For a trade business, a restaurant, a medical practice or a salon, feedback from other customers is the strongest argument a website can carry. It does not come from the provider, it is hard to fabricate, and it answers the exact question that stands in the room before the first phone call: can I trust these people? At the same time, the review section is one of the few areas of a website where a well-meant building block can go wrong in legal terms. Since May 2022 an explicit information duty applies: anyone advertising with consumer reviews has to state whether and how they make sure those reviews come from people who actually used the service. This article covers both sides — the mandatory disclosure with a wording template you can adopt, and the effectiveness side, meaning the question of which reviews convince anyone in the first place.
Why reviews decide the question of trust
The starting point can be quantified. In a representative survey among internet users in Germany, 54 percent (Bitkom) of online shoppers said they look at customer reviews before buying; among women the figure was 59 percent (Bitkom), among men 50 percent (Bitkom). That puts reviews ahead of price comparison sites at 42 percent (Bitkom) and ahead of conversations with friends, family and acquaintances at 39 percent (Bitkom). In an earlier survey by the same institute, 55 percent (Bitkom) of online shoppers named customer reviews as their single most important source of information before a purchase. The figures come from online retail, but the transfer to a trade business or a practice is obvious: when a service cannot be inspected beforehand, people look for evidence from others.
What stands out is how evenly the behaviour is spread across age groups. Reviews were named as the most important source of information by 66 percent (Bitkom) of 16 to 29 year olds, 60 percent (Bitkom) of 30 to 49 year olds, 51 percent (Bitkom) of 50 to 64 year olds and 40 percent (Bitkom) of those over 65. For local businesses a second point applies: there is hardly an alternative. No consumer magazine tests the bakery in the next village, and a dental practice publishes no product data sheets. The review is often the only signal that does not come from the business itself. How that local visibility is built up as a whole is set out in the article on local visibility for trades and hospitality.
Reviews are not decoration, they are advertising
What the law has required since May 2022
The basis is European. Directive (EU) 2019/2161, often called the Modernisation Directive, adapted European consumer law to digital sales channels and added two points on reviews. Recital 47 states that traders making consumer reviews accessible should inform consumers whether verification processes exist and how those processes work; recital 49 prohibits fabricating reviews and selectively filtering out negative ones (Directive (EU) 2019/2161). Member States have applied the rules since 28 May 2022 (Directive (EU) 2019/2161). In Germany the information duty is implemented in Section 5b(3) of the Act Against Unfair Competition.
Where a trader provides access to reviews of goods or services made by consumers, information about whether and how the trader ensures that the published reviews originate from consumers who have actually used or purchased the goods or services is regarded as material.
The word „material" carries the entire weight. Material information may not be withheld from consumers; if it is, that constitutes a misleading omission which can be pursued by way of a formal warning. At the same time the sentence contains a relief that is often overlooked in practice: the law does not prescribe any verification procedure. It requires a truthful statement about whether and how verification happens. A business that carries out no checks acts lawfully as long as it says exactly that. It only becomes unlawful when the point is passed over in silence or a procedure is claimed that does not exist.
Applies to every presentation
Quote cards on the home page, a star average in the header area, an embedded list from a portal: as soon as consumer reviews become visible, the information duty applies. Even the sentence „rated 4.8 out of 5 by our customers" falls under it.
Requires a statement, not a procedure
The law does not assess the quality of your checks, it requires transparency about them. If you match reviews against a job number, write that down. If you do not check at all, write that down too — and you stay on the safe side of the information duty.
Covers adopted reviews as well
Anyone showing reviews from an external portal on their own site is advertising with them. The checking may sit with the portal, the duty to inform stays with the business. The notice then has to make clear who checks and under which rules.
That the duty is taken seriously is shown by a market check carried out by the Federation of German Consumer Organisations. Between 10 March and 12 May 2023, 30 websites were examined; 27 out of 30 (vzbv) providers failed to implement the existing information duties, or implemented them insufficiently — that is 90 percent (vzbv) of the sample. The federation issued formal warnings to providers and examined further injunction proceedings (vzbv). Small businesses rarely feature in such studies, but in this field warnings regularly arrive from competitors in the same town.
