How to Respond to a Google Review Left on Behalf of Someone Else

The review is detailed, emotional, and one star. There's just one odd thing: it starts with "My mother visited last week," and the person who wrote it has never set foot in your business.

Now you're answering for an experience the reviewer didn't have, describing a customer you can't identify, in front of every future customer who reads your profile. Welcome to the secondhand review, one of the strangest situations in review management.

Here's exactly how to respond to a Google review left on behalf of someone else, what Google's rules actually say about them, and when flagging is worth your time.

In this guide, you'll learn:

• The difference between a companion review and pure hearsay, and how Google's policy applies to each
• How to check your records when the reviewer's name won't match anything
• Copy-paste reply templates for negative, positive, and privacy-sensitive secondhand reviews
• When flagging works, and when it wastes your time

Two Very Different Reviews Hide Behind "On Behalf Of"

Before you write a word, figure out which kind of secondhand review you're holding. They look identical and deserve completely different treatment.

The companion review. A parent reviews their child's orthodontist visit. A daughter reviews the plumber she hired for her elderly father's house. A husband reviews the anniversary dinner his wife booked. The reviewer wasn't your named customer, but they were there, or they paid, or they arranged the whole thing. This is a real firsthand experience wearing someone else's appointment.

The pure hearsay review. "My coworker went here and said the staff was rude." The reviewer never visited, never paid, and is relaying a story secondhand. This is closer to a review from someone who was never a customer, and Google's rules treat it accordingly.

The practical test: could the reviewer have witnessed what they're describing? If yes, respond to it like any genuine review. If they admit they weren't there, you have both a reply to write and a flag to file.

A different case entirely: a review from your own relative rather than your customer's. That's a conflict-of-interest question under Google's rating manipulation rules, and our guide to Google reviews from friends, family, or employees handles it.

What Google's Policy Actually Says

Google's Maps content policy sets the standard: "Contributions to Google Maps should reflect a genuine experience at a place or business, and a review or rating should reflect an actual experience with a business, and be genuine and unbiased." Its Off-topic rule says, "Only post content that is based on your experience or questions about experiences at a specific location." It also lists "Content that is not based on a real experience or does not accurately represent the location or product in question" as fake engagement, which "is not allowed and will be removed."

Those lines are what make pure hearsay flaggable. Our breakdown of Google's review policies covers the full list of violations.

The bar is a genuine experience at the business. A companion who sat in your waiting room had one, whatever name is on the invoice, so our reading is that the policy gives you little to flag. Google's page on reporting reviews is plain about what that means for a flag: "You can report any review, but only those that violate Google policies are eligible for removal." It adds, "Do not report a review just because you disagree with it or dislike it. Google doesn't get involved in conflict between businesses and customers."

So set your expectations by type:

• Companion reviews are rarely worth flagging. Don't waste an afternoon flagging the mother of a patient. Put the effort into a good reply instead.
• Pure hearsay is worth flagging, especially when the reviewer states outright that they never visited. Screenshot that admission before they edit it.
• Expect a wait. Google says "Review evaluation typically takes several days," and "If a flagged review doesn't qualify for removal, submit a one-time appeal." Our guide on how to remove a Google review walks through the flag and appeal process.

Check Your Records for the Real Customer

The reviewer's name won't be in your system, and that's expected. You're not looking for the writer. You're looking for the person they wrote about.

Search whatever details the review offers: the date, the service, the first name of the mother or husband or friend. Ask your staff if the incident sounds familiar. Three outcomes are possible, and each shapes your reply.

You find the visit. Good. Now you can respond to the actual event, fix what went wrong, and reach out to your real customer directly. Treat the review as accurate until proven otherwise.

You find nothing. The story may still be real, just booked under a name you haven't guessed. Your reply should say you couldn't match the details and invite direct contact, the same approach we recommend for a review you don't remember.

