Google's review policy in 2026: what's allowed and what isn't

Most confusion about Google reviews comes from businesses guessing at the rules instead of reading them. The policies are short, public and surprisingly clear. This guide sorts the common tactics into what Google permits and what it prohibits, quoting Google's own wording so you can check every claim yourself.

Two pages matter. The prohibited and restricted content policy covers fake engagement and incentives, and the Business Profile help page on reviews covers how you may ask.

What does Google allow?

Asking for reviews is explicitly permitted. Google's policy lists as allowed behaviour: "Solicit or encourage the posting of content that does represent a genuine experience, without offering incentives to do so or attempting to influence the rating or the contents of the review." Read that carefully — the ask itself is fine. The conditions are that the experience must be real, nothing is offered in exchange, and you are not steering the rating or the wording.

Inside those boundaries, these are all safe:

• Asking every customer, neutrally. Not just the ones you think are happy, and without hinting at a star count.
• Sharing a direct review link. Skipping the search removes friction, not honesty.
• QR codes. Google names them directly: "To leave reviews, you can ask customers to visit a Google link or scan a QR code."
• Follow-up email or SMS after the visit, with the link and no strings attached.
• Signage or a device the customer may choose to use — a counter sign, a table card, a tap-to-review stand — as long as nobody is pushed into using it.

The common thread: you are lowering the effort required to leave an honest review. You are not changing who reviews, or what they say.

What is banned?

The prohibited list is where businesses get into trouble, usually by copying something a competitor is doing.

• Incentives of any kind. Google prohibits offering "payment, discounts, free goods and/or services - in exchange for posting any review or revision or removal of a negative review." A free coffee, ten percent off, or entry into a draw all count.
• Review gating. Screening customers first — asking how the visit went and only sending the happy ones to Google — manipulates the rating, and rating manipulation is prohibited.
• Scripting the content. Google states merchants should not "request that specific content be included". That covers asking for five stars, for a keyword, or for a specific staff member to be named.
• Pressure on the premises. Covered in detail below.
• Writing the reviews yourself. Google bans "content that has been posted from multiple accounts by or at the request of one person" — so staff accounts, family accounts and second phones are out.
• Buying reviews. Purchased reviews fail the genuine experience test on their face.

Can I offer a discount for a review?

No. This is the single most common violation, and the policy language leaves no room: payment, discounts, free goods and free services in exchange for a review are all prohibited. It does not matter whether you ask for a positive review or simply "an honest one" — the exchange itself is the problem.

There is a legitimate version of the same instinct. You may thank people warmly, you may run loyalty rewards that have nothing to do with reviewing, and you may make reviewing take five seconds instead of two minutes. What you may not do is make the reward contingent on a review being posted.

Can I ask for reviews in store?

Yes, with care. Google's wording is: "Merchants should not require or pressure users to leave ratings or write reviews while on the premises, nor should they request that specific content be included." The verbs that matter are require and pressure. An in-person mention is not automatically a violation; coercion is.

The grey area: asking in person

This is the part honest businesses actually worry about, so it deserves a straight answer rather than a scare.

A neutral, no-strings invitation — "if you have a minute, a Google review really helps us" — is a different act from handing someone your tablet and waiting while they type. One offers an option; the other applies pressure at the exact moment the customer is least able to decline, because they are still standing in front of you and still holding their change.

Because the line is a judgement call, err toward letting the customer act on their own time. The lowest-risk pattern is a take-home ask: a link, a QR code or a tap device the customer uses when they choose to. The invitation is made once, the customer keeps full control of whether and when to act, and nobody is watching the screen.

Three habits keep you clearly on the safe side: say it once, never watch them write, and never re-ask someone who did not act on it.

Why do these rules exist?

It is easy to read the policy as Google being difficult. It is more useful to read it as Google protecting the thing that makes reviews worth collecting at all.

Ratings are only useful to a searcher if they reflect what actually happened. If incentives and gating were allowed, every rating would drift toward five stars, the differences between businesses would flatten, and customers would stop trusting the number entirely. The businesses hurt most by that would be the good ones — the shops whose 4.8 is earned and currently means something.

The rules also protect ranking. Reviews feed the prominence signal that decides who appears in the local pack, which is covered in our guide on how to rank higher on Google Maps. Manipulated reviews that get removed later take that prominence with them.

What a compliant routine looks like day to day

Compliance is not a legal project. It is one routine, repeated:

• Ask everyone, the same way. One neutral line, offered to every customer regardless of how the visit seemed to go. No pre-screening question, no "how did we do?" filter.
• Use one link for everybody. Same destination for the delighted customer and the disappointed one.
• Never mention a rating or a name. No stars, no keywords, no "mention that I helped you."
• Offer nothing in return. A thank you is not a reward.
• Let them leave with it. A link, QR or tap they use later keeps the moment pressure-free.
• Reply to what arrives — including the critical reviews, which you are not allowed to buy your way out of anyway.

For the practical side of building that habit, see how to get more Google reviews.

Where a tap device fits

A tap-to-review device sits squarely in the permitted column, for the same reason a QR code does: it changes the number of steps, not the content or the audience. Every customer meets the same link, nothing is offered in exchange, and the customer decides whether to hold their phone near it.

The compliance risk is never the hardware — it is what gets said around it. Keep the ask neutral and unhurried and the device is simply the shortest honest path to your review page. That is what GrowStar is built to do, and you can see the formats in the shop.

The takeaway

Google's position is consistent once you see the pattern. Removing friction is allowed. Adding conditions is not. Ask everyone, hand them a link, and let the reviews say whatever they honestly say. That approach never needs auditing, never gets reversed, and is the only one that compounds.