Ask in the week the job finishes. Ask two questions about one specific event: what the problem was, and what changed. Offer to draft the quote from their own answers and send it back for them to correct, then get their written permission to print it with a name, a role and a business type, and store that permission beside the quote. Never pay for it. Do not change its meaning, and do not hide the awkward ones. The federal rule on this is 16 CFR Part 465, issued by the FTC in August 2024 and in force since October 21, 2024, and it bans invented reviews, incentives tied to whether a review is positive, undisclosed staff reviews, and the suppression of negative ones.
Shortlist of clients who said so
The Small Business Administration's guidance on testimonials from May 2018 tells owners to start with long-standing customers, then approach people who already say good things about the business online. Praise that arrived without being asked for is the best raw material you have: an email that opens with a sentence you would like to print, a client telling you how much easier the month was.
Treat that shortlist as a starting order. The FTC's staff guidance on the Endorsement Guides says you should not ask only the customers you expect to be happy, and Google's content policy bars a business from selectively asking only for positive reviews on its listing. So send the same message down the shortlist first, then to a client whose project went badly, and mean it when you invite them to say what did not work. The request belongs in the workflow near the end of a job, next to the handover steps in a client-onboarding checklist.
Request message
Two questions in a short message produce a story. "Do you have a testimonial for me?" produces praise, which is the least useful thing you can print. The SBA guidance makes the same point from the other side: ask for specifics about the problem and how you solved it, and leave vague praise out.
The message we would send, with the brackets filled in from the job you just closed:
[Name], the [project] is finished and [the thing you built or fixed] is live. I am collecting a small number of client testimonials for my site and I would like to ask you for one. Two questions, in your own words: what was the problem before we started, and what is different now? If it is easier, I can draft it from your answers and send it back for you to change. I would like to print your first name, your role and the kind of business you run, and your full name and company if you are comfortable with that. A plain no is a fine answer.
Exhibit 1
The five steps run from the shortlist to a stored written permission
Draft and written approval
The SBA guidance is blunt about the next step: run the written testimonial past the customer and get their approval in writing before you use it. Cutting is allowed. The FTC's Endorsement Guides, revised in July 2023, require an endorsement to reflect the honest opinions, findings, beliefs or experience of the endorser, and they let you shorten a testimonial and drop the exact words as long as you do not present it out of context or reword it into something the customer did not mean. Trim the filler and keep their nouns and their verbs. If a sentence reads like your own copy, put their words back in it.
If you interview by phone, ask permission to record first. The SBA notes that recording a call without permission is illegal in some states.
Store four things together for each quote, in one folder: the email that grants permission, the date of that email, the exact approved text, and the pages it is allowed to run on. That folder answers a later question about who agreed to what. The SBA's advice covers the written approval; no rule demands a signed form.
What may be printed, and what may not
The 2024 rule bans four things. Reviews and testimonials from people who do not exist, or who never had the experience they describe. Compensation or incentives conditioned on a review being positive or negative. Reviews from owners, managers, staff and agents that do not clearly disclose the relationship, with those written by officers and managers barred outright. And the suppression of negative reviews through groundless legal threats, intimidation or false public accusations.
Asking customers generally for an honest review sits outside the ban: the rule text excludes reviews that came from generalized solicitations to purchasers. Under Section 5(m)(1)(A) of the FTC Act the maximum civil penalty is $53,088 per violation, and the FTC said in a notice effective September 15, 2026 that its 2025 penalty levels keep applying through 2026.
Exhibit 2
A quote is printable when it is the customer's own words, approved in writing, and about an experience they had
The result question
A testimonial that names a number is the one most likely to get you into trouble. The FTC says a testimonial naming a specific result reads as a promise that other customers will get that result, and that "results not typical" does not fix it. The FTC gives two options: prove the result is typical, or say plainly what results customers generally get. The Guides put the same test in different words. A testimonial that states a result on a key attribute reads as a claim that most customers get that result, which needs substantiation.
For a firm with a handful of finished jobs, nothing is substantiated, because there is no body of comparable results to point at. So ask the second question in a way that produces a described change. "The invoicing runs weekly now and I stopped doing it on Sunday nights" is a customer's honest experience and a claim you can print. A saving in hours, a revenue figure or a ranking needs your own numbers behind it, and you do not have them yet. The Guides themselves carry no independent penalty; the money sits in the rule, so keep the result question away from both.
Google, Yelp, and the stars you will not get
Google does not ban asking. Its content policy lets a business invite customers to post reviews of a genuine experience as long as there is no incentive and no steering of the rating or the text, and its help page Tips to get more reviews tells businesses to ask customers to visit a Google link or scan a QR code. The same policy bars discouraging or prohibiting negative reviews, bars telling staff to hit a review quota or to collect reviews naming a specific staff member, and treats reviews written by people with a conflict of interest, including staff and family, as violating content on your listing. Google removes paid reviews, paid directly or in kind, which covers offering something of value to get a review changed or a negative one removed. Its help text also says a mix of positive and negative feedback often feels more trustworthy.
