How to get more Google reviews without breaking Australian consumer law

Reviews decide local search visibility and they decide customers. They are also regulated territory: Australian Consumer Law prohibits fake reviews, manipulated ratings and misleading conduct, Google enforces its own policies on top and 2026 has made both sets of rules sharper and more expensive to break.

This guide gives you the complete compliant system: scripts you can copy, response templates for every scenario, automation workflows, the 2026 policy changes decoded and a plain English compliance checklist so you know exactly what is safe, what is risky and what will get you in trouble. Our step by step SEO guide covers where reviews sit in the broader visibility picture.

What changed in 2026 (read this before building your system)

Google's April 2026 review policy update tightened solicitation rules in two ways that catch Australian businesses off guard. Collecting reviews via on premises kiosks or business owned devices is now explicitly against policy: the tablet on the counter, the venue iPad, the 'leave us a review before you go' device all have to go. And soliciting reviews that name specific staff members ('mention Dave in your review!') is now banned too. Reviews gathered these ways risk removal and patterns of them risk profile penalties.

What survives and matters: the direct review link sent to the customer's own phone and QR codes the customer scans with their own device. The line Google has drawn is whose device the review happens on. A QR code on a receipt that opens Google on the customer's phone remains the compliant pattern, a venue owned screen collecting the review on the spot does not. Every script in this guide is built on the right side of that line.

Enforcement got real money behind it. From 28 March 2026, maximum penalties for breaches of the Australian Consumer Law's misleading conduct provisions sit at the greater of $100 million, three times the benefit obtained or 30% of adjusted turnover for the breach period. Review manipulation is squarely misleading conduct. The era of fake reviews being a slap on the wrist risk is over.

And reviews became AI source material. Review text now feeds the AI generated summary above your star rating, Ask Maps answers and AI Overviews. Detailed reviews describing what you actually did have become the sentences machines use to describe your business. Our guide on what AI search means for Australian businesses explains the full shift. This changes what you ask for: 'we would love a review about your experience' produces the depth that gets quoted, 'give us 5 stars' produces nothing useful even where it is compliant, which it is not.

The rules: a plain English compliance checklist

What the Australian Consumer Law cares about

• Fake reviews are illegal. Writing them, arranging them, buying them or publishing them is misleading conduct under the ACL, whoever physically types the words.

• Do not selectively remove genuine negative reviews. Report genuinely fake reviews to the platform. Suppressing real negative feedback is the compliance risk the ACCC's review guidance names directly.

• Do not cherry pick or misleadingly display ratings. Showing only your best reviews on your website while implying they are representative can create a false overall impression.

• Connected reviewers must be transparent. Employees, family and mates reviewing without disclosure is risky. Only genuine customers should review and any connection should be visible.

• The overall impression test governs everything. Reviews and testimonials fall under misleading conduct rules. The total picture your reviews create must be truthful.

What Google's policy adds on top

• No incentives of any kind. Payment, discounts, freebies, raffle entries, loyalty points: Google treats every one as undermining review integrity, whether or not the ACL would.

• No review gating. Filtering who gets the review link based on their likely rating or routing unhappy customers to a private form while happy ones go public is against policy. Ask everyone the same way.

• No kiosks, no staff name solicitation. The April 2026 additions above.

Allowed versus risky at a glance

Permission to message

Emailing or texting review requests makes them commercial electronic messages, which means the Spam Act's consent rules apply: use contact details the customer provided in the course of the service, identify your business and honour any request to stop. And if you are storing contact details for review follow up, the Australian Privacy Principles apply to that handling: keep it transparent and covered by your privacy policy. In practice, texting a customer the review link right after completing their job, from the number they booked you on, sits comfortably inside all of this. Buying a contact list to blast review requests does not.

The review engine: a simple system that works

Timing rules

Best time to ask: right after the win moment. Trades: job completed, customer happy with the result. Professional services: milestone reached, outcome delivered, positive feedback just received. Hospitality: end of meal or checkout, ideally off the back of a positive comment. Clinics: after a successful appointment or the end of a treatment series. The worst time is weeks later when the experience has faded. Conversion drops with every day of distance from the moment of satisfaction.

