Online Reviews Under Scrutiny: How New Rules Are Changing the Game — And What Still Isn’t Clear

For years, online reviews have been the silent currency of the digital economy, quietly shaping where we eat, what we buy and even which doctor we choose, and now regulators are finally trying to police this powerful but fragile system, rewriting the rules that govern what can be said, who can say it and how platforms must respond when those rules are broken. The shift is part of a broader global crackdown on digital deception, driven by the realisation that star ratings and user comments have become more than casual opinions; they are market signals that can make or break businesses overnight and sway billions in consumer spending. While the new rules promise a cleaner, more trustworthy review ecosystem, they also arrive with blurry edges, grey zones and open questions that lawyers, platforms and policymakers are still struggling to interpret. The result is a paradoxical moment in which reviews are more regulated than ever before, yet many of the most practical issues — from how to verify authenticity to how far moderation should go — remain unsettled.

Central to this regulatory wave in Europe are two key instruments, the EU’s so‑called Omnibus Directive on consumer protection and the newer Digital Services Act, each targeting online reviews from different angles and together signalling that fake or misleading feedback is no longer just bad behaviour but potentially an unlawful commercial practice. The Omnibus Directive, which member states have transposed into national law over the last few years, specifically lists the practice of posting or procuring fake consumer reviews as a banned commercial practice, placing review manipulation in the same legal box as classic consumer fraud. The Digital Services Act, which started applying to large online platforms in 2023 and 2024, does not regulate reviews by name in every article but treats them as user‑generated content that must be moderated with more transparency, more accountability and better risk management. The combined message is clear enough at a high level: platforms and traders may no longer turn a blind eye to fabricated praise or orchestrated smear campaigns, yet once one descends from principles to practice the path becomes far less obvious.

For consumers who have grown accustomed to scanning five‑star ratings on Amazon, TripAdvisor or Google Maps before making even modest decisions, the promise of stricter rules may sound overdue, because countless studies have shown that users place enormous trust in reviews despite knowing, in the abstract, that some may be unreliable. Economists like Michael Luca of Harvard Business School have demonstrated that a small shift in rating can lead to a measurable increase in restaurant revenue, while other research has tracked how hotels carefully manage their review scores as though defending their credit rating. This high‑stakes environment has attracted a cottage industry of review brokers and black‑market operators who sell positive feedback or coordinate mass flagging of competitors, a practice regulators now describe as systemic manipulation of online reputation. Yet correcting such abuses without undermining genuine, spontaneous feedback requires a legal scalpel rather than a blunt instrument, and current laws are still searching for that degree of fine control. Policymakers must balance protection from deception with the fundamental right to express opinions, a balance that often becomes controversial once enforcement begins.

The European Commission tried to draw a bright line with the Omnibus Directive by explicitly banning traders from submitting false consumer reviews or endorsements, or from commissioning another party to do so, when these practices mislead or are likely to mislead consumers, and by also prohibiting the failure to inform users about how a platform ensures that reviews are from actual purchasers. Under this framework, a business that buys a bundle of five‑star comments from a shady marketing agency, or that posts glowing feedback under fake customer profiles, risks enforcement and significant fines under national consumer protection authorities. Yet gaps immediately appear once one asks what counts as a fake or misleading review in a world where incentives, gifts, discounts and loyalty schemes are everywhere. If a shop offers a small coupon in exchange for an honest review, is that still permissible as long as the benefit is disclosed, or does the very act of incentivising feedback taint the authenticity regulators want to protect? Different national authorities have hinted at divergent answers, and the law does not explicitly settle where the boundary lies between acceptable encouragement and illicit manipulation.

One of the most visible changes introduced by the new rules is the obligation for platforms and traders to be transparent about how they collect, display and verify reviews, a requirement that has already pushed many large websites to add explanatory text below star ratings or to label certain comments as verified purchases. Under the EU’s updated consumer rules, if a trader presents reviews on a website, they must provide information about whether and how they ensure that those reviews come from consumers who have actually used or purchased the product. This has led to design changes such as filters showing only reviews from confirmed buyers, algorithmic checks for suspicious patterns and, in some cases, manual audits for high‑risk categories such as health products or financial services. However, the law stops short of mandating a specific verification method, leaving platforms to improvise their own systems and opening the door to a patchwork of approaches whose reliability is difficult for outsiders to compare. Consumer advocates warn that a generic label saying verified may give users a false sense of security if the underlying checks are rudimentary or inconsistent, raising the ironic possibility that transparency tools themselves could become a new form of misdirection.

