WHAT HAPPENED TO YOUR BUSINESS

On Super Bowl Sunday, February 9, 2026, KatieJakes Bar & Grill was hit with 14 one-star reviews on Yelp — all within 48 hours. On the surface it looked like an angry crowd reacting to a broadcast decision made that night. When we looked at the data behind each reviewer, the picture changed completely.

These were not frustrated customers describing a bad meal. The reviews were short, vague, and nearly identical in structure. Many accounts had no friends, no photos, and no history on Yelp. One reviewer recommended a Mexican restaurant as an alternative — not knowing KatieJakes is an American bar and grill. He had never been there. Another wrote in his own review that he "heard something about" the halftime show — admitting he wasn't present. Yelp's own rules say reviews must be based on a firsthand visit. This one wasn't, and the reviewer said so himself.

01
14 Fake Reviews
In 48 Hours
All posted on the same day. Same vague language. No dish named. No staff named. No real visit described. The pattern was statistically impossible without coordination.
02
How Yelp
Makes Money
Yelp sells advertising to businesses. The lower your star rating, the more pressure you feel to buy ads to recover. Fake reviews that stay up are good for Yelp's revenue — that is the business model.
03
Yelp Knew.
They Froze Comments.
Yelp's own automated system detected the attack in real time and posted an alert on your page. They froze new comments. The 14 fake reviews stayed live for months anyway — damaging your rating while customers were deciding where to go.
HOW WE INVESTIGATED IT

We built a forensic analysis system from scratch. For each of the 14 reviewers, we pulled every measurable data point: account age, number of friends, photos, location, and the full text of every review they had ever written. We then compared their KatieJakes review against their own personal history on Yelp.

What we found repeatedly: reviewers who normally write detailed, specific, personal reviews — naming dishes, naming staff, describing real visits — suddenly posted a vague 10 to 20 word attack with no details at all. The writing didn't match their history. The voice didn't match. Something else was driving it.

04
The Sleeper Account —
15 Months Before
In November 2024 — fifteen months before the attack — a Yelp account created in 2019 that had been completely silent for five years suddenly woke up, posted one review of KatieJakes, then went silent again. Buried in that review was a single unusual word: "ambiance." The exact same word appeared across multiple attack reviews on February 9, 2026. The Super Bowl did not start this. Something was already in motion.
05
Not Just
Your Business
The same network of accounts attacked Paul's Coffee Shop in Fountain Valley, CA the same day. A lash studio in Spokane, Washington was hit — they attacked the wrong business entirely. An innocent owner had to personally deny every fake review. A yoga studio in Fort Lauderdale, Florida was attacked by California-based accounts 2,700 miles away. This is happening across the country.
06
What This
Report Is
Everything is documented and preserved — screenshots of every fake review while it was live, full data profiles on all 14 accounts, the sleeper account, the other businesses, and Yelp's own alert confirming they detected the attack. Whatever you choose to do with it is your decision. We wanted you to have it.
AGGREGATE FORENSIC METRICS — 14 ENTITIES
14
ENTITIES ANALYZED
37
VIOLATION INSTANCES
6
ZERO SPECIFICITY REVIEWS
of 14 entities
12
ENGAGEMENT ANOMALIES
of 14 entities
24.2
AVG REVIEW WORD COUNT
1
AMBIANCE KEYWORD
template fingerprint
THE HYBRID SIGNAL — STEPHANIE E. AND WHAT IT MEANS

Every other reviewer in this case has an obvious tell. New account. Wrong state. No photos. Template phrasing so mechanical it reads like a form field. You can point at them and say "that's a bot" with reasonable confidence. Stephanie E. has none of those tells.

Nine years on Yelp. 87 reviews. 82 photos. She photographs her food. She names dishes. She describes specific incidents across years — a sauce spilling, a contractor failing, a T-Mobile rep giving bad information on a trade-in. She writes in a warm, personal, specific voice that is consistent across nearly a decade of genuine platform activity. By every behavioral metric available to Yelp's own recommendation software, Stephanie E. is a legitimate, established, trustworthy reviewer.

And then on February 9, 2026, she posts 33 words with no photo, no specific dish, no named staff, no visit context — and uses the word "ambiance" — a word that does not appear anywhere else in her entire review history — and closes with a political campaign slogan: "Don't support bars that don't support you."

THE QUESTION THIS RAISES

Is Stephanie E. a real person who was socially activated — handed template language through a viral post, a TikTok, a shared thread — and deployed it without realizing she was carrying someone else's words? Or is Stephanie E. herself a sophisticated ML-trained synthetic account, built by ingesting millions of real Yelp reviews, trained to produce human-cadence writing complete with food photos and personal anecdotes, then activated on social media trigger events to provide credible cover for a bot network? There is no way to answer that question from the outside. Both scenarios are technically possible. Both are deeply concerning. And in either scenario, the word "ambiance" does not belong in that review — because Stephanie has never used it before.

