“Rude, overpriced, never again.” Three fragments, one star, in public — and by the next morning that sentence sits on top of everything a business has built over years. The first instinct is almost always the wrong one: type, correct the record, win the argument. Yet hardly anyone reads the review itself as closely as they read the reply underneath it. That reply is the only text on the page the business writes itself, and it is read by people who are not customers yet. This article describes what to do in the first 24 hours, how a reply has to be built so it does not sound like a quarrel, where the line runs when it comes to naming customer data, and what route European law provides for illegal content. Above all it describes what your own website has to do long before the first bad review arrives. How reviews are gathered in the first place is covered in the article on collecting customer reviews properly; this one is about the day it goes wrong.
Why a single voice carries so much weight
Reviews are not written by the middle of your customer base, they are written at its edges.
For its sector inquiry into user reviews, the German Federal Cartel Office (Bundeskartellamt) surveyed more than 60 large internet portals displaying user reviews from 16 sectors (Bundeskartellamt, press release of 6 October 2020). One of the market participants surveyed described a rule of thumb that is the starting point for everything else: about 1 % of all users actually leave reviews (Bundeskartellamt). A business with four hundred jobs a year therefore has a handful of voices online — and a single one of them can account for a substantial share of the visible picture.
The second figure explains why the picture often looks more lopsided than it is. Averaged across all portals surveyed, 7 % of the reviews submitted to them are not displayed in the end because of filtering measures (Bundeskartellamt). Part of what people write never reaches the page, and nobody in the business ever hears about it. At the same time the distribution of stars is heavily skewed upwards: across all categories examined, more than 80 % of reviews fall on four or five stars, and one-star reviews account for only 6 to 7 % of all reviews displayed (Bundeskartellamt). That is exactly why the one bad voice stands out: it is the exception in a field of good marks, and the eye catches on exceptions.
The third figure says how often a dispute starts at all. According to the portals' own figures, an average of 2.9 % of all published business reviews are reported as critical (Bundeskartellamt). That is rare. Rare does not mean it will not happen, and it certainly does not mean the case can be improvised well in the moment it arrives. Knowing the procedure in advance saves you the reply you would later like to take back.
The arithmetic before the reply
The first 24 hours: read, check, reply
A public reply ages badly. Posted three weeks after the review, nobody reads it as a response any more, they read it as a parting shot. Published within a day, the same text reads as calm and accountable.
The day is not a promise to anyone, it is a working rule for the business — the same rule that applies to private enquiries and their response time. The only difference is that here everyone is reading along.
- Read the text twice before typing anything: once as the person affected, once as somebody who does not know the business
- Look the job up in your own system — job number, date, colleagues involved, call notes
- Ask the people involved before treating one version as the right one; the first account is rarely the complete one
- Classify the case: justified criticism, a misunderstanding, or a mix-up
- Write the reply, sleep on it, and cut it by a third the next morning
- Have it read back by a second person who was not involved in the job
- Only then publish it, and in the same move start the internal fix so the same mistake does not become public twice
The second-to-last point is skipped most often and carries the most. Anyone who was involved in the job inevitably writes against the accusation. A second person who never met the customer removes, in two minutes, exactly the clauses the argument would later ignite on. In small businesses that is the owner, in larger ones a fixed deputy; the responsibility is recorded where the other roles live — in the area for requests and team.
How a public reply is built
A usable reply has four parts in a fixed order: thanks, regret, substance, route. It is short. Five sentences are almost always enough, and anything beyond that reads as a defence. The order matters more than the wording.
Starting with the substance loses the reply, because the first sentence is then a correction rather than a sign that somebody listened.
Part 1 – Thanks
Thank you for taking the time to give us this feedback.
Part 2 – Regret
The appointment being moved twice annoys us as much as it does you.
Part 3 – Substance
As of this week we work with fixed time slots and flag any change
the day before.
Part 4 – Route
Please call us or use our service form, and we will go through the
job with you.
Not included: job number, address, appointment with a time,
invoice amount, employee name, speculation about motives.The third part is the only one that says anything about the business, and the only one that convinces new customers. “As of this week we work with fixed time slots” is a statement about your own process, not about the customer. It holds even when the review was unfair on the facts, because it answers the question every reader actually has: will this happen to me too?
