User:Louis/Fake reviews and the review removal business

On July 29, 2026 someone left a one star review on the Google Business Profile of iPad Rehab Microsoldering, a data recovery shop in Honeoye Falls, New York, claiming the shop had failed to recover photos from a dead son's phone and had returned it missing screws and its volume button. The shop says it has no such customer. About 24 hours later a message came in through the shop's own website contact form, naming the reputation management company GatherUp, saying a suspicious review from S had been identified on the profile, and offering paid help getting one star reviews removed. The review's author displays as the single letter S. Jessa Jones, who runs the shop, forwarded me the review and the message on July 31, 2026.

At a glance

• The photograph attached to the review was taken on a Xiaomi Redmi phone whose clock was set fourteen hours ahead of Honeoye Falls, at 14:13:15 on July 29, 2026, the same day the review appeared. The image file Google serves still carries that metadata.
• The battery in the photograph is a Lenovo part, and Motorola belongs to Lenovo. Its label names Lenovo(Thailand)Limited and carries an Indian standards registration number, R-41140643, beside www.bis.gov.in. iPad Rehab is an iPhone and iPad shop.
• The account that posted it is a Level 5 Local Guide with 979 points and not one visible review. Its profile says the person has not written any reviews yet, or has chosen not to show them.
• The pitch named the review by its author's display name, S, roughly 24 hours after it appeared. Every identity field in it was free text typed into a public web form, which authenticates nobody.
• One company now owns both the fake review watchdog and the service that sells removal. Insight Integrity announced on December 3, 2025 that it had acquired GatherUp and Grade.us and united them with The Transparency Company.
• A law firm publicly reported the same sequence in Google's own support forum: a one star review it says was fake on May 12, 2026, then a pitch through its website contact form on May 18 citing that review by the reviewer's name and offering paid removal.

The review

iPad Rehab operates at 4 N Main St in Honeoye Falls and describes itself as an iPhone logic board mail-in repair business whose forte is iPhone data recovery. Its own site says it has repaired more than 10,000 iPhone and iPad logic boards since 2012.

The one star review by S as it stood on iPad Rehab's Google Business Profile on July 31, 2026, above the shop's response stating it cannot match the review to any customer and that a solicitation arrived 24 hours later.

The review reads:

A family friend's phone went in for data recovery as their son passed away and they wanted the photos from the phone. Not only were they unable to recover the data, but the phone came back missing multiple screws from inside the phone as well as the volume rocker button completely gone too. Receiving a phone back in worse condition is just abysmal.

It names a bereavement, it describes damage a customer could photograph, and it accuses a data recovery shop of losing the data and wrecking the hardware in the same sentence.

The shop answered it in public, on the profile:

We cannot match this review to any customer and suspect that it is fake. The motherboard pictured is a Moto G series. We have checked all Motorola phones going back a year and there are none that were not recovered.
24 hours after this review posted we received a solicitation from a vendor suggesting that we recently received a fake review and offered paid help to remove it.
If I am wrong, and this is a legitimate review then please reach out to us. Data loss is upsetting, especially in a situation where we couldn't help you. In general we do cut the clothes off the patient to try and resuscitate the logic board where the data is stored. If we missed a screw on reassembly on a phone with sentimental value we are happy to make that right, just let us know.

Jessa told me the same thing directly, and added three claims I could test: the reviewer's other reviews are hidden, the shop almost never sees Motorolas, and the photograph carries an India market battery marking.

What the photograph shows

The reviewer attached one photograph of a disassembled phone, back cover off, battery exposed. Google serves that image from its user content servers as a 3060 by 4080 pixel JPEG carrying its camera metadata.

The metadata records the make as Xiaomi, the model as 2312DRA50G, and a vendor field naming the handset Note 13 Pro 5G under the REDMI brand. It records the capture at 14:13:15 on July 29, 2026, with the camera's UTC offset as +10:00.

That puts the photograph on the same calendar day the review went up, taken by a camera whose clock sat ten hours ahead of Greenwich while Honeoye Falls was on Eastern Daylight Time, four hours behind it. The gap is fourteen hours. Of the nine standard time zones the United States keeps, which run from Atlantic to Chamorro, the Chamorro zone covers only Guam and the Northern Mariana Islands.

