What Singapore found
Fake-review enforcement usually arrives as a line in a regulator's annual report. The Singapore case is unusual because the regulator published the mechanics: the seller's price list, its terms and conditions, its dashboard, its Telegram recruitment channel, and the names of every business that admitted buying.
According to CCS, Julian Tung Yan Kai, sole director of Reputifly Pte. Ltd., offered fake-review services through Reputifly and two websites, BuyReviewSG and GetReviewSG, starting “sometime on or before 2023”. The reviews were posted on platforms that, in the release's words, “may include Google, Facebook, Tripadvisor, Carousell, Yelp and Trustpilot”. Businesses bought packages of reviews to be posted over time, and could use “a rating calculator to work out how many five-star reviews they needed to reach their desired Google rating”.
The operation was not crude. CCS says the seller used generative AI “to vary writing styles and sentence structures, incorporate details such as Singapore context and introduce natural imperfections”, that its dashboard could draw on a business's existing four- and five-star Google reviews to generate new ones, and that “some fake reviews deliberately described initial reservations before recounting a positive experience, creating an illusion of authenticity”. Individuals were recruited on Telegram, paid per posting and told to avoid duplicate reviews “to reduce the risk of detection”.
What the reviews cost
CCS's Annex A reproduces the seller's catalogue. It advertised BuyReviewSG as “the trusted review provider for over 300+ businesses in Singapore”, a claim CCS's own figure of about 100 businesses does not support. Three weekly plans were on sale.
Singapore dollars, from the seller's catalogue as reproduced by CCS
Source: Competition and Consumer Commission of Singapore, media release of 30 September 2026 and Annexes A, E and F, read 1 October 2026. Per-review prices are our arithmetic.
Per-review price is the package price divided by the number of reviews. Currency is not stated in the screenshot; we assume Singapore dollars because the service was sold to Singapore businesses.
The terms, in Annex E, are the more revealing document. Under “Replacement cap” they read: “We replace up to 30% of the quantity ordered if Google removes reviews.” Under “Compliance”: “You confirm you are authorized to request reviews for this business.” Under “Progress proof”: “Each screenshot uploaded = 1 review delivered toward your order.” The seller expected some of its product to be caught by the platforms, priced that in, and shifted responsibility to the buyer in writing.
At roughly six Singapore dollars a review, the economics explain why fake reviews persist. A business can move a rating for less than the cost of one advertisement, and the seller's replacement promise means even platform detection only trims the order.
What the businesses must now do
Singapore's route was undertakings rather than fines. The 45 businesses committed to “cease procuring or posting fake reviews and other unfair practices”, to “identify and remove fake reviews relating to their businesses, report their progress to CCS, strengthen their compliance measures, and publish a prominent public apology for six months on their websites, official social media accounts and at their physical premises or outlets”. The seller committed to stop, to post its own apology for six months and, voluntarily, to donate the proceeds of its fake-review services to an Institution of a Public Character of its choice, without claiming any tax deduction.
For a business whose problem was its reputation, that is a pointed remedy. A fine is a private cost. A six-month notice on the shop door and the company's Instagram that it paid for fake praise is the reputational harm the reviews were meant to prevent, delivered by the business itself. CCS also published Annex F, an alphabetical list of the 45 registered business names. They include a funeral care company, a private investigation firm, a translation service, an admissions consultancy, a laundry, a karaoke equipment supplier, hair salons and a Japanese restaurant. Three entities share the Le Wave name and two each the Apax Medical and Play! names, which suggests some buyers bought for several outlets.
We checked the seller's own compliance on 1 October 2026, the day after the announcement. Reputifly's website carries the apology text in its page code, set to display in a dedicated block: “Reputifly apologises for providing fake review services to businesses and facilitating the posting of fake reviews on online review platforms. We recognise that we have aided and abetted businesses to engage in unfair practices under the Consumer Protection (Fair Trading) Act.” The same page markets “Bespoke Websites That Scale Businesses”, with menus for website design, SEO, Google Ads, Meta Ads, a “Content Engine” and “Agentic AI”. CCS did not give web addresses for BuyReviewSG or GetReviewSG and we did not locate them, so we cannot say whether they are still online. We did not check the 45 buyers' websites or premises; the release does not say by when the apologies must appear.
