Insights
Buyer risk guideUpdated August 23, 2026

SEO agency red flags: investigate the claim before you trust the pitch

Use twelve observable signals to test guarantees, proof, scope, link methods, reporting, account ownership, delivery structure, and commercial pressure before you sign.

SEO Companies Hub Editorial August 23, 2026 14 min read

A red flag is not a bad feeling. It is a claim, control, or omission you can test.

The strongest stop signals are ranking guarantees, undisclosed or unexplainable tactics, agency-controlled client accounts, and link inventory designed to manipulate rankings. Other signals—anonymous cases, subcontractors, longer terms, junior execution—need context before they become reasons to reject a vendor.

Interactive due diligence

Screen the proposal you have in front of you

Answer against the written proposal, sample reports, contract, and reference evidence—not what the salesperson said they would add later.

01 · Claims · critical

Guaranteed rankings or a fixed ranking date

The proposal guarantees a number-one position, a fixed ranking by a deadline, or privileged access to Google.

Why it matters: An agency can control its work, not competitors, search systems, or the timing of every result.

Ask for instead: Scenario ranges, controllable milestones, dependencies, and an explicit no-ranking-guarantee clause.

02 · Evidence · moderate

Proof you cannot interrogate

Case studies hide the client, period, baseline, scope, or denominator and the agency will not substantiate them under NDA.

Why it matters: A percentage without a starting point, timeframe, attribution method, and agency contribution cannot establish fit.

Ask for instead: A scoped example with dates, baseline, work shipped, constraints, result definition, and a reference where appropriate.

03 · Delivery · high

Vague deliverables with no acceptance test

The scope promises ongoing optimisation, content, links, or technical support without quantities, decision rights, or completion criteria.

Why it matters: Ambiguous scope makes under-delivery difficult to identify and change requests easy to manufacture.

Ask for instead: A 90-day plan naming outputs, owners, review rounds, dependencies, acceptance criteria, and what is excluded.

04 · Methods · critical

A method the agency refuses to explain

The agency calls its approach proprietary and will not explain material site changes, content sources, outreach, or link methods.

Why it matters: The client remains exposed to site, brand, and search-policy risk even when a vendor performs the work.

Ask for instead: A documented method, change log, approval thresholds, and a clear prohibited-tactics list.

05 · Methods · critical

Links are sold as inventory the agency owns

The pitch promises a fixed inventory of ranking links, leased placements, or links that disappear when the retainer ends.

Why it matters: Purchased or controlled placements can create policy risk and a dependency the client cannot audit or retain.

Ask for instead: Placement-level reporting, commercial disclosure, link qualification where required, and no undisclosed network dependency.

06 · Evidence · high

Reporting stops at rankings and traffic

The sample report omits conversions, lead quality, revenue definitions, work shipped, blockers, and next decisions.

Why it matters: Visibility can rise while commercial performance stalls; activity totals do not show whether recommendations were implemented.

Ask for instead: Business outcomes, leading indicators, shipped work, open blockers, source definitions, and next actions in one report.

07 · Delivery · moderate

The delivery team is missing from the proposal

Senior people lead the pitch, but the contract does not name delivery roles, allocation, supervision, or substitution rules.

Why it matters: A strong agency can use junior specialists well, but the buyer should know who decides, executes, reviews, and communicates.

Ask for instead: Named roles, senior oversight, expected allocation, escalation cover, and notice for material team changes.

08 · Access · critical

The agency wants to own your core accounts

Analytics, Search Console, advertising, domains, content, or dashboards would be created only inside agency-controlled accounts.

Why it matters: Offboarding can sever access to the history and assets needed to operate or evaluate the programme.

Ask for instead: Client-controlled ownership with named agency users, least-privilege access, an access register, and a removal process.

09 · Access · high

Unrestricted access before scope and safeguards

The agency requests production, DNS, CMS, or analytics administrator access before defining the audit, users, or change controls.

Why it matters: More access than the task requires increases operational and security exposure without improving the diagnosis.

Ask for instead: Read-only discovery first, named individual accounts, least privilege, MFA, logging, and approval for production changes.

10 · Delivery · high

Material subcontracting is undisclosed

The agency will not identify which work may be outsourced, where data goes, or who remains accountable for quality.

Why it matters: Subcontracting is common and not inherently bad; undisclosed delivery makes confidentiality, supervision, and accountability unclear.

Ask for instead: Written disclosure of material subcontracting, confidentiality controls, quality ownership, and client approval where necessary.

11 · Commercial · high

Long lock-in with weak exit mechanics

The agreement renews automatically, has a long notice window, or withholds files, credentials, and work-in-progress after termination.

Why it matters: A buyer can be commercially trapped even when delivery is poor or priorities change.

Ask for instead: Clear term and renewal dates, practical notice, termination rights, export formats, transition duties, and asset handover timing.