The sentence that tips it over
Three cases, three reply patterns
Classification comes before wording. Almost every bad review belongs to one of three cases, and the three call for different replies.
Getting the case wrong means writing the right text in the wrong place: an apology for something that never happened, or a factual clarification where an apology was due.
Scroll table sideways
| Feature | Justified criticism | Misunderstanding | Mix-up or invented voice |
|---|---|---|---|
| How you recognise the case | The job is in the system and the account fits it | The job is in the system but the conclusion does not fit | No job, no appointment, no name in the system |
| Purpose of the reply | Take responsibility without belittling yourself | Explain the process without lecturing | Contradict factually without insinuating |
| First sentence | That should not have happened the way it did. | Two things came together here. | We cannot find a job matching your account. |
| What never belongs in it | A justification placed before the regret | The remark that the information was on the website all along | The accusation that the review was bought |
| Next step inside the business | Change the internal process and record the change | Sharpen the page that was misunderstood | Report it to the portal through the notice and action procedure |
The third case is the most uncomfortable, because it invites the suspicion that the voice was invented or paid for. That suspicion belongs in the report to the portal, not in the public reply. In public all that remains is the statement that the described job cannot be matched, together with an invitation to get in touch. How reviews may then be displayed on your own site is a separate topic and is covered in the article on showing customer reviews in a legally safe way.
Reply, report or leave it standing
Not every bad review needs a reply, and not every reply improves the situation. Three routes are open and they do not exclude one another: reply, report it to the portal, or deliberately do nothing.
The decision is not made by feel but by two questions. Is the job traceable in your own system? And does the reply explain something to a reader that they would not otherwise know?
- Reply when the job is traceable and the reply explains something to a reader
- Reply and report as well when the review mixes true and untrue elements
- Report instead of replying when the text contains insults, invented statements of fact or third parties' health data
- Leave it standing when the reply would only repeat your own annoyance
- Never reply while anyone on the team is still angry — the tone gives that away more reliably than the content
- Never reply twice: one reply is a stance, two are a quarrel in front of an audience
- Never have friends or family reply on your behalf, however well meant
Anyone who reports should know what happens next. Of the reviews reported after publication, on average roughly two thirds are displayed unchanged after examination (Bundeskartellamt); a report is not a delete button. The reverse finding is the striking one: one portal reported that the contested review was deleted in 60 % of cases purely because the author did not respond within the set deadline (Bundeskartellamt). A well-reasoned report therefore often works not because it convinces the portal, but because nobody answers on the other side.
The limit: what does not belong in a reply
A public reply is not a conversation between two people, it is a publication.
Anything that makes the job identifiable discloses data about a customer who never released it — and it does so for good, because a published paragraph can be deleted but not taken back. The temptation is strong, because one single detail would often settle the matter in a sentence. That detail is precisely the mistake.
- No job, invoice or customer number, not even in shortened form
- No address, no appointment with a date and time, no vehicle or device number
- No details about health, family, finances or living arrangements
- No employee names, neither in defence nor for attribution
- No invoice amounts and no public recalculation of the price
- No speculation about motives, not even as a rhetorical question
- No job photos as counter-evidence — the same release applies as for any other project photo
A second limit is drawn by competition law, and it concerns not the reply but the temptation that follows it: pushing back with reviews of your own. In the annex to Section 3(3) of the German Act against Unfair Competition (UWG), number 23c expressly prohibits submitting or commissioning fake consumer reviews or endorsements, and number 23b prohibits claiming that reviews come from consumers who actually bought or used the product without reasonable and proportionate steps to verify that. There is also an information duty: under Section 5b(3) UWG, information about whether and how a trader ensures that published reviews are genuine counts as material as soon as the trader makes reviews accessible. Anyone showing reviews on their own site therefore owes an explanation of where they come from — the same care that applies to pricing and advertising claims on a website.
