Short answer: The biggest red flags of an SEO agency are guaranteed rankings, secret methods, fixed link packages at bargain prices, contracts that lock you in or leave the agency owning your accounts, reports full of vanity metrics, and refusing you access to your own data. Any one of these is worth questioning. Two or more together usually means you should walk away or get out.
Key takeaways
- In the sales pitch: ranking guarantees, "page one in 30 days", secret methods, no questions about your business and cheap packages with a fixed number of links.
- Contract red flags: long lock-ins with no exit, the agency owning your accounts or content, vague deliverables and links sold by the dozen.
- Once work starts, watch for missing Search Console access, rankings for terms nobody buys from, sudden bursts of junk links and no technical fixes shipped.
- The most serious red flags are tactics that break Google's spam policies, such as link schemes and doorway pages. Check Search Console for a manual action if you suspect them.
Most bad SEO is not a deliberate scam. It is an agency selling something easy to package, like a fixed number of links a month, to a client who cannot easily check it. Because SEO results lag by months, a weak or risky approach can look fine for a long time.
Below we group the warning signs by stage, from the sales pitch to the contract to the work itself, with a question you can use to test each one.
What are the red flags in an SEO agency's sales pitch?
The pitch red flags are promises that sound too certain, methods the agency will not explain, and a sales process that never asks about your business. If the agency talks more about what it will deliver than about what you sell and to whom, it is selling a package, not a plan.
"We'll get you to page one in 30 days"
Why it is a red flag: Rankings depend on Google's systems, your competitors and the state of your site, none of which the agency controls. New pages on competitive terms typically take months to settle, not weeks.
What is usually behind it: Either the "page one" terms are obscure long phrases nobody searches for, the agency is counting your brand name, or it plans to buy links aggressively to force a short-term jump.
A ranking guarantee, often with "or your money back", is the same red flag in a stronger form. No agency controls Google's results, so a guaranteed position is either meaningless or relies on you not checking.
Ask: "Which exact keywords do you mean, how many people search for them each month, and what will you do in the first 30 days to move them?"
"We guarantee first page rankings for 10 keywords within a month, or your money back. Our proprietary system has never failed."
"Your category pages sit on page two for terms with real demand. If we fix the internal linking and the thin product copy, we would expect movement in two to four months. We can't promise positions, but we can show you every change and track it against these pages."
Secret or proprietary methods
Why it is a red flag: The fundamentals of SEO are public. Google publishes its own guidance, and there is no method a competent agency would need to hide from the client paying for it.
What is usually behind it: Tactics the agency does not want you to look at closely, most often paid links from networks of sites it controls.
Ask: "If I asked an independent SEO to review your plan, what would you send them?"
Cold outreach with a generic audit
Why it is a red flag: An unsolicited email saying your site has "47 critical SEO errors" is usually an automated crawler report sent to thousands of sites. Many of those "errors" are harmless.
Ask: "Of these issues, which three would actually change revenue, and how do you know?"
No questions about your business
Why it is a red flag: SEO only pays when the traffic converts. If nobody asks about your margins, best sellers or ideal customers, the agency cannot choose the right keywords.
What is usually behind it: A one-size package that is the same whether you sell industrial pumps or skincare.
Ask: "What would you need to know about our business before you could tell us which pages to prioritise?"
Lowest-price packages with fixed link counts
Why it is a red flag: A package like "20 backlinks a month" at a low monthly price means links are being bought or produced at volume. Real editorial links, from sites that choose to mention you, cannot be produced on a fixed schedule at a fixed unit cost.
What is usually behind it: Low-quality directories, paid guest posts on sites that exist to sell posts, or private blog networks.
Ask: "Can you show me five links you built last quarter, and tell me how you got each one?"
What are the red flags in an SEO proposal or contract?
The contract red flags are anything that makes it hard to leave, hard to see what you are paying for, or hard to take your work with you.
Long lock-ins with no exit
Why it is a red flag: A 12 or 24 month contract with no way out, even when deliverables are missed, removes the agency's reason to perform.
Ask: "What happens if you miss the deliverables in this contract for two months running?"
The agency owning your accounts, content or site
Why it is a red flag: If the agency sets up Search Console, GA4 or hosting in its own name, or keeps copyright over content you paid for, leaving becomes painful.
Ask: "If we end the contract, what exactly do we keep, and how long does the handover take?"
Vague deliverables
Why it is a red flag: Lines like "on-page optimisation", "ongoing SEO work" or "authority building" with no quantity or output make it impossible to check what you got.
Ask: "At the end of month three, what should I be able to point to as finished?"
Payment for links
Why it is a red flag: Buying links that pass ranking value breaks Google's spam policies on link schemes. If the proposal has a line item for "guest posts" or "high DA links" at a price per link, you are paying for something that can trigger a penalty.
Unclear who does the work, or white-label without disclosure
Why it is a red flag: Using partners is fine. The problem is when a polished sales team quietly hands the work to an unnamed reseller, so you cannot judge quality or fix problems quickly.
Ask: "Who will actually write the content, build the links and make the technical changes, and are any of them outside your company?"
SEO audit services for sites with an agency already on board
An independent check of what an agency has done to your site: the links built, the content published, the technical changes made and whether any of it puts you at risk.