The file also carries a Software tag reading Picasa, the stamp Google's own image pipeline leaves on photographs it processes, so these are not pristine camera bytes. A device clock can be wrong, a time zone can be misconfigured, and metadata can be edited. The camera make, the camera model and the capture time still have no place in the story the review tells.

The battery label in the photograph attached to the review, carrying the Indian standards registration number R-41140643 beside www.bis.gov.in, the Thai standard TIS 2217-2548, Lenovo(Thailand)Limited as brand owner, and SCUD(FUJIAN)Electronics as manufacturer.

The battery label is legible at full resolution. It reads R-41140643 beside www.bis.gov.in, a registration number and the web address of the Bureau of Indian Standards. The label also names Lenovo(Thailand)Limited as the brand owner, SCUD(FUJIAN)Electronics Co.,Ltd. as the manufacturer, and a Thai standard, TIS 2217-2548.

Jessa read the Indian mark as evidence the phone was never a United States unit. That inference does not survive checking. Manufacturers crowd many countries' compliance marks onto a single label, and the Information Technology Industry Council wrote in April 2024 that a typical product built for the global market could now have far more than 20 CA marks and associated markings. This label carries a Thai standard beside the Indian one, and a cell built under an Indian registration can end up in a phone sold anywhere.

The label settles something narrower. Lenovo acquired Motorola Mobility from Google, and its announcement of the completed deal names the Moto G among the brand's phones, so a Lenovo cell is consistent with the shop's identification of the device. iPad Rehab's own site describes an iPhone logic board and data recovery business.

The account that posted it

The reviewer displays as S, with a stock avatar. Google assigns each account its own avatar image identifier, and the identifier on the review matches the one on contributor profile 110313067100589461698, which is how the two are tied together.

That profile is a Local Guide at Level 5 with 979 points, and it displays this:

This person hasn't written any reviews yet, or has chosen not to show them on their profile.

A business looking at that one star review cannot see anything else the account has ever posted.

The pitch, 24 hours later

The message reached iPad Rehab as a submission through the shop's own website contact form, which the site's mailer relayed to Jessa. The relayed message carries the form mailer's identifier from the web host, and the timestamp inside that identifier decodes to 1:16 PM Eastern on July 30, 2026, matching the 1:18 PM the message displays.

A contact form accepts whatever anyone types. There is no sender authentication, no verified domain and no signature, so the name, the company, the phone number, the email address and the mailing address in that submission establish only that somebody typed them into a box on iPad Rehab's website.

The submission gave a company of GatherUp, an email address at the domain gogatherup.com, a phone number in the 415 area code, and a street address at 222 N. Pacific Coast Highway in El Segundo, California. Its message said this, with the spacing restored at the points where the original ran words together:

GatherUp, in partnership with the Transparency Company, an online review authenticity watchdog, identified a suspicious review from S on your Google Business Profile that could be negatively impacting your reputation. We have a proven track record of disputing fake and policy-violating reviews for removal. We can challenge your one-star reviews with Google and stand behind our work with a performance based guarantee. Our services are trusted by 30,000+ businesses.

It closed with a booking link on the subdomain gatherup.chilipiper.com.

The review's author displays as S and nothing else, so whoever wrote the pitch had read that specific review, on that specific profile, about a day after it appeared.

Bulk generation left its marks on the text. The greeting ran the business name into the next sentence, and words collided at every line wrap: MicrosolderingGatherUp, authenticitywatchdog, Profilethat, performancebased. The form's separate City field came back as Segundo, which is what an automated filler produces when it splits El Segundo, CA 90245 on a space and drops the first word into the address field.

The address in the email field belongs to a bulk sender. The anti spam service CleanTalk holds a blocklist record for it showing submissions to 117 websites, first seen on June 16, 2026, with the last recorded activity at 16:00:48 GMT on July 30, 2026, about 76 minutes before the iPad Rehab form was submitted. The spam scanner on my own mail server, where Jessa forwarded the message, flagged the domain against the SURBL abuse blocklist, and the lookup reproduces independently: gogatherup.com returns a listing on SURBL's abuse list and gatherup.com returns nothing.

