How to handle a social media crisis as a small business

Most negative moments online are not crises. A single angry review, a sarcastic comment or a post that flopped needs a normal reply, not an emergency. Treating every complaint as a crisis exhausts you and makes small things look bigger than they are.

A crisis is when the problem is spreading faster than you can answer it, or when it touches safety, money, the law or someone's personal data. If you already have a crisis plan, use its severity levels. If you don't, this quick check helps. Our crisis plan template turns it into a one-page document you fill in while things are calm.

The first hour is about not making it worse. The most common mistakes are a cheerful scheduled post going out in the middle of it, a defensive reply written in a hurry, or three people from the business answering in three different ways.

1. Pause or move anything scheduled to go out in the next few days, on every platform.
2. Name one person to lead. Everyone else sends questions to them and doesn't reply on their own.
3. Write down what you know, what you don't and who can find out. Screenshot the key posts and comments.
4. Check your accounts are secure if there's any chance of a hack: passwords, two-factor authentication and who has access.
5. Post a short holding statement: you've seen it, you're looking into it, and when you'll update.
6. Tell your staff what's happening and what not to say online, including on their personal accounts.

Every platform lets you change or stop scheduled posts, so learn where the button is before you need it. In Meta Business Suite, you can reschedule a scheduled post, move it back to drafts or delete it from the Content tab.

If comments are arriving faster than you can read them, use the tools built for spikes. Instagram's Limits feature hides new comments and chats from everyone except your Close Friends, or from accounts that followed you in the last week, for up to four weeks at a time, and you can approve comments one by one. On YouTube you can pause comments on a video, which keeps existing comments but stops new ones. On a LinkedIn Page, super admins and content admins can set who can comment on an existing post to No One from desktop.

Use these to buy time, not to silence fair criticism. Turning comments off on every post at once can look like hiding, so keep the holding statement open for replies if you can and moderate that one thread closely.

Sources: Meta Business Help Centre: Create and manage posts in Meta Business Suite on desktop, checked 15 October 2026; Instagram Help Centre: Temporarily limit people from interacting with you on Instagram, checked 15 October 2026; YouTube Help: Learn about comment settings, checked 15 October 2026; LinkedIn Help: Turn off comments on an existing LinkedIn Page post, checked 15 October 2026; Meta Business Help Centre: Manage comment moderation for Facebook Pages, checked 15 October 2026

A holding statement buys time; a full statement closes the loop. Both should be short, plain and posted where the problem is happening, usually as a post on your own account and a pinned reply on the busiest thread. Don't hide it in a Story that disappears after a day.

Here's a made-up example for a fictional bakery after reports of an allergen labelling mistake: We've seen reports that some of our almond cakes were labelled nut free on Saturday. That label was wrong and we're sorry. We've removed the cakes and are checking every label today. If you bought one, please message us or call the shop and we'll refund you. We'll post an update by 6pm.

• Say what happened in one sentence, without legal language or blame
• Apologise for the effect on people, clearly and without a but
• Say what you're doing right now
• Tell affected people exactly what to do and how to reach you
• Give a time for the next update, then keep it
• Leave out guesses, staff names and anything you haven't checked

Some crises have duties that sit outside social media. If customers' personal data has been exposed, for example through a hacked account or a misdirected message, you may have to report it. In the UK, the ICO says that if a personal data breach is likely to put people's rights and freedoms at risk, you must report it as soon as possible and, where feasible, within 72 hours, adding details later if you need to.

Safety issues, food incidents, injuries and legal threats need the right adviser before a detailed public statement: your insurer, solicitor, local authority or trade body. Keep the public message short until you've spoken to them, but don't go silent. A brief, honest holding statement is almost always safe to post.

Source: ICO: UK GDPR data breach reporting (DPA 2018), checked 15 October 2026

Say a fictional salon receives a viral post from a customer claiming a hair treatment caused a reaction. The owner has never had a complaint like it. This is how a first day might run. The times are an illustration, not a target.

When the comments slow down, resist the urge to carry on as if nothing happened. Post the final update, then leave a gap of a few days before normal promotional posts return. Your first posts back should be useful or human rather than salesy.

Within two weeks, hold a short review with everyone involved. Write down what happened, what worked, what didn't and what you'll change. Then update your crisis plan and your response guidelines, because the next problem will arrive with less warning than you'd like.

• Check the remaining scheduled posts for anything that now reads badly before switching them back on
• Reply to the last open comments and messages so nothing is left hanging
• Thank customers who defended you, in private if a public thank you would restart the thread
• Keep the screenshots and the timeline somewhere safe in case you need them later
• Add the situation and your statement to your crisis plan as a worked example

Zolyp, which we make, plans, writes, designs and publishes posts after you approve them. If you use Autopilot, there's an off switch on every content pillar and a veto window to pull a post before it goes live, which helps when you need everything to stop. It doesn't answer comments, messages or reviews for you; that part stays with a person. The statement, the replies and the decisions in this guide are yours.