ZenWeb - Blog - Buying Google Reviews in Malaysia: Legal Risks Explained

Buying Google Reviews in Malaysia: Legal Risks Explained

November 1, 2026

Share this post:

Buying Google Reviews in Malaysia: Legal Risks Explained
TL;DR: Malaysia has no law written just for fake reviews, but buying Google reviews can still breach the Consumer Protection Act 1999, which bans conduct and claims that mislead consumers. A company faces fines of up to RM250,000 for a first offence. Google separately removes paid reviews and can block new reviews, hide existing ones and show a fake-review warning on your profile.

The offer usually arrives on WhatsApp or Facebook: “50 five-star Google reviews, real-looking accounts, RM5 each.” For a new café or salon with three reviews, it looks like a cheap shortcut. Many owners assume the worst outcome is that Google deletes a few reviews.

This guide explains the real risks of buying Google reviews in Malaysia: what the law says, what Google does, and what happens when those reviews end up in your ads. It comes from ZenWeb, a Malaysian Google Partner agency with 500+ clients that manages Google Business Profiles every week. Every rule below was checked against the official text, as at October 2026.

This post is general information, not legal or tax advice. Please confirm your own position with a licensed lawyer.

Want more reviews without the risk?

We build review systems that earn genuine ratings and lift your Maps ranking. See our SEO and local search services →

First, this CBC News report shows how fake Google reviews mislead customers and hurt honest businesses.

How fake Google reviews are fooling customers, hurting businesses

Source video: CBC News: The National on YouTube. Published May 2021.

1. Is It Illegal to Buy Google Reviews in Malaysia?

Quick Answer: There is no Malaysian law that names fake reviews, but buying Google reviews in Malaysia can still be an offence. The Consumer Protection Act 1999 bans conduct that is likely to mislead the public about your services, and false claims about their quality or endorsement. A bought five-star review is built to do exactly that.

Part II of the Consumer Protection Act 1999 (Act 599) holds the rules that matter. Three of them catch paid reviews:

  • Section 8 sets a low bar. “Misleading” includes anything “capable of leading a consumer into error”. You do not need to have fooled a specific customer.
  • Section 9 covers misleading conduct. It bans conduct likely to mislead the public about the nature, characteristics or suitability of your goods or services.
  • Section 10 covers false representations. It bans false claims that services are of a particular standard or quality (s10(1)(c)), or that goods or services have any sponsorship, approval or endorsement (s10(1)(h)).

A review from someone who never visited your shop says your service is good and that a real customer approves of it. Neither is true. That is why a lawyer would read it under sections 9 and 10, even though the Act was written long before Google Maps.

Be honest about the gaps, too. As at October 2026, we found no reported Malaysian prosecution specifically over bought Google reviews, and no review-specific amendment to the Act. KPDN enforces misleading advertising under the same Act; our guide to advertising law in Malaysia covers the wider rules. A low prosecution rate is not permission. The platform risk in the next section is near-certain.

Key takeaway: “No law mentions fake reviews” is not the same as “fake reviews are legal”. The general misleading-conduct rules already cover them.

2. What Does Google Do If You Buy Reviews?

Quick Answer: Google removes reviews paid for “directly or in kind”. If a profile keeps breaking the rule, Google can stop it from receiving new reviews for a set period, unpublish its existing reviews, and show customers a notice that fake reviews were removed. Google emails the owner first, and the owner can appeal.

Google’s Maps user-generated content policy bans fake engagement. That includes reviews not based on a real experience, reviews posted from several accounts at one person’s request, and incentives for reviews. Its Business Profile restrictions page lists the penalties. Google’s systems now catch this at scale.