The disclosure text you can adopt
The mandatory notice is not a piece of legal artistry but one to three clear sentences. It answers two questions: do you check whether a review comes from an actual customer, and if so, how? What matters is that the text describes the real practice. A copied template claiming a procedure that does not exist in the business is worse than no notice at all — it then meets the very conditions listed in the annex to the act. The following overview covers the constellations that account for almost every case in practice.
Scroll table sideways
| Your situation | What applies | Possible disclosure text |
|---|---|---|
| You ask for feedback by email after every job | Every review can be matched to a specific job | „After completing a job we ask for a review by email. Every review published here is linked to a job number in our system. We publish all incoming reviews unchanged." |
| You adopt reviews from an external review portal | The checking sits with the portal operator, not with you | „The reviews shown here were submitted on an external review portal. Verification of authenticity takes place there under the portal operator's rules. We carry out no verification of our own." |
| You show messages you received without any matching | No verification takes place | „We do not check whether the feedback published here comes from people who actually used our services." |
| You show only part of the reviews you receive | A selection is being made | This constellation is delicate. Selecting by tone is not permitted. What can hold up is a factual rule applied evenly — the last twelve reviews in chronological order, for example — and that rule belongs in the notice. |
Three building blocks you can adapt
A notice is only correct as long as the practice behind it holds. A business that writes today that all reviews appear unchanged and quietly removes two annoying texts six months later has turned a correct sentence into a false statement. It is therefore worth adding the notice to the same maintenance routine as opening hours and prices — which details a website has to keep permanently current is set out in the article on imprint and privacy policy requirements.
Where the notice has to appear
The most common oversight is not a missing notice but a notice in the wrong place. Material information has to be available where the commercial decision is being prepared. If the reviews sit on the home page and the explanation sits in the terms and conditions, the information is formally present and practically hidden. A short sentence directly below or above the review block works well, in smaller but readable type, supplemented by a link to a fuller explanation if the procedure is more involved.
- The notice sits on the same page as the reviews and in the same section, with no scrolling or searching required
- It is readable without an extra click, or reachable through a clearly labelled link placed right next to the reviews
- It appears on every page where reviews show up — including service pages, landing pages and the footer if stars appear there
- It does not sit exclusively in the terms and conditions, the imprint or the privacy policy
- It is set in a readable size with sufficient contrast instead of disappearing as grey small print
- It names the procedure, not just the outcome: how verification happens, not merely that it happens
- Where a star average is shown, it states how many reviews the value is based on and which period it covers
The terms and conditions trap
What is expressly prohibited
Alongside the information duty, the annex to Section 3(3) UWG contains a list of practices that are unlawful without any further assessment. Two entries concern reviews directly. Number 23b prohibits stating that reviews of a product or service come from consumers who have actually purchased or used it without taking reasonable and proportionate steps to verify this. Number 23c prohibits submitting or commissioning fake reviews and misrepresenting reviews for sales promotion purposes (Annex to Section 3(3) UWG, Gesetze im Internet). Both are per se prohibitions: there is no weighing of the individual case.
- Inventing reviews, writing them yourself or having them written — including by staff, relatives or commissioned service providers
- Buying or trading reviews, or rewarding them with discounts, vouchers and prize draw entries where the benefit is tied to a positive review
- Filtering out negative reviews and showing only positive ones while creating the impression of a complete picture
- Shortening, smoothing or rewording reviews so that the statement shifts
- Presenting old reviews without a date as current, or transferring feedback about one service to another
- Claiming that all reviews come from genuine customers without having taken reasonable and proportionate steps to verify it
How widespread the gap between claim and practice is becomes clear from a coordinated website screening by the European Commission. Authorities from 26 Member States plus Iceland and Norway examined 223 websites (European Commission) for their handling of consumer reviews. For 144 websites (European Commission), that is 65 percent (European Commission), it could not be confirmed that sufficient safeguards for the authenticity of reviews were in place. 104 websites (European Commission) gave no information on how reviews are collected and processed, 118 websites (European Commission) said nothing about measures against fake reviews, and 176 websites (European Commission) were silent on incentivised reviews. At least 55 percent (European Commission) of the pages checked therefore potentially breached the Unfair Commercial Practices Directive.
