Review gating — asking customers to rate their experience privately first and only routing the happy ones to leave a public Google review — is against Google's review policy, and enforcement is no longer quiet. Google removed 292 million policy-violating reviews in 2025, roughly 22% of all review activity, and profiles caught gating reviews can now carry a public warning banner. If your review process filters who gets asked to post on Google, it's time to change it before Google changes it for you.

What review gating actually is

Review gating shows up in a lot of small businesses without anyone deciding to break a rule on purpose. The most common version: a tablet at the counter, or a text after the visit, asks "How was your experience?" on a 1–5 scale. Customers who tap 4 or 5 stars get routed straight to the Google review page. Customers who tap 1–3 stars get sent to a private contact form instead, and never see the Google link at all.

That's gating. The business isn't lying to anyone, and the private form might even be a good idea on its own. The problem is that only the customers predicted to leave a good review ever get invited to leave one publicly — which means the public star rating stops reflecting the real spread of experiences.

Gating shows up in other forms too, and most of them look reasonable from the inside. A staff member who only mentions the Google review link to customers who seemed happy at checkout is gating, even with no software involved. A follow-up email that says "loved your visit? tell Google — anything less than great? tell us instead" is gating with the filter written directly into the copy. None of these examples require bad intent. They just all share the same structural problem: whether a customer gets invited to post publicly depends on how their experience is predicted to have gone.

Exactly what Google banned

Google's review policy (see the full policy page) prohibits several related practices:

  • Review gating — asking for a star rating first and only routing happy customers to Google, or otherwise filtering who gets asked based on predicted sentiment.
  • Incentivized reviews — offering discounts, free products, loyalty points, or prize draws in exchange for a review.
  • On-premises solicitation — counter tablets or kiosks that pressure customers into leaving a review before they leave.
  • Staff review quotas or leaderboards — pressuring employees to hit a number of reviews.
  • Reviews written for your own business — by the owner, staff, or friends and family posing as customers.

How enforcement works now

This isn't a theoretical rule anymore. Google removed 292 million reviews that violated its policies in 2025 — about 22% of all review activity on the platform. That's a large enough share that it's clearly not just catching obvious spam; it reflects automated detection getting much better at spotting patterns like clustered incentivized reviews, unnatural rating distributions, and review requests that skip the customers most likely to leave a critical one.

Alongside removals, Google now displays a public warning banner directly on the Business Profile of listings it finds in violation. That banner is visible to anyone who searches for the business, which makes this a reputation problem on top of a policy one — a business doesn't just lose the reviews it gated, it can end up with a visible flag telling every future customer that something about its review collection wasn't right.

There's a second reason this matters more now than it used to: roughly 45% of consumers use AI assistants to find local businesses, and those assistants read reviews as a primary signal when summarizing a business or deciding what to recommend. A profile with a public warning banner, or with a rating that later gets corrected downward after a wave of removals, doesn't just look worse to a human scrolling search results — it can shape what an AI assistant says about the business too.

What's actually at risk: a Business Profile can be blocked from receiving new reviews, reviews already posted can be unpublished, and a public warning banner can appear on the listing — all visible to customers searching for the business.

What compliant collection looks like

The fix isn't complicated, and it doesn't mean giving up on managing your reputation. It means separating two things that got merged into one flow:

  • The public ask — every customer gets the same invitation to leave a Google review, with no pre-filter based on how the visit seemed to go.
  • The private channel — a way for unhappy customers to flag a problem directly to you, offered as an addition alongside the public ask, never as a replacement for it or a gate in front of it.

In practice: send the same review request — the same link, the same QR code, the same wording — to every customer. If you also want a way to catch problems early, offer a private feedback option next to the Google link, not instead of it. Nobody is filtered out of the public ask based on a predicted rating.

A simple way to picture this correctly: instead of one flow that branches based on how a customer answers a question, run two flows side by side. Flow one is the public ask, and it goes out to every customer, unconditionally, on the same schedule. Flow two is a private "how can we do better" option that's offered alongside flow one, available to anyone who wants to use it, but never a gate that blocks flow one from happening. As long as flow one never depends on the outcome of flow two, the process is compliant.

Not sure if your current process is gating without meaning to? Run the free compliance audit and find out in under a minute.

Check your process →

Check your own process

If you're not sure whether your current review request flow counts as gating, the fastest way to check is to walk through it as a customer would: does everyone see the same link at the same point, regardless of what they answer beforehand? If a "how was it" question comes before the Google link and changes what happens next, that's gating, however well-intentioned it started out.

Dexuro's free compliance audit walks through seven quick questions about how your business currently collects reviews and flags anything that looks like a policy risk — it runs entirely in your browser and nothing is sent anywhere. If you want reviews collected the compliant way by default, Dexuro sends every customer the same path to Google, with a private channel as an addition, and the free plan covers the whole thing for one business.

Related reading