SEO red flags: how to spot a dodgy SEO agency

The SEO industry has a trust problem and it earned it. For every agency doing careful, honest work there is another selling guaranteed rankings, secret methods and 500 backlinks a month to business owners who have no way of knowing better. This guide is buyer protection, not an anti SEO rant. SEO works. Bad SEO does not. Here are the biggest red flags, what legitimate work actually looks like, the excuses catalogue, the pricing patterns and how to check whether your current provider is doing anything at all. For the full picture of what good SEO looks like end to end, our SEO guide covers the whole channel.

The warning signs at a glance

This table alone filters out a lot of noise. The rest of the article goes deeper.

Why SEO attracts dodgy operators

This is not unique to SEO, but SEO is especially vulnerable: the work is complex enough to sound impressive without the client being able to verify it, results take time (which gives poor providers months of cover), most owners do not know what normal SEO work looks like, some metrics are easy to dress up as progress and many businesses evaluate proposals on confidence rather than clarity.

The economics explain the persistence: a templated operation can service 200 clients with three staff and some automation, so even a 60% annual churn rate stays profitable, because acquisition is cheap when the pitch is a guarantee. Legitimate agencies carry senior salaries and capped client lists, which is why they cannot and will not match the price. Understanding that maths is half the defence: when the price seems impossible for the promise, it is and you are looking at the 200 client model.

The 10 biggest SEO red flags

1. Guaranteed rankings

No agency controls Google's algorithm. Results depend on competitors, algorithm updates, site condition and dozens of variables nobody can fully predict. 'We guarantee page one' is sales theatre, designed to close the deal rather than deliver the result. Google's own hiring guide for SEO explicitly states that no one can guarantee a number one ranking. The ACCC's guidance on advertising reinforces that businesses must be able to substantiate their claims. Ranking guarantees fail both tests.

2. Secret or proprietary methods with no explanation

A structured internal process is fine, most good agencies have one. The red flag is 'proprietary' used as a wall to avoid any transparency. If they cannot explain their general approach in plain English, be cautious. You do not need every internal template. You do need to understand the strategy well enough to trust it.

3. Promises of huge backlink volumes

Volume based link promises ('50 backlinks per month', '500 links included') are among the most reliable red flags in the industry. Low quality links do not just fail to help, they can actively harm your site. Google's link spam policies have targeted manipulative link schemes for over a decade and the penalties range from devaluation to manual action. Legitimate link building focuses on quality, relevance and editorial value. Our guide on what SEO deliverables should look like explains what real authority work involves and why it costs more than people expect.

4. No real questions about your business

A serious agency asks about your goals, services, target areas, margins, lead sources, current performance and competition before proposing anything. If they pitch a package without understanding your business, they are selling a template, not a strategy.

5. Vague monthly deliverables

'Ongoing optimisation.' 'Monthly SEO work.' 'Authority campaign.' These sound like services, but without defined scope they are just labels and the retainer becomes impossible to evaluate. Professional presentation does not equal professional delivery. Accepting vague deliverables because the agency 'seems professional' is the single most common way businesses end up here.

6. No access to your own accounts or data

Your domain, hosting, CMS, GA4, Search Console and ad accounts should always be yours. An agency gets access, never ownership. If an agency builds your site on their hosting, controls your domain or will not give you admin access to your analytics, you are one disagreement away from losing everything. Our guide on GA4 for small businesses covers the setup that keeps analytics under your control from day one.

7. Lock in contracts with weak transparency

Long contracts are not automatically bad. A 6 month initial term with clear deliverables and a fair notice period can be reasonable. The red flag is the combination: long lock in plus vague scope plus poor reporting plus unclear exit terms. That combination traps you with no way to evaluate performance or leave.

8. Reports full of vanity metrics

Keyword counts. Impressions. Domain Authority. 'Visibility scores.' Traffic spikes on irrelevant posts. If the report never connects work to leads, enquiries or revenue, it is likely smoke. Our guide on how to measure SEO ROI explains which metrics matter and which are noise.

