Fake Reviews and Reputation Attacks: Legal Defense Against Commercial Defamation

This page is a translation of the original Portuguese text, provided for convenience. It deals with Brazilian law. If there is any discrepancy, the Portuguese version prevails. Read the original in Portuguese

Fake reviews, coordinated ratings, and smear campaigns have cut the revenue of small and midsize businesses within a matter of weeks. Brazilian law offers concrete ways to remove unlawful content, identify those responsible, and seek compensation for the damage to your company’s reputation.

Legitimate Criticism vs. Unlawful Conduct: Where the Line Falls

Not every negative review is illegal. A consumer who describes a real experience, even in a harsh tone, is exercising freedom of expression and the right to information, both protected by Brazil’s Constitution. Sincere dissatisfaction, even when exaggerated, is part of the natural risk of any business open to the public.

Unlawful conduct begins when a statement stops being a truthful account and turns into a deliberate lie, a gratuitous insult, or an artificial manipulation of ratings. Reviews from people who were never customers, accusations of crimes that never happened, and attacks coordinated by competitors leave the realm of opinion and enter the territory of defamation and unfair competition.

In practice, the distinction usually turns on three elements: whether the facts described are true, whether a real consumer relationship exists, and the purpose of the post. When all three are missing at once, there is strong evidence of unlawful conduct, which can justify removal of the content and holding its author liable.

This filter helps you avoid two opposite mistakes. One is treating a real customer’s legitimate complaint as a wrongdoing, which tends to amplify the negative attention. The other is ignoring an orchestrated campaign and letting fraudulent ratings lock in an artificially lowered reputation on search engines and review apps.

How to Gather Evidence Before Taking Action

Rushing to respond publicly usually makes things worse. The first technical step is to preserve the digital evidence before the author erases the trail. Isolated screenshots carry limited weight, because their authenticity and date are easy to challenge.

The safest measure is a ata notarial, a notarized record drawn up at a notary office in which a notary public certifies what appeared on the screen at a given moment. It captures the URL, the date, the time, and the exact content of the post, giving you evidentiary strength that is hard to contest in court.

It also pays to document the pattern of the attack: several low ratings within the same few hours, newly created profiles, repeated text with small variations, and no record of any purchase. Together, these details show coordination and undercut the argument that the reviews were spontaneous and independent.

A consumer who describes a real experience, even in a harsh tone, is exercising freedom of expression and the right to information, both protected by Brazil’s Constitution.

Getting the Content Removed: Out-of-Court Notice and Court Order

Once the evidence is in hand, the removal process can begin. The first step is an out-of-court notice sent to the platform hosting the review, identifying the specific content, the URL, and the reasons it is unlawful. Many platforms have their own reporting channels and take the material down when the grounds are clear.

When the platform refuses to remove the content, the Marco Civil da Internet (Brazil’s Internet Civil Rights Framework) comes into play. Under the general rule, a provider can be held liable for keeping material online only after a court order, which must precisely identify the URL to be removed. The request can be made in a standalone lawsuit or through a motion for urgent relief, depending on the case.

Urgent relief is especially useful in acute campaigns, where every hour of exposure deepens the loss. The judge can order immediate removal and set a daily fine for noncompliance, making the decision effective even before the final ruling on the merits.

Identifying Anonymous Authors

Coordinated attacks tend to hide behind anonymity, but the Constitution prohibits anonymity in free speech, and it does not survive a well-grounded court order. Identification happens in stages, starting with the data that each intermediary is required by law to keep.

The first request goes to the platform, seeking the access logs tied to the posts: the IP address, date, and time of each posting. With that data in hand, a second request goes to the internet connection provider, which holds the records of who was assigned that IP address at that moment.

This chain makes it possible to reach the individual or company responsible, including when a competitor is behind the profiles. Once the author is identified, the way is open to civil liability and, depending on the seriousness of the conduct, to examining crimes against honor and acts of unfair competition.

How to Respond Publicly Without Making the Damage Worse

While the formal measures move forward, your company has to decide how to act in front of the public. The golden rule is not to feed the controversy with bickering. Aggressive replies get screenshotted, take on a life of their own, and pin on your business the image of a company that mistreats its customers.

The recommended reply is brief, courteous, and impersonal. It notes that the company could not find the service described and offers to talk through private channels. This tone shows seriousness to readers and, on top of that, creates one more record that the review does not reflect a real consumer relationship.

At the same time, encouraging satisfied customers to share their true experiences helps rebuild your average rating legitimately. The goal is not to mask real shortcomings, but to keep a fraudulent set of reviews from single-handedly defining a reputation built over years.

Compensation for Damage to Your Business’s Reputation

Removal stops the bleeding, but it does not erase the harm already done. A company that has been wronged can seek compensation for the damages it suffered, both material and non-pecuniary. A legal entity holds honra objetiva (objective honor), meaning the reputation it enjoys in the marketplace, and it can suffer moral damages when that reputation is harmed.

Material damages cover the documented drop in revenue, canceled contracts, and the costs of containing the crisis, including expenses for the ata notarial and for a digital forensic examination. Proving them depends on accounting records and on the timing link between the attack and the loss.

Damage to reputation, for its part, does not require proof of concrete loss in a number of situations; it is enough to show the unlawful conduct and its impact. The amount of compensation takes into account the seriousness of the offense, the reach of the post, and the offender’s financial capacity, and it also serves a deterrent purpose.

When the attack comes from a competitor, liability for unfair competition is added, which can include an order to stop the practice and to compensate for the diversion of customers. Acting in both the civil sphere and, where appropriate, the criminal sphere raises the cost of this conduct and discourages further attacks.

Frequently Asked Questions

Can I hold someone liable for leaving a truthful negative review?

No. A review that reports a real consumer experience, even a critical and unfavorable one, is protected by freedom of expression. Liability is limited to false statements, gratuitous insults, or ratings manipulated by someone who was never a customer of the business.

Is the platform required to remove a review just because I complain?

Not always. Many platforms remove clearly false content after a well-grounded report, but under the general rule of the Marco Civil da Internet, holding the provider liable for keeping the material online depends on a court order that identifies the specific URL.

Is it possible to find out who is behind fake profiles?

Yes. With a court order, the platform provides the access logs (IP address, date, and time), and the connection provider identifies who held that address at the time of the posting. This makes it possible to reach the person responsible, including when it is a competitor.

As informações deste artigo são de caráter informativo e não substituem consulta jurídica individualizada. Cada caso possui particularidades que exigem análise específica.