The short and skinny: the FTC’s rule on consumer reviews and testimonials has been in force since October 21, 2024, and the conduct it reaches is mostly ordinary founder behavior. A cofounder’s five-star review. A quote on the homepage from a “customer” who was really a beta tester’s cousin. A thank-you gift card that only goes out for good reviews. A widget labeled “What our customers say” that quietly drops the two-star ones.
None of that feels like fraud when you’re doing it. The rule doesn’t ask how it feels.
What is the rule, exactly?
It’s a trade regulation rule, codified at 16 CFR Part 465 and published at 89 FR 68077 on August 22, 2024. The FTC issued it under Section 18 of the FTC Act (15 U.S.C. § 57a), and that choice of authority is what gives it teeth: knowing violations of a trade regulation rule can carry civil penalties, which general Section 5 deception cases usually can’t on a first offense.
There are six operative prohibitions, one per section: § 465.2, § 465.4, § 465.5, § 465.6, § 465.7 and § 465.8. (Section 465.3 is reserved. Nothing is in it.) Here they are in the order a founder is likely to trip over them.
Can I write a review of my own product?
Not without saying who you are.
Section 465.5(a) makes it a violation for an officer or manager of a business to write a consumer review or testimonial about the business, or anything it sells, without a clear and conspicuous disclosure of that relationship. “Officers” includes owners, executives and managing members (§ 465.1(l)). “Manager” means anyone who supervises other employees or agents and either has the title or does the job (§ 465.1(k)). At a five-person startup that is most of the company.
For testimonials there’s one escape valve: the disclosure isn’t needed if the relationship is “otherwise clear to the audience.” The CEO speaking in a product video under her own name and title is fine. The CEO’s glowing quote on the pricing page attributed to “Sarah K., Austin” is not.
Two related traps sit in the same section:
Employee testimonials. Under § 465.5(b), the business itself violates the rule if it publishes a testimonial from an officer, manager, employee or agent without disclosing the relationship, when the relationship isn’t otherwise clear and the business knew or should have known about it.
Asking your team and your family. Under § 465.5(c), an officer or manager who solicits reviews from immediate relatives, employees or agents is on the hook when those reviews go up without disclosure and the officer either discouraged disclosure, didn’t tell people to disclose, or saw undisclosed reviews appear and did nothing. “Immediate relative” is a defined term: spouse, parent, child or sibling (§ 465.1(i)).
The fix is boring. If you ask anyone close to the company for a review, tell them in writing to say how they’re connected, and check that they did.
What does “clear and conspicuous” mean here?
More than a footnote. The definition at § 465.1(c) runs eight paragraphs, and the one that matters for a website is (c)(4): in any interactive medium, the disclosure has to be unavoidable. If a visitor has to click a link or hover over an icon to see it, it doesn’t count. It also has to be in the same language as the review (c)(5) and can’t be undercut by anything else on the page (c)(7).
A tooltip that says “team member” is not a disclosure under this rule. “Written by our cofounder” next to the name is.
Can I pay for reviews?
You can reward reviews. You can’t reward a particular opinion.
Section 465.4 prohibits providing compensation or other incentives “in exchange for, or conditioned expressly or by implication on,” reviews that express a particular sentiment, positive or negative. The words “or by implication” carry weight. A gift card offered to everyone who leaves a review is outside § 465.4. A gift card offered to everyone who leaves “a five-star review,” or sent only to the people whose reviews came back positive, is inside it.
Two cautions. First, the FTC’s separate Endorsement Guides (16 CFR Part 255) generally treat an incentive as a material connection that should be disclosed, so a neutral incentive still isn’t a silent one. Second, “purchase a consumer review” is defined broadly at § 465.1(m): money, gift certificates, products, services, discounts, coupons, contest entries, or another review. Review swaps with a friendly founder in your accelerator cohort are on that list.
What about testimonials I didn’t write?
Section 465.2 is the core fake-review prohibition, and it has three layers.
Under § 465.2(a), a business can’t write, create or sell a review or testimonial that materially misrepresents that the reviewer exists, that they actually used the product, or what their experience was. That last clause is the one founders miss. An edited quote that says something the customer didn’t say misrepresents their experience, even if the customer is real.