Reduce friction

One message, one link, one ask. Use the direct Google review link from your profile dashboard or a QR code that opens it on the customer's phone. Print the QR on receipts, invoices and cards. No essay requests, no multi step processes, no accounts to create: the entire transaction should be twenty seconds of the customer's life.

Follow up logic

If no review lands after 48 to 72 hours, send exactly one reminder, then stop. Nagging costs more relationship than it earns reviews. And if the customer replies with a complaint instead, the review request pauses: resolve the issue first, ask again later once they are genuinely satisfied. That sequencing is not just polite, it is the difference between a review system and a complaint amplifier.

Scripts by industry: ask without sounding cringe or illegal

Trades scripts (SMS)

Script A (short and direct): 'Hi [Name], thanks for choosing [Business Name] for the [job type]. If you have a moment, we would really appreciate your honest feedback on Google: [link]. Thanks, [Your Name]'

Script B (slightly warmer): 'Hey [Name], glad the [job type] went well today. If you are happy with the work, we would love to hear about it. Here is the link if you get a sec: [link]. No pressure at all. Cheers, [Business Name]'

Professional services scripts (email or SMS)

Script A (after a milestone): 'Hi [Name], now that we have wrapped up [milestone/project], I wanted to check in. If you have had a positive experience working with us, we would appreciate your honest feedback on Google: [link]. It helps other businesses like yours find us. Thanks, [Your Name]'

Script B (after a result): 'Hi [Name], great to see the [result/outcome] come through. If you have a moment, a quick Google review would mean a lot to our team: [link]. Honest feedback always welcome. Thanks, [Your Name]'

Hospitality scripts (verbal plus QR, April 2026 compliant)

Script A (verbal): 'Glad you enjoyed it! If you get a chance, we would love a quick Google review. There is a QR code on the receipt that takes you straight there on your phone. No pressure at all.'

Script B (receipt wording): 'Enjoyed your visit? We would love your honest feedback. Scan the code with your phone to leave a quick Google review. It takes 30 seconds and helps us keep doing what we do. Thank you!'

Note what is absent from the hospitality scripts: no venue tablet, no staff device handed over, no 'ask for Jess'. The customer's phone, the customer's words, the customer's choice.

Clinic and health scripts (SMS or email)

Script (gentle and general): 'Hi [Name], thank you for visiting [Practice Name] today. If you would like to share feedback about your experience, you can do so here: [link]. We appreciate it either way. Kind regards, [Practice Name]'

Health practices carry extra advertising obligations around testimonials that reference clinical care, which is a genuinely different rulebook. Our guide on SEO for medical practices in Australia covers the AHPRA specific layer. When in doubt, keep the ask general.

More scripts: retail, auto and fitness

Retail (post purchase): 'Hi [Name], thanks for shopping with [Business]. We hope you are loving the [product]. If you have a minute, honest feedback on Google helps other locals find us: [link]. Thanks so much!'

Auto and mechanical (at pickup): 'All done and ready to go, [Name]. If everything runs well over the next few days, we would really value an honest review on Google: [link]. And if anything is not right, call us first so we can sort it. Cheers, [Business]'

Gyms and studios (milestone based): 'Hey [Name], congrats on [milestone]. If you are enjoying [Studio], a quick honest Google review would mean a lot: [link]. Either way, see you at the next session!'

The auto script carries a detail worth stealing for any trade: the invitation to call first if something is wrong routes problems to service recovery instead of one star reviews, without gating anyone, because the same review link went to everyone regardless.

Automation: how to scale without being spammy

Manual workflow (most Melbourne SMBs): job completed, send the SMS with the direct link, one follow up at 48 to 72 hours if nothing lands, complaints pause the sequence until resolved and a simple spreadsheet logs who has been asked so nobody gets asked twice.

Semi automated (CRM, invoicing or booking platform): trigger from status tags like Completed, Paid or Delivered, send 1 to 2 hours after the trigger (not instantly, not days later), QR codes and direct links on invoices and confirmations, one automated follow up then stop. The timing gap matters: a request arriving while the tradie's van is still in the driveway feels robotic, one arriving that evening feels like a person.

