Social Media Harassment: What It Means for Your Business and How to Respond
Table of Contents
Social media harassment is most commonly discussed as a personal issue, something that affects individuals, particularly young people. That framing misses a significant and growing problem for businesses. SMEs across Northern Ireland and the wider UK are increasingly on the receiving end of coordinated harassment campaigns, targeted negative reviews, impersonation accounts, and public pile-ons that can cause genuine commercial damage.
This article covers what social media harassment looks like when it targets a business, the impact it can have on your brand and your team, and the practical steps you can take to prepare for, manage, and recover from it.
Three things business owners should know:
- Social media harassment targeting a business rarely stays on one platform. It spreads, and it spreads quickly. A response plan prepared before an incident is worth far more than one built under pressure.
- Much of what businesses experience as “harassment” falls into recognisable patterns with well-tested responses. Knowing those patterns makes them less frightening.
- In the UK, legal protections against online harassment exist for businesses and individuals. Knowing where the line sits helps you decide when escalation is warranted.
What Counts as Social Media Harassment?
Social media harassment is a persistent, targeted behaviour on social platforms intended to intimidate, humiliate, or damage the reputation of a person or organisation. The keyword is persistent. A single critical review, however unfair, is not harassment. A coordinated campaign of fake reviews, threatening direct messages, and impersonation accounts designed to cause reputational damage is.
For businesses, the distinction matters because the appropriate response differs. A genuine complaint, even a public and angry one, deserves a genuine response. Coordinated harassment designed to destabilise a business warrants a different set of actions: documentation, platform reporting, and in some cases, legal advice.
The UK’s Online Safety Act 2023 strengthened protections for both individuals and organisations against online abuse, placing greater obligations on platforms to address harmful content. Understanding that the legal framework gives businesses more weight when platforms are slow to act.
How Online Harassment Affects Businesses
The business impact of social media harassment is often underestimated, particularly by SMEs who assume they’re too small to be targeted. The reality is that smaller businesses are often more vulnerable precisely because they have fewer resources to manage a reputational crisis and less established brand equity to absorb the damage.
The effects typically fall into four areas.
Reputational damage. Social platforms are often the first place potential customers look before making a purchasing decision. A flood of negative content, even if plainly coordinated, creates doubt. Prospective customers who don’t know your business can’t easily distinguish between legitimate criticism and a harassment campaign.
Customer trust. Research by BrightLocal consistently shows that a majority of consumers will not use a business with a rating below 4 stars and that recent reviews carry more weight than older ones. A sustained harassment campaign targeting your review profile can suppress your rating in the period that matters most.
Staff wellbeing. If harassment is directed at named team members, the impact extends beyond the business to the individuals themselves. Employers have a duty of care that includes the online environment where their staff operates. Ignoring targeted harassment of employees is not an option.
Internal disruption. Managing a harassment incident takes time. For a small business, that time comes from somewhere: usually from the work that actually keeps the business running. The indirect cost of distraction and stress is real, even when the direct reputational damage is contained.
Ciaran Connolly, founder of ProfileTree, notes: “We’ve seen businesses handle social media crises extremely well and others handled poorly, and the difference is almost always preparation. The businesses that respond calmly, document everything, and respond on record to the public accusations tend to come out of it with their reputation intact. The ones that go silent or respond emotionally don’t.”
The Most Common Types Businesses Encounter
Fake or Coordinated Negative Reviews
The most frequent form of business-targeted harassment. A cluster of one-star reviews arrives within a short timeframe, often from accounts with no prior review history, covering multiple platforms simultaneously. Google Business Profile, Trustpilot, and Facebook reviews are the most common targets.
Platforms have reporting mechanisms for this, but responses can be slow. The more detailed your documentation of the pattern (screenshot timestamps, account ages, review content), the stronger your case for removal.
Impersonation Accounts
Someone creates a social media profile using your business name, logo, or a close variation of both. These accounts can be used to post offensive content under your brand identity, to mislead customers, or to conduct fraud. Impersonation violates the terms of service of every major platform and, where financial harm results, may constitute fraud under UK law.
Proactive monitoring of your brand name across platforms is the first line of defence. Set up Google Alerts for your business name and check for lookalike accounts periodically.
Public Pile-Ons and Viral Complaints
A complaint goes viral, either because it has genuine merit that was poorly handled, or because it has been amplified by a third party for reasons unrelated to your actual conduct. The mechanics are similar either way: volume of public criticism arrives faster than your normal response capacity.
The practical distinction matters enormously. If the underlying complaint is legitimate, the fastest route back to stable ground is a genuine, public acknowledgement and a clear resolution. If it isn’t legitimate, the response still needs to be calm and factual rather than defensive.
Doxing and Private Information Sharing
The deliberate publishing of private business or personal information, such as home addresses of directors, private contact numbers, or financial details, is intended to expose individuals to harassment. This is a more serious form of online abuse and one where legal advice should be sought promptly. In the UK, this can engage data protection law, harassment law, and in some cases, criminal law.
Targeted Threats
Explicit threats directed at a business owner, director, or named member of staff via social media direct messages or public posts. Any explicit threat should be reported to the police and documented, regardless of whether you believe the sender is capable of carrying it out. Threats are a criminal matter in the UK under the Communications Act 2003 and the Malicious Communications Act 1988.
Practical Steps to Protect Your Business
Preparation matters more than reaction. These steps should be in place before any social media harassment incident occurs, not built in response to one.
Audit Your Existing Presence
Know what’s out there. Search your business name across Google, social platforms, and review sites. Claim any profiles that should belong to you. Set up monitoring so you’re alerted to new mentions rather than discovering problems days after they’ve grown.