Google Maps enforcement in 2025, by type of action (millions)
Bar chart of Google Maps enforcement actions in 2025: reviews blocked or removed, edits blocked, fake profiles removed and accounts restricted.
Action in 2025VolumeRelative size
Policy-violating reviews blocked or removed292 million+
Inaccurate or unverified edits blocked79 million
Fake Business Profiles removed13 million+
Accounts given posting restrictions0.78 million+

Source: Google, “New ways we’re protecting businesses on Maps”, April 2026, global figures for 2025. Chart is ZenWeb’s. Licence.

In its April 2026 Maps update, Google also said that when a sudden spike of suspicious reviews appears, it removes them, pauses new reviews and shows customers a banner explaining the pause. A burst of 50 bought reviews in one week is the pattern it looks for.

So if you buy Google reviews, assume Google will find most of them. The hidden cost is that restrictions can hide your genuine reviews too. If your reviews vanish after a restriction, our guide on getting disappeared Google reviews back explains the recovery steps.

Key takeaway: The likeliest penalty is not a fine. It is Google hiding every review you have, honest ones included, and telling customers why.

3. Who Can Act Against a Business That Buys Reviews?

Quick Answer: Four parties can act. Google enforces its own policy. KPDN can investigate misleading conduct under the Consumer Protection Act. The Content Forum hears complaints about online ads that quote fake ratings. And customers or rivals can complain to either body, or post screenshots that hurt your name.

Who can act on bought Google reviews in Malaysia, and what they can do, as at October 2026
Table mapping each party that can act on bought reviews to its rule, trigger and possible outcome.
WhoRule usedUsual triggerPossible outcome
GoogleMaps fake engagement policyAutomated detection, user flagsReviews removed, new reviews blocked, warning shown
KPDNConsumer Protection Act 1999, ss9, 10, 25Consumer complaint via e-AduanInvestigation, prosecution, fine
Content ForumContent Code 2022, Part 3Online ad quoting a fake ratingAd removed, fine up to RM50,000
Customers and rivalsComplaints to the aboveSpotting copy-paste or foreign reviewersPublic call-outs, complaints, lost trust

Source: Google Maps UGC policy; Consumer Protection Act 1999; Content Code 2022, Part 3 and Part 8. Mapping is ZenWeb’s. As at October 2026. Licence.

Consumers can file with KPDN through its e-Aduan portal. For ads, our guide to what happens when your ad is reported explains the Content Forum and ASA routes step by step.

Rivals are the most motivated watchers. A competitor who spots 40 five-star reviews from accounts with no other activity has every reason to report you. The reverse also happens: if someone floods your profile with fake one-star reviews, see how to report and remove a fake negative review. That post covers defence; this one covers the buyer’s risk.

Key takeaway: Google acts on its own. Regulators usually act on complaints, and the people most likely to complain are competitors and unhappy customers.

4. What Are the Penalties Under the Consumer Protection Act?

Quick Answer: Under section 25 of the Act, a company faces a fine of up to RM250,000 for a first offence and RM500,000 after that. An individual faces up to RM100,000, three years’ jail, or both. A continuing offence adds up to RM1,000 for each day after conviction.

Maximum penalties for breaching Part II of the Consumer Protection Act 1999
Grouped table of maximum fines and jail terms under section 25 of the Consumer Protection Act 1999, for companies and individuals, first and repeat offences.
OffenceMaximum fineMaximum jail
Company (Sdn Bhd / Bhd)
First offenceRM250,000Not applicable
Second or later offenceRM500,000Not applicable
Individual (incl. sole proprietor)
First offenceRM100,0003 years (or both)
Second or later offenceRM250,0006 years (or both)
Either
Continuing offence after convictionRM1,000 per dayNot applicable

Source: Consumer Protection Act 1999 (Act 599), s25(1) and (2), reprint as published by KPDN. As at October 2026. Licence.

Two other sections widen who is exposed:

  • Section 26: the act of another person. If an offence happens because of someone else’s act, that person can be charged too. A review seller, or a staff member who placed the order, is not a shield.
  • Section 143: directors and managers. When a company commits an offence, its directors, managers and similar officers are deemed to have committed it too, unless they prove it happened without their knowledge and they took reasonable precautions.