Tools (brand agnostic): review platforms (Podium, Birdeye, NiceJob, Reputation and others) send requests, centralise replies and flag negatives quickly. Smaller businesses genuinely do not need one. The consistent manual workflow with a tracker performs identically at low volume. The tool matters far less than the consistency. If you do connect a platform to your customer data, secure the integration properly: the Australian Cyber Security Centre's basics guidance covers access permissions and multi factor authentication, which apply to review tools like everything else touching your customer list.

How to respond to reviews: templates for every scenario

Responding is not optional: it builds trust, reinforces what you do well and in 2026 it carries two extra jobs. Google now checks owner responses before publication (so drafts should be publish ready, not heat of the moment) and responses are read by the AI systems summarising your business alongside every future customer. Write each one as public copy, because it is.

Five star review

Template: 'Thanks so much, [Name]! Really glad the [specific service/job] went well. It was great working with you and we would love to help again in future.'

Reference something specific: it shows you read the review and the service naturally appears in your response text where both customers and machines read it.

Four star or 'good but' review

Template: 'Thanks for the feedback, [Name] and glad the [service] went well overall. You are right that [the issue] could have been smoother and we have taken it on board. Appreciate you taking the time.'

Acknowledge the 'but' plainly. Defensiveness in response to mild criticism reads worse than the criticism did.

Negative review from a genuine customer

Template: 'Hi [Name], thanks for letting us know and I am sorry the experience fell short. That is not the standard we aim for. I would like to understand what happened and put it right, please call me directly on [number] or email [address]. [Your name, role]'

The formula: acknowledge, no excuses, take it offline with a named human. Future customers judge you almost entirely on this reply, not the review above it. And if you resolve it well, it is fine to invite them to update their review. It is not fine to make anything conditional on them doing so.

Unfair or exaggerated review

Template: 'Hi [Name], thanks for the feedback. Our records show [brief factual correction, stated calmly]. We take all feedback seriously and if we have missed something, I am happy to discuss directly on [number].'

Correct facts once, calmly, without relitigating. Two sentences of composed correction beats four paragraphs of justified frustration every time.

Fake or malicious review

Template: 'We have no record of providing services to anyone by this name and this review does not reflect any interaction we can identify. We have reported it to Google. If you are a genuine customer, please contact us on [number] so we can look into it properly.'

Then the removal process: report it through your profile's review management area for policy violations. Google's 2026 tooling added dispute tracking with clearer status updates and its AI detection of suspicious reviews improved, so genuinely fake reviews get removed more reliably than they used to, though never instantly and never guaranteed. The durable defence remains volume: twenty genuine recent reviews make one malicious outlier statistically irrelevant to both customers and rating maths.

The recovery play: turning a bad review into a better outcome

A rough review handled well routinely ends better than no review at all. Worked example: a Reservoir electrician cops a two star review over a missed appointment window. The reply follows the negative review template: apology, no excuses, named person, direct number. The customer calls, the job gets rescheduled with priority and a fee adjustment for the inconvenience (service recovery, not review payment) and the work is done well.

Then the compliant close: 'Thanks for giving us the chance to put it right. If you feel your review no longer reflects the experience, you are welcome to update it, entirely up to you.' No condition, no incentive, no pressure. What makes the whole play legal is the order of operations: the fix came first and unconditionally, the review mention came last and optionally.

The 48 hour negative review protocol

• Hour 0 to 2: Read it twice, respond to nothing. The instinct to reply immediately produces the responses that end up screenshotted. Flag it to whoever owns reviews and pull the job or order record.

• Hour 2 to 24: Establish the facts internally (what happened, who was involved, is the complaint fair, partially fair or fabricated), draft the response using the matching template and have a second person read it cold. If it is genuine and fixable, make the recovery contact privately first.

• Hour 24 to 48: Publish the response, log the review and outcome in your tracker and if it exposed a real operational problem, fix the problem, because the review was free consulting delivered rudely.

What the protocol prevents: the 11pm defensive essay, the accidental confidentiality breach, the public argument that converts one bad review into a visible character reference against you.

Who owns the ask: making it operational by business size

• Solo operator: the ask lives in your job completion routine, same as issuing the invoice. Template saved in your phone, sent from the driveway before you leave.

• Small team: the person who finishes the job triggers the ask, but the message comes from the business number via the template. Review performance goes on the same board as jobs completed.

• Multi site or franchise: automation earns its keep here: the booking or job system fires the request on completion status, each location's link routes to its own profile and someone owns the weekly reply queue per location.

