Review Generation Strategy: How to Ask, When to Ask, and What the FTC Actually Requires

A review generation program that does not comply with FTC guidelines, platform policies, and the basic principles of authentic feedback is not a reputation management program. It is a liability. Here is what a compliant, effective program actually looks like.

Most businesses that want more reviews make the same mistake: they treat review generation as a volume problem. More asks, more reviews. The reality is that review generation is a timing, relevance, and trust problem. The right ask at the right moment from the right relationship produces a review. The same ask sent in bulk to a cold list produces spam flags, filter suppression, and in the worst case an FTC enforcement action.

This article covers what a compliant, effective review generation strategy looks like: the FTC rules that govern it, the platform policies that constrain it, the timing mechanics that make it work, and the specific approaches that produce authentic reviews at sustainable volume without creating a compliance or authenticity problem.

What the FTC Actually Requires

The FTC's Rule on the Use of Consumer Reviews and Testimonials (16 CFR Part 465, effective October 21, 2024) replaced the prior endorsement guidelines with enforceable rules carrying civil penalties of up to $51,744 per knowing violation. The rule is the most significant update to review governance in the FTC's history and directly governs how businesses solicit, display, and manage consumer reviews. The relevant requirements are straightforward but frequently misunderstood or ignored. A companion Q&A guide from the FTC covers common scenarios and is worth reviewing directly before building any review solicitation program.

• No buying or creating fake reviews: Purchasing fake reviews, commissioning reviews from people who have not used the product or service, generating reviews through fake social media profiles, or using AI to create fictitious reviews are all explicitly prohibited.
• No insider reviews without clear disclosure: Reviews or testimonials written by insiders (employees, officers, agents, or their immediate family members) are prohibited unless they are clearly and conspicuously disclosed as coming from an insider. An employee who posts a positive review of their own employer without disclosing the relationship violates 16 CFR Part 465.
• No incentivized reviews without clear disclosure: Providing any compensation or benefit, whether a discount, a gift card, a free product, or any other material consideration, in exchange for a review creates a material connection that must be clearly disclosed. Most review platforms prohibit incentivized reviews entirely, which means an incentivized ask violates both FTC rules and platform terms simultaneously.
• No suppression of negative reviews: A program that selectively solicits reviews only from customers who have indicated satisfaction with the intent to suppress negative feedback from reaching public platforms is prohibited. This practice, known as review gating, was specifically named in the 2024 rule.
• No misrepresenting review content: Businesses cannot edit, display, or republish consumer reviews in ways that omit or alter their content to change the overall sentiment.

Platform Policies on Solicitation

Platform policies on review solicitation vary significantly and are independent of FTC compliance. A practice can be FTC-compliant and still violate a platform's terms.

Google permits asking customers for reviews but prohibits incentivizing them and prohibits review gating. Google's guidelines also discourage mass email campaigns that solicit reviews in bulk without a personal connection to the customer's experience.

Yelp explicitly prohibits asking customers to leave reviews in any form, and reserves some of its most visible penalties — including a consumer alert badge displayed publicly on the business profile — for businesses caught doing so. What is less well known is that Yelp permits and actively supports a set of indirect approaches that create conditions for organic reviews without crossing the solicitation line. Yelp's own DOs and DON'Ts guide for business owners outlines four permitted approaches: displaying official Find Us on Yelp signage in the storefront, encouraging customers to check in on the Yelp app while on-site, promoting organic Yelp reviews on social media and linking back to the Yelp profile, and sending general post-service feedback requests that do not direct the customer specifically to Yelp. The distinction between what Yelp prohibits and what it permits is specific enough that businesses in categories where Yelp matters should read the platform's own guidance directly rather than relying on a summary of the rules.

Trustpilot permits review invitations from both internal and external sources. The distinction that matters is that reviews invited through Trustpilot's own invitation system are marked as verified, while reviews that arrive organically or through external invitation channels are not marked verified, even if they are entirely genuine. This is not a meaningful quality signal. It is a feature designed to create pressure to pay for Trustpilot's premium business account. The business response to this varies: some pay the premium to compete on even terms, others accept the platform as-is, and others decide that Trustpilot does not fit their model and focus elsewhere. All three are legitimate choices based on whether Trustpilot ranks in branded search and whether the target audience uses it for research.

G2 and Capterra permit review solicitation with verified user accounts. G2 runs periodic review campaigns that clients can participate in through the platform's own program.

