← All guides YixingYixing · Business Landing
Compliance & Retainer · Crisis Response

Malicious Reviews and Online Attacks on Your Business in the Philippines: Evidence, Platform Complaints and How to Respond

Updated 2026-10-14·9 min read·Compliance & Retainer

The short version: when your business is hit by a wave of hostile reviews or named in community chat groups, first preserve the content together with the author, time and link. Second, decide which kind it is: a real customer who is unhappy, a malicious attack containing false statements of fact, or a review used to extract money. Only then choose a response: one restrained public reply and a private fix for the first, a platform complaint and a lawyer's letter for the second, a report to the authorities for the third. Throughout, do not trade insults, do not buy favourable reviews, and do not announce that a particular rival is behind it. For harm to personal reputation and the legal limits on what you yourself post, see where online libel begins in the Philippines. This guide takes the business's point of view. For your specific case consult a licensed lawyer; this article is not legal advice.

The first 24 hours: preserve, contain, speak with one voice

Online content can be edited or removed at any moment, so preserve it the moment you see it. For each review, post or group message keep a full screenshot showing the author's name and picture, the time and the page or group; the link; and a continuous screen recording that begins with opening the page. For chat groups, ask a colleague or friend in the group to export the conversation; a cropped image is not enough. File everything in date order with a table listing date, platform, author, the core allegation and whether it is true.

Next comes an internal check that many owners skip. Compare each allegation with company records: was this person a customer, what was the order or contract, what happened, what does the staff member say? A fair share of "malicious reviews" turn out to rest on a real complaint that was handled badly, and in that case fixing the problem is faster than any complaint channel. Look for patterns too: many posts in a short time, newly created accounts, near-identical wording, or other oddities such as sudden government visits, which are covered in handling serial inspections after a malicious report.

Then settle on one voice. One named person handles external responses. Other employees do not retaliate from personal accounts, do not comment under the attacker's posts and do not argue in groups. Give front-line staff a single line: "The company is aware of these posts and is checking the facts; for a specific concern please contact this channel." The classic mistake of the first day is the owner writing a long rebuttal in a group late at night. An emotional message, once captured and circulated, often does more harm than the original post and may hand the other side material for a claim against you.

Sort it first: genuine grievance, false attack, or leverage

Type one: a real customer with a real grievance. The person did buy from you and the account is broadly accurate, if harsh or exaggerated. In law, truthfully describing one's own experience and expressing an opinion is generally difficult to treat as a wrong. Do not think about removal here; aim to show later readers that the company deals with problems well. If the customer has gone to a consumer complaint channel, knowing the process helps; see how consumer complaints proceed.

Type two: a malicious attack containing false statements of fact. The author was never a customer, or the specific facts are invented: that the company is unlicensed, took money and vanished, or has been closed down. Usual sources are a competitor, a dismissed employee or a partner in dispute. This type goes to the platform and to counsel, and everything depends on showing which particular sentence is false. "Terrible service" is an opinion; "they have no licence" is a statement that can be proved true or false, and that is where to press.

Type three: a review used as leverage. The author says or implies that payment, a full refund or some other benefit will make the post disappear, and that otherwise it will spread to more groups. That is no longer a question of opinion but close to extortion. Preserve the demand word for word, pay nothing, follow the response to extortion and consider reporting it. One neighbouring case: if the attack uses your company's name or forged company papers, it is impersonation, dealt with in when your company is impersonated. Misclassify the problem and every later step is misdirected.

The public reply: once, and written for the onlookers

For type one and some of type two, a single public reply is needed. Remember that the reply is not written for the author; it is written for the prospective customer who reads the review later. Four sentences: acknowledge that the feedback has been seen; state what the company found on checking, without adjectives; say what has been or will be done; give a direct contact. No counter-attack, no criticism of the author, no personal details or order information.

Three lines must not be crossed. One: do not disclose a customer's personal data to show they are in the wrong, whether passport details, chat screenshots or payment records. That may breach data-privacy rules; a business's basic duties are set out in data privacy requirements for companies. Two: no threats. "We have gone to the police" or "expect a lawyer's letter" in a public reply only inflames matters. Three: promise nothing you cannot deliver.

Reply once. If the author keeps adding comments, stop answering in public and make contact privately, with a clear aim: resolve the specific problem and leave any change to the review to the author. You may ask someone to update a review, but do not put in writing a refund or payment offered in exchange for deletion. Some platforms treat that as a violation, and the message will be captured and posted in a second round. For a purely false attack that you intend to pursue legally, the reply can be shorter still: "This content does not reflect the facts; the company has preserved the evidence and is dealing with it through formal channels." Do not debate. Where the trouble began with an unintended slight to a local person, see being complained about after causing offence.