Bought reviews are the most expensive marketing there is
Reviews that actually convince
The second part of the task is not a legal question but a craft one. Most review sections fail not because of the law but because of interchangeability: five stars, three words of praise, an abbreviated name. Such quotes read like placeholders and get skimmed accordingly. A review becomes effective when it describes a situation someone recognises — the same service, the same worry, the same town. The examples below are wording patterns for orientation and not real customer quotes; they only show where weak and strong reviews differ.
Scroll table sideways
| Common version | What is missing | Version that holds up |
|---|---|---|
| „Very satisfied, happy to come back." | No subject, no sequence of events, no time reference | A review that names the service, the conditions and the timeframe, such as a boiler replacement in an older building with an appointment within a few days |
| „Great service, absolutely recommended!" | Interchangeable, fits any business at all | A description of the actual sequence: when it was reported, when the call back came, when it was fixed |
| A sender in the form „M. K." | Impossible to place, feels constructed | First name, abbreviated surname and town in the form „Firstname S., Townname", provided consent has been given |
| Five stars with no text | A symbol without information | Stars plus two sentences that name the job |
| A review with no date | Impossible to place, reads as either maintained or outdated | Date of the review and period of the job, so that currency stays visible |
Giving a first name and town deserves a separate note. It raises credibility considerably because it makes a person tangible without exposing them. In legal terms this is processing of personal data and requires consent — an informal but documented agreement by email is usually enough if it states which details appear in which form and that the agreement can be withdrawn. Building this question straight into the workflow saves later follow-up: the request for a review and the request to release first name and town fit into the same email.
- Ask for a review while the job is still fresh — within the first few days after completion, not weeks later
- Ask about the specific job rather than about general satisfaction: what was the task, what was surprising, what would you have liked to know beforehand
- Obtain the release for first name, town and job reference in the same message and keep the reply on file
- Adopt reviews unchanged, typos included — smoothed texts read as edited and lose precisely the effect they are meant to carry
- Add the date and the service reference so that every review stays possible to place
- Show three to five meaningful reviews per service page instead of twenty uniform ones on a collection page
One specific review beats ten generic ones
Answer critical reviews instead of hiding them
A uniformly five-star collection without a single critical voice looks suspicious to attentive readers rather than convincing. A critical review with a factual reply beside it, by contrast, reads as evidence: nothing is being filtered here, and somebody is paying attention. In legal terms the matter is settled anyway — selectively filtering out negative reviews while creating the impression of a complete picture is not permitted (Directive (EU) 2019/2161). The situation can be turned into an advantage if the reply follows a fixed structure.
- Reply promptly, while the review is still being read, and keep a factual tone even where the criticism is unfairly worded
- Restate the core of the criticism in your own words so that it is visible you read and understood it
- Name your own share in what went wrong, without excuses and without shifting blame onto the customer
- Describe what has changed or will change, with a time reference rather than a statement of intent
- Offer a direct route to resolution, with a name and a direct line rather than a general shared inbox
- Keep the reply short: three to five sentences read as composed, half a page of justification reads as stung
What helps with false reviews
One practical note for the website: replies from the business belong visibly underneath the review in question, not in a separate section. The connection between criticism and reaction is the actual message; separated from each other, both lose their effect. Technically this is a question of the building block: a review block that provides a reply field covers the case without workarounds.