Two of the pitch's selling points do not match GatherUp's own published material. The message said the service is trusted by 30,000+ businesses. As of July 31, 2026 GatherUp's homepage said it is Trusted by 1,000+ agencies and businesses, with the figure 30,000 appearing nowhere on it. The message also promised a performance based guarantee. On the same date no guarantee, refund or money back language appeared on GatherUp's homepage or on its Review Defense page.

What the domains and the booking link do not prove

My read is that this reeks. A review the shop cannot match to any customer, about a dead child, lands on a small business, and a day later somebody who has already read it offers to sell its removal. That is an impression.

The domain looked like a lookalike at first. gogatherup.com was registered on April 23, 2026 through GoDaddy, more than 26 years after gatherup.com, it runs its mail on a separate Microsoft tenant rather than the Google Workspace that carries GatherUp's own mail, and it sits on the SURBL abuse blocklist while gatherup.com does not.

That reading does not survive the registration records. gogatherup is GatherUp's own published brand handle, linked from the footer of gatherup.com as facebook.com/gogatherup. The domain is one of at least seven near identical registrations, gogatherup.com, getgatherup.com, hellogatherup.com, gatheruphq.com, trygatherup.com, gatherupreviews.com and usegatherup.com, all taken through GoDaddy across April 22 and 23, 2026, all with live mail, and all seven send their web visitors to gatherup.com. None of them typosquats the brand, imitates it with lookalike characters, or serves a landing page or login form of its own. That configuration is ordinary cold email infrastructure, where throwaway domains carry the sending so the main domain's reputation absorbs none of the damage.

The booking link points the same way. GatherUp's own request a demo page carries a script tag loading concierge-js/cjs/concierge.js from gatherup.chilipiper.com, the same subdomain the pitch linked to, and then calls ChiliPiper.deploy with the argument gatherup. Chili Piper assigns those subdomains to account holders, and GatherUp's own page names itself as the account, so the booking tenant is GatherUp's.

None of that shows GatherUp sent the message. A booking link is a public URL that anyone can paste anywhere, and a redirect is configured by whoever controls the redirecting domain, which here is the party whose identity is in question. Nobody needs GatherUp's permission to point a domain at gatherup.com, and doing so makes a pitch more convincing to whoever clicks. The seven domains are therefore evidence aimed at GatherUp rather than evidence coming from it, and every registrant record is privacy shielded. What the arrangement does establish is where a booked demo would land, which is a calendar GatherUp controls.

The copy itself argues against GatherUp's own staff having written it. It inflates the published customer count thirtyfold and promises a guarantee GatherUp does not advertise, which fits outsourced lead generation better than an in-house marketing team. Whether the outreach was run by GatherUp, by a contractor working its brand, or by an affiliate paid per booked demo is the distinction that would matter, and the evidence I hold cannot settle it.

The four explanations, and where the evidence lands

Explanation	What would prove it	Where the evidence sits
Whoever sold the removal also planted the review	A link between the reviewing account and the sender, or the same review template across victims tied to the same pitch	Not established. No such link is in anything I obtained. The sequence and the timing are documented; the connection between them is not.
Somebody plants fake reviews to create demand for removal services generally	Many businesses, matching review templates, different vendors pitching afterward	Documented as a pattern by named outlets, but not tied to this review
Monitoring software flagged a suspicious review and sales automation pitched within a day	The sending domains and booking calendar tracing to the real company, plus a product that scans profiles	Consistent with the infrastructure evidence.
Somebody was impersonating GatherUp	The domains and booking tenant being unaffiliated	The evidence cuts against it. gogatherup is GatherUp's own published brand handle, every one of the near identical domains redirects to gatherup.com, and the booking tenant is GatherUp's own.

I do not say GatherUp posted it. I am also withholding the personal name that appeared in the form's name field, here and in the citations, because every field in a web form is anonymous input and nobody has shown who typed it.