See our SEO audit servicesWhat are the red flags once the work has started?
Once work is under way, the red flags are missing access, reports that measure activity instead of results, and data that does not match what the agency says. You need your own Search Console and GA4 access to spot most of them.
No access to Search Console or GA4
If you cannot log in to your own Google Search Console and GA4, you cannot check anything the agency tells you. This is the single easiest red flag to test. Ask for owner or admin access in your own Google account, today. A good agency will never hesitate.
Reports full of vanity metrics
Watch for reports that lead with impressions, keywords ranked or a "visibility score" and never mention organic sessions, conversions or revenue.
A worked example: a report shows "keywords ranked" rising from 1,200 to 3,000. In Search Console you find that nearly all the new terms sit on page five or lower, get a handful of impressions each and no clicks. The number went up. The traffic did not.
Rankings for irrelevant terms
If the agency celebrates rankings for phrases your customers would never search, it is chasing easy wins. Check the queries in Search Console and ask whether each top query could plausibly lead to a sale.
Sudden spikes of low-quality links
Backlink tools will show if hundreds of links appear in a short period from sites with no real traffic, odd languages, or pages full of unrelated outbound links. Exact-match anchor text repeated across many sites, for example "best running shoes UK" fifty times, is another sign of manufactured links.
Thin or AI-spun content at volume
Large numbers of near-identical pages, or articles that rephrase page one without adding anything, can fall under Google's policy on scaled content abuse. Using AI is not the problem; volume with no expertise or editing is. If you would not send a recent post to a customer, it is not helping.
No technical fixes shipped
A common pattern: an audit in month one, then no follow-up on the fixes. Issues like indexing problems or slow templates need a developer, and an agency that never pushes for them leaves the most reliable gains on the table. Good technical SEO services include tracking which fixes went live.
The account lead keeps changing
Three account managers in six months means nobody holds the history of your site. It usually points to high turnover or an overstretched agency.
Blaming algorithm updates for everything
Google updates do cause real swings. But if every drop is "the algorithm" and every rise is "our work", you are not getting analysis. A good agency checks which pages moved and admits when the cause is something it did.
Which red flags mean your site is at risk?
The red flags that put your site at real risk are tactics that break Google's spam policies: link schemes, private blog networks, hidden text, doorway pages and cloaking. These can lead to a manual action, where a Google reviewer demotes or removes pages from search, or to algorithmic devaluation where the gains simply disappear.
| Tactic | What it looks like | Why it is risky |
|---|---|---|
| Link schemes | Paid links, link exchanges, links in widgets or footers across many sites | Directly against Google's link spam policy |
| Private blog networks (PBNs) | Sites with recycled expired domains, thin posts and links out to many unrelated businesses | Networks get found and devalued, often all at once |
| Hidden text or links | Keywords in white text, text hidden off-screen, tiny links | Treated as an attempt to manipulate rankings |
| Doorway pages | Dozens of near-identical pages, one per city or keyword, all funnelling to the same place | Covered by Google's doorway abuse policy |
| Cloaking or sneaky redirects | Search engines see different content from users | One of the more serious violations |
How to check for a manual action
In Google Search Console, open "Security & Manual Actions" and select "Manual actions". "No issues detected" means no manual action right now. Otherwise it describes the problem, such as unnatural links, and the affected pages. Fix it, then submit a reconsideration request from the same screen.
No manual action does not mean all is well. Google often just ignores manipulative links, which means you paid for something with no value.
How can you check your current agency for red flags?
Run through the list below. Every item you cannot tick is a red flag worth raising with the agency, and most of them take a few minutes to check if you have your own logins.
If you are earlier in the process and still comparing options, our guide to what to look for in an SEO agency covers the positive signals, and our comparison of SEO agency vs freelancer helps if you are deciding which model fits. For what good, transparent work looks like in practice, see our SEO services.
Frequently asked questions
Not having owner or admin access to your own Search Console and GA4. Without it you cannot check any claim the agency makes, so every other red flag stays hidden. It is also the quickest one to fix: ask for access today.
Rankings and traffic often take three to six months to move, but the red flags in this article can be spotted much sooner. Access, transparency, specific deliverables and shipped fixes should all be visible in the first month or two. Judge the work early and the results later.
Yes. Link schemes, doorway pages, hidden text and cloaking can lead to a manual action from Google. You, not the agency, carry the consequences, which is why you should know every tactic used on your site.
Treat it as a serious red flag. Agencies that build links through legitimate outreach are usually proud to show them. You can also see most of your backlinks in Search Console under Links, and in third-party backlink tools.
A small budget can buy honest, limited work, such as a few hours of technical fixes or one well-researched page a month. The red flag is a cheap package that promises a lot of output, especially a fixed number of links. Low price plus high volume usually means low quality.
What to do next
To protect yourself you need ownership of your data, clear deliverables and a record of the work. Three steps for this week:
- Confirm you are owner or admin on Search Console and GA4, and check the manual actions report.
- Ask your agency for a full list of links built and technical changes made in the last six months.
- Compare your agency's report with what Search Console shows for organic clicks and the queries behind them.
If what you find worries you, we offer a free written SEO audit within 48 hours that gives you an independent view of where your site stands and whether anything needs fixing.