The details are impossible. You were closed that day, you don't offer that service, there's no record of anyone. Now the review looks less like a favor to a relative and more like fiction, and your flag gets stronger.

Reply Templates for Secondhand Reviews

Whoever wrote it, your real audience is the future customer scrolling past. Keep replies short, address the substance, and invite the actual customer into a private conversation.

The companion review with a real complaint

"Thank you for letting us know, Dana. I'm sorry your mother's visit didn't go the way it should have, and I'd like to make it right for her. Please have her call us directly, or reach out yourself, and we'll take care of it."

The hearsay review you can't verify

"Thanks for the note, Jordan. We've searched our records and can't find a visit matching these details, so it's hard to follow up properly. If your friend was a customer, please ask them to contact us directly, and we'll gladly look into what happened."

The positive review on someone's behalf

"Thank you, Priya! We're so glad your grandmother loved the arrangement. It means a lot that she asked you to share this, and we'll make sure the whole team hears it."

The privacy-sensitive version (healthcare, legal, counseling)

"Thank you for reaching out, Sam. Privacy rules prevent us from discussing whether anyone has visited our practice, but we take all feedback seriously. Please have the person involved contact our office directly so we can help."

That last one matters more than it looks. In December 2022, the HHS Office for Civil Rights published its settlement with New Vision Dental, a California practice, over "the impermissible disclosure of patient protected health information (PHI) in response to online reviews." HHS's summary reads: "The violation involves the provider's inappropriate use of social media to respond to patient reviews, disclosing protected health information. This practice is illegal under HIPAA." The practice paid $23,000 and agreed to a corrective action plan.

If you run a medical, dental, or mental health practice, our advice is to go one step further: don't confirm the person mentioned was ever a patient, even when the reviewer named them freely. Our healthcare review response examples cover this in depth.

Not sure how to word yours? Try our free AI response generator. Paste the review and get a calm, professional draft you can fine-tune before posting. No signup required.

When to Flag Instead of Just Replying

Flagging and replying aren't either-or. Reply publicly first, because the review stays visible for days while Google reviews your flag. Then decide whether the flag is worth filing at all.

Flag it when:

• The reviewer states they were never there, in writing
• Your records rule the story out entirely, like a service you don't offer
• The account is brand new, reviews businesses it admits not visiting, or looks like an anonymous throwaway

Skip the flag when:

• The reviewer accompanied the customer or paid for the service
• A parent who was at the appointment is reviewing their child's visit
• The complaint checks out against your records, regardless of who typed it

Secondhand reviews carry one extra risk: the relative may name the person they're writing about. Google's Maps content policy covers "Content which contains personal information of another posted without their consent such as: full name, or last name, their face in a photograph or a video, or other information which has been reported as having been posted without consent." That rule turns on whether the customer agreed, which you usually can't know. If the review gives your customer's full name or last name, it may be worth flagging on that basis even when the reviewer was there, and never repeat the name in your reply. Our guide to responding to a Google review that shares private information walks through the reporting steps.

One more thing to skip: the temptation to open your reply with "You were never a customer here." When the reviewer is a customer's daughter, that line makes you look both wrong and hostile, and she will happily explain why in a follow-up edit. Question the facts privately first, and let your public reply stay generous.

Frequently Asked Questions

Can someone leave a Google review on behalf of someone else?

Technically, no. Google's Maps content policy says, "Only post content that is based on your experience or questions about experiences at a specific location," and it lists "Content that is not based on a real experience" as fake engagement, which "is not allowed and will be removed." A pure secondhand review, where the reviewer relays a story they weren't present for, runs against those rules and can be flagged. The gray zone is companions: a parent at their child's dental visit or a spouse who came along to the appointment was actually there, so the experience they describe is their own.

Should I respond to a Google review from a family member of a customer?