9. Suspiciously cheap pricing for full SEO

Proper SEO takes specialist time: strategy, technical work, content, outreach, reporting. 'Full service SEO' for $299/month means corners are being cut, usually via templates, automation or junk links. Understanding whether SEO is worth it for your business helps you calibrate what realistic pricing looks like and our guide on how much SEO costs in Melbourne shows what each budget tier genuinely buys.

10. They cannot explain what has actually been done

Ask your agency 'what changed this month?' If the answer is vague, deflective or jargon heavy, that is a problem. A legitimate agency explains actions, rationale and next steps in plain English. If they cannot clearly explain what they are doing, why and how progress gets measured, that is not sophistication. It is a warning sign.

What a legitimate month of SEO actually contains

Red flags are easier to spot when you know what normal looks like. Here is what your retainer should produce at each stage, assuming a mid range budget ($1,500 to $3,000/month) for a competitive local or national market:

If your current retainer does not produce recognisable work at each of these stages, the checklist later in this guide will help you figure out whether the problem is communication or substance.

Pricing patterns and what they usually mean

Price alone is never the verdict. Price against scope, hours and evidence is. The consistent tell across every dodgy pattern: the number is specific and the work is vague.

The excuses catalogue

Every stalled campaign produces explanations. Some are legitimate. The same words from a dodgy provider mean something different. The pattern: legitimate explanations come with evidence and a change of plan. Excuses come alone and they come repeatedly.

Our guide on Google algorithm updates and what they mean covers the real updates so you can check whether the one your agency blames actually happened.

Real dodgy tactics businesses still get hit with

These are not theoretical. They happen to Australian businesses every week:

• Cold emails claiming 'critical SEO errors' (automated, generic, designed to create panic).

• Fake urgency around 'Google penalties' (real penalties are rare, verify in Search Console before panicking).

• Agency created microsites and doorway pages that funnel traffic they control, so the traffic vanishes when you leave.

• Bulk directory spam sold as 'citation building'. Our guide on local citations in Australia shows what real citation work looks like.

• Charging monthly for reports while barely touching the site.

• Content nobody asked for on random topics, published purely to show activity. Our guide on content strategy for small businesses covers what strategic content actually looks like.

The 2026 vintage: new flavours of dodgy

The classics above are evergreen, but the industry's grifters update their inventory. Four newer patterns worth recognising:

• AI content mills at scale. Forty 'SEO articles' a month at a price no human review could survive. Google's spam policies explicitly target mass produced content made primarily for rankings and sites running these programs increasingly get caught in core updates. Volume is the tell: nobody reviews forty articles properly for $600. Our guide on blogging for SEO covers what quality content production actually requires.

• GEO and 'AI search' snake oil. 'We will get you recommended by ChatGPT for $500/month.' Visibility in AI answers is a real emerging discipline, but it is earned the same way as everything else: genuine expertise, clear pages, real mentions. Nobody has a hotline to the models. Our guide on how to get cited in Google AI search covers what the legitimate work actually involves.

• AI polished audit spam. The old 'critical errors on your website' cold email, now fluently written and personalised by AI. Better grammar, same scam. The tell is unchanged: they diagnosed you before ever seeing your analytics.

• Review gating tools sold as compliant. Software that routes unhappy customers away from public reviews, marketed as 'reputation management'. The ACCC has warned specifically about suppressing negative reviews. Our guide on how to get more Google reviews legally in Australia covers the compliant alternative.

Who gets targeted hardest

Cold outreach dodgy SEO disproportionately hunts trades and healthcare, where owners are busy, budgets exist and technical verification is rare. If that is you, the honest playbooks show what the real work looks like, which is the best vaccine against the fake version.

• Trades get the highest volume of junk cold calls. Our guide on SEO for tradies covers the full organic playbook for the industry.

• Health practitioners get sold 'guaranteed first page' for competitive clinical terms. Our guide on SEO for medical practices covers the real strategy.

