The Italian Competition Authority (AGCM) has unveiled draft guidelines requiring proof of purchase—a receipt, invoice, or booking confirmation—before anyone can post an online review of restaurants or tourism services. The framework, now in public consultation through July 15, 2025, marks Italy's first nationwide crackdown on fraudulent feedback, a practice that has cost hospitality businesses anywhere from 6% to 30% of annual revenue.
Why This Matters
• Proof requirement: Reviews without verifiable transaction records (scontrino, fattura, or digital order confirmation) will be presumed inauthentic.
• 30-day window: Feedback must be posted within one month of the actual experience or purchase.
• Two-year expiry: Reviews older than 24 months lose legal validity and can be removed by operators on request.
• Incentive ban: Posting opinions in exchange for discounts, freebies, or other inducements is now explicitly illegal under the proposed annual SME law.
What Changes for You: Immediate Impact on Residents
If you dine out, book a hotel, or purchase from an online marketplace in Italy, expect a shift in how feedback systems operate:
Verification prompts: Platforms will ask for order numbers, reservation codes, or payment receipts before the review form opens.
Delayed publishing: Some services may hold submissions pending transaction confirmation, adding hours or days to the posting timeline.
Shorter lifespan: Opinions more than two years old will vanish from rankings, meaning only recent experiences shape a venue's score.
Fewer incentivized reviews: The common practice of offering a 10% discount for a five-star rating is now a sanctionable offense under forthcoming legislation, potentially resulting in fines up to €10,000 for sellers and removal orders for platforms.
For operators, the changes represent both relief and administrative burden. A trattoria in Florence can now challenge a suspicious one-star review by demanding proof of patronage. Conversely, each legitimate review requires backend validation—extra work for establishments already stretched thin.
How the System Works
Under the draft guidelines published June 30, the AGCM distinguishes between small independent operators and major platforms like Google, TripAdvisor, Booking, and Amazon. Large-scale services with higher fraud risk—and deeper pockets—are expected to deploy artificial intelligence screening tools followed by human content review. Smaller businesses may satisfy the requirement by sending one-time links to confirmed customer email addresses or collecting QR codes scanned at the point of sale.
The rules apply to any professional or platform conducting business in Italy, regardless of corporate domicile. Reviews accompanied by fiscal documentation carry a legal presumption of authenticity, shifting the burden of proof onto those challenging the feedback.
The Economic Toll
Industry data underscores why Rome moved now. Roughly 70% of restaurant choices and 82% of lodging bookings in Italy are influenced by online ratings. Yet an estimated 8–9% of restaurant reviews contain misleading or fabricated content, a figure trade groups consider conservative. In 2022 alone, TripAdvisor removed 1.3M fake entries globally; Trustpilot deleted 4.5M in 2024—about 7% of its total volume.
The damage is tangible. The Italian Hoteliers Federation (Federalberghi) has reported extortion schemes in which criminals threaten venues with one-star barrages unless paid in cryptocurrency. Individual restaurateurs in Rome and Milan have filed complaints with the Postal Police over coordinated negative campaigns, often launched by competitors or disgruntled former staff. The Codacons consumer group found that 77% of Italians consult reviews before spending, meaning a single malicious post can ripple through months of bookings.
Platform Obligations and Enforcement
The AGCM framework mirrors provisions in the EU Omnibus Directive (2019/2161), which took effect across the bloc in May 2022, and the Digital Services Act, which imposed additional transparency mandates on very large platforms. Italy's forthcoming legislation, however, goes further by setting explicit time windows and introducing the fiscal-document standard.
Platforms must now:
• Display clear, accessible explanations of how they collect, moderate, and rank feedback.
• Use IP tracking, device fingerprinting, and natural-language algorithms to flag anomalies—multiple reviews from a single device, repetitive phrasing, or sudden rating spikes.
• Maintain complaint channels that respond within defined timelines and remove unlawful content promptly.
• Label any review where the author received a material benefit, even if the incentive did not originate with the platform.
Failure to comply can trigger investigations and penalties. In March, Trustpilot was fined €4M for misleading disclosures and inadequate authenticity checks, including use of so-called dark patterns—design tricks that steer users toward posting favorable opinions. A German firm selling packaged positive reviews and fake followers received a €10,000 sanction in 2025.
Practical Challenges
Enforcement across borders remains contentious. Google Reviews, for instance, routes European disputes through its Dublin headquarters, complicating Italian jurisdiction. The Federation of Italian Public Establishments (FIPE) has noted that complaint pathways on major platforms are often buried in dense legal menus, discouraging small operators from pursuing redress.
The 30-day publication rule also raises questions about spontaneous feedback. A traveler who revisits photos from a Tuscan agriturismo six months later and decides to share an opinion will find the window closed. Critics argue this compresses the natural rhythm of reflection, while supporters counter that fresher memories yield more accurate assessments.
Wider Implications
The consultation period runs until mid-July 2025, after which the AGCM will finalize the text and hand enforcement responsibility to the Communications Guarantee Authority (AGCOM), which will draft a formal code of conduct. Because the guidelines cite principles of proportionality and scalability, micro-businesses—those with fewer than ten employees or under €2M in turnover—may face lighter compliance burdens than multinational aggregators.
The move places Italy at the forefront of national-level review regulation in Europe. While the EU Tourism Review Code of Conduct, launched in 2025, encourages voluntary best practices, Rome has opted for binding law with meaningful penalties. Other member states are watching: France and Spain have signaled interest in adapting the Italian model, particularly the receipt-based verification standard and the two-year expiry mechanism.
For consumers, the trade-off is straightforward. Stricter gatekeeping should elevate the signal-to-noise ratio, making star ratings a more reliable proxy for quality. But the administrative friction—uploading documents, waiting for approval—may discourage casual reviewers, skewing feedback toward highly motivated voices at the extremes of satisfaction or dissatisfaction.
Next Steps
Stakeholders have until July 15, 2025 to submit comments via the AGCM's online portal. Final rules are expected by early September, with phased implementation beginning in October. Platforms will likely roll out Italy-specific verification modules, while point-of-sale systems integrate review-link generators tied to fiscal receipts.
For now, the message is unambiguous: if you did not eat the carbonara or sleep in the room, your opinion carries no legal weight—and posting it anyway may soon carry a fine.