Beyond Google: where else reviews matter (and how much)

The allocation rule: Google first until the profile is strong, because it compounds into visibility. Everywhere else is maintenance until then. The one exception is businesses whose booking platform is their storefront (a clinic living on HealthEngine bookings), where that platform earns co priority.

Showing reviews on your own website (without creating a compliance problem)

The display rules: show the genuine overall picture (a live rating widget or an honest '4.7 from 180 Google reviews' with highlights), attribute quotes to their source, keep featured selections representative rather than a curated wall of perfection presented as the whole record and update them, because a 2023 testimonial page is a freshness signal in the wrong direction.

And the schema note that trips businesses up: only add AggregateRating markup when genuine third party reviews exist and the rating shown matches the visible, verifiable reality. Marking up ratings that do not exist or cannot be seen invites both a rich result penalty and an ACL problem, since the star snippet in search results is a public claim like any other. Our schema markup explainer covers the technical requirements. Real rating, honestly displayed, correctly marked up: rich result eligibility comes as the byproduct of just being accurate.

What reviews are actually worth (the business case)

Three compounding returns from a working review system. Visibility: review quantity, velocity and recency feed local rankings and in 2026 review depth feeds the AI surfaces deciding who gets cited. Conversion: customers comparing three pack results click the recent, replied to, substantive profile. The review gap is often the entire difference between two otherwise identical tradies. And retention economics: the ask itself is a touchpoint and customers who review you have publicly committed to the relationship, which is why they disproportionately become the repeat customers and referrers.

The benchmark that matters is local and relative: beat the review count, average and recency of the businesses currently in your target map pack and keep beating it steadily. Twenty fresh reviews this year outrank eighty from 2023. Use our local SEO readiness checker if you want a structured baseline of where your local presence stands.

Why review velocity beats review count (the maths most businesses miss)

Two Melbourne plumbers: one has 140 reviews accumulated since 2019, averaging one new review a month lately. The other has 60 reviews but adds five a month. Within a year the second overtakes on recency weighted signals long before overtaking on raw count, because both ranking systems and customers discount stale social proof. A profile whose last review is eight months old raises the same quiet question as a restaurant that is empty at 7pm.

The operational target that follows: reviews per completed job, not reviews per month. A conversion rate of 15 to 25% of asked customers is realistic with the system in this guide (direct link, right moment, one follow up). Below 10% means the ask is broken (wrong moment, clunky link or nobody is actually sending it). Above that, volume simply tracks your job flow, which is exactly the honest relationship between work done and reputation earned that both Google and the ACL are trying to protect.

One velocity warning in the other direction: a sudden burst (fifteen reviews in a weekend after months of silence) pattern matches purchased batches to detection systems even when genuine. Steady beats spiky. If a backlog of happy customers exists, spread the asks over weeks rather than blasting them in one night.

Where reviews fit in the bigger local system

Reviews are one of three legs. The profile itself needs operating: our Google Business Profile guide covers the weekly rhythm and why review depth suddenly matters more. And the searches themselves have geometry: our guide on how near me searches work across Melbourne covers how proximity, relevance and prominence interact, with reviews carrying most of the prominence load.

The vertical guides cover the industry specific versions: our guide on SEO for tradies covers the trades layer where reviews are most directly tied to pack position, the medical practices guide linked above covers the AHPRA adjusted version and our guide on SEO for lawyers in Melbourne covers the professional services trust cycle where review depth does the heaviest lifting.

Reviews also feed the E-E-A-T signals that Google's quality systems evaluate: genuine customer reviews are trust infrastructure and detailed reviews that describe your work are experience proof. The recent Google algorithm updates in 2025 reinforced that businesses with strong trust signals, reviews prominently among them, became more resilient in rankings.

One more habit worth stealing from the businesses that do this best: read your own reviews quarterly as market research. Customers tell you in their own words what they valued, what they compared you against and what almost stopped them buying. That language belongs in your website copy, your ads and your next hire's induction. The review system pays twice: once in visibility, once in intelligence.

What we recommend at Elev8d

We build the review system into the client's actual job workflow rather than bolting on a platform: the direct link in the completion SMS or invoice, the response templates adapted to the business's voice, the one follow up rule and the monthly check of velocity against the local competition. It is unglamorous and it compounds better than almost anything else in local marketing.