What happens in the US and the UK
Singapore's case is public and finished for its first 45 businesses. The two larger regimes have sharper tools and fewer completed cases.
United States. The FTC's Trade Regulation Rule on the Use of Consumer Reviews and Testimonials, 16 CFR Part 465, took effect on 21 October 2024. It prohibits creating, buying or disseminating reviews that misrepresent whether the reviewer exists or used the product, including AI-generated ones, and it makes knowing violations subject to civil penalties. Law firm summaries put the current maximum at $53,088 per violation. The rule's first public use came on 22 December 2025, when, according to Covington's Inside Privacy blog, the FTC sent warning letters to ten companies whose names were not disclosed, asking each to confirm within five business days how it would comply. We could not open the FTC's own page for those letters and rely on law firm accounts of them. The rule's details, and how they apply to employee reviews, are set out in do employer reviews affect brand search.
United Kingdom. Under the Digital Markets, Competition and Consumers Act 2024, from April 2025 obtaining and posting fake reviews, and publishing incentivised reviews not clearly marked as such, became banned practices. The CMA can decide for itself whether the law has been broken, without going to court, and, according to Bryan Cave Leighton Paisner's summary, can fine up to 10 per cent of global turnover. On 27 March 2026 it opened investigations into Autotrader and Feefo over unpublished one-star reviews, Dignity over whether staff were asked to write positive reviews, Just Eat over inflated star ratings, and Pasta Evangelists over undisclosed discounts for five-star reviews. The CMA says it “has not reached any conclusions” in those cases.
Most recent public step against fake or misleading reviews, as of 1 October 2026
Sources: CCS media release, 30 September 2026; CMA, 27 March 2026; FTC warning letters of 22 December 2025 as reported by Inside Privacy, 2 January 2026.
Bars show how far each public process has gone, not the size of any penalty. The FTC and CMA may have non-public matters open.
What this means for a company's reputation
Three points carry across all three jurisdictions.
First, AI has made fake reviews cheaper and harder to spot, and regulators know it. CCS describes AI-written reviews engineered to look imperfect; the CMA's consumer tips now include “be alert to AI generated reviews”; and the FTC's rule names AI-generated reviews explicitly. Detection is improving at the same time, and a business that buys reviews is betting that today's fakes will not be identifiable in tomorrow's audit. The seller's own 30 per cent replacement clause shows it expected a share of its product to be caught.
Second, responsibility sits with the buyer. The seller's terms made the buyer confirm it was authorised; CCS took undertakings from the buyers as well as the seller; the FTC rule covers businesses that procure reviews; the UK regime bans obtaining them. Outsourcing to an agency is not a defence anywhere.
Third, the remedy is public. The point of reviews, as review and reputation signals sets out, is the first impression they give to someone who has never dealt with the company. A published apology, a named list or an enforcement press release becomes part of that impression, and it is the kind of record that now feeds AI answers about a company, discussed in do review sites affect what AI recommends. The only durable route to better reviews is the slow one: asking real customers, every time, without conditions on what they say.
Methodology and limitations
The Singapore case is taken from CCS's media release of 30 September 2026, read in full on the CCS website on 1 October 2026, and from its annexes, downloaded the same day: Annex A (sample packages), Annex E (sample terms) and Annex F (list of businesses). Annexes A and E are screenshots; we read them visually. Per-review prices are our division of package price by review count. Our check of the seller's site was a single request to reputifly.com on 1 October 2026 with curl and a standard browser user-agent; the apology text is present in the page source within a script that renders it, and we did not view the rendered page in a browser. We tried likely web addresses for BuyReviewSG and GetReviewSG and none resolved, but because CCS did not publish their addresses we draw no conclusion from that. US material comes from law firm summaries, Covington & Burling's Inside Privacy (2 January 2026) and Benesch (6 April 2026), because the FTC page for the December 2025 letters could not be found at the address we tried; the penalty figure is theirs. UK material comes from the CMA's press release of 27 March 2026, read on GOV.UK, and Bryan Cave Leighton Paisner's summary for the turnover-based fine. Four limitations apply. We did not verify any business's apology. The Singapore figures are what the businesses admitted, not a measure of how many fake reviews were posted. The US and UK processes may include non-public matters. And none of this is legal advice.
