Social media is increasingly used to communicate corporate social responsibility (CSR). Stakeholders respond to CSR messages with user-generated content (UGC), signalling approval or disapproval, potentially shaping consumers’s perceived legitimacy and scepticism towards CSR. Few studies have explored how UGC shapes these consumer responses. In the context of the UK food retail industry, this study explored what makes UGC more or less believed than company-generated CSR communication on social media. Through qualitative inquiry, the study identified that unique characteristics of social media, such as system-generated cues, lead UGC to be more believed than company-generated content, shaping perceived legitimacy. The study indicates the risks of communicating CSR through social media may be greater than previously suggested. It identifies recipient-related conditions under which these risks can be minimised.