• Venue owners get fake directory renewals and 'exclusive' lead gen sites. Our breakdown of SEO for hospitality covers the legitimate version.

• Accountants and financial advisers get pitched 'lead gen packages' for high value terms. Our guide on SEO for accountants and financial advisers shows what honest work in that vertical looks like.

• Professional services firms get their own flavours, usually pitched around thought leadership and authority that never materialises beyond a few blog posts.

Anatomy of a dodgy monthly report

The monthly report is the one artefact every client holds, so it is where the difference between real and fake work is most visible.

One more tell that costs nothing to check: compare this month's report with one from four months ago. If entire paragraphs are identical, you are reading a template and templates do not do SEO.

Your actual legal protections in Australia

Businesses assume they have no recourse against a dodgy provider. That is not quite true:

• Misleading and deceptive conduct rules apply to B2B. The Australian Consumer Law's prohibition on misleading conduct in trade or commerce protects business customers too. An agency that claimed guaranteed rankings or invented case study results to win your contract may have crossed that line.

• Unfair contract terms cover small business standard form contracts. The ACCC's guidance on unfair contract terms for small businesses sets out the thresholds. Terms that create a significant imbalance (unilateral price rises, impossible exit clauses, the agency keeping everything on termination) can be challenged as unfair.

• Your assets are yours regardless of the fight. Content you paid for under an agreement giving you ownership, your domain registration, your data: leaving a provider does not forfeit them, whatever the exit conversation implies.

None of this makes lawsuits sensible for a $1,500 retainer dispute. The practical power is in the letter that mentions these things accurately. Get real legal advice for real disputes.

Specific contract terms to check before signing

Beyond the broad protections above, these are the specific clauses that trap businesses:

• IP and content ownership. Who owns the content created during the engagement? If the contract says 'agency retains IP until final payment' or similar, you could lose months of published work in a billing dispute. The default should be: you own everything created for you.

• Auto-renewal and notice periods. A 12 month contract that auto-renews with a 90 day notice window gives you roughly one week per year to exit. Check the renewal date, the notice period and whether notice must be in writing.

• Account access on termination. The contract should state explicitly that all account credentials, analytics access and third party tools are handed over within a defined period after termination. If it is silent on this, you are relying on goodwill.

• Minimum spend escalation. Some contracts include annual price increases or minimum spend clauses that lock you into higher rates without any corresponding scope increase. Read the fine print on pricing.

• Non-compete or exclusivity. Clauses preventing you from hiring another SEO provider during or after the contract are a power play, not a standard term.

Ten questions dodgy agencies hate

Keep these in your pocket for any sales call. None of them are hostile. All of them are clarifying, which is exactly why they work:

1. How many hours does this retainer buy and at whose seniority?

2. Can I see last month's report for a similar client, redacted is fine?

3. Which three links did you earn for a client recently, actual URLs?

4. What would make you tell a client to stop SEO?

5. Who writes the content and who reviews it?

6. What happens to everything if we part ways?

7. What did you deprioritise for a client last quarter and why?

8. Which of my competitors would you study first?

9. What is a realistic month 6 for a business like mine?

10. And what do you need from us to make this work?

Fluent, specific answers to seven or more: proceed. Deflection on half: you have learned what the retainer would feel like.

What a legitimate SEO proposal looks like

A proper proposal makes you feel informed, not confused. It includes:

• Clear scope: what is included, what is not, how often, who does what.

• Evidence they actually listened to your goals and market.

• Realistic timelines. Our SEO timeline estimator gives a rough benchmark for how long different results typically take.

• Deliverable detail specific enough to evaluate progress against.

• A measurement approach covering leads as well as rankings.

• Access and ownership confirmation.

• Transparent pricing.

Our guide on how to choose an SEO agency covers the full evaluation process, including the reference calls and contract terms.

How to check references properly

Most businesses skip this. Do not. Ask for two or three current client references in a similar industry and size bracket, redacted names are fine initially. When you talk to them, the questions that actually reveal quality:

• What does the monthly reporting look like and do you understand it?