Section 27 gives a defence of reasonable mistake or due diligence. That defence is hard to use when you paid for the reviews yourself.

Key takeaway: The fines are rarely used, but they are large, and they can reach the director personally. A RM250 review package is not worth that exposure.

Profile stuck on a handful of reviews?

A well-run profile ranks with fewer, real reviews. See what professional Google Business Profile management covers →


5. Can You Use Your Google Rating in Ads?

Quick Answer: Yes, if every review behind it is genuine. Once a “4.9 stars on Google” line goes into a Facebook ad or landing page, it becomes an advertising claim. The Content Code 2022 says testimonials must be genuine and based on real personal experience, and paid reviews must be clearly disclosed.

This is where bought reviews turn from a platform problem into an advertising problem. Part 3 of the Content Code 2022 sets three rules that apply:

  • Genuine experience only. Para 4.9(a) bans any testimonial or endorsement unless it is genuine and based on the person’s experience over a reasonable period.
  • Keep the proof. Para 4.9(i) says advertisers should hold copies of testimonials ready for inspection.
  • Disclose paid reviews. Para 6.3 says reviews done under a commercial arrangement must be clearly disclosed as paid, with the label placed upfront.

A bought review fails all three. So does a rating built on them. Our guide to testimonial and review rules in ads covers quoting customers safely. If you pay creators to review your product, the label rules in influencer disclosure in Malaysia apply, and your influencer contract should require them.

The same logic covers price and “best” claims built on fake social proof; see KPDN’s rules for sale and discount ads. And reposting a reviewer’s photo in an ad raises its own rights question, covered in the legal risks of memes and celebrity photos.

Key takeaway: A fake review sits quietly on Maps. Quote it in an ad and you have turned it into a claim that anyone can challenge.

6. Grey Areas: Discounts, Staff Reviews and Review Swaps

Quick Answer: Most “soft” tactics break Google’s rules even when they are not clearly illegal. Discounts or free gifts for reviews, staff and family reviews, review swaps with other shops, and asking only happy customers all count as fake engagement or rating manipulation under Google’s policy.

Owners often think only cash is a problem, and that softer ways to buy Google reviews in Malaysia are fine. Google’s policy is wider. Here is how common tactics compare:

TacticGoogle policyConsumer law risk
Paying a seller for reviewsBannedHigh
Discount or free item for a reviewBanned (incentive)Medium, if reviews look unpaid
Staff, family or owner reviewsBanned (conflict of interest)Medium
Review swap with another businessBanned (not a real experience)Medium
Asking only happy customers (“gating”)Banned (selective solicitation)Low to medium
Asking every customer, no rewardAllowedNone

The consumer-law column is ZenWeb’s reading, not a legal ruling. A “review us to join our lucky draw” post also needs proper contest rules; see when a lucky draw becomes illegal. Rewarding customers for recruiting friends is a separate matter, covered in referral rewards and the anti-pyramid law.

Buying “review packages” is a close cousin of buying contact lists. Sellers who offer both rarely have consent for either; see whether buying lead lists is legal under PDPA.

Key takeaway: The only clearly safe method is asking every real customer for an honest review, with no reward attached.

7. Worked Example: What 50 Bought Reviews Do to Your Rating

Quick Answer: Bought reviews give a short lift and a long fall. In our illustrative example, a shop with 20 genuine reviews at 4.2 stars buys 50 five-star reviews and jumps to 4.8. Google removes the fake ones, and a restriction then hides the genuine 20, leaving the profile with no visible rating.

Illustrative scenario, not a real client: a Shah Alam car-detailing shop pays RM250 for 50 reviews.

