The FTC Rule on Consumer Reviews and Testimonials: What It Actually Bans

This is a practical summary, not legal advice. The rule text is public — read 16 CFR Part 465 or talk to a lawyer before making decisions with real exposure.

Most guidance about testimonials still points at the FTC's Endorsement Guides. Those matter, but they are not the thing that changed. In August 2024 the Federal Trade Commission finalised a separate, binding rule — the Rule on the Use of Consumer Reviews and Testimonials, codified at 16 CFR Part 465 — which took effect on 21 October 2024.

The practical difference is enforcement. The Endorsement Guides are interpretive: they explain how the Commission reads existing prohibitions on deceptive practices. The Rule is a regulation in its own right, and violating it can carry civil penalties directly.

If you collect, publish, or display customer testimonials, this is the document that describes what is actually prohibited.

What the Rule prohibits

The Rule names specific practices rather than setting out a general principle. That specificity is useful — you can check your own process against a list.

Fake reviews and testimonials. Reviews or testimonials that misrepresent themselves as coming from someone who does not exist, or who never used the product. This explicitly covers accounts generated rather than experienced, which is where AI-written testimonials land.

Buying positive or negative reviews. Paying for reviews that express a particular sentiment — whether flattering your own product or attacking a competitor's. The problem is conditioning payment on the sentiment, not compensation as such.

Undisclosed insider reviews. Reviews written by officers, managers, employees, or their immediate relatives without disclosing that relationship. Also covered: soliciting such reviews from employees without telling them to disclose.

Company-controlled review sites. Presenting a site you control as an independent source of reviews about your own products.

Review suppression. Using unfounded legal threats, physical threats, or intimidation to force removal of a negative review. Also misrepresenting that the reviews on a page represent all reviews, or a fair sample, when negative ones have been filtered out.

Fake social media indicators. Selling or buying followers, views, or similar metrics where they misrepresent influence for a commercial purpose.

The AI question, specifically

This is the question that comes up most, and the answer is cleaner than people expect.

Prohibited: generating a testimonial and presenting it as a real customer's experience. The mechanism does not matter. A fabricated testimonial is fabricated whether a copywriter invented it or a model did.

Not prohibited: using AI on something a real customer genuinely said. Cleaning up grammar, trimming a rambling video down to its useful ninety seconds, generating a transcript, or translating a testimonial into another language are all editing tasks, not fabrication.

The line is whether a real person had a real experience and genuinely conveyed what the published testimonial conveys.

Two practical rules keep you comfortably on the right side. First, do not let editing change meaning — trimming for length is fine, cutting a qualifier so a lukewarm review reads as enthusiastic is not. Second, when you have edited materially, let the customer approve the final version. An approval on record turns an argument about intent into a documented fact.

What the penalties look like

The Rule carries civil penalties per violation. The maximum is adjusted for inflation annually, and it stood above $50,000 per violation when the Rule took effect. Because the count runs per review rather than per campaign, a business that seeded a few dozen fake reviews is not looking at one penalty.

The precise current figure moves every year. The FTC publishes its civil penalty adjustments, and that is the number to check rather than any figure quoted in an article — including this one.

Worth being clear about proportion: this rule was aimed at review brokers, fake-review farms, and businesses systematically fabricating social proof. A company that collects genuine testimonials and is untidy about disclosure is in a different position from one buying reviews in bulk. That is not a reason to be casual, but it is a reason not to panic.

Practical compliance

Most of the work is process rather than legal drafting.

The situations people get wrong

Editing a video testimonial down. Legitimate and expected. The risk is not length, it is meaning. Cutting "it took a while to set up, but it was worth it" down to "it was worth it" is a meaning change, and it is exactly the kind of edit that looks bad in hindsight.

Composite or illustrative testimonials. If you publish an example that is not a specific real customer — an illustration of the kind of result a client might see — it must be unmistakably labelled as such. Presenting an illustration as a real customer account is fabrication regardless of how typical it is.

Old testimonials. A testimonial about a product you have since changed substantially can mislead even though it was honest when given. Date them, and retire ones that describe a version of the product that no longer exists.

Testimonials from beta users or friends. Real experience, real people — but if there is a relationship that would affect how a reader weighs the endorsement, disclose it.

The short version

Publish testimonials from real customers, who really said what you are publishing, with any material connection disclosed near the testimonial, and without implying your curated page is the complete picture. Keep a record of consent.

That covers nearly all of it, and it is roughly what an honest process looks like anyway. The Rule mostly made the consequences of not doing it concrete.

For the permissions and release-form side — GDPR, usage rights, what a release should actually say — see our video testimonial permission and legal guide.