• Has the agency ever told you not to do something you wanted to do?

• What happened the last time results dipped?

• Do you know what they are working on this month, specifically?

• Would you rehire them if you were starting from scratch?

Dodgy operators either refuse references entirely or provide planted ones. The planted ones fail the specificity test: they praise the agency in generic terms but cannot name a single deliverable or strategic decision. Real clients describe real work.

How to read a case study like a sceptic

Five checks expose most inflated case studies:

1. The baseline. 'Traffic up 400%' from 50 visits a month is 250 visits. Percentages without starting numbers are decoration.

2. The timeframe. Over what period? Compounding over three years is normal. The same graph compressed to imply three months is marketing.

3. The metric. Traffic and rankings are inputs. Did leads, calls or revenue move? If the case study never mentions money, ask why.

4. The attribution. Was anything else running: ads, a rebrand, a new location, seasonality? Honest case studies name the other variables.

5. The relevance. A national ecommerce win says nothing about ranking a Ballarat plumber. Ask for something in your industry and size bracket.

How to check if your current agency is actually doing anything

Things you can check right now, no technical skills required:

• Have key pages actually been updated recently?

• Is there a written list of completed work from the last 3 months?

• Are you getting more relevant enquiries from organic search?

• Have identified technical issues actually been fixed?

• Is new content strategic or random? Content published purely to show activity, with no connection to your services or customers, is a warning sign.

• Is your Maps visibility strengthening? Our Google Business Profile guide covers the profile side.

• Can your agency explain what changed and what is next?

How to check your backlink profile yourself

If your agency claims to be building links, you can verify it in two minutes:

1. Open Google Search Console, click Links in the left sidebar, then Top linking sites. This shows every domain linking to you.

2. Open the top 5 to 10 linking domains in a new tab. Are they real websites with real content and real readers? Or are they template blogs, free directories or link farms where every post links to a different unrelated business?

3. Check External links and Top linked pages. Are the links pointing to your important service pages or to random blog posts? Links to pages that drive enquiries are worth more than links to throwaway content.

4. Look at the growth trend. A sudden spike of 50 new linking domains in one month followed by nothing is a bulk purchase, not earned authority. Genuine link building grows steadily.

If more than half the linking domains look like sites no real person would ever read, you have your answer.

More tests to run:

• Ask for the last 90 days of completed actions in writing.

• Ask which specific pages were worked on and what changed.

• Ask what is different in GA4 or Search Console compared with 3 months ago, then check the numbers yourself. Our guide on how to set up Google Ads conversion tracking connects the tracking that makes this check possible.

• Ask how recent work ties back to your business goals.

SEO should not feel invisible forever. Some results take time. The work itself should be visible from month one. Our guide on how long SEO takes to work sets honest expectations for both.

Red flags by relationship stage

The tells change shape as the relationship ages. Same provider, different disguises:

Four DIY sniff tests (fifteen minutes, no tools)

1. The site search. Search site:yourdomain.com.au in Google. Do the pages you are paying for actually exist and get indexed? Are there dozens of thin, near identical pages you never approved?

2. The content read. Open the two most recent articles published under your name and read them aloud. Would you say those sentences to a customer? Do they contain a single fact specific to your business?

3. The link list request. Ask for last quarter's link placements with URLs, then open three. Real sites with real readers or template blogs whose every post links to a different unrelated business?

4. The agency's own content. Read two or three articles on the agency's own blog. If their content is thin, generic or reads like it was written by someone who has never done the work, that is what your content will look like too. The quality of their own site is the best preview of the quality of yours.

Fifteen minutes, once a quarter. If a provider knows you run these checks, the checks mostly never find anything, which is precisely the point.

Green flags: what good actually looks like

The inverse list matters too, because relentless suspicion has its own cost. Signs you have found a keeper:

• They have told you 'no' at least once (wrong keyword, wrong priority, wrong spend).

• They volunteer bad news before you find it.

• The reports get shorter and clearer over time, not longer and denser.