Illustrative scenario: visible Google rating and review count over time after buying 50 reviews
Time-series table showing an illustrative shop’s visible review count and average rating across five stages after buying fake reviews.
StageVisible reviewsVisible ratingRating bar
Start (genuine only)204.2
Week 1: 50 bought reviews posted704.8
Spike flagged, fake reviews removed204.2
Restriction: existing reviews unpublished0None, plus warning
Restriction lifted, rebuilding20+4.2

Illustrative scenario by ZenWeb. Rating maths: (20 × 4.2 + 50 × 5) ÷ 70 = 4.77. Restriction types from Google’s Business Profile restrictions page; restriction length is set by Google and varies. As at October 2026. Licence.

The lift is real for a few days. So is the cost during the restricted period: a profile with no rating and a warning banner converts worse than one with an honest 4.2. Ranking also suffers, because reviews feed your Google Maps ranking.

Key takeaway: An honest 4.2 that grows slowly beats a fake 4.8 that ends in a blank profile with a warning.

8. How to Get More Google Reviews Legally

Quick Answer: Ask every real customer, every time, at the moment they are happiest. Use a short review link or QR code, follow up once by WhatsApp or email, reply to every review, and offer no reward. Steady genuine reviews build both trust and Maps ranking without legal risk.

This is the system we set up for clients:

  1. Create your review link. Copy the “Ask for reviews” link from your Google Business Profile and shorten it.
  2. Put it where customers already are. Add a QR code at the counter, on receipts and on delivery packaging.
  3. Ask everyone, not just fans. Send the same request to every completed customer, so you are not gating.
  4. Follow up once. A single WhatsApp or email reminder two days later. Only message customers who agreed to hear from you.
  5. Reply to every review. Thank good reviews and answer bad ones calmly; see how to respond to negative reviews.
  6. Show reviews on your site honestly. Embed or quote real reviews, never edited ones, next to your e-commerce legal disclosures and refund policy.

For more ideas, read how to get more Google reviews without begging. Reviews work because they are social proof, and that only holds when they are real.

Key takeaway: Consistency beats volume. Two genuine reviews a week for a year is 100 reviews Google will never remove.

9. Conclusion: Your Review Compliance Checklist

Before you accept any “review package” offer, run through this list:

  • Never pay, discount or gift anyone for a Google review.
  • No reviews from staff, family, partners or swap groups.
  • Ask every customer, not only the happy ones.
  • Quote ratings in ads only if every review behind them is genuine.
  • Label any paid creator review clearly as paid.
  • Keep screenshots and dates of reviews you quote in ads.
  • If you already bought reviews, stop now and get a lawyer’s view before you delete or report anything.

Buying Google reviews in Malaysia is a short-term trick with long-term legal and platform risk. When you want reviews and rankings built the right way, our SEO team can help.


10. Frequently Asked Questions

1. Is it illegal to buy Google reviews in Malaysia?

No law names fake reviews, but the Consumer Protection Act 1999 bans conduct and claims likely to mislead consumers about your services. Bought reviews can fall under sections 9 and 10, with fines of up to RM250,000 for a company’s first offence.

2. Can Google tell if reviews are bought?

Often, yes. Google says it blocked or removed over 292 million policy-violating reviews in 2025 and now flags sudden review spikes. It can remove the reviews, block new ones and show a warning on your profile.

3. Can I give a discount in exchange for a review?

Not on Google. Its policy bans reviews incentivised by payment, discounts or freebies. You may ask every customer for an honest review, as long as no reward is attached.

4. Can my staff leave Google reviews for my business?

No. Google treats reviews from current or former employees as a conflict of interest. They count as rating manipulation and can be removed.

5. Can ZenWeb remove reviews I bought?

We can audit your profile and build a genuine review system going forward. For legal questions about past purchases, speak to a licensed lawyer first.

Earn reviews that Google never removes

Talk to ZenWeb about a review and local SEO system built on real customers. We handle the marketing; your lawyer handles the legal advice.

Book a free consultation →

Table of Contents

Table of Contents

Get A Free Proposal

Complete the form and our team will contact you to discuss your goals. Let’s grow your business.