The Digital Services Act adds another layer of complexity by imposing due diligence obligations on platforms that host user content, including reviews, and by requiring very large online platforms to assess systemic risks such as the spread of illegal content, the manipulation of information and the impact on consumer rights. In theory, fake or deceptive reviews fall directly under these systemic risks, particularly when they are organised at scale by professional operators or foreign actors seeking to distort markets. The DSA requires platforms to implement notice‑and‑action mechanisms through which users, authorities and trusted flaggers can report illegal content, and to explain clearly in their terms of service how review moderation works. Yet questions abound over what proportion of resources platforms must devote to hunting fake reviews, how quickly they must respond to complaints and whether they may be held liable if harmful reviews remain online despite reasonable efforts. Legal scholars note that the DSA deliberately preserves a form of limited liability, as long as platforms act expeditiously once notified, but national courts will inevitably be asked to interpret what counts as expeditious in the heat of litigation. For now, many companies are erring on the side of over‑removal, quietly deleting borderline reviews to minimise risk, which raises fresh concerns about censorship and the erasure of critical voices.

The issue of negative reviews, and of businesses attempting to suppress them, has become a flashpoint where law, reputation and free speech collide, and here too new rules provide guidance but not a complete solution. Consumer groups across Europe have documented cases where hotels, landlords and even medical clinics forced clients to sign non‑disparagement clauses, threatening penalties if they posted critical comments online, a practice now considered unfair under several national implementations of EU law. High‑profile stories, such as small businesses suing customers for defamation over one‑star Google comments, have sparked public outrage and prompted lawmakers to consider anti‑SLAPP measures to protect legitimate reviewers from intimidation. Yet the new regulatory framework does not automatically resolve the line between a harsh but honest review and a defamatory statement that can damage someone’s reputation unjustly, and this boundary remains governed primarily by defamation law rather than by digital‑platform regulation. Lawyers point out that platforms are now caught between accusations of enabling reputational attacks if they leave contentious reviews online and of silencing consumer voices if they remove them too quickly, a dual pressure that no statute can fully relieve. The consequence may be a chilling effect on both sides, with some users afraid to speak candidly and some businesses unsure whether disputing a suspicious review will itself trigger public backlash.

Internationally, the European approach is mirrored and sometimes contrasted by developments in the United Kingdom and the United States, and these comparisons help illuminate what remains unsettled about the global regulation of reviews. In the UK, the Competition and Markets Authority has spent years investigating fake review markets and recently signalled its intent to designate the buying or selling of fake reviews as an explicitly banned practice under consumer law, placing responsibility not only on traders but also on platforms that fail to act. The UK’s evolving Digital Markets, Competition and Consumers regime is expected to formalise stricter duties for major platforms to prevent and remove fabricated feedback, and the regulator has already extracted voluntary commitments from tech giants to tackle the problem. Across the Atlantic, the US Federal Trade Commission has proposed new rules against fake reviews and deceptive endorsements, reflecting high‑profile enforcement actions against companies that posted invented testimonials or suppressed negative feedback. Yet despite this convergence in principle, each jurisdiction still wrestles with familiar puzzles: how to distinguish genuine but biased enthusiasm from orchestrated astroturfing, how to treat influencer endorsements that blur into reviews and how to coordinate enforcement in a borderless digital marketplace where a single black‑market seller of reviews on a messaging app can flood multiple platforms in different countries.