• They ask for things (approvals, expertise, photos) because real campaigns need client input.

• Their recommendations sometimes reduce your spend.

• You could explain your own SEO strategy to someone else, because they have made you understand it.

That last one is the strongest signal in the industry. Understanding E-E-A-T for small businesses helps frame why genuine expertise and trust matter to both Google and your customers.

What to do if you think your SEO agency is dodgy

Do not panic. Do take these steps in order:

1. Gather your documents: proposal, contract, reports, invoices, access details.

2. Check ownership: confirm admin access to your domain, CMS, GA4, Search Console and ad accounts. Request anything missing in writing.

3. Ask for a concrete list of the last 90 days of actions.

4. Review your contract: notice period, what happens to deliverables, what you own.

5. Get a second opinion before cancelling. Sometimes the work is fine and the communication is broken. Other times the work is genuinely substandard.

6. Back up everything: export analytics data, download Search Console reports, copy all content and credentials.

If your agency has access to customer data through your website or analytics, the OAIC's Australian Privacy Principles are worth reviewing too. Our guide on privacy policies and website terms for Australia covers the obligations.

The first 90 days after leaving: what recovery looks like

Leaving a dodgy provider is not the end of the problem. The gap between ending bad work and starting good work is where businesses lose the most ground, because the temptation is to pause the whole channel while you 'figure things out'. That pause compounds. Here is what the first 90 days with a new provider (or doing it yourself) should prioritise:

• Days 1 to 14: secure and audit. Confirm ownership of every account (domain, hosting, CMS, GA4, Search Console). Back up everything. Run a full technical audit to understand what was done, what was broken and what was never done at all. Our SEO audit checklist gives the structured version of this review.

• Days 15 to 30: clean up. Remove or rewrite thin pages, review the backlink profile for toxic links, fix tracking that was never properly configured, correct any NAP inconsistencies the previous provider introduced. If the migration involves moving to a new platform or developer, our guide on website migration and SEO covers the process that protects your rankings during the switch.

• Days 31 to 60: rebuild the foundation. Set up proper measurement (GA4, Search Console, call tracking), publish the first piece of genuinely useful content, get the Google Business Profile operating rhythm running. Our guide on site architecture for small businesses covers how to structure the site properly from the start.

• Days 61 to 90: start the forward work. Prioritise the three to five pages that should drive the most enquiries. Begin earning links properly. Set realistic expectations: you are not behind where you were before the dodgy provider, you are behind where you would have been if you had started properly at the same time. That gap takes months to close, not weeks.

The critical mindset shift: recovery is not 'getting back to where we were'. The previous provider's work was not progress. Recovery is starting real work, measuring honestly and accepting the timeline that comes with it.

The red flag checklist

Score your current or prospective provider:

0 to 2 yes answers: probably fine, keep assessing with the verification habits above. 3 to 5: have the direct conversation this month, with the specific gaps written down. 6 or more: start the exit steps. The relationship is costing more than money.

What a dodgy provider actually costs: a worked example

The direct spend: $800/month for 14 months of 'full service SEO' before the owner pulled the pin. $11,200 paid for templated suburb pages, junk directory links and reports nobody could interpret.

The cleanup: auditing what was done, removing or rewriting 30 thin pages, reviewing the link profile, rebuilding tracking that was never actually configured and recovering account access held under the agency's email. Roughly $4,000 to $6,000 of remediation before any forward progress begins.

The invisible cost: 14 months of compounding handed to competitors. The business that started honest work the same month is now 40 plus pages, dozens of reviews and a year of authority ahead and that gap does not close at the same speed it opened.

The trust cost: the owner now believes 'SEO does not work', which means the channel that fits their business best stays unused for another two years. This is the industry's real damage and it is why this article exists.

Total: roughly $17,000 in cash plus a year of position, to end up behind where doing nothing would have left them. Every verification habit in this guide costs minutes against that arithmetic.

