Businesses which arrange for third parties to write fake positive reviews about them online are at risk of falling foul of consumer protection law, according to new guidance.