The right place in the page flow
Many websites gather all reviews in one spot — often right at the bottom, just above the footer, where a large share of visitors does not arrive at all. It is more effective to place reviews where they answer an open question. Directly after the price, they settle the thought „is that reasonable"; directly before the contact form, the thought „is the call worth it". The review block is therefore not a chapter but a tool that appears several times in different places.
Home page: one review, early
A single strong review in the upper third does more than a gallery in the basement of the page. It should match the most requested service and describe a specific case so that it establishes a connection straight away.
Service page: matching cases
On a page about boiler replacement, reviews about boiler replacement convince. Two or three thematically matching voices achieve more there than twenty mixed ones, because they address exactly the worry attached to that service.
Before the contact route: the last doubt
Immediately before a form or phone number, a review answers the last open question. What helps most here is a voice describing what happens after the enquiry: response time, appointment, reliability.
Where reviews sit directly before the contact route, the transition deserves a look: what actually triggers an enquiry and where it falls apart is described in the article on contact forms and enquiries. And anyone wanting to mark up reviews in machine-readable form should know the search engines' rules for review markup — the article on structured data in search results sets that out. One point matters: markup does not replace the mandatory notice, it comes in addition.
Embedding without third-party scripts
The convenient way to display reviews from a portal is an embed code: a few lines that load in the visitor's browser and render the review block. The only convenient part is the setup. From the very first page view, data is transferred to an external provider — at minimum the IP address, often more — and that happens before anyone has clicked anything. This moves the review section into the same category as maps, video embeds and fonts from external servers: it becomes subject to consent. How that consent is organised cleanly is covered in detail in the article on GDPR and cookie consent; here the consequence is enough.
- The review block only appears after consent — and therefore does not appear at all for a considerable share of visitors
- Until consent is given, a grey placeholder sits in exactly the spot where trust is supposed to form
- The loaded script brings its own fonts, images and styles, shifts the layout and noticeably worsens loading time
- The business has no control over the appearance, scope and availability of the external block
- If the external service goes down or changes its format, the section disappears from your page without warning
The simpler solution is unspectacular: adopt the text of the review as your own content, with the name form, the date and the origin stated in the text, without a foreign script. This is permitted as long as the review stays unchanged, the origin is named and those concerned have given their consent. The page stays fast because no additional connection has to be established — why that matters so much for loading time is shown in the article on PageSpeed and static delivery. And it stays less exposed, because every piece of embedded third-party code opens additional routes, as described in the article on keeping the attack surface small.
Implemented in eight steps
Implementation needs no project plan. It consists of one decision, one sentence and a few adjustments in the review section. The following order has proven itself in projects because it starts with the decision rather than with the text.
- Decide whether and how you verify: matching against a job number, matching against an invoice, adoption from a portal, or no verification
- Write that decision down in one to three sentences, in the language of the business and without legal ornament
- Place the notice directly at the review block — on every page where reviews appear
- Go through all existing reviews: texts without a release, without a match or with unclear origin come down
- Add first name, town, date and job reference where consent exists, and document that consent
- Replace embedded third-party scripts with adopted text and name the origin in the text
- Set up a simple routine that asks for a review and for the release after every completed job
- Put a half-yearly appointment in the calendar to reconcile the notice, the reviews and the actual practice
In XICflow, review and trust blocks are ready-made parts of the kit rather than a custom build. The review block provides fields for the quote, the name form, the town, the date and the job reference, has its own place for the mandatory notice right at the block, and a reply field for the business's response. Loaded third-party scripts are not used: the text sits in the delivered HTML, the page stays fast, and the section appears regardless of any consent decision. What that looks like in a finished result is shown by the demo websites; how the blocks work together in the build is described in the overview of features.
The effort lies in the decision, not in the text
A final thought on reach: reviews are a strong signal for answer engines too, because they contain verifiable statements about a business. How businesses appear in such answers at all is described in the article on visibility in AI search. And anyone weighing up whether a kit or a hand-built solution fits better will find the comparison under why XICflow and the process under how it works.
Sources and studies