The FTC's Rule on Fake Reviews: What 16 CFR 465 Actually Prohibits, in Plain Terms

What 16 CFR Part 465 is, and when it started to bite

For most of the review era, the rules against deceptive testimonials lived in general prohibitions on unfair or deceptive practices under Section 5 of the FTC Act. Enforcement was possible but slow, and the penalties for a first offense were limited. On August 14, 2024 the Federal Trade Commission finalized a dedicated trade regulation rule, codified at 16 CFR Part 465, that named specific review practices as illegal and, critically, made them subject to civil penalties from the first violation.

The rule became effective on October 21, 2024. Its significance is less that it invented new duties and more that it made existing expectations enforceable with money. A trade regulation rule of this kind lets the Commission seek civil penalties per violation rather than litigating each case from first principles, which is what turns a norm into a liability that appears on a balance sheet.

Are fake reviews illegal now? The six practices the rule prohibits

The rule is best understood as six distinct prohibitions. Each targets a different way a business can make its reputation look better than its actual experience warrants. Read together, they describe the anatomy of review manipulation as regulators observed it in the market.

• Fake and false reviews. Reviews or testimonials by a reviewer who does not exist, or who never actually used or experienced the product or service, are prohibited. This explicitly includes reviews generated to misrepresent a real experience that never happened.
• Bought reviews. A business may not provide compensation or other incentives in exchange for a review that expresses a particular sentiment, whether positive or negative, when the review is written as a condition of that payment.
• Insider reviews without disclosure. Reviews written by a company officer, manager, employee, or their immediate relatives are prohibited unless the connection to the business is clearly and conspicuously disclosed.
• Conditional incentives. Offering a reward only if the resulting review is positive, the classic "leave us five stars and get a discount," is banned, because it buys sentiment rather than a genuine opinion.
• Review suppression. Selectively displaying positive reviews while suppressing negative ones about the same subject is prohibited, as is using unfounded legal threats or intimidation to force a negative review down.
• Fake social-media indicators. Buying or selling fake indicators of social-media influence, such as followers, likes, or views generated by bots or non-existent accounts, is also covered.

The penalty: up to 51,744 dollars per violation, and what "each" means

The number that focuses attention is the civil penalty: up to 51,744 dollars for each violation. The word each is the part owners underestimate. A penalty assessed per violation can, in principle, be counted per offending review or per prohibited act, so a campaign that plants or gates dozens of reviews is not exposed to one penalty but potentially to many.

This is why the rule reframes reputation work as a compliance discipline rather than a marketing tactic. The downside of a review shortcut is no longer a bad look if discovered; it is a quantifiable financial liability that scales with the number of times the shortcut was used. For a small business, even a modest count of violations reaches a figure that dwarfs whatever the manipulated reviews were worth.

Why the rule exists: the evidence on who fakes reviews, and when

The rule did not arrive in a vacuum. A body of empirical research had already mapped review manipulation as a predictable, rational behavior rather than a random nuisance, and that research explains why the Commission wrote the prohibitions the way it did.

Using Yelp's own filtered-review flags as a fraud proxy, Michael Luca and Georgios Zervas found that fake reviews are more common for businesses with weak existing reputations, those with few reviews or low ratings, and that they rise when a business faces more direct competition. Manipulation, in other words, is a strategic response to competitive and reputational pressure. The businesses most tempted to break the rule are precisely those with the least reputation to lose and the most to gain by faking one.

The picture is more uncomfortable still. Eric Anderson and Duncan Simester, studying a large private-label retailer, found that roughly five percent of reviews came from accounts with no purchase record for the product, that these unverified reviews were systematically more negative and less descriptive of real experience, and that thousands of the retailer's own loyal customers were among the non-purchase reviewers. Deceptive-style reviewing is not confined to competitor sabotage; it leaks in from ordinary customers too. A rule that only chased obvious fraudsters would miss much of the problem, which is part of why 16 CFR 465 defines its prohibitions by the act and the disclosure, not by the identity of a bad actor.

Review gating: the practice most businesses do not know is now illegal

The prohibition that catches the most well-intentioned owners is review suppression, and its most common form is review gating. Gating is the workflow that asks a customer how they feel first, then routes the happy ones to Google or Yelp while quietly sending the unhappy ones to a private feedback form. It feels like customer service. Under the rule it is a form of selectively suppressing negative reviews, and it is prohibited.

Gating is widespread because a generation of review-request tools were built around it and sold it as best practice. That history is exactly why it is a liability now: a business can be running a gated funnel it inherited from a vendor without realizing the funnel itself is the violation. The compliant alternative is simple: invite every customer to review honestly, with no sentiment-screening step deciding who is allowed to reach the public platform.

What the rule does not prohibit

An accurate reading matters as much as a cautious one, because over-correction has its own cost. The rule does not ban asking for reviews. Inviting every customer to leave an honest review is the compliant foundation of a healthy reputation.

It does not ban all incentives. What is prohibited is conditioning a reward on the review being positive, or on a review being left at all when the compensation buys the sentiment. A neutral thank-you offered to everyone who reviews, regardless of what they write, sits in a different category from "five stars gets you ten percent off," and the distinction is the whole point.

It does not ban responding to reviews, including negative ones. Replying to a critical review is the opposite of suppression: a public, on-the-record answer. The evidence is that thoughtful responses change future reviewer behavior and are read by buyers as trust evidence in their own right, which makes disciplined response one of the safest and most effective reputation moves available. And it does not require a business to display negative reviews it never solicited, only to refrain from selectively hiding the negative ones it does have while showing the positive.

How to read your own exposure

The rule turns three ordinary questions into compliance questions an owner should be able to answer. Where do our reviews actually come from, and can we show they are from real customers. Is there any point in our request flow where sentiment decides whether a customer reaches a public platform. And has anyone connected to the business, an employee, a manager, a relative, posted a review without disclosing the connection.

Most businesses have never audited these paths, because until October 2024 there was little reason to. The exposure is rarely deliberate fraud; far more often it is an inherited tool, an old gating funnel, or a well-meaning staff member. Reading the exposure closely, before an enforcement letter or a competitor complaint forces the question, is now simply part of running the reputation side of a business.