Conclusion
A business caught buying fake reviews in Singapore now has to remove them, report to the regulator and tell its own customers, on its website, its social accounts and its shop door, for six months, that it did so. That is the first fully public outcome of the current wave of fake-review enforcement, and its details are instructive: AI-written reviews engineered to look imperfect, sold at about six Singapore dollars apiece, with a replacement guarantee for the ones the platforms caught. The US and UK have larger penalties on the books, up to $53,088 per violation and 10 per cent of turnover, but on the public record the FTC has sent warning letters and the CMA has opened investigations without findings. The direction in all three is the same, and so is the lesson for anyone managing a reputation: the buyer carries the risk, detection is catching up with generation, and the penalty, when it comes, is published.
Frequently Asked Questions
What happens to a business caught buying fake reviews in Singapore?
In the September 2026 case, 45 businesses gave undertakings to stop, find and remove their fake reviews, report progress to the Competition and Consumer Commission of Singapore, strengthen compliance and display a prominent public apology for six months on their websites, social media and premises. Two that refused the terms remain under investigation.
How much did the fake reviews cost?
The seller's catalogue, reproduced by CCS, offered 21 reviews for S$139, 28 for S$179 and 35 for S$219, posted over a week. That is between S$6.26 and S$6.62 per review, on our arithmetic. Its terms promised to replace up to 30 per cent of the reviews ordered if Google removed them.
Were the fake reviews written by AI?
Yes. CCS says the seller used generative AI to vary writing styles and sentence structures, add Singapore detail and introduce natural imperfections, and that some reviews deliberately described initial doubts before a positive experience. Paid individuals recruited on Telegram then posted them.
What is the penalty for fake reviews in the US?
The FTC's Consumer Reviews and Testimonials Rule, in force since 21 October 2024, allows civil penalties for knowing violations, which law firm summaries put at up to $53,088 per violation. Its first public use was warning letters to ten undisclosed companies on 22 December 2025.
What is the penalty for fake reviews in the UK?
Since April 2025, obtaining and posting fake reviews has been a banned practice under the Digital Markets, Competition and Consumers Act 2024. The CMA can decide breaches itself and, according to legal summaries, fine up to 10 per cent of global turnover. It opened five review investigations on 27 March 2026 and has made no findings.
Is a business responsible if an agency bought the reviews?
On every regime discussed here, yes. CCS took undertakings from the buying businesses as well as the seller, the FTC rule covers businesses that procure fake reviews, and the UK ban covers obtaining them. The Singapore seller's own terms made buyers confirm they were authorised to order reviews.
Sources
- regulator Competition and Consumer Commission of Singapore, CCS Takes Action Against 45 Businesses and a Fake Review Provider for Fabricating Online Reviews, 30 September 2026, with Annexes A, E and F. Undertakings, the seller's methods, packages, terms and the list of businesses. Read 1 October 2026.
- live read Reputifly, reputifly.com. Apology text present in page source; current service menu. Read 1 October 2026.
- regulator Competition and Markets Authority, Fake and misleading reviews: 5 businesses under CMA investigation, 27 March 2026. The five cases; banned practices since April 2025; 14 businesses under the new powers. Read 1 October 2026.
- law firm summary Covington & Burling, Inside Privacy, FTC Issues Warning Letters for Violations of Consumer Reviews Rule, 2 January 2026; and Benesch, Five Stars, Zero Tolerance, 6 April 2026. Ten warning letters on 22 December 2025; $53,088 maximum per violation; five-day response. Read 1 October 2026.
- law firm summary Bryan Cave Leighton Paisner, CMA Steps Up Enforcement on Fake and Misleading Reviews, 30 March 2026. Fines of up to 10 per cent of global turnover under the DMCC Act. Read 1 October 2026.
- press The Straits Times, Competition watchdog takes action against fake review provider, 45 businesses, 30 September 2026. The headline that prompted this guide; not relied on above, where the regulator's own release is used instead.