The FTC final rule on consumer reviews and testimonials bans fake or false reviews, paid reviews conditioned on a sentiment, undisclosed insider reviews, company-controlled sites posing as independent, and review suppression. It helps buyers, but it does not replace your own testing, and enforcement is for regulators, not for you.
What the rule covers
According to the FTC announcement, the rule addresses several practices:
- Fake or false reviews, including ones attributed to people who do not exist or who lacked real experience, and including AI-generated ones.
- Offering compensation or incentives conditioned on reviews expressing a particular sentiment, positive or negative.
- Insider reviews, which must clearly disclose the reviewer's material connection to the business.
- Company-controlled websites that misrepresent themselves as independent review sources for a category that includes the company's own products.
- Review suppression through baseless legal threats, intimidation or certain false accusations, and claims that displayed reviews are representative when negative ones were suppressed.
- Buying or selling fake social media indicators such as bot followers or views.
The FTC says it can seek civil penalties against knowing violators. The announcement does not state penalty amounts.
Why it matters for tool reviews
Security tool buying leans heavily on third-party opinion: review sites, forum threads, comparison pages and short videos. Each of the practices above could distort that picture. The rule gives you a clearer standard for what should never appear.
Two points are especially useful. First, a site run by a vendor should not present itself as an independent comparison of its own category. If a comparison site lists a company affiliation only in small print, read the page as marketing. Second, a pattern of only positive reviews on a page does not prove anything, but the rule's ban on suppressing negative ones makes it fair to ask whether the page shows everything.
What the rule does not do
It does not judge whether a review is accurate, only whether certain deceptive practices occur. A sincere reviewer can still be wrong. A fair review can be shallow. It also applies to a particular jurisdiction, so reviewers elsewhere may follow different rules.
This summary is not legal advice. If a legal question matters to a purchase, ask your counsel.
A buyer checklist
- Check whether the review site discloses who owns and funds it.
- Look for reviewers' relationships to the vendor.
- Read negative reviews as carefully as positive ones, and see if they are answered.
- Be cautious of a sudden cluster of near-identical reviews.
- Prefer reviews that describe a concrete test over ones that describe a feeling.
For the testing step, see how to run your own bake-off.
Where Safeguard fits
Safeguard offers SBOM and dependency scanning, policy gates and compliance evidence automation. A free scan is available at gold.safeguard.sh/scan, so you can form a view from your own results.
Quick check
Does the rule guarantee reviews I read are honest?
No. It prohibits specific deceptive practices and allows civil penalties for knowing violators. It does not verify accuracy.
Sources
- FTC announces final rule banning fake reviews and testimonials
- FTC: endorsements, influencers and reviews
Last reviewed: 19 October 2026.