The practical implication: a unified review generation program that uses the same approach across all platforms creates compliance problems because the platforms do not have the same rules. A platform-specific solicitation strategy, designed around each platform's actual policies, is more work but the only approach that does not create accumulating risk.

Timing: When to Ask

The single most important variable in review generation conversion is timing. A review request sent at the moment of highest customer satisfaction produces a significantly higher response rate than the same request sent a week later. The challenge is identifying when that moment is for each customer type and each business model.

Transactional Businesses

For businesses where the customer interaction is a discrete transaction — a restaurant visit, a product purchase, a service appointment — the optimal review request timing is within 24 to 48 hours of the transaction. By this point the experience is fresh, the customer has had time to form an impression, and the emotional valence of a positive experience has not yet faded. Requests sent more than a week after a transaction show significant conversion drop-off in most categories.

Relationship Businesses

For businesses with ongoing customer relationships, the optimal moment is not tied to a transaction but to a milestone: a successful project completion, a renewal, a positive service interaction that the customer acknowledged, or a moment when the customer has explicitly expressed satisfaction. A review request that arrives immediately after a customer says 'this has been great, thank you' converts at a far higher rate than one sent on a predetermined schedule.

The Follow-Up Close-the-Loop Moment

The NPS close-the-loop process covered in the NPS pillar creates a specific review generation opportunity: a Detractor whose issue was genuinely resolved is a candidate for a review request, but only after the resolution, never as part of the resolution. A customer who had a problem, had it fixed, and now has a more favorable impression of the business than they had at the low point of their experience has a genuine story to tell. That story is more credible and more useful than a generic five-star review from a customer who had a routine positive experience.

How to Ask: Format and Language

The format of a review request affects conversion as much as the timing. Several principles consistently improve response rates:

• Personal over automated: A review request that references the specific interaction, names the customer, and comes from a person the customer has dealt with converts at a higher rate than a generic automated email. When scale requires automation, the automation should be personalized enough to reference the transaction or interaction it is tied to.
• Specific over generic: 'Would you be willing to share your experience with our installation team on Google?' converts better than 'Please leave us a review.' The specific request tells the customer exactly what to do and reduces the friction of figuring out where to go and what to say.
• One platform at a time: Asking a customer to leave reviews on three platforms in a single request reduces the likelihood of them leaving any. Pick the highest-priority platform for the specific customer segment and make one clear ask.
• Make it easy: A direct link to the review form eliminates the search friction that stops many customers from completing a review they intended to leave. Every additional step between the request and the review reduces conversion.

Benchmarks: What a Working Program Produces

28% of consumers say they will "always" leave a review if asked, up from 16% in 2025, the largest single-year increase BrightLocal has recorded for this metric. 83% of people who were asked to leave a review did so (BrightLocal Local Consumer Review Survey 2026). These numbers establish a practical ceiling for well-run programs: a compliant review generation program asking at the right moments should convert roughly 8 in 10 asks. Programs converting below 50% have a timing, format, or channel problem worth diagnosing. 70% of reviews come from post-transactional review request emails (ReviewTrackers), which makes email the primary channel for most business types, with SMS a strong second for consumer service categories. Google blocked 240 million fake or policy-violating reviews in 2024 alone (BrightLocal 2026, citing Google data), which means the platforms are actively investing in authenticity detection. Compliant, authentic review generation programs are not only ethically correct: they are the only programs that hold.

The TrueReview and Transparency Company Model

The Transparency Company's TrueReview certification represents one of the more credible approaches to authenticated review generation in the current market. Rather than simply generating volume, TrueReview provides certification that reviews were solicited according to FTC guidelines and platform policies, giving businesses a defensible record of their review generation practices and giving consumers a signal that the reviews they are reading were not manipulated.

For businesses operating in regulated industries or in categories where review authenticity is frequently questioned, this kind of third-party certification provides both a compliance record and a public credibility signal. It is worth understanding as a model for what compliant review generation looks like at an operational level, regardless of whether the specific platform is used.

The Bottom Line

A review generation program that does not comply with FTC guidelines and platform policies is building a reputation liability, not a reputation asset. The compliant program asks at the right moment, uses platform-specific approaches, never gates by satisfaction, never incentivizes, and makes the ask as easy as possible for the customer to complete.

Volume follows from discipline, not from shortcuts.