A one-star review that says a business was rude is one problem. A review that accuses the owner of theft, fraud, assault, forged records, unsafe practices, or criminal conduct is a different legal file. The business must preserve evidence, separate opinion from factual accusation, avoid retaliation, and decide whether the matter belongs with platform reporting, counsel, insurance, law enforcement, accounting review, or no public response at all.
Why Criminal Language in a Review Changes the File
Online reputation disputes often begin as ordinary consumer friction. A customer says service was slow, the price was too high, the owner was difficult, or the experience did not meet expectations. Those statements can be frustrating, but they usually fit within the ordinary world of consumer criticism. The risk profile changes when the review moves from dissatisfaction to accusation: the business stole my money, committed fraud, forged my signature, assaulted me, ran an unsafe facility, falsified records, endangered a customer, or threatened someone. At that point, the issue is no longer only reputation management. It is a legal-risk file that may touch defamation, evidence preservation, insurance notice, accounting records, employment documents, customer privacy, and sometimes criminal-law vocabulary.
A business owner should not respond to criminal language with criminal language of their own. The public reply is not the place to accuse the reviewer of extortion, blackmail, perjury, harassment, or fraud unless counsel has reviewed the facts and the jurisdictional risk. A reckless response can create a second problem: the original review may be weak or false, but the business reply may disclose private information, defame the reviewer, waive a strategic advantage, or make the dispute more searchable. The correct first move is quieter. Preserve the evidence, identify the exact statements, compare them with business records, and create a decision tree before anyone posts in public.
This article is written for U.S.-focused business owners and professional practices, including family businesses, hospitality providers, accounting-adjacent companies, medical or wellness offices, contractors, online agencies, and closely held companies whose records may later matter to owners, fiduciaries, insurers, regulators, or courts. It is general information and attorney advertising, not legal advice. The point is practical discipline: a review that alleges a crime should be handled like a file, not like a comment thread.
Defamation Starts With the Difference Between Opinion and Fact
Defamation law varies by state, but the basic distinction is familiar. A harsh opinion is not the same as a false factual assertion. The Legal Information Institute describes defamation as a statement that injures reputation, with the tort generally involving a false statement presented as fact, publication to a third person, fault, and reputational harm. That framework matters because online reviews often mix opinion, emotion, exaggeration, and specific factual allegations in the same paragraph. A reviewer may write that the service was terrible, then add that the owner stole a watch, forged a receipt, charged a card without authorization, used fake credentials, or ran a criminal operation.
The business should mark up the review sentence by sentence. Which words are opinion? Which words are verifiable factual claims? Which words imply undisclosed facts? Which words accuse the business, owner, employee, or professional of criminal wrongdoing? Which words may violate a platform policy even if they are not actionable defamation? This classification step keeps the business from overclaiming. Calling every bad review defamatory makes the file weaker. Identifying the exact factual accusation and matching it to records makes the file stronger.
The business also needs to ask who is being accused. A review that criticizes a brand generally may create different issues from a review naming an individual owner, employee, accountant, trustee, agent, doctor, manager, or contractor. If the accusation names a person, the risk may include personal reputation, employment consequences, licensing concerns, insurance notice, and separate counsel questions. If the accusation targets a company, the evidence file should still identify which people had knowledge and which records can prove or disprove the statement.
Extortion Pressure Is Different From a Bad Review
Some review disputes include a demand: refund me or I will accuse you publicly, pay me or I will post that you committed a crime, give me free services or I will contact your clients, remove your invoice or I will report you to the police. Whether a demand is unlawful depends on facts and law, and businesses should avoid self-diagnosing criminal statutes from a phone screen. Still, demand language is important evidence and should be preserved exactly. Do not summarize it from memory. Save the message, the account, the number, the date, the surrounding conversation, and any later edits or deletions.
New York Penal Law Section 135.60 addresses coercion in the third degree and includes, among other categories, compelling or inducing a person through fear that someone will accuse a person of a crime, expose a secret or asserted fact tending to subject a person to hatred, contempt, or ridicule, cause a boycott or other group action injurious to a business, or otherwise materially harm a person's business, reputation, or relationships. Federal law also addresses interstate communications in specific threat and extortion contexts. 18 U.S.C. Section 875 includes provisions involving interstate communications containing threats, including certain threats made with intent to extort. Those authorities do not turn every aggressive customer message into a criminal case. They do show why demand language should be preserved carefully and reviewed by qualified counsel where serious.
The business should not threaten the reviewer back. It should not post the demand publicly unless counsel says that is strategically and legally appropriate. It should not make a payment without documenting the reason and the advice received. It should not promise silence, delete records, or ask employees to create a cleaner version of events. The clean file is the original file plus a disciplined chronology, not a rewritten history.
Evidence Preservation Comes Before Reporting, Replying, or Negotiating
Preservation should happen before the business reports the review, replies publicly, contacts the reviewer, sends a demand, files an insurance claim, or asks staff to explain. Online content changes quickly. A reviewer may edit the text, delete a profile, change a username, add photos, move the accusation to another platform, or send private messages that alter the context. The business should capture the review URL, date, star rating, visible profile information, screenshots, page context, device context where useful, and any related private messages or demands.
