I was scrolling through platform updates a while ago, the kind of thing I do so you don't have to, and I landed on something that genuinely stopped me cold.
On April 16, Google turned on an AI system that scans your reviews for behavioral patterns. Not just fake reviews and not just obviously paid ones. This is the kind of machine that can read and detect Patterns. The kind that show up in how your reviews arrive, who posts them, when, from where, and what the content signals about how they were gathered.
The next day, April 17, they quietly rewrote what counts as "review manipulation" in their Google Business Profile policies. Leaving many businesses unknowingly at risk.
I sat with that for a minute. Because I kept thinking about how many businesses I know, GOOD businesses, ones doing genuinely great work, that are running review processes right now that just crossed the line without anyone telling them.
So that's what this issue is.
What the system is actually scanning for
Here's the thing about the new AI moderation layer: it's not reading your reviews the way you read them.
You read them for sentiment, for what the patient said, hopefully for some feedback and improvement in the room. BUT Google's system is reading them for what they reveal about how they got there. Google wants the reviews on their platform to be genuine, real opinions.
Their new system is looking at reviewer account behavior over time. It's cross-referencing device locations. It's tracking your review velocity, meaning how many arrive and how fast, against your baseline and against what would be normal for a business like yours. It's running all of that against the new policy language. And then all of this against the YEARS of data Google has.
And then it acts on what it finds.
The part that got me: it doesn't need to prove intent. If it flags the pattern, enforcement follows from there.
The stuff I see practices do that's now inside the violation zone
I want to be careful here, because I am not saying anyone is doing this maliciously. I don't think most practice owners are. But I also know what a lot of review "strategies" actually look like in real life, and some of them have a problem.
If your email campaign filters out unhappy clients, that's review gating. Or even if your front desk has a habit, even an informal one, of reading the room and only handing out the review card to patients who seem pleased, that's review gating. It doesn't matter that no one ever wrote it down. Selective asking is a violation. EVERY patient needs to get the same ask.
"$20 off your next visit if you leave us a review." "Leave us a Google review and we'll add a free lip treatment." Each individual review tied to that exchange is a separate FTC violation. We are not just talking risking getting reviews removed when it comes to medical aesthetics. Fines can be up to $53,088. Per review. That math gets terrifying fast!
Asking while a patient is still in your space is now explicitly prohibited. The ask has to happen after they've walked out the door. Timing matters, and I'll come back to that.
I know this one feels harmless. But reviews from accounts with overlapping device locations or behavioral clustering can trigger a flag, even when the reviewers are real people who had real experiences with you. The algorithm doesn't know the difference between a coordinated fake campaign and a well-meaning group text to your regulars.
What actually happens when it catches something
This is where I want you to really pay attention, because the enforcement sequence is not what most people expect.
It doesn't start with a warning. There's no email that says "hey, you have 30 days to fix this."
Individual reviews disappear. Your star rating shifts. You might not even notice at first. Over 290 million reviews were removed last year under this system.
Your profile is placed in a watch window where new reviews take longer to publish, or don't publish at all. Your velocity slows, even for completely legitimate reviews from patients who booked, showed up, and had a real experience.
A public warning banner on your listing. Your profile suspended. And that's just Google.
What most practices don't realize is that the FTC Consumer Review Rule, which became federal law in October 2024, runs parallel to Google's enforcement. Those violations I mentioned earlier, the incentivized reviews, the filtered asks, those aren't just a Google problem. They're a federal compliance problem. Each individual violation carries a fine of up to $53,088. A Seattle-based aesthetic clinic faced a $5 million penalty in a single enforcement action. The FTC issued its first enforcement wave in December 2025, and more is coming.
For medical aesthetics specifically, where HIPAA also enters the picture, the compliance layer goes deeper than most owners have had anyone walk them through. I'm dedicating an entire edition to the HIPAA compliance layer. If you're not subscribed yet, subscribe now for free — you do not want to miss the upcoming editions, with special guidance baked in for subscribers only.
A passive strategy is not the play here. This is not a wait-and-see situation. Your online reputation matters.
What Google actually wants you to do (and this part matters)
Because I don't want this to land as "never ask for reviews, it's too risky." That is not the takeaway!
The takeaway is: ask everyone, consistently, compliantly. Then, monitor and engage with the reviews that come in.
Google allows, and actually wants, every patient to get the same review ask. No filtering, no pre-screening survey to figure out who's happy first. No sentiment check before the link goes out. Everyone needs to get the SAME ask.
They want you to share that link via text, email, QR code, printed card. They formalized shareable Google review links in March 2025 specifically to make this easier for you. If you don't have a direct link set up, that's the first thing to fix this week.
They want you to respond to every review you receive. Including the negative ones. Response rate is an active signal to the machines that your business is worth recommending to users. It's how Google evaluates whether you're a trustworthy operator. A practice that goes silent on negative reviews is telling the algorithm something.
The compliant version of a great review strategy is staying consistent. And the thing that makes the biggest difference is timing.
When to ask, by procedure
Most practices are not losing the review battle because patients don't want to help. They're losing it because they are asking for reviews at the wrong time, or not at all.
The right time is not usually in your treatment room or even at the checkout. It's after they've left, when the experience has settled and the results are beginning to show. The most strategic review ask is timed to the treatment that your patient received. Depending on the treatment, this may land anywhere between 48 hours and 14 days post-treatment.
Procedures with even longer outcome timelines should have the review ask happen at the follow-up visit. When a patient comes back, sees their results, and expresses gratitude in person, that is the review moment. That's the conversation you want to close with a direct link.
Why this compounds beyond just your Google ranking
I want to zoom out for a second, because this isn't only about your star rating.
When someone asks ChatGPT or Perplexity which med spa in their city is worth booking, the AI is building its answer from patterns across platforms, across time, across the detail and consistency of what patients have said about you publicly. Reviews on Google, on RealSelf, on Healthgrades. The practices with strong, detailed, cross-platform review presence are the ones those systems can confidently name.
A practice with thin or manipulated review presence is a vague entity. Something the AI can't read clearly enough to recommend.
You don't have to be the largest practice in your market. You have to be the most credible one in the places where patients are actually making decisions.
What to do this week
-
Audit your current review request process. Is every patient getting the same ask, or are you filtering by who seems happy first? If you're filtering, that's the first thing to change.
-
Check your timing. If the ask is happening in-room or at checkout, move it post-visit. Determine the exact timeline for each treatment and add the review ask to your follow-up sequence.
-
Get your direct review link set up and into every follow-up text and email. No patient should have to search to find you.
There is a practice in your market right now that is doing this consistently. They have a process. Every patient gets the ask at the right time, through the right channel, with a direct link. Their reviews are accumulating. Their profile is active. When someone in your city searches for what you offer, or asks an AI to recommend the best option, that practice is the one showing up.
Reviews are not a nice-to-have anymore. They are how patients find you, vet you, and choose you over someone else. There has never been a more critical moment to have a clear, strategic process for growing your count compliantly, because the practices that are building that now are the ones that will be impossible to compete with later.
I wanted you to know before the gap gets any wider.