Yes, in almost every case. The complaint may be completely real even though the reviewer wasn't the paying customer, and future readers won't notice or care who typed it. Respond to the substance calmly, invite the actual customer to contact you directly, and skip any argument about whether the reviewer was allowed to post. Arguing about the messenger reads as dodging the message.

Will Google remove a secondhand review?

Sometimes, but don't count on it. Google says, "You can report any review, but only those that violate Google policies are eligible for removal." If the reviewer clearly states they never visited, flag the review and quote that admission if you appeal. If the reviewer accompanied the customer, was present for the visit, or paid for the service, our reading is that they had the "actual experience with a business" that Google's policy asks for, which leaves you little to flag. Reply publicly either way, because the review stays visible while Google decides, and Google says "Review evaluation typically takes several days."

What if Google won't remove it?

You can appeal once. Google's reporting instructions say, "If a flagged review doesn't qualify for removal, submit a one-time appeal." Google adds, "When your appeal is assessed, you'll get an email with the result," and "If the review complies with our policies, it will remain live." If it stays up, your public reply is the part you control, so keep it calm, short, and focused on inviting the real customer to contact you directly.

How do I respond if I can't find the customer in my records?

Say so, gently. Explain that you've searched your records and can't match the details, then invite the person who actually had the experience to contact you directly so you can look into it properly. This flags the review's secondhand nature for future readers without accusing anyone of lying, and it leaves the door open in case the story is real but filed under a different name.

What if the review names the customer it's about?

Don't repeat the name in your reply. Google's Maps content policy covers "Content which contains personal information of another posted without their consent such as: full name, or last name," and "other personal information about yourself or others including financial information, medical information or personal identification information." The rule turns on whether the customer agreed, which you usually can't know, so if a relative's review gives the customer's full name or last name, or shares their medical details, you can flag it on that basis and let Google decide. Your reply should still address the complaint in general terms and invite the customer to contact you directly.

How should healthcare businesses respond to reviews about someone else's care?

With extra caution. In December 2022, the HHS Office for Civil Rights published its settlement with New Vision Dental, a California practice, over "the impermissible disclosure of patient protected health information (PHI) in response to online reviews." HHS says responding to patient reviews in a way that discloses protected health information "is illegal under HIPAA." The safest reply never confirms the person mentioned was a patient, even if the reviewer named them freely. Keep the reply generic: thank the reviewer, state your commitment to quality care, and invite them to contact your office through a private channel. Never mention appointment details, treatment, or even whether the person visited.

What if the reviewer is my own relative, not the customer's?

That's a different rule. Under Rating Manipulation, Google's Maps content policy lists "Content that is based on a conflict of interest," and says a conflict of interest may include "other professional or personal affiliations that demonstrate a conflict of interest (such as industry competitors, familial relationships, etc.)." A customer's relative is describing their own experience of your business, while a review from your own relative raises that conflict-of-interest question. Our guide to Google reviews from friends, family, or employees covers that case.

The Bottom Line

A review left on behalf of someone else is two problems disguised as one. Sort them first: a companion who was actually there wrote you a real review under an unfamiliar name, while pure hearsay is a policy violation you can flag with a clear conscience.

Either way, the public move is the same. One calm reply that takes the complaint seriously, admits what you can't verify, and invites the real customer to talk to you directly. Future readers judge you on that reply, not on who technically clicked the stars.

Key Takeaways:

• Separate companion reviews from pure hearsay: someone who was present or paid had an actual experience with your business, so there is little to flag.
• Search your records for the person described, not the person writing, before assuming the review is fake.
• Reply to the substance and invite the actual customer to contact you directly, without debating who was allowed to post.
• Flag pure hearsay under Google's real-experience rules, and screenshot any "I wasn't there" admission before it gets edited.
• In healthcare and other privacy-bound industries, never confirm the person mentioned was a customer or patient at all.

For the broader framework, see our complete guide to responding to Google reviews. For related situations, see responding to reviews from non-customers and responding to a review you don't remember.

---