Screenshots are helpful, but a serious file should go further when feasible. Save PDFs of pages, exports of messages, original emails with headers where appropriate, payment processor records, appointment logs, invoices, receipts, contracts, staff schedules, CCTV retention status, insurance policies, customer-service tickets, refund notes, and accounting entries. If the matter later becomes litigation, discovery, insurance review, or a platform escalation, the business will need more than a cropped image pasted into a message thread.
Federal Rule of Civil Procedure 37 addresses failures to make disclosures and cooperate in discovery, including sanctions in federal litigation. The rule is not a substitute for legal advice and does not define every preservation duty in every situation, but it is a useful reminder that lost electronically stored information can become a serious litigation issue. Businesses should pause ordinary deletion for relevant records once a serious dispute is reasonably foreseeable. A small business does not need an enterprise legal department to do that. It needs a clear instruction: do not delete, edit, overwrite, or privately debate the evidence in casual channels.
The Accounting Trail Can Prove or Disprove the Accusation
Many criminal-sounding review accusations are really business-record disputes. A customer says the company stole money, but the file may show a signed authorization, a refund policy, a partial chargeback, or a service change. A partner says the owner committed fraud, but the file may show poor bookkeeping, undocumented reimbursements, shareholder loans, or genuine related-party transactions that need explanation. A client says an invoice was forged, but the business may have original quote approvals, email confirmations, accounting-system logs, or payment processor records. The legal classification depends on facts, but the facts often live in the accounting file.
The IRS recordkeeping guidance explains that good records help a business monitor progress, prepare financial statements, identify income sources, track deductible expenses, prepare returns, and support items reported on returns. That tax-focused discipline is equally valuable in disputes because the same records can show whether money was charged, refunded, earned, disputed, reversed, or misclassified. Purchases, sales, payroll, and other transactions generate supporting documents that should connect to the business books. If a review accuses the business of theft or fraud, the accounting trail is often where the first answer starts.
Where bookkeeping, tax, company records, and legal exposure overlap, the business should consider whether an outside accounting review is needed before counsel evaluates strategy. For international or owner-managed companies, discreet support from a best accounting firm can help organize invoices, ledgers, tax records, payment evidence, and company files without turning the public response into an accounting lecture. The point is not to force an accounting vendor into every legal matter. The point is that financial accusations need financial proof.
Google, Fake Engagement, and Review-Rule Compliance
Platform strategy should be separate from legal strategy, but the two files should talk to each other. Google's Maps user-generated-content policy states that contributions should reflect genuine experiences and prohibits fake engagement. It identifies concerns such as rating manipulation, content that is not based on a real experience, conflicts of interest, impersonation, harassment, personal information, and other restricted content categories. A business seeking removal should translate the problem into platform language instead of sending a broad complaint that the review is unfair.
If the reviewer was never a customer, the report should say how the business checked. Search appointment records, payment systems, branch logs, booking names, phone numbers, email addresses, account numbers, and relevant dates. If the reviewer was a customer but the criminal accusation is false, the report should focus on the false accusation, policy category, and any private-information or harassment issue. If the review is part of a demand campaign, preserve the demand before submitting the platform report. Platform reviewers usually respond better to concise evidence than to outrage.
The Federal Trade Commission's Consumer Reviews and Testimonials Rule, effective October 21, 2024, addresses deceptive and unfair conduct involving consumer reviews and testimonials. That rule is a warning to businesses as well as reviewers. A business harmed by a false review should not respond by buying positive reviews, paying insiders for undisclosed testimonials, suppressing honest criticism improperly, or creating fake counter-reviews. Reputation pressure is not a license to manipulate the marketplace. Compliance should remain part of the response plan.
Case Study: The False Theft Review After a Refund Dispute
Consider a consumer-service business that receives a review saying, 'They stole from me, forged the receipt, and should be arrested.' The owner recognizes the customer as someone who requested a refund after receiving the service. The owner is angry and wants to reply immediately with the customer's full name, appointment time, payment history, and private messages. That instinct is understandable but risky. The public review contains a criminal accusation. The business reply should not create new privacy, defamation, or escalation problems.
A disciplined response starts with preservation. Save the review, profile, URL, screenshots, and the customer's related messages. Pull the original booking, receipt, refund policy, signed authorization, payment processor confirmation, staff schedule, internal notes, and any refund correspondence. If the customer threatened to post unless paid, preserve that message separately. Then classify the statements: 'stole' may be a criminal accusation, 'forged the receipt' is a factual allegation, 'should be arrested' is inflammatory opinion tied to those alleged facts. Counsel can then evaluate whether the statements are provably false, defamatory, platform-violating, extortive, or best handled through a restrained public reply.
The public response might be brief: the business takes accuracy seriously, cannot discuss private customer details publicly, has no record supporting the accusation as stated, and invites the person to use a private channel. Depending on the facts, the business may report the review to Google, notify insurance, send a preservation letter, consult counsel, or document a customer-service resolution. The important point is sequencing. Evidence first, classification second, response third.
