens customers, incentivises reviews, asks for specific content, generates AI review text, or sends bulk SMS/email without proper consent — pause it now.
   
2. Move to a same-for-everyone request flow. Every customer who completed a transaction is offered a public review opportunity with neutral wording. No filters, no gates, no incentives.
   
3. Place an NFC review card at every face-to-face customer touchpoint. Reception desk, checkout counter, ute dashboard, treatment room, settlement table — wherever the moment of completion happens.
   
4. Limit any digital follow-ups to one or two messages, with full Spam Act compliance. Sender identification, functional unsubscribe, and either express or inferred consent on every recipient.
   
5. Respond to every review within 24 to 48 hours — positive and negative. Owner response rate is a confirmed local ranking signal and a major GEO authenticity indicator. Keep responses professional, never reveal customer personal information, and never threaten legal action publicly.
   
6. Build steady volume over time, not spikes. A few new reviews every week, every month, for years. That pattern is unflappable under both Google's anomaly detection and any future ACCC scrutiny.
   
7. For genuinely defamatory reviews, escalate properly. Flag through Google. Escalate via the Reviews Management Tool. Document everything. Consult a defamation lawyer before any direct contact with the reviewer.
   
8. Train your team on what to say and what not to say. No incentives, no quotas, no asking for specific content, no on-site pressure. Hand over the card, explain how it works in one sentence, and walk away.

Done well, this system produces a Google Business Profile that ranks higher in local search, converts more visitors into customers, gets cited more often by AI search engines, and is essentially impervious to legal and policy risk — all at the same time.

👉 Shop NFC Review Cards — Free Delivery Australia-Wide

---

Frequently Asked Questions

Is it illegal to buy Google reviews in Australia?

Yes. Buying, commissioning, or arranging fake Google reviews — positive or negative — is a breach of the Australian Consumer Law (Schedule 2, Competition and Consumer Act 2010). The ACCC actively prosecutes this through the Federal Court. From 28 March 2026, the maximum penalty for misleading conduct increased to $100 million for corporations under the Treasury Laws Amendment (Doubling Penalties for ACCC Enforcement) Act 2026. Recent precedents include $1 million against Bloomex (2026), $2.9 million against HealthEngine, and $3 million against Meriton.

Is it legal to offer a discount in exchange for a Google review?

No. Offering anything of value — discounts, vouchers, free products, prize draw entries, loyalty points, or "thank-you" gifts — in exchange for a review violates Google's policy and breaches the ACCC's guidelines on online reviews. The incentive itself is the violation, regardless of whether the review is positive, neutral, or honest.

Can I delete a negative Google review legally?

You cannot delete a genuine negative review just because you disagree with it. You can flag and report a review that breaches Google's policies (spam, off-topic, conflict of interest, hate speech, defamatory factual claims, etc.). Google decides whether to remove it. Trying to manipulate Google into removing legitimate negative reviews — through mass-flagging or fake counter-reviews — is itself a policy and consumer law violation.

Can I sue someone for posting a fake or unfair Google review in Australia?

Yes, in some circumstances. Defamation action may be available where a review contains false factual claims (not opinions) that have caused or are likely to cause serious harm to your reputation under the 2021 reformed Australian defamation laws. The threshold is materially higher than it was before 2021. Always speak to a defamation lawyer before pursuing legal action — most cases are better resolved through Google's removal channels first.

Do I need consent to send Google review request SMS or email in Australia?

Yes. Review request messages are commercial electronic messages under the Spam Act 2003. You need either express consent or inferred consent (a continuing business relationship usually qualifies), clear sender identification, and a functional unsubscribe mechanism in every message. ACMA actively enforces the Spam Act and breaches can attract substantial penalties.

Is my customer database for review requests covered by the Privacy Act?

If your business has annual turnover above $3 million, or you fall into a special category (health, credit, contractor to government, sale of personal information), yes — and you must handle customer contact details in line with the Australian Privacy Principles. Even smaller businesses are increasingly expected to follow APP-aligned best practice, and the 2024–25 Privacy Act reforms have raised the standard further.

Can I ask customers to mention specific keywords or my staff member's name in their review?

No — this is now an explicit violation under Google's 2026 policy update. You cannot direct the content of a customer's review. You can ask for an honest review of the experience, but you cannot ask for specific keywords, staff names, or location names to be included.

Are NFC review cards legal in Australia?

Yes — and they are the most legally safe and policy-compliant review collection tool available to Australian businesses. NFC review cards are hardware that simply opens your Google review page when tapped. They don't filter customers, gate reviews, incentivise reviewers, or generate review content. Every customer can be offered the same card with the same neutral wording. The customer alone chooses whether to tap and what to write. This sits squarely inside Google's "remove friction for genuine customers" guidance and complies with the Australian Consumer Law, the Spam Act, and the Privacy Act simultaneously.

What happens if Google catches me violating its review policies?

Enforcement is now overwhelmingly automated. Possible consequences include silent removal of the offending reviews, removal of all reviews on your profile in serious cases, ranking demotion in local search, a public notification banner displayed to consumers searching for your business explaining that contributions have been paused, and full suspension of your Google Business Profile. The ACCC may also pursue misleading conduct claims under the Australian Consumer Law, with maximum penalties now up to $100 million.

Can I use AI to draft my responses to Google reviews?

Yes. Using AI to draft a response to a customer review is allowed, provided the business owner reads, edits, approves, and posts the response themselves. This is very different from using AI to generate review content for customers, which is now explicitly prohibited under Google's policy.

Do you deliver NFC review cards to regional and rural Australia?

Yes — free delivery to every state and territory in Australia, including regional, rural, and remote postcodes. Whether your business is in metropolitan Melbourne, the suburbs of Sydney, the Sunshine Coast, the Adelaide Hills, regional Western Australia, or anywhere across Tasmania or the Northern Territory, your card ships free with no minimum order.

---

Published by Excel My Business Reviews — Melbourne-based NFC product specialists helping Australian businesses grow through compliant, high-converting Google review collection. Free delivery Australia-wide.

 

Disclaimer: This article is for general educational purposes only and does not constitute legal advice. Australian Consumer Law, the Spam Act, the Privacy Act, defamation law, and Google's review policies all change over time and apply differently to different business types. For any specific issue affecting your business, please consult a qualified Australian commercial or defamation lawyer.