Under § 465.2(b), a business can’t buy a review, or publish a testimonial, that it knew or should have known was fake in any of those three ways. “Should have known” is the standard. Buying a testimonial package from an agency that can’t tell you who the testimonialists are is not a defense.
Under § 465.2(c), a business can’t procure reviews from its own officers, managers, employees, agents or their immediate relatives for posting on a third-party platform when it knew or should have known they misrepresent the reviewer’s existence, use or experience.
There is a real carve-out in § 465.2(d): paragraphs (b) and (c) don’t apply to reviews that come from generalized solicitations to purchasers, or to reviews that appear just because you host a review section. Asking every customer, with the same neutral message, to share their experience is the safe harbor. Asking only the customers you already know are happy is not.
Can I hide the bad reviews?
You can moderate them. You can’t pretend you didn’t.
Section 465.7(b) makes it a violation to represent that the reviews displayed on your site are most or all of the reviews submitted when you are suppressing reviews based on their rating or negative sentiment. Moderation criteria are fine if they’re applied to every review regardless of sentiment. The rule gives examples of neutral criteria: trade secrets, defamatory or abusive content, other people’s personal information, discriminatory content, clearly false content, reviews you reasonably believe are fake, and reviews unrelated to what you sell.
Section 465.7(a) is the other half, and it applies to “anyone,” not just businesses: no unfounded or groundless legal threats, physical threats, intimidation, or knowingly false public accusations aimed at stopping a review or getting one taken down. A cease-and-desist letter over a one-star review, with no real claim behind it, is exactly what this paragraph describes.
What else is in there?
Two more, both short.
Company-controlled review sites. Section 465.6 prohibits misrepresenting that a website or organization you control provides independent reviews of a category that includes your products. The “Best CRMs for Agencies in 2026” comparison page on a domain you own, ranking yourself first, needs to say who wrote it.
Fake social proof. Section 465.8 prohibits buying or selling fake indicators of social media influence, such as followers, views, likes or reposts generated by bots or hijacked accounts, when they’re used to misrepresent influence for a commercial purpose. Buying bot followers for the company account is the textbook case.
What’s the exposure?
The FTC enforces the rule. For a knowing violation of a trade regulation rule, Section 5(m)(1)(A) of the FTC Act authorizes civil penalties, and the current ceiling set by 16 CFR 1.98(d) is $53,088 per violation. That figure applies to penalties assessed after January 17, 2025, and it is adjusted for inflation, so check the current number rather than copying this one forward. The knowledge standard is real: the statute requires actual knowledge, or knowledge fairly implied, that the conduct was unfair or deceptive and prohibited by the rule. It is also why “we didn’t know about the rule” gets weaker every month the rule has been on the books.
The FTC Act doesn’t give consumers or competitors a private right to sue under the rule. That matters less than it sounds. State consumer-protection law, including California’s Unfair Competition Law, can treat a violation of another law as its own “unlawful” predicate, and competitors have false-advertising claims of their own.
What should I do this week?
Set a timer for ten minutes and open your own homepage.
- Trace every testimonial. For each quote, can you name the person, show they used the product, and show they said those words? Keep the email or form submission. Anything you can’t trace comes down.
- Label the insiders. Any review or testimonial from a founder, manager, employee, contractor acting as your agent, or their spouse, parent, child or sibling gets a visible disclosure next to it. No hover, no footnote.
- Rewrite the review request. One message, sent to every customer, asking for an honest review. Delete “if you enjoyed it” from the template.
- Check the incentive. If there’s a reward, it goes to every reviewer regardless of rating, and the review says it was incentivized.
- Read your widget’s filter settings. If it hides low ratings, either turn that off or stop labeling the section as your customers’ reviews.
- Look at the follower count. If any of it was bought, stop buying it.
Most of that is copy and configuration, which is why it tends to sit in the backlog next to the rest of the launch-surface issues I ranked in this post on vibe-coded apps. Where it fits in the larger sequence is mapped in the founder’s legal stack.
If you’d rather have the landing page, review flow and disclosures reviewed against Part 465 than against a checklist, that’s part of the firm’s web compliance package.
This article is general information, not legal advice, and reading it does not create an attorney-client relationship. Attorney advertising. No outcome is guaranteed. Penalty amounts are adjusted for inflation and rules can be amended or challenged; confirm current requirements with the primary sources linked above or your own advisor. Law Office of Ian Daily.