The first two hours decide the story
When a complaint starts spreading on social media, the story gets written in the gap between the first angry post and your first response. Answer well within two hours and you are a participant in the narrative. Stay silent with no plan and the screenshots circulate with 'the company has not responded' attached, which reads as guilt whether or not you have done anything wrong.
The difficulty is that nobody thinks clearly at 9pm on a Friday with notifications stacking up. A crisis plan is not a binder; it is a set of decisions you make now, calmly, so you never have to make them under pressure. Four pieces do most of the work: a severity triage grid, pre-written holding statements, a named approval chain and clear rules on when to reply and when to stay quiet.
Triage: not every fire is a crisis
Overreacting to a single grumpy customer is as damaging as underreacting to a real problem, so the first job is always classification. Put this grid in your plan and make whoever spots the issue place it in a tier before anyone types a reply.
- Tier 1, routine: a bad review, a sarcastic reply, one unhappy customer. Handled by whoever runs the account, in normal brand voice, same day. No escalation.
- Tier 2, elevated: a complaint being shared beyond your followers, an accusation about staff conduct, a product fault affecting several customers, or local press sniffing around. Pause scheduled posts, alert the owner, respond within two hours.
- Tier 3, crisis: anything involving safety, injury, discrimination, a data breach, legal exposure or national media. All posting stops, one named spokesperson speaks, and nothing detailed goes out before you have taken advice.
Three questions sort most incidents in under a minute: is anyone harmed, is it spreading beyond our usual audience, and could it involve lawyers or journalists? One yes moves you up a tier.
Need a hand with this?
Our team delivers Social Media Marketing for UK businesses — with a free initial consultation, transparent fixed quotes and no lock-in contracts. Tell us what you're working on →
Holding statements: write them before you need them
A holding statement buys time without sounding evasive. Written in the middle of a crisis, it comes out defensive and lawyerly; written on a quiet Tuesday, it comes out human. Draft three fill-in-the-blank versions and keep them where anyone senior can find them.
- Acknowledgement: 'We're aware of [issue] and we're looking into it right now. We'll post an update here by [time].'
- Fault admitted: 'We got this wrong. [One sentence on what happened.] Here's what we're doing about it today: [action]. If you're affected, contact us at [route] and we'll sort it.'
- Serious or legal: 'We take this extremely seriously. Because it involves [an ongoing investigation / details about individuals we can't share], we can't say more yet, but we will update by [time].'
Two rules govern all three. Never state anything you have not confirmed, because a corrected statement dies faster than a late one. And always give a time for the next update, then honour it even if the update is 'we're still investigating'.
Decide who approves what, in writing
In small firms the approval chain fails in predictable ways: the owner is on a flight, the one person with the Instagram password is on annual leave, or a well-meaning employee replies from their personal account and becomes the story. Your plan should name names.
- Tier 1: the account manager acts alone.
- Tier 2: the account manager drafts, the owner or a named senior person approves. Set a deputy for each role so holidays don't break the chain.
- Tier 3: only the named spokesperson posts, after taking advice where needed. Everyone else, including directors, stays off the topic entirely.
- Standing rule for all staff: never reply, argue or 'defend the company' from personal accounts. Forward what you see to the named person instead.
- Keep a printed copy of the plan with phone numbers. If the crisis is a hacked account, a plan stored inside that account is useless.
Reply, pause or go quiet
Reply when the facts are wrong and you can correct them politely, or when a genuine customer has a fixable problem; taking it to direct messages after one public, human response works well. Pause your scheduled content the moment anything hits Tier 2, because a chirpy meme publishing itself in the middle of an apology is exactly how screenshot threads start.
Silence is sometimes right, but it should be chosen, not accidental. Go quiet when lawyers advise it, when the pile-on is coming from people who were never your customers and engagement only feeds it, or when a troll plainly wants a reaction. Where you can, announce the silence: 'we'll post a full update at 4pm' is silence with a receipt. And resist deleting critical posts unless they are abusive or defamatory; screenshots of deleted comments do more damage than the comments did.
Key Takeaway
Write your crisis plan before you need it: a three-tier severity grid, three fill-in-the-blank holding statements, a named approver for each tier and a deputy for holidays. In the first two hours: triage, pause all scheduled posts, publish a holding statement with a time for your next update, and honour that time. Never delete criticism unless it is abusive, and never let staff defend you from personal accounts.
Two UK cases worth dissecting
KFC and the empty buckets
In 2018 KFC UK switched delivery partner and ran out of chicken, forcing hundreds of restaurants to close. The response is still the benchmark: a full-page apology ad rearranging the brand's initials into a very honest word, alongside a plain web page listing which stores were open. The lessons scale down to any small business: move fast, match the apology to your normal brand voice rather than switching into corporate-speak, and pair every apology with practical information people can actually use.
Yorkshire Tea's very long weekend
In 2020 a senior politician posted a photo of himself with a large bag of Yorkshire Tea, and the brand spent days fielding demands to disavow him alongside general abuse. Instead of issuing a corporate statement, the person running the account replied individually, set boundaries with now-famous calm ('Sue, you're shouting at tea'), and later published an honest thread about what the weekend had felt like. The lessons: a human voice defuses what a press release inflames, you are allowed to set boundaries with the public, and explaining beats grovelling when you have done nothing wrong.
Build your one-page playbook this week, while everything is calm: the grid, the statements, the names, the rules. If you would like a second pair of eyes on it, our team helps West Midlands businesses write and pressure-test exactly these plans.