Social proof is the cheapest growth lever a startup has. Reviews on G2 and Capterra, stars in the app stores, testimonials on the landing page, a founder-friendly quote thread on LinkedIn — early-stage marketing runs on other people saying you’re good. Which is exactly why the law cares how those words got there. In Australia, fake and manipulated reviews aren’t a compliance grey zone: they sit squarely inside the Australian Consumer Law’s core prohibitions, the ACCC has been suing over them for a decade, and the penalty ceiling attached to that conduct is now, for conduct from 28 March 2026, $100 million per contravention. A note on framing before we start: unlike the US and UK, which both passed dedicated fake-review rules in 2024, Australia never enacted a standalone “fake reviews amendment” — the existing ACL already did the job, and the next change arrives with the unfair trading practices ban in 2027. Founders who heard there was a specific 2024 Australian law change heard an echo of overseas reform. The obligations here are older, broader — and already enforced.
The Legal Framework: Presumed Misleading Until You Prove Otherwise
Three provisions do the work:
- Section 18 prohibits misleading or deceptive conduct in trade or commerce. No intent required, no consumer required — a B2B SaaS company misleading procurement teams is caught just as surely as a D2C brand misleading shoppers. It grounds injunctions, corrective advertising orders and private claims by competitors.
- Section 29(1)(e) and (f) are the testimonial provisions: it’s a false or misleading representation to publish something that purports to be a testimonial when it isn’t genuine, or to misrepresent a real one. These carry pecuniary penalties — since the penalty doubling commenced in March 2026, the greater of $100 million and three times the benefit obtained — or, where the benefit can’t be determined, 30% of adjusted turnover during the breach period — for companies, and up to $2.5 million for individuals involved.
- Section 29(2) is the provision founders don’t see coming: in proceedings about a testimonial, the representation is taken to be misleading unless evidence is adduced to the contrary. You carry the evidential burden of showing the testimonial is genuine. If you can’t produce the customer, the words on your landing page are presumptively a contravention.
Add section 34 (conduct liable to mislead the public about the nature or characteristics of services) and, for “9 out of 10 customers recommend us”-style claims, the substantiation problem compounds: every statistic, star rating and quote is a representation you need contemporaneous evidence for — the same discipline the ACCC demands for environmental claims.
What the Cases Punish
The enforcement record maps neatly onto things startups actually do.
Writing your own reviews — ACCC v Service Seeking. The jobs platform’s “Fast Feedback” feature let tradespeople draft their own review and pick their own star rating; if the customer didn’t object within three days, it auto-published as a customer review. The Federal Court imposed a $600,000 penalty in 2020 for breaches of sections 18, 29(1)(e) and 34. If your product team has ever “seeded” a review section, or your onboarding flow publishes pre-drafted praise on silence, this is your case.
Suppressing the negatives — ACCC v Meriton. Meriton staff “masked” the email addresses of guests likely to complain so TripAdvisor’s review prompt never reached them. No fake words were written — the manipulation was in who got asked. $3 million in penalties. This is the case that makes review gating dangerous: an NPS flow that routes promoters to G2 and detractors to a private feedback form is a systematic skew of the sample, engineered to create a misleadingly positive overall impression.
Pretending to be independent — ACCC v Aveling Homes. The builder ran a “review site” it secretly controlled and withheld bad reviews to inflate its rating — $380,000 in penalties. Founder-run “comparison” sites and affiliate blogs that rank your own product first without disclosure sit in the same territory. HealthEngine’s editing and withholding of patient reviews contributed to $2.9 million in penalties in 2020 on similar logic.
The ACCC’s own sweeps found roughly 37% of businesses reviewed engaging in misleading review practices, and manipulative digital marketing remains on its enforcement priority list. This is not a dormant area.
The Rules for Incentives, Employees and Influencers
The ACCC’s guidance on online reviews distils to a short list:
- Incentives must be review-neutral and disclosed. Offering a $50 credit for a review is workable; offering it for a positive review, or only surfacing the offer to happy users, is not. The incentive must apply whether the review is glowing or brutal, and the review should disclose it.
- Connected reviewers must disclose the connection. Employees, family, investors, advisors and mates from your accelerator cohort reviewing your product without disclosure are making misleading representations — and you’re arranging them.
- Don’t touch genuine negatives. Deleting, editing or burying real negative reviews on channels you control misleads by omission. Respond to them instead.
- Influencer posts are testimonials. An undisclosed paid post “purports to be” an organic endorsement — the same s29(1)(e) analysis applies, plus the platform’s own disclosure rules.
- Keep the file. Because of s29(2)’s presumption, every testimonial on your site should trace to a named, contactable customer and a record of their consent and actual words. “Composite” or paraphrased quotes are fabrications with better intentions.
And a 2026-specific addition: AI-generated reviews and testimonials are simply fake reviews with lower production costs. A synthetic “customer” avatar praising your product is a s29(1)(e) problem regardless of the disclosure buried in your terms.
Selling Overseas? The 2024 Rules That Do Exist
If your startup markets into the US or UK — most Australian SaaS companies do — two genuinely new regimes apply to the same conduct. The US FTC’s Trade Regulation Rule on Consumer Reviews and Testimonials took effect in October 2024, banning fake and AI-generated reviews, purchased positive reviews, insider reviews without disclosure and review suppression, with civil penalties per violation. The UK’s Digital Markets, Competition and Consumers Act 2024 added fake reviews to the banned-practices list from April 2025, enforceable by the CMA with fines up to 10% of global turnover. A review program built to the Australian standard above will substantially comply with both — though if you publish reviews on your own UK-facing surfaces, the DMCC adds a proactive duty to take reasonable and proportionate steps to prevent and remove fake reviews. The reverse isn’t true either way, so don’t import a US growth agency’s 2019 playbook.
At home, the next change is the Competition and Consumer Amendment (Unfair Trading Practices) Act, passed this year and commencing 1 July 2027: a general prohibition on unfair trading practices plus specific rules on subscription traps and hidden fees. Its significance for review programs is the general prohibition — conduct that distorts consumer decision-making (dark patterns around review display, engineered scarcity, manipulated sort orders) becomes attackable even where it dodges the “misleading” label.
What to Change This Quarter
Audit every testimonial on your site against a real customer record; delete what you can’t evidence. Kill review gating — ask everyone or ask no one. Rewrite incentive programs to be outcome-neutral and disclosed. Put influencer and affiliate disclosure obligations into the contracts themselves. And treat your review pipeline as a compliance surface with an owner, because under the current penalty regime the downside of a growth hack is no longer a takedown notice — it’s a number with eight zeroes.
This article is general information only, not legal advice — whether a review program misleads turns on the overall impression it creates, and the testimonial presumption makes the evidence you keep as important as the words you publish. Viridian Lawyers advises Australian startups on consumer law, marketing review and capital raising. If social proof is your growth engine, get in touch before a regulator, a platform or a competitor stress-tests it.