Our Melbourne SEO team treats reviews as a core ranking input, not a side project. Every local SEO engagement includes the review system setup, the compliance check and the velocity benchmarking against your pack competitors. It is the most controllable input in local search and the one most businesses under invest in.

And we hold the line on the compliance side, because we have seen the cleanup: bought reviews that vanished in a detection sweep taking the rating with them, gating tools that triggered policy action and the reputational version of the JustAnswer story at small business scale. The compliant system is slower for the first month and wins every month after.

Use our SEO ROI calculator to estimate what stronger local visibility is worth before committing budget. Run your profile through our 25 point SEO audit checklist to see where reviews sit alongside the other local signals.

FAQs

Answers to the questions we hear most about Google reviews.

Can I offer a discount for leaving a review if I give it for any review, good or bad?

No. Google bans incentivised reviews outright regardless of sentiment neutrality and under the ACL an undisclosed incentive behind reviews risks creating a misleading overall impression. The 'incentive for any honest review' structure people hope is a loophole is not one on either rulebook.

A review platform offered to 'guarantee 20 new reviews a month'. Legit?

Nobody can guarantee genuine customer behaviour. Guaranteed volumes mean fake reviews, incentivised reviews or aggressive gating, all of which now carry platform penalties and consumer law exposure with 2026 sized penalties. Ask exactly one question: 'where do the reviews come from?' and watch the answer carefully.

Can I put reviews from Google on my website?

Yes, displayed honestly: representative selections with attribution, ideally via a widget that shows your live rating rather than a hand picked wall of five star quotes presented as the whole picture. The misleading conduct risk is not in showing reviews, it is in curating an impression the full record does not support.

What do I do about a review that mentions a staff member by name?

Nothing needs doing. The April 2026 ban is on soliciting reviews that name staff, not on customers naming people unprompted. Genuine mentions of your team are gold: reply warmly and let the pattern happen naturally.

Can the review ask go on the invoice itself?

Yes and it is one of the best placements: a QR code and one line ('scan to leave us honest feedback on Google') on the invoice or receipt. The customer's own device, no incentive, no gating, fully compliant. Pair it with the SMS ask rather than replacing it.

A competitor is clearly buying reviews and outranking me. What can I do?

Report the suspicious reviews through Maps (look for the patterns: bursts, generic text, reviewer accounts with one review each), keep your own system compounding and be patient. Google's improved detection increasingly removes purchased batches, sometimes taking the whole rating down with them. Businesses that responded to fake competitors by buying their own fakes have ended up in the same detection sweep, which is the worst available outcome.

What if a customer asks for payment to remove a bad review?

That is review extortion. Do not pay: payment invites repeat demands and paying to alter reviews creates its own misleading conduct exposure. Document the demand (screenshots, messages), report the review to Google citing the extortion attempt, reply publicly with the calm factual template and if the demands persist or come with threats, it is a police and lawyer conversation, not a marketing one.

How many review requests can I send before it counts as spam?

The Spam Act issue is not volume, it is consent and conduct: message customers who gave you their details in the course of business, identify yourself, honour opt outs and keep it to the ask plus one reminder. A business sending two messages per completed job is nowhere near the line. A business blasting its full historical database quarterly is standing on it.

Next steps: pick your path

Build the system this week: save your direct review link, pick your script, put the one follow up rule in place and start with your last ten happy customers.

Audit what you are already doing: if there is a kiosk, an incentive, a gating tool or a staff name script anywhere in your current process, retire it today. The April 2026 rules are already being enforced.

Not sure where your setup stands? Get an honest opinion from us: send through how you currently ask and we will tell you what is compliant, what is risky and what would lift the volume. Straight answers, no platform to sell you.

Sources and further reading

• ACCC: Managing Online Reviews. The Australian rules on genuine reviews, incentives and suppression.

• OAIC: Australian Privacy Principles. Handling customer contact details for review follow up.

• Australian Cyber Security Centre: Learn the Basics. Securing review tool integrations and accounts.

General information only. Rules vary by situation, particularly around advertising claims, privacy, reviews and consumer law. If you are unsure about compliance, get professional advice.