One company owns both the watchdog and the removal service

On March 18, 2025 GatherUp announced a partnership with The Transparency Company, describing itself as a reputation management company and its partner as a pioneer in online review authentication. GatherUp said it would integrate the detection technology directly, and that:

Premium subscribers will benefit from automatic fake review detection, escalation and dispute resolution, not only on their own profiles but also on competitors' profiles attempting to manipulate rankings with fake positive reviews.

On December 3, 2025 Insight Integrity announced that it had acquired GatherUp and Grade.us and united them with The Transparency Company under one owner.

The Transparency Company describes what it does on its own site:

We help your business stand out by uncovering which reviews are legitimate and which aren't, on your listing and your competitors', so the playing field stays fair.

It says it monitors, scores and flags those reviews, then will take care of the takedown process on your behalf.

GatherUp sells the other half as Review Defense, which its site describes as automatically detecting, disputing and defending against fake reviews, and offers a free scan. The tiers run $50 a month per location for Reveal, $150 for Illuminate and $375 for Integrity, discounted to $45, $125 and $300 on annual billing. The top tier includes Automated competitor positive review dispute, a feature name carrying no qualifier. The partnership announcement described the same capability more narrowly, as aimed at competitors attempting to manipulate rankings with fake positive reviews.

One corporate owner therefore runs the technology that decides which reviews look suspicious, the sales motion that contacts businesses about suspicious reviews, and the paid service that disputes them, and at the top tier it will point that dispute machinery at a competitor's positive reviews on request.

I do not read a suspicious-review finding from that group as an independent one, because the same owner books the revenue when the finding turns into a sale.

A law firm reported the same sequence

In July 2026, in Google's own Business Profile support forum, a poster identifying as Violeta C. of Bellagio Law laid out this timeline:

May 12, 2026: Fake review posted alleging $50k in damages and discrimination.
May 18, 2026: Exactly 6 days later (and immediately after reporting the review), an agency ("Reviews with Transparency / GatherUp") sent an unsolicited pitch through our website contact form explicitly citing the "Alisson Johna" review and offering paid removal services.

The firm said a conflict check in its practice management software confirmed the named reviewer had never been a client, and asked Google to escalate the matter, calling it a coordinated extortion attempt created solely to force our business into purchasing review defense services.

That is a forum post by the affected business rather than reporting by anyone independent, so it establishes the shape and not the fact: a review the business calls fake, then a pitch through the contact form citing that review by the reviewer's name and offering paid removal, naming the same company.

Sherry Bonelli, a Google Business Profile Diamond Product Expert, replied to that firm:

This review does not violate Google guidelines. People are not required to use their real names when leaving reviews. They can mention employee's names in their review.
Reputation marketing companies have programs that scan for low-Star reviews, and then send out emails offering their services, that is not extortion.

Both halves of that hold up. Anonymity breaks no Google policy, so a single letter display name proves nothing by itself, and scanning for low star reviews and emailing offers is legal and widespread. Her answer does not reach where the review came from, because that was not the question put to her.

Fake reviews as an extortion business

The unambiguous version of this is already documented. Google's guidance to businesses calls extortion scams a serious policy violation, and describes them this way:

These scams may involve a sudden increase in 1-star and 2-star reviews on your Google Business Profile, followed by someone demanding money, goods, or services in exchange for removing the negative reviews.

CBS News New York reported on November 6, 2025 that a Lincoln Square pharmacy owner watched roughly 20 one star reviews land, saw his rating fall from 4.9 to 4.1 in a day, and was told he would get another 15 daily until he paid. News 6 in Orlando reported on August 26, 2025 that Central Florida businesses hit with negative reviews then received demands from Pakistani phone numbers to have them removed. Joy Hawkins of Sterling Sky described the pattern on February 4, 2026 as fifteen or more one star reviews inside 24 hours from a network of fake profiles, followed by contact offering removal for a price.

The iPad Rehab case departs from that template on every count: one review rather than twenty, no demand for money, and a message written as an ordinary business to business sales pitch.