Yelp is the exception among the big platforms: its policy tells businesses not to ask anyone to review them, and it says solicited reviews may not be recommended by its software, so asking can hurt a Yelp rating. Google's rules and Yelp's rules differ, and a testimonial on your own site is governed by neither.
Google Search will not show stars for reviews of a business hosted on that business's own site, because Google treats them as self-serving, and that covers LocalBusiness and Organization markup including reviews pulled in through an embedded widget. Markup for incentivized reviews whose incentive is not clearly disclosed is barred too. A testimonial page earns trust from visitors, not stars in search results. The richer-results question comes up again in how a small business shows up in AI answers.
Placement on the site
One quote per section, with the change the customer described in its first line, sitting next to the service it belongs to. A wall of logos and praise on a separate page is the weakest arrangement available. The quotes belong where the questions are already being asked, which is the services page that answers what buyers ask and the homepage that has to earn the scroll.
Aurora Harley's usability research at Nielsen Norman Group, published in 2016, found that people trust testimonials on external sites more than the ones a company lists about itself, and that visitors read on-site testimonials with skepticism and assume only positive ones were chosen. So put the quotes on your site next to a visible review profile. The second does not replace the first. The same group found that people evaluating a service want photos of the actual work and the people doing it; the finished result on its own is thin evidence. As craft, with no study behind it, a real name, a role, and a quote about one named job read as more credible than a compliment from "A satisfied client".
Sort the quotes you already have
Search your own email for the sentences people wrote to you, then run each one through permission, the result question, and the conflict-of-interest test. The path ends in three places, and leaving a quote alone is a normal outcome.
Exhibit 3
A compliment in your inbox becomes a printed quote only after written permission and a result the buyer can generally expect
One bad review in public
Answer it plainly, in your own voice, and say what happened and what you changed. Do not ask for its removal. The FTC says you can contact unhappy customers and fix the problem, but asking them to change or delete a negative review can mislead readers, and Google calls incentives for reviews, including for changing or removing a negative one, prohibited content. Spiegel's advice to retailers includes embracing negative reviews, because they establish credibility and authenticity. If the public reply needs drafting, the same preparation that helps in a difficult client conversation applies: the facts and the sentence you are willing to sign.
The numbers on review scores
Northwestern's Spiegel Research Center, working with PowerReviews on retail data first published in 2017, found that purchase likelihood usually peaks between 4.0 and 4.7 stars and falls as a rating nears 5.0. That is retail product data, so read it as a warning about the look of perfection. The same research found a product with five reviews had 270% higher purchase likelihood than the same product with none, with most of the gain inside the first ten reviews. Those are products on a retail page, and that figure is not a conversion rate for a consulting engagement. Spiegel also found that reviews from verified buyers average 4.34 stars against 3.89 for self-selected reviewers, and the report explains the gap as selection: asking your own customers tends to produce rosier ratings. It does not mean the service is better.
BrightLocal's Local Consumer Review Survey 2026, a vendor survey of 1,002 US adults run through SurveyMonkey, reports that 97% of consumers read reviews for local businesses, and that 74% look for reviews written in the last three months. It also reports that 47% of consumers will not use a business with fewer than 20 reviews, and only 9% will use one with five or fewer. One reputation vendor asked those questions, so treat the answers as its survey results. The 74% is the number worth acting on. It argues for a steady trickle of requests spread across the year, and against one launch-week push.
Refresh a testimonial a year on
If your site implies the customer is a current client, the Endorsement Guides require that they were a real customer when the endorsement was given and that you keep using it only while you have good reason to think that is still true. The FTC adds that a testimonial from a customer who no longer uses what you sell needs to come down, or the claims on it need to be checked. A calendar reminder at twelve months per quote handles both: re-send the same two questions, and ask whether the earlier quote still holds. A quote about a system you installed three years ago is fine to keep when the work stands and the client says so.
Four things not to do
Do not trade a review for a discount. The FTC says you cannot tie a discount to a review being positive, and Google removes paid reviews, in cash or in kind. Payment that arrives after the fact, with no disclosure, is a narrower case: the FTC says paying afterwards needs no disclosure when the customer had no reason to expect anything, which means it has to be a surprise to them, never a term of the job.
Do not write the testimonial yourself and paste a client's name under it. That is a review from someone who never had the experience described, which the rule bans outright. Do not let staff post to your Google listing: the rule bars testimonials written by officers and managers outright, and requires clear disclosure for staff and agents, and Google treats staff reviews as violating content.
Do not print a quote from a relative without saying so. Google treats reviews from people with a conflict of interest, family included, as violating content, and the FTC rule bans undisclosed material connections in reviews from insiders.
Do not pair a real testimonial with a stock photo of someone other than the customer. The Guides say that is deceptive when the picture misrepresents a material attribute of the endorser. A plain text block with a name and role carries no such risk, and it is what we put on the web design pages we build for firms in their first year of asking.