Expert opinion is divided not on whether fake reviews are harmful, a point on which there is virtually unanimous agreement, but on how far the law should go in prescribing technical solutions or specific moderation thresholds. Some legal scholars argue that regulators are right to set high‑level obligations for transparency and fairness while leaving implementation to platforms, which can adapt faster than the law to changing manipulation tactics, and they note that overly prescriptive rules might quickly become obsolete as fraudsters innovate. Others, including consumer‑rights advocates and some competition authorities, contend that the current flexibility is dangerously vague, allowing platforms to meet their obligations with symbolic measures while the underlying incentives to tolerate dubious reviews remain intact. They point to cases where marketplaces have quietly benefited from inflated ratings that increase sales in the short term, even if they erode trust over time, and argue that only clear, enforceable standards — for instance, minimum verification steps, independent audits or mandatory reporting of review‑fraud incidents — can reset the incentive structure. Into this debate enters a technological wildcard: artificial intelligence systems that both detect and generate reviews, making it simultaneously easier to spot obvious fake patterns and easier for bad actors to produce sophisticated, human‑like feedback at scale. Regulators acknowledge this tension but have only begun to sketch out what AI‑specific safeguards might look like in this domain.

Perhaps the most under‑discussed source of uncertainty concerns what exactly platforms must disclose about their review systems under the new transparency rules, and whether generic explanations are still acceptable in an age of heightened regulatory scrutiny. The Digital Services Act requires major platforms to provide meaningful information about how recommender systems work and how content, including reviews, is prioritised or demoted, yet the text leaves ample room for interpretation regarding the level of technical detail. Companies worry that revealing too much about their fraud‑detection algorithms could hand a roadmap to manipulators who would learn to mimic legitimate behaviour more effectively, a concern echoed by cybersecurity experts who liken it to publishing the design of an alarm system. At the same time, civil‑society groups insist that vague statements about using automated tools and human reviewers do little to reassure users that systemic problems are being addressed, and they push for independent oversight, third‑party research access to platform data and detailed transparency reports. Between these poles lies a murky middle ground in which platforms may comply with the letter of disclosure requirements while still leaving regulators and the public mostly in the dark about error rates, false positives and the collateral impact of aggressive fraud filters on legitimate reviewers.

For businesses, especially small and medium‑sized enterprises that rely heavily on digital reputation, the evolving rules on reviews bring a mixture of relief and anxiety, because stronger action against fake feedback and malicious campaigns promises a cleaner competitive field but also introduces new compliance burdens and risks of regulatory missteps. Many smaller traders lack the legal and technical resources of large brands, yet they are still bound by the same underlying consumer‑protection norms, including the prohibition on procuring fabricated praise or hiding commercial relationships behind seemingly independent comments. Misunderstandings can have costly consequences; a family‑run hotel that encourages friends and relatives to leave glowing public comments without disclosing the connection, a practice once dismissed as harmless, might now fall foul of updated unfair‑practices rules if those reviews materially mislead potential guests. At the same time, businesses are learning that engaging constructively with negative reviews, offering public responses and corrective measures, can build more trust than a uniformly perfect rating that many savvy consumers now greet with suspicion. In this transitional moment, consultants and legal advisers are quietly teaching clients a new etiquette of online reputation management that blends legal caution with communication strategy, underscoring that the age of casual, unregulated review culture is ending even as the full contours of the new regime remain unsettled.

What seems certain is that the regulation of online reviews will continue to evolve as enforcement cases accumulate, court decisions refine vague provisions and new technologies reshape the possibilities for both manipulation and detection, turning today’s uncertainties into tomorrow’s legal precedents. Policymakers are already signalling that they view reviews not as a trivial side effect of e‑commerce but as a core infrastructure of the digital single market, one that warrants the same seriousness as financial disclosures or product‑safety information. Yet the path forward is likely to be iterative rather than revolutionary, marked by gradual adjustments, additional guidance from supervisory authorities and, quite possibly, new legislative tweaks once current gaps become politically undeniable. In the meantime, consumers, platforms and businesses operate in a landscape of partial clarity: everyone knows that blatant review fraud is now squarely in the crosshairs of regulators, but many subtler practices remain in a grey zone where cultural norms, ethics and risk tolerance fill in the blanks left by the law. The broader story is not only about statutes and fines but about a societal renegotiation of trust in digital word‑of‑mouth, a renegotiation in which everyone who leaves or reads a star rating plays a small, if often unconscious, part. As history has shown in earlier media revolutions, from the rise of print newspapers to the era of broadcast advertising, it often takes years of experimentation, scandal and reform before new forms of public communication settle into stable, widely accepted rules, and online reviews are unlikely to be an exception to that long, uneven pattern.