This is what a hybrid network looks like at its most sophisticated. You don't need every account to be a bot. You need a trigger mechanism — a viral post, a coordinated social media thread, a shared template — that reaches real, legitimate, established users in an emotionally activated state and gives them pre-written language. Real people copy-paste. Real people parrot campaign slogans when they're angry. The bots handle the volume. The real humans — or the ML-trained accounts that are indistinguishable from real humans — handle the credibility. The result is a network that Yelp's own detection systems are not designed to catch, because the accounts are genuine. Only the language is coordinated.

If you are running this operation and you are technically sophisticated, this is exactly how you build it. You train a language model on years of authentic Yelp reviewer behavior. You generate accounts that write, photograph, and behave like real people over months and years. You seed your template keywords into viral social content and let the activation happen organically. Nobody sends a traceable instruction. Nobody writes an email that says "attack this business." The operation runs through the noise of genuine human outrage and leaves no clean forensic signature — except the word "ambiance," appearing in the same review wave, across the same businesses, across 15 months, in accounts that have never used it before.

That is the finding. It cannot be proven conclusively from the outside. It requires discovery — source code, account creation metadata, IP clustering, behavioral telemetry — the kind of evidence only Yelp possesses and has successfully protected as trade secret. What this report can do is document the signal clearly enough that someone with the authority to compel that discovery understands exactly what they are looking for.

VIEW STEPHANIE E. FULL ENTITY REPORT →
AGGREGATE FORENSIC METRICS — 14 ENTITIES
14
ENTITIES ANALYZED
37
VIOLATION INSTANCES
6
ZERO SPECIFICITY REVIEWS
of 14 entities
12
ENGAGEMENT ANOMALIES
of 14 entities
24.2
AVG REVIEW WORD COUNT
1
CROSS-STATE IMPOSSIBILITY
of 14 entities
1
AMBIANCE KEYWORD
template fingerprint
0
SELF-INCRIMINATING
admitted secondhand
REMOVAL CONFIDENCE DISTRIBUTION
VERY HIGH
3
HIGH
6
MEDIUM
5
VIOLATIONS BY GUIDELINE RULE
REV-01
13
REV-02
9
GEN-01
8
COM-01
2
GEN-06
2
GEN-03
2
GEN-04
1
TEMPLATE PHRASE CATEGORIES — ENTITIES HIT
HORRIBLE
9 / 14
FOOD DRINK
9 / 14
CUSTOMER SERVICE
7 / 14
SAVE MONEY
5 / 14
VIBE AMBIANCE
5 / 14
DIRTY
3 / 14
RUDE
3 / 14
MANAGEMENT
2 / 14
ACCOUNT SIGNAL FLAGS
5/14
ZERO FRIENDS
4/14
NO PHOTOS
1/14
THIN / SINGLE USE
2/14
DORMANCY FLAG
4/14
GRAMMAR ANOMALIES
ENTITY SUMMARY TABLE
ENTITYNAMELOCATIONVIOLATIONSSPECIFICITYWORDSANOMALYCONFIDENCEREPORT
david-sDavid S.Vincent, CA4018YESHIGHEST — 95%+VIEW →
alexis-tAlexis T.West Covina, CA3032YESVERY HIGHVIEW →
andrea-sAndrea S.Azusa, CA3421YESMEDIUMVIEW →
angela-gAngela G.Baldwin Park, CA3124YESMEDIUM-HIGHVIEW →
denise-pDenise P.Montebello, CA3118YESHIGHVIEW →
jesse-bJesse B.Los Angeles, CA3117YESMEDIUM-LOWVIEW →
pete-mPete M.Ontario, CA3248NOVERY HIGHVIEW →
victoria-fVictoria F.El Rancho, Pico Rivera, CA3121YESHIGHVIEW →
brandon-hbrandon h.La Puente, CA2221YESVERY HIGHVIEW →
brandon-pBrandon P.Upland, CA2026YESMEDIUM-LOWVIEW →
diana-gDiana G.Ontario, CA2016YESMEDIUMVIEW →
mo-bMo B.Chino, CA2025YESHIGHVIEW →
olga-rOlga R.Corona, CA2019NOHIGHVIEW →
stephanie-eStephanie E.Azusa, CA2133YESMEDIUMVIEW →
COLLATERAL BUSINESS EVIDENCE

Three additional businesses were attacked by overlapping accounts from the same bot network. These entities use a different data structure and are displayed as reference summaries. Full reports are linked below.

THE SLEEPER — PRE-ATTACK EVIDENCE

CRITICAL SMOKING GUN — Pre-attack bot network evidence. Courtney R. posted Nov 20, 2024 (15 MONTHS BEFORE Super Bowl attack on Feb 9, 2026) using the EXACT SAME 'ambiance' keyword that appears in Feb 2026 coordinated attack reviews. This proves the bot network was already active and testing Katie Jakes OVER A YEAR before the Super Bowl incident. This is not a reactive attack — this is a long-running coordinated campaign.

EVIDENCE LIBRARY

Every forensic entity report, business document, and reference file in this case.

PRE-ATTACK SLEEPER EVIDENCE