Build a Basic Response Protocol
A social media response protocol doesn’t need to be long. It should cover who handles public responses (one named person, not multiple voices), the tone to use (calm, factual, empathetic where appropriate), the escalation threshold (at what point does this go to a director or legal adviser), and where to document incidents.
Document Everything
Screenshot with timestamps. Keep copies of every harassing message, fake review, or threatening post before reporting it for removal, because once platforms act, the evidence disappears. Your documentation is what supports a report to the platform, a complaint to the police, or a legal claim related to social media harassment.
Report Promptly and Persistently
Every major platform has reporting mechanisms for harassment, impersonation, and coordinated inauthentic behaviour. Reports don’t always produce fast results, but a documented record of platform reports strengthens your position if escalation is needed. Follow up if initial reports are not actioned.
Keep Your Public Response Factual
Responding publicly to harassment can feel counterintuitive. But a calm, factual on-record response serves several audiences at once: potential customers watching the exchange, the platform’s content moderation team, and any future legal process. Avoid emotional language, avoid naming the individual harasser in public posts, and avoid anything that could be read as retaliatory.
Protect Your Staff
If named team members are being targeted, they need support and clear guidance. This includes practical steps (privacy settings on personal accounts, temporary reduction in visible social media activity) and pastoral support. Your HR policies should address social media harassment directed at employees, not just harassment between employees.
Legal Protections in the UK
UK law offers several routes for businesses and individuals facing social media harassment. The main provisions are:
The Protection from Harassment Act 1997 applies to a course of conduct that causes fear or distress. It can cover online behaviour and applies to both individuals and, in some cases, businesses.
The Communications Act 2003 (Section 127) makes it an offence to send messages that are grossly offensive, obscene, or menacing via a public electronic communications network. This includes social media.
The Malicious Communications Act 1988 covers communications sent with the intent to cause distress or anxiety.
The Defamation Act 2013 provides a route to challenge false statements of fact published online that have caused or are likely to cause serious harm to reputation. For businesses, the threshold is serious financial harm.
The Online Safety Act 2023 places duties on platforms to address illegal content, including harassment, threats, and false communications. If a platform is not responding to your reports, referencing the platform’s obligations under this Act in your communications can be useful.
Legal action is not always the right response to online harassment, but knowing the framework means you understand when it becomes an appropriate option.
Social Media Strategy That Includes Reputation Resilience
Prevention is more effective than crisis management. Businesses with a strong, active social media presence built before any social media harassment incident have significantly more resilience than those that only engage reactively. A well-managed profile, consistent branded content, genuine positive reviews gathered over time, and a clear community engagement approach all make it harder for harassment to gain traction.
ProfileTree’s social media strategy works for SMEs across Northern Ireland, including content planning, review management, platform monitoring, and crisis response frameworks. If your current social media presence is minimal or inconsistent, building it out is also building your capacity to absorb and respond to reputational challenges when they arise.
You can find out more about ProfileTree’s social media marketing services and how we structure ongoing management for SME clients.
Frequently Asked Questions
What should I do if my business is targeted by fake negative reviews?
Document the reviews with screenshots before reporting them. Report each review individually to the platform, selecting the most specific violation category (fake review, not from a genuine customer, or coordinated behaviour where that option exists). Follow up if the reports are not actioned within the platform’s stated timeframe. If the pattern is severe or ongoing, Google’s Business Profile support team can be contacted directly. In the UK, if the fake reviews are accompanied by other harassing behaviour, the combination may constitute harassment under the Protection from Harassment Act 1997.
Can I sue someone for online harassment of my business?
In some circumstances, yes. Defamation law (the Defamation Act 2013) provides a route where false statements have caused serious financial harm to your business. Harassment law may apply where there is a course of conduct causing distress. In practice, litigation is expensive and slow, so it’s usually a last resort. A solicitor’s letter is often sufficient to stop harassment from an identifiable individual, and it’s much faster and cheaper than a court case.
How do I tell the difference between a genuine complaint and a harassment campaign?
Genuine complaints, even angry ones, tend to be specific: they describe a real transaction, a named person, a date, or a specific experience. Harassment campaigns tend to be vague, repetitive, and arrive in clusters from accounts with no prior history. The language is often more about damaging the business than describing an experience. When in doubt, respond to the content of the complaint as if it were genuine. If the response is met with further escalation rather than resolution, that tells you something.
What is doxing, and what can I do about it?
Doxing is the deliberate publication of private personal or business information (home addresses, personal phone numbers, financial details) with the intent to expose someone to harassment or harm. If this happens to you or a member of your team, report it to the platform immediately, contact the police (this can engage harassment and data protection law), and seek legal advice. Do not engage publicly with the person who posted the information.
Should I respond publicly to harassment on social media?
Yes, in most cases. A calm, factual public response demonstrates to onlookers that you are engaged and reasonable. Silence can be read as an admission. Keep responses brief, factual, and professional. Don’t name the harasser, don’t use emotional language, and don’t get drawn into an extended back-and-forth. One clear, public statement is usually sufficient. All further communication should move to a private channel or cease entirely.
What are my responsibilities as an employer if my staff is being harassed online?
Employers have a duty of care that extends to reasonably foreseeable workplace harm, including online harassment connected to work. If a staff member is being targeted because of their role at your company, you should take the reports seriously, support them in documenting and reporting the harassment, consider temporary protective measures (adjusting their public profile visibility, for example), and check that your HR policies explicitly cover this scenario. Ignoring it is not a legally defensible position. Kindness and respect should be the cornerstone of our digital interactions.