FTC Testimonial Rules: What You Can Legally Publish

The FTC rule on consumer reviews and testimonials is 16 C.F.R. Part 465, and it took effect on October 21, 2024. It bans six things: fake or false reviews and testimonials, paying for a review conditioned on its sentiment, undisclosed reviews written by company insiders, company-controlled sites that pose as independent, suppressing negative reviews through threats or intimidation, and buying fake followers or engagement. Courts can impose civil penalties for knowing violations, and in warning letters sent on December 22, 2025 the FTC cited a maximum of $53,088 per violation. Nothing in the rule stops you from asking customers for reviews, publishing the good ones, or offering an incentive, as long as the incentive is not tied to what the review says and the connection is disclosed.

What is the FTC rule on consumer reviews and testimonials?

It is a trade regulation rule the Commission finalized in August 2024 and codified at 16 C.F.R. Part 465. The important thing about a rule, as opposed to the older Endorsement Guides, is enforceability. The Endorsement Guides describe how the FTC interprets the law; they carry no penalties of their own. A trade regulation rule lets the Commission go to court for civil penalties against a business that knew or should have known its conduct was prohibited. That is the whole point of the 2024 rulemaking, and it is why review practices that were tolerated for years suddenly carry real financial exposure.

The rule applies to businesses of every size. There is no small-business carve-out, no threshold revenue, and no exemption for a five-person agency posting testimonials on its own site.

What the FTC rule bans

Six categories, each with its own section of the rule.

Are fake reviews illegal?

Yes. Since October 21, 2024, writing, buying, selling, or publishing a fake consumer review is a violation of a federal trade regulation rule, not merely a practice the FTC frowns on. Knowing violations expose a business to civil penalties, and the figure the FTC cited in its December 2025 warning letters was up to $53,088 per violation. That amount is adjusted annually for inflation, so check the current number before relying on it. Per violation is the phrase that matters: the FTC has historically counted violations by individual instance, and a few hundred fabricated reviews arithmetically produces a number no small business survives.

Is the FTC actually enforcing this?

Yes, and the posture changed noticeably in late 2025. On December 22, 2025 the Commission sent warning letters to ten companies over their review practices, acting on consumer complaints and information the companies themselves had provided. Warning letters are how the FTC usually signals a shift from guidance to enforcement, and they establish the knowledge element that civil penalties require. A business that receives one and does not fix the underlying practice is in a materially worse position than one that never received a letter at all.

Can you offer an incentive for a review?

You can, within two limits. First, the incentive cannot be conditioned on the review being positive. Offering every customer a $10 credit for leaving a review is generally fine; offering a $10 credit for leaving a five-star review is the thing 465.4 prohibits. Second, the material connection has to be disclosed, in or near the review itself, so a reader knows the writer got something. "I received a free product in exchange for my honest review" is the standard form and it works because it is specific and adjacent to the review.

The subtler trap is conditioning by implication. A follow-up email that says "if you loved it, here's a link to review us and claim your discount" is technically open to everyone but signals what kind of review earns the reward. Write the ask neutrally, and ask everyone. Our guide on how to ask for a review has wording that stays neutral without killing your response rate.

Is review gating illegal?

This is the murkiest area, and honest guidance has to say so. Review gating means surveying customers first and routing the happy ones to Google while sending the unhappy ones to a private complaint form. Part 465 does not name the practice, and simply choosing to ask satisfied customers for a review is not a violation on its face. But two of the rule's provisions reach much of what gating actually accomplishes: 465.7 covers suppressing negative reviews and presenting a subset of reviews as if it represents all of them, and the underlying FTC Act plus the Endorsement Guides reach deceptive practices the rule does not enumerate. The FTC has treated gating as a misrepresentation of a business's true reputation.

The practical read: asking your best customers for testimonials you publish on your own site is normal marketing and always has been. Building a funnel whose purpose is to intercept negative feedback before it reaches a public platform is the version that draws enforcement attention. If a system routes people differently based on predicted sentiment, assume a regulator will see it for what it is.

Can employees write reviews for the company?

Only with a clear disclosure of the relationship, and even then it is a poor idea. Section 465.5 covers officers, managers, employees, and their immediate relatives, and it also reaches the manager who asks the team to go post something. The disclosure has to be clear and conspicuous where the review appears, which on most platforms is awkward at best. The cleaner answer is a policy that says employees do not review the company, full stop, and a real collection process aimed at customers instead. Teams that treat marketing claims as a tracked obligation rather than a one-time memo tend to catch this sort of thing early, which is one of the things a system that maps obligations to controls is genuinely useful for.

What you can still legally do

The rule is narrower than the panic around it. All of the following remain fine:

• Ask every customer for a review or testimonial, by email, text, or in person.
• Publish selected testimonials on your own website. You are not required to publish every testimonial you receive, and choosing the most articulate ones is editing, not suppression.
• Edit a testimonial for length or typos, so long as you do not change its meaning.
• Offer an incentive that is not conditioned on sentiment, with the connection disclosed.
• Ask a customer to remove or revise a review that is factually wrong, politely and without threats.
• Respond publicly to negative reviews.

The line that separates the permitted column from the prohibited one is consistent: you may curate what you publish on your own property, and you may not fabricate, pay for sentiment, hide your identity, or coerce.

How to collect testimonials that stay on the right side of the rule

Most compliance failures here are record-keeping failures. A business publishes a testimonial in good faith, and two years later cannot show who said it, when, whether they consented, or whether anything was given in exchange. Four habits fix that.

Capture consent at the moment of submission. Not a separate PDF signed later. The customer should read your consent language and accept it on the same screen where they write or record, so approval and permission live in one record. A testimonial release form covers the same ground when you need a standalone document.

Keep the raw submission. If you shorten a quote for a landing page, keep the original so you can show the edit did not change the meaning.

Log any incentive. If a customer received anything, record what and when, and make sure the disclosure appears with the published testimonial.

Approve before publishing. A review step between submission and your website is where someone catches an unsupported claim, a specific result that needs context, or a testimonial from someone who turns out to be an employee's brother.

This is the workflow Testimonials is built around. You send one request link, the customer records video or types their story in the browser with no login, they accept your consent language in the same step, and nothing publishes until your team approves it. The consent record stays attached to the testimonial, so if a question arrives years later you can answer it. Then you collect testimonials continuously and embed the approved ones on your site.

Does the rule apply to testimonials on my own website?

Yes. Part 465 covers consumer reviews on third-party platforms and consumer testimonials a business publishes itself, which the rule treats as distinct categories precisely so both are captured. A fabricated quote on your home page is squarely within 465.2, and an employee testimonial presented as a customer's is within 465.5. Some professions layer additional rules on top: our guide to law firm client testimonial rules covers attorney advertising, and healthcare practices have HIPAA authorization requirements on top of everything here.

The commercial case for doing this properly

Compliance is the floor, not the reason. Real testimonials outperform invented ones because specificity is what persuades, and nobody invents the useful details. The Spiegel Research Center at Northwestern found purchase likelihood peaks in the 4.0 to 4.7 star range and declines toward a perfect 5.0, because a flawless record reads as filtered. That finding, and the rest of the credible research in this space, is collected in our testimonial statistics breakdown. A wall of genuine, specific, occasionally imperfect customer testimonials converts better than a manufactured one, and it does not carry a five-figure per-violation risk.

This article is general information, not legal advice. Review your practices with counsel, and read the current text of 16 C.F.R. Part 465 and the FTC's business guidance before relying on any summary, including this one.