Friendly reviews from your own circle
Reporting illegal content
If a review contains not merely a harsh judgement but illegal content — an insult, an invented statement of fact, the disclosure of somebody else's data — the route does not run through the reply box but through the notice and action procedure. Article 16(1) of Regulation (EU) 2022/2065 obliges hosting service providers to put in place mechanisms allowing individuals or entities to notify them of the presence of specific items of information they consider to be illegal content. Those mechanisms have to be easy to access and user-friendly; a portal with no visible reporting route does not meet that requirement.
A report only works if it is complete. Article 16(2) of the regulation names the elements whose submission the mechanism has to enable and facilitate — supplying them from the outset saves a round of questions and wins time.
- A sufficiently substantiated explanation of why the content is considered illegal — not the word “untrue”, but the reason
- A clear indication of the exact electronic location, as a rule the precise address of the review
- The name and electronic contact details of the reporting person or entity
- A statement that the information in the report is, in good faith, accurate and complete
- Your own records of the job, as far as they support the objection, without naming data about uninvolved third parties
- The date of the report and a copy for your own file, so the deadline stays traceable
What happens next is also in the regulation. If the report contains electronic contact details, the provider sends a confirmation of receipt without undue delay (Article 16(4)). It communicates its decision and points to the redress possibilities available against that decision (Article 16(5)). If the decision remains unsatisfactory, Article 20(1) keeps an internal complaint-handling system open for a period of at least six months, and it has to be reachable electronically and free of charge. For the business that means the route does not end with the first refusal, but it does demand records and a long breath.
Die Hostingdiensteanbieter bearbeiten alle Meldungen, die sie im Rahmen der in Absatz 1 genannten Verfahren erhalten, und entscheiden zeitnah, sorgfältig, frei von Willkür und objektiv über die gemeldeten Informationen.
What your own website has to do beforehand
The most effective work against a bad public review happens before there is one.
Almost every public complaint has a prehistory in which somebody failed to reach the business: a call during the lunch break, a message to an address nobody reads, a question that got no answer for two days. Keeping that route short and visible on your own site moves part of the criticism to where it is useful — into your own inbox instead of onto a public page.
The complaint route is visible
A dedicated form for complaints, not the general contact form. It asks for the job number, the date and what went wrong, and it names the period within which somebody will get back. People who land here tend to write a message rather than a public review.
A callback request instead of a hold queue
A missed call is the most common source of annoyance that later becomes public. A button that takes a callback request with a time slot catches it before the annoyance turns into a review.
The contact person has a name
A page that lists responsibilities with names turns an anonymous business into a counterpart. Complaints aimed at a counterpart come out more measured than complaints aimed at a company name.
These three building blocks are not a one-off job. Form fields go stale, responsibilities change, time slots stop matching reality after the next staff change. In XICflow they are therefore maintained as building blocks rather than hand-written pages; what belongs to that is set out in the features overview and in the article on service forms for existing customers. For the first contact the same applies as for the contact form that turns visitors into leads, and for the missed call the route runs through a callback instead of the hold queue.
Counterweights: references, FAQ and service detail
A single bad review works hardest where nothing else stands. Someone who knows a business only through one portal has exactly one source; someone who opens the website alongside it has several.
Your own site is the only place online where the business decides the scope and the order of the evidence itself. That replaces no good work, it makes it visible.
- Reference projects with photos, location and the task — checkable rather than promotional
- An FAQ answering the questions that really get asked on the phone, including the awkward ones
- Service pages that name scope and limits, so expectation and result match
- A service promise that can be evidenced: times that are kept, rather than pledges that sound good
- A last-checked note on pages that can age, so their age stays visible
- Contact routes that lead to a person without a detour
These counterweights only work while they are current. The reference work is described in the article on project photos and references, the question collection in the article on the FAQ page built from real customer questions. Which trust signals carry weight and which only cost space is covered in the article on seals, trade certificates and evidenced pledges. And anyone maintaining a profile on a portal should reconcile the details there with those on the website; that is the subject of the article on setting up and maintaining a business profile.
That leaves the question of rhythm. Once a quarter is enough: add references, move one question from the phone into the FAQ, hold the time slots in the service form against what the business actually does. With that date in the calendar, nobody has to remember it. How the route from the first draft to the published page looks is shown on the page how it works; anyone who would rather ask a person can use the contact page.
The deletion test