Insurance, Employment, Licensing, and Fiduciary Spillover
A criminal-sounding review can trigger more than reputation risk. Professional liability, general liability, cyber, employment practices, directors and officers, commercial crime, or errors-and-omissions coverage may have notice requirements. Some policies require prompt notice of claims or circumstances that may lead to claims. A business should not assume that an online review is too informal for insurance review. If the accusation is serious, preserve the policy and ask the broker or coverage counsel how to handle notice.
Employment issues may also appear. If the review names an employee, the business should not discipline that person solely based on the public accusation without reviewing records and employment-law obligations. If the accusation involves harassment, assault, unsafe practices, discrimination, theft, or misuse of customer information, the business may need an internal investigation. That investigation should be documented and controlled. Staff should be told to preserve messages and records, not to debate the reviewer in public or create side-channel commentary.
For family businesses and fiduciary contexts, reputation disputes can spill into ownership and estate issues. A deceased owner's records may be needed by an executor. A trustee who owns a business interest may need to preserve company documents. An agent under a power of attorney may need authority to access platform accounts. Glinskylaw's articles on business records and evidence preservation, trust administration records, and executor and trustee duties explain why organized records protect decision-makers when questions arrive later.
A Practical Checklist for the First 48 Hours
First, preserve the public content. Capture the review, URL, rating, date, profile, screenshots, visible account context, and any related platform notifications. Second, preserve private communications. Save emails, texts, direct messages, voicemail details, demand language, refund discussions, customer-service tickets, and staff communications. Third, identify the accusation. Mark exact words that allege theft, fraud, assault, forgery, unsafe conduct, professional misconduct, or other criminal behavior. Separate those words from opinion and exaggeration.
Fourth, pull business records. Gather invoices, receipts, payment processor data, bank records, booking logs, contracts, intake forms, employee schedules, refund notes, accounting ledger entries, insurance policies, and relevant corporate records. Fifth, control communication. Name one internal owner for the file, tell staff not to delete or edit records, and stop casual replies. Sixth, choose the route: platform report, private customer response, public reply, legal review, insurance notice, accounting review, law-enforcement consultation, or no action.
Seventh, document the decision. Write down who reviewed the file, what was preserved, what route was chosen, and why. That note should be factual, not emotional. If the business later needs to explain its conduct to a platform, insurer, lawyer, court, regulator, owner, or fiduciary, the contemporaneous decision record can matter. The goal is not to make every review a lawsuit. The goal is to keep a serious accusation from being handled casually.
What Not to Do
Do not delete the review evidence because it is upsetting. Do not ask employees to rewrite old notes. Do not edit invoices without preserving originals. Do not threaten the reviewer in public. Do not post private customer information, medical information, payment details, addresses, phone numbers, or legal strategy. Do not call the reviewer an extortionist unless counsel has reviewed the facts. Do not buy positive reviews to bury the accusation. Do not ask friends, staff, or family to post fake testimonials. Do not assume that the platform will understand the legal issue without a clear evidence package.
Also avoid over-escalation. Not every criminal-sounding phrase justifies litigation or police involvement. Some reviewers use dramatic language loosely. Some disputes are better resolved with customer service. Some public replies are more damaging than the original review. Some platform reports fail because the evidence is thin. A measured response protects credibility. The business that can show original records, a clean chronology, and restrained communication usually looks more trustworthy than the business that shouts back.
Finally, do not delay legal review when the accusation could cause real harm. If the review names a person, alleges a serious crime, includes private data, comes with a demand, threatens regulatory or police reporting, involves a professional license, connects to an insurance claim, or appears coordinated, the business should consult qualified counsel promptly. Early advice can prevent preservation mistakes, public-response errors, and missed notice deadlines.
Bottom Line
An online review that accuses a business of a crime should be handled with professional calm. The first question is not how to win the public argument. The first question is what must be preserved. The second question is what the words actually allege. The third question is which records prove or disprove the accusation. Only after those steps should the business decide whether to report, reply, negotiate, notify insurance, consult an accountant, contact counsel, or take no public action.
The best response is not always aggressive. It is organized, truthful, platform-aware, legally cautious, and proportional. A false criminal accusation can damage a business, but a careless response can damage it further. Treat the matter as an evidence file, keep the public tone restrained, and get qualified advice when the stakes justify it.
This article is general information and attorney advertising. It is not legal advice, criminal-law advice, tax advice, accounting advice, insurance advice, or a litigation hold notice for any specific matter. Businesses facing actual allegations, threats, platform disputes, insurance questions, accounting issues, or possible litigation should consult qualified professionals familiar with their facts and jurisdiction.
Related Firm Practice
For related services, see Online Reputation, Criminal Accusations & Evidence.
External References
- Legal Information Institute: Defamation
- Google Maps: Prohibited and Restricted Content
- FTC: Consumer Reviews and Testimonials Rule
- New York Senate: Penal Law Section 135.60 Coercion in the Third Degree
- Legal Information Institute: 18 U.S.C. Section 875 Interstate Communications
- Legal Information Institute: Federal Rule of Civil Procedure 37
- IRS: Recordkeeping for Small Businesses