Five things that make it worse

One: arguing in the comments or in the group. Every retort pushes the original post back to the top and nudges onlookers towards the other side. Two: naming the person you believe is behind it. You may suspect a rival or a former employee, but saying so in public without proof allows them to bring a libel claim, and you move from victim to defendant. Put the suspicion in your notes for counsel, not on your timeline. The same applies to private messages sent to several people at once, which travel just as far as a public post.

Three: buying good reviews or paying people to attack the other side. Bulk fake praise breaks platform rules, can lead to restrictions on your listing when detected, and drains credibility from your genuine reviews. Paying for attacks makes you a wrongdoer of the same kind. Four: exposing the author's personal information. Posting a name, photograph, address or employer so that people can judge for themselves may engage liability for privacy violations and harassment at once.

Five: using irregular pressure to force deletion. Sending people to the author's home, threatening to report their immigration status, or leaning on their employer or family can amount to coercion or other offences in the Philippines, and for a foreign national the consequences reach your own status. If the author is a current or former employee, go back to proper labour procedure and do not retaliate under the name of discipline; see evidence and procedure in employee matters. For a face-to-face clash with a local resident that was later posted online, see after a confrontation with a local.

Making hostile reviews survivable, and what Yixing can do

Resistance to a reputation crisis is built in ordinary times. One: publish your credentials. Put the registration number, licences, official contacts and payee account on your website and business listing, so that when someone says you are unlicensed a customer can check in a minute. Two: build a base of genuine reviews. Invite real customers to leave feedback voluntarily after service; steady, authentic reviews dilute a handful of hostile ones. Three: give complaints somewhere to go. Publish a dedicated complaints channel and answer within the time you state. Most angry reviews are posted because nobody could be reached.

Four: leave a paper trail for scope and delivery, stating what is included, what is not, and which outside conditions the result depends on, so that "I assumed it was included" does not arise. Five: let staff leave decently, with final pay settled, a handover and accounts recovered, since many attacks come from resentment at an exit. Six: search your company name regularly. Seven: observe the same limits when you speak, and do not disparage competitors in your own marketing. If the attack escalates into threats against a manager personally, follow the safety steps in what to do if you are being followed.

Yixing Travel Consultancy (SEC Registration No. CS202009551, Bureau of Immigration Accredited Agency No. CA-202624381-1) provides compliance retainer services for foreign-owned companies in the Philippines: organising licences and credentials for public display, setting up a complaints procedure with standard reply texts, filing evidence of online attacks in usable order, and introducing licensed counsel. We are not a law firm, we do not conduct litigation and we cannot promise that any platform will remove any content. If your business is under concentrated attack this week, hold off replying. Put the screenshots and links into one table, bring it to us, and we will help you sort the items before deciding what to do with each kind. For your specific case consult a licensed lawyer; this article is not legal advice.

Frequently Asked Questions

Can I make the platform delete a malicious review of my business?
You can complain, but platforms act under their own policies and mostly on clear violations such as bulk posting, conflicts of interest, harassment or disclosure of private data. Saying the content is untrue is often not enough, and no one can guarantee removal.
The review states things that are false. Can I sue for libel?
Possibly, provided you can identify a specific statement of fact that can be proved false, as opposed to an opinion. Whether the legal elements are met and whether it is worth pursuing needs a lawyer's view of the evidence.
The author says the post will be deleted if we pay. Should we?
No. Demanding money under threat of bad reviews is close to extortion, and payment does not ensure it stops; it may attract more. Preserve the demand verbatim, give it to counsel and consider reporting.
Can I post the reviewer's chats and order records to prove they are lying?
That is not advisable. Publishing a customer's personal data and transaction details may breach data-privacy rules and repels onlookers. State the facts neutrally in public and keep evidence for the platform and counsel.
Should we reply at all? Does silence look like guilt?
For a real customer's grievance, post one restrained reply and resolve the matter privately. The reply is for future readers, is posted once and does not argue point by point. For a purely malicious post a brief statement is enough.
We think a competitor arranged the reviews. May we say so in a chat group?
No. Naming someone publicly without proof may amount to libel and turn you into the defendant. Give your grounds to counsel and act through platform complaints and formal channels.
The author is anonymous. How do we find out who it is?
A private party can rarely establish that. It normally takes law enforcement obtaining records from the platform during an investigation. Preserve the content and report it; do not use private means to trace or threaten the person.
Share this guideFacebookXTelegramViberLINEWeiboLinkedIn

Let’s talk through your situation — free

Every company is different. Leave your details and a Chinese-speaking advisor will get back within 1 business day with practical, industry-specific guidance and a transparent quote.

Get help with Compliance & Retainer → Free consultation