What matters
- Scammers are directly contacting roofing companies and other contractors by phone or email, threatening to post waves of fake one-star Google reviews unless the business pays a fee, according to the National Roofing Contractors Association (2025).
- A separate but related threat involves fraudsters cloning legitimate roofing company websites to deceive homeowners, causing reputational damage to the real business even though it did nothing wrong, per Roofing Contractor magazine (2025).
- The Better Business Bureau warns that fake roofing company scams targeting homeowners are also rising, meaning contractors face reputation attacks from two directions: impersonators stealing their identity and extortionists threatening their review scores.
Roofing companies are now targets of a two-pronged fraud wave: scammers threatening to bury their Google profiles in fake one-star reviews unless they pay up, and separate bad actors cloning their websites to deceive homeowners. According to the National Roofing Contractors Association (2025), roofing companies, movers, and general contractors across the U.S. have been contacted by scammers demanding payment in exchange for not flooding their business profiles with fabricated negative reviews. It is extortion dressed up as a customer service problem.
What exactly are these scammers doing to roofing companies?
The scheme is direct. A scammer contacts a roofing business, usually by phone or email, and makes a simple threat: pay a fee or watch your Google rating collapse under a wave of fake one-star reviews. According to the National Roofing Contractors Association (2025), roofing contractors are among the named targets of this tactic, alongside movers and other home service businesses.
The leverage these scammers have is real. A roofing company that spent years building a 4.8-star rating can watch that number slide quickly if a coordinated batch of fake reviews lands before Google flags them. Homeowners comparing contractors on Google Maps make fast decisions, and a sudden drop in rating or a cluster of one-star posts can cost jobs before the contractor even knows what hit them.
The play for the contractor is not to pay. Paying signals that the threat worked and invites repeat contact. Instead, document the threat, report it to the FTC at ReportFraud.ftc.gov, file a complaint with your state attorney general, and notify the NRCA. Google also has a process for reporting coordinated fake review attacks, which is covered below.
How does website cloning damage a roofing company that did nothing wrong?
A separate but equally damaging scam involves fraudsters copying a legitimate roofing company website and using it to deceive homeowners. According to Roofing Contractor magazine (2025), this happened to Evo Roofing, whose website was cloned and used to solicit work from unsuspecting customers. The customers thought they were hiring a real, reputable local contractor. When things went wrong, the complaints landed on the real company.
This is a reputation hit with no clean fix. The business did not do the work. It did not make any promise. But the homeowner does not know that, and a bad review citing your company name on Google still shows up under your profile. The National Insurance Crime Bureau has documented rising patterns of roofing fraud that blur the line between scam contractors and legitimate ones in the eyes of confused consumers.
Contractors can reduce exposure here by maintaining clear, consistent branding across all platforms, registering their business name as a domain variant to make cloning harder to pull off, and monitoring for unauthorized copies of their website using tools like Google Alerts set to their company name and phone number.
What does Google actually do about fake review attacks?
Google has policies against fake reviews and tools to flag them, but the process requires the business to take action. If you suspect a coordinated attack, you can flag each fake review individually through Google Business Profile. For coordinated or large-scale attacks, Google has a separate escalation path through the business support team, though response times are not guaranteed.
The harder reality is that even reviews Google eventually removes may have already cost you leads during the window they were visible. This is why a strong baseline of real, recent reviews matters so much. A roofing company sitting at 4.9 stars with 200 reviews absorbs a sudden cluster of suspicious one-stars much better than one with 22 reviews and a 4.2. Reviewers who read profiles carefully can often spot coordinated fakes by looking at posting dates, reviewer history, and language patterns, but many homeowners just see the star count and move on.
For context on how fake reviews are affecting contractors more broadly, see the related coverage on how roofing Google Business Profile reviews connect to local search conversion and what a thin review profile actually costs in lost leads.
Why This Matters for Roofing Companies
Roofing is already a high-suspicion category for homeowners. The National Insurance Crime Bureau notes that deductible rebate schemes and inflated insurance claims are persistent problems in the industry, meaning homeowners arrive at the research phase already wary of being taken. When scammers then attack legitimate contractors through fake reviews or website cloning, the damage is amplified because it feeds an existing distrust.
Roofing companies with thin review profiles, inconsistent Google Business Profile information, or no documented response history are softer targets, both for extortionists who calculate that a small review base is easier to sink, and for homeowners who cannot easily distinguish the real business from a clone. A dense, well-maintained reputation record is not just a marketing asset here. It functions as a defense layer. The more real reviews a contractor has, with owner responses showing active engagement, the harder it is for a scam attack to move the needle and the easier it is for Google to identify anomalous activity.
Roofing contractors who have not yet addressed the gap between their actual customer base and their public review count are leaving themselves exposed on two fronts at once.
The immediate steps are practical: document any extortion contact, report it to the FTC and NRCA, search for clones of your own website quarterly, and treat your Google Business Profile review volume as infrastructure rather than optional marketing. Contractors who do those things are far harder to damage than those who do not.