Anyone weighing a removal offer should know that Google decides removals. Sterling Sky documented vendors charging thousands and abusing DMCA takedown notices with false claims to get reviews pulled, and rated the practice more damaging to a business than the reviews it removes.

16 CFR Part 465

The Federal Trade Commission's Trade Regulation Rule on the Use of Consumer Reviews and Testimonials was published on August 22, 2024 at 89 FR 68034 and took effect on October 21, 2024.

Section 465.2(a) covers a fabricated review:

It is an unfair or deceptive act or practice and a violation of this part for a business to write, create, or sell a consumer review, consumer testimonial, or celebrity testimonial that materially misrepresents, expressly or by implication: (1) That the reviewer or testimonialist exists; (2) That the reviewer or testimonialist used or otherwise had experience with the product, service, or business that is the subject of the review or testimonial; or (3) The reviewer's or testimonialist's experience with the product, service, or business that is the subject of the review or testimonial.

Against the iPad Rehab review the sub paragraphs map like this. A reviewer who does not exist as a real person falls under (1). A poster who never had the shop service a phone falls under (2). A repair that never happened as described falls under (3).

The definitions limit how far that reaches. Section 465.1(a) defines a business as an individual, partnership, corporation or other commercial entity that sells products or services, and 465.2(a) binds a business that writes, creates or sells such a review. An anonymous person posting one fake review for private reasons sells nothing. An operation that writes fake reviews as a line of business sits inside the rule, as does anyone who sells them.

Section 465.7(a) runs the other direction, at attempts to make reviews disappear:

It is an unfair or deceptive act or practice and a violation of this part: (a) For anyone to use an unfounded or groundless legal threat, a physical threat, intimidation, or a public false accusation in response to a consumer review that is made with the knowledge that the accusation was false or made with reckless disregard as to its truth or falsity, in an attempt to: (1) Prevent a review or any portion thereof from being written or created, or (2) Cause a review or any portion thereof to be removed

That provision binds anyone rather than only a business, and the mechanism it names is an unfounded or groundless legal threat. Section 465.1(p) defines the term as a legal threat based on contentions unwarranted by existing law or on factual contentions with no evidentiary support. On its face the language reaches a removal vendor filing copyright claims it knows to be baseless in order to scrub a truthful review, though I am not aware of the Commission having tested it on those facts.

Part 465 requires no platform to remove a review a business proves is fake, so a shop holding a fabricated review and a rule in its favor still waits in Google's queue. GatherUp's partnership announcement meanwhile pitched the rule as a reason to buy, describing the certification as a way for businesses to take proactive steps to comply with the Federal Trade Commission (FTC) final rule banning fake reviews and testimonials (16 CFR Part 465) which imposes strict penalties for businesses that manipulate reviews. The rule became a sales argument within five months of taking effect.

Steps for a business owner

Jessa's question was what a business owner is supposed to do. These cost nothing.

• Do not pay, and do not negotiate. Google's guidance is explicit that paying encourages further attempts and does not guarantee removal.
• Preserve everything before it disappears. Google tells businesses to gather all evidence immediately and to report all relevant communication they receive. Save the review, the reviewer's profile, any attached photograph at full resolution, and the raw message with its headers. Photographs carry camera metadata that a screenshot destroys.
• Use the extortion channel rather than the ordinary report button. Google runs a merchant extortion report form separate from normal review reporting.
• Answer the review in public, factually. iPad Rehab's response states what the shop checked, what it found, and an open invitation to the reviewer to make contact if the shop is wrong. A reader who sees the one star gets something to weigh, without anyone being accused of a crime.
• Report it to the Federal Trade Commission. Part 465 is a Commission rule, and the Commission takes consumer reports at reportfraud.ftc.gov.
• Do not buy removal from whoever tells you about the problem. Removal is Google's decision, and vendors who guarantee it are selling something they do not control.

A shop that spends its days pulling photographs off dead phones for people who have lost somebody was accused in public of botching exactly that, by an account whose photograph was taken that same day on a phone running fourteen hours ahead of New York, and a day later a sales pitch arrived that had already read the review. Who posted it remains unproven, and the answer would come from whoever can tie the account to the sender.