Online reviews are among the signals medical tourists rely on most heavily, and — in the registry's experience — among the easiest to manipulate. They are easy to fake, easy to buy, and easy to suppress, and a clinic's rating can be reshaped faster than any register or accreditation record. Two regulators — one in the UK, one in the United States — have recently set out in detail what counts as an unlawful review practice, and their lists double as a field guide to what you should look for. This guide explains the rules and gives a concrete method for reading reviews, without treating any rating as proof of safety.
What regulators now prohibit
In the UK, a new banned practice relating to reviews was introduced by the Digital Markets, Competition and Consumers Act 2024 (DMCC Act), set out in the CMA's fake-reviews guidance [CMA208](https://assets.publishing.service.gov.uk/media/67eeb64fe9c76fa33048c790/CMA208_-_Fake_reviews_guidance.pdf) (dated 4 April 2025). Under CMA208 it is banned to submit or commission fake reviews, to post a "concealed incentivised" review (one that hides that it was incentivised), or to publish reviews in a misleading way; traders that publish reviews also carry what CMA208 calls a "positive" obligation to take "reasonable and proportionate steps" to prevent and remove banned reviews. Separately, the CMA's guidance on its [direct consumer enforcement powers](https://www.gov.uk/government/publications/how-the-cma-uses-its-direct-consumer-enforcement-powers/how-the-cma-uses-its-direct-consumer-enforcement-powers) states that a penalty "can be up to 10% of your business' global turnover or £300,000 (whichever is greater)."
In the United States, the FTC's rule on consumer reviews and testimonials (16 CFR Part 465) was published in the Federal Register on 22 August 2024 and, by that rule, took effect on 21 October 2024. (The [FTC's press release](https://www.ftc.gov/news-events/news/press-releases/2024/08/federal-trade-commission-announces-final-rule-banning-fake-reviews-testimonials) itself states only that the rule becomes "effective 60 days after" publication in the Federal Register, so the 21 October 2024 date comes from the Federal Register rule, not the press release.) The rule prohibits fake or AI-generated reviews, buying positive or negative reviews, undisclosed insider reviews by staff or their relatives, company-controlled sites that pose as independent review sites, suppressing or threatening over negative reviews, and buying fake indicators of social-media influence such as followers or views.
These laws bind traders subject to UK or US jurisdiction. A clinic established only in another country may not be covered — but the prohibited categories describe precisely the behaviours worth watching for anywhere.
Patterns that suggest manipulation
No single review tells you much. Patterns do. When you read a clinic's reviews, look for:
- clusters of five-star reviews posted within a short window, especially around a launch or campaign; - reviewer profiles with no other activity, or a burst of accounts created at the same time; - identical or templated phrasing, or the same stock photographs reused across profiles; - a sudden spike or drop in rating that does not line up with any public event; - reviews that read as generic praise with no specific, checkable detail about the care; - reviews mentioning an inducement — "got a discount for posting this" — without the clinic disclosing it.
These are the same patterns the registry records during verification; see the [methodology](/methodology).
Incentivised reviews and undisclosed insiders
Offering a discount, gift, or free follow-up in exchange for a review is not automatically unlawful, but concealing that the review was incentivised is. The same applies to reviews written by staff, owners, or their relatives posing as ordinary patients, and to "independent" review microsites that a clinic or its agency actually controls. When a clinic's strongest reviews all sit on a site it operates, read them as marketing, not as independent feedback.
Read across platforms, and read the negatives
Check more than one source — Google, Trustpilot, and procedure-specific forums — and compare the distribution, not just the average. Read the one- and three-star reviews first: genuine complaints tend to carry specific, verifiable detail, and the way a clinic responds to them is informative in itself. A wall of flawless five-star reviews with no middle ground is less reassuring than a realistic spread.
A practical way to read a clinic's reviews
When you have a clinic in mind, work through the same steps each time rather than skimming the headline score:
1. Note the overall rating and the total number of reviews, then ignore the average and look at the shape of the distribution. 2. Sort by most recent and scan the dates — a dense cluster of five-star ratings over a few days is worth a closer look. 3. Open several five-star reviews and check whether they describe specific, checkable detail or only generic praise. 4. Read every one- to three-star review, and read the clinic's replies underneath them. 5. Open two or three reviewer profiles and see whether they have any other review history at all. 6. Repeat on a second platform and see whether the picture holds; a clinic that is strong everywhere except its own hosted testimonials page is telling you something.
None of these steps proves fraud on its own. Taken together they tell you whether a rating is likely to reflect real patients.
What a review can and cannot tell you
At most, reviews describe someone's service experience: communication, waiting times, how they were treated. They do not verify a clinical outcome, and they cannot confirm a surgeon's licence, a facility's accreditation, or a company's registration. Those are matters of record, and you can check them yourself — see [how to check whether a clinic is licensed](/guides/check-if-clinic-licensed) and [how to verify a surgeon's credentials](/guides/verify-surgeon-credentials). A strong rating next to an unverifiable licence is a reason to slow down, not speed up.
How the registry handles reviews
The registry aggregates review counts and average ratings from Google and Trustpilot where they are available, and notes suspicious patterns, but it does not verify individual reviews and does not treat ratings as a quality score. It does not publish patient reviews of named surgeons at all — see the [surgeon listings policy](/methodology/surgeon-listings). Reviews are one weak signal among several. Weight the facts you can confirm from a register over the sentiment you read in a star rating, and use the [red-flags self-check](/tools/red-flags-check) to judge the overall pattern of how a clinic behaves.