12 · Commercial · moderate

Pressure replaces due diligence

The agency uses an expiring discount or immediate-start claim to resist references, contract review, or a written answer to material questions.

Why it matters: Real capacity can be time-sensitive, but it should not require the buyer to skip verification of scope, risk, and ownership.

Ask for instead: A dated capacity assumption, a reasonable proposal-validity window, and time to complete reference and contract checks.

Interpretation matters

Do not turn reasonable limitations into fake red flags

A useful buyer screen separates concealment from an honest constraint. These common facts need a follow-up question, not an automatic rejection.

Not automatically a red flagWhat makes it acceptable
The agency cannot name every clientConfidentiality is normal. Ask for dates, baseline, scope, methods, result definitions, and a way to substantiate material claims.
Junior specialists perform some workThat can be efficient when roles, supervision, quality review, and escalation are explicit.
The agency uses subcontractorsThe issue is disclosure and accountability, not the employment label.
The agency requests site accessAccess is often necessary. Start with read-only discovery and expand privileges only for an approved task.
The proposal includes leading indicatorsRankings and visibility can guide decisions; they should not replace conversions, business definitions, shipped work, and blockers.
The initial term is longer than one monthSEO can require continuity. Test whether the term matches the plan and whether termination, handover, and renewal mechanics are fair.

Verification workflow

Turn the sales claim into a procurement control

01

Make each claim testable

Rewrite broad claims as a metric, audience, source, baseline, period, and comparison. If the meaning changes during questioning, the original claim was not decision-ready.

02

Trace one case from work to result

Ask what the agency found, what it recommended, what the client implemented, what changed, and what other factors could have contributed.

03

Attach owners to the scope

For every deliverable, identify who creates, approves, implements, and accepts it—plus the review limit and dependency that can stop it.

04

Map account and asset control

Record the owner, agency permission, export format, and offboarding step for Search Console, analytics, dashboards, content, creative, domains, and outreach records.

05

Interrogate every link claim

Ask how prospects are selected, what value earns coverage, whether money or goods change hands, how commercial links are qualified, and what gets reported.

06

Put the answer in the agreement

A reassuring sales answer is not a control. Material promises belong in the scope, policy schedule, reporting requirements, access plan, and termination language.

Ask in the finalist call

Twelve questions that force useful answers

  1. 01Which outcomes are scenarios rather than commitments, and what assumptions drive them?
  2. 02Show one case from dated baseline through work shipped to the reported result.
  3. 03What would make you advise us not to invest in SEO this quarter?
  4. 04Who will make prioritisation decisions after the sales team leaves?
  5. 05Which deliverables have quantities, acceptance criteria, and review limits?
  6. 06Which recommendations must our developers, writers, analysts, or legal team implement?
  7. 07How do you source links and disclose or qualify commercial placements?
  8. 08Which work is subcontracted, where is it performed, and who reviews it?
  9. 09Which accounts and assets remain under our verified ownership from day one?
  10. 10Show the report page that connects shipped work to conversions and business definitions.
  11. 11What happens to files, data, credentials, links, and work-in-progress when the contract ends?
  12. 12Which material answer from this call will you add to the proposal or agreement?

Primary guidance

Why these checks belong in the buying process

Google’s buyer guidance explicitly warns against guaranteed rankings and secretive methods, recommends realistic estimates and references, and says site owners remain responsible for vendors acting on their behalf. Its spam policies identify ranking-driven link schemes and explain how commercial links should be qualified. Search Console’s role model provides a practical basis for client-controlled ownership and scoped agency access. FTC guidance is relevant when testimonials communicate performance claims: the underlying claim still needs substantiation and appropriate context.

SEO agency red-flag FAQs

What is the biggest red flag when hiring an SEO agency?

A guaranteed ranking or an unexplained method is a stop signal because the agency is claiming control it does not have or asking the client to accept material site and search-policy risk without visibility.

Are anonymous SEO case studies always a red flag?

No. Confidentiality may prevent naming a client. The concern is proof that remains impossible to evaluate: no dates, baseline, scope, attribution method, work shipped, or way to substantiate the example under an NDA or reference process.

Should an SEO agency own Search Console and analytics accounts?

The client should retain durable control of core business accounts and grant named agency users the minimum access required. This makes permissions and offboarding manageable and preserves the company’s data history.

Is subcontracting SEO work a warning sign?

Not by itself. Subcontractors can add specialist capacity. It becomes a warning when material outsourcing, data handling, supervision, confidentiality, or accountability is hidden or undefined.

Can an SEO agency guarantee traffic or leads instead of rankings?

An agency can commit to work, service levels, measurement, and decision processes. Traffic, leads, and revenue also depend on demand, competitors, implementation, the website, the offer, and sales execution, so fixed outcome guarantees require careful scrutiny.

Compare the evidence, score the proposal, then review the contract

Keep the same criteria for every finalist. A persuasive pitch should not be able to change the measurement system halfway through the process.