How do fake review extortion bots target marketplace sellers?

How the extortion playbook works

It starts with reconnaissance. The operators scrape the marketplace for sellers with thin review cushions: new listings with under fifty reviews, where a dozen one-stars can tank the average. They prefer sellers in competitive categories where a half-star drop costs the Buy Box, because the pain is immediate and measurable. Launch windows are prime time. A seller who just spent on inventory and ads will pay faster than an established brand with a thousand reviews to absorb the hit.

The review wave itself is engineered to look real. Each review comes from an aged account with a purchase history, posted from a different IP, with varied wording and star patterns that mimic organic disappointment. Some operators buy the product first to get the verified purchase badge, then return it. The negative reviews arrive over hours, not minutes, because a sudden burst is easier for marketplace filters to catch. Then comes the message, usually through buyer-seller messaging or an external channel listed in a review: pay a fee and the reviews disappear, refuse and more are coming.

Why marketplaces struggle to filter these attacks

Marketplace review filters are tuned for the opposite problem: fake positive reviews. They look for bursts of five-star praise from new accounts, not distributed one-star complaints from aged ones. An extortion wave is designed to sit exactly in the blind spot, mimicking the shape of a genuine quality complaint. Ten disappointed buyers leaving one-star reviews over a weekend is also what a real product defect looks like, and the filters cannot tell the difference from behavior alone.

Cross-account linkage is the missing piece. The reviews come from different accounts, IPs, and devices, so simple clustering fails. Catching the operation requires joining signals across the review system, the messaging system where the demand arrives, and the payment rails where the ransom goes. Most marketplaces review these systems separately, which is why the pattern is usually reported by the victim rather than detected automatically. Sellers who keep their own logs of review timestamps, reviewer account ages, and the wording of the demand give investigators the joined-up evidence the automated systems lack.

The real cost beyond the star rating

The visible damage is the rating drop, but the expensive damage is algorithmic. A listing that falls below key rating thresholds loses the Buy Box, drops in search placement, and gets excluded from deal events, all automatically. For a seller doing meaningful volume, a week at a suppressed rating can cost more than the ransom demand, which is exactly the arithmetic the extortionists count on. Some sellers pay quietly and never report, which keeps the operation profitable and invisible.

There is a second-order cost that shows up later. If the fake reviews mention specific defects, safety issues, or counterfeit claims, those phrases can trigger marketplace policy reviews or even category-level flags. A handful of reviews claiming a product is fake can put the listing under authenticity review, freezing sales entirely while the seller proves the inventory is legitimate. The extortionists know this escalation path exists, and the threat of it is often part of the demand.

How sellers shut it down

Start with evidence, not emotion. Screenshot every fake review with timestamps, note the reviewer account ages and review histories, and save the extortion message verbatim. Report through the marketplace's abuse channels as a coordinated attack, not as individual bad reviews, and reference the pattern: the timing correlation between the review wave and the demand is the proof. Sellers who report ten separate one-star reviews get ten separate shrugs; sellers who report one coordinated extortion campaign get an investigation.

While the report is pending, dilute the attack legitimately. Accelerate review requests to real recent buyers through the marketplace's own request-a-review tools, which are compliant and effective. Do not buy positive reviews to fight fake negative ones; that trades one policy violation for another and gives the marketplace a reason to penalize you instead. And never pay the demand. Payment confirms you are profitable to extort, and operators keep lists of sellers who paid. The sellers who beat extortion rings are the ones who make the attack expensive and unprofitable: fast reporting, clean evidence, and no ransom.