What we recommend at Elev8d

We wrote this guide because cleaning up after dodgy SEO is a regular part of our intake and it is the most expensive way to buy SEO twice. How our SEO Melbourne team approaches the work is the inverse of every flag above: no lock in contracts, full client ownership of every account and asset, named senior people doing the work and reporting that leads with enquiries rather than impressions.

If you are mid contract and uneasy, do not cancel in a panic. Run the checklist, ask for the 90 day work log and judge the response. Providers doing real work answer easily. The other kind get defensive and that answer counts too.

If the audit points to website problems rather than agency problems, our web design Melbourne team builds sites with the same ownership and transparency principles. And our DIY website audit checklist is a free starting point for checking the site yourself.

Our SEO ROI calculator helps put real numbers on what the channel should return. A local SEO readiness check will show you where your local presence stands in five minutes.

For businesses weighing SEO against other channels, our guide on SEO versus Google Ads compares the two honestly and helps clarify which channel fits your situation.

FAQs

The most common questions we hear from businesses worried about their SEO provider:

How do I verify an SEO penalty claim?

The step by step check takes two minutes:

1. Log into Google Search Console at search.google.com/search-console (if you do not have access, that is a separate problem worth fixing immediately).

2. In the left sidebar, click Security and Manual Actions, then Manual Actions.

3. If the page says 'No issues detected', there is no manual penalty. Full stop. Whatever the cold email says.

4. If there is an active manual action, it will describe the issue and the affected pages. That is real and needs fixing, but it also means you can verify exactly what Google flagged rather than relying on someone else's diagnosis.

Broader ranking drops from algorithm updates are not penalties. They are competition and they need diagnosis, not panic. Our guide on Google Search Console covers the full setup if you do not have access yet.

Are all cheap SEO providers dodgy?

No. A freelancer with low overheads doing a narrow, well defined scope can be excellent value. The flag is not the price, it is the mismatch between price and promise. $400/month for Business Profile management: plausible. $400/month for 'complete SEO domination': not.

My agency reports rankings improving but leads have not changed. Dodgy?

Possibly just incomplete. Rankings for the wrong terms produce traffic that never buys and rankings for the right terms take time to translate into calls. Ask which terms improved and what the search intent is. If they are ranking you for terms nobody commercial searches, the strategy is the problem even if the work is real. Our guide on what to do when your website gets traffic but no enquiries covers this gap.

Can I report a dodgy SEO agency in Australia?

For misleading claims or conduct, the ACCC accepts reports through its website and state consumer affairs bodies handle contract disputes. Realistically, most situations resolve faster through the exit steps above: secure your assets, document everything, leave properly and warn your network.

What if the dodgy agency built my website too?

Move carefully. Confirm who owns the domain (check the registrant, not who pays the invoice), get a full site backup before any conversation and check whether the CMS and hosting accounts are yours. If they own the domain, prioritise transferring it above everything else. A domain hostage situation is the worst version of this problem. Our guide on how to transfer your website to a new developer covers the full handover process.

Is white label or outsourced SEO automatically dodgy?

Not automatically. Plenty of legitimate agencies use specialist contractors for content or technical work. It becomes a red flag when it is hidden: you were sold senior local expertise and the work is templated offshore production nobody reviews. The question that resolves it: 'who exactly does the work on our account and who checks it?' Honest operators answer without flinching.

The agency ranks its own site for my service keywords. Problem?

Sometimes. Some providers run their own lead generation sites in your industry, meaning your retainer funds a competitor and if you leave, the site you helped rank keeps selling your leads to whoever pays next. Ask directly whether they operate lead gen properties in your vertical and area. It is a fair question with an easy honest answer.

Is a Google Partner badge proof the agency is legitimate?

It is proof of Google Ads spend thresholds and certifications, which is genuinely something, but it says nothing about SEO at all: the Partner program relates to advertising, not organic search. There is no Google certification for SEO and Google's own hiring guidance says as much. Treat the badge as one data point about their paid search operation and keep every SEO question in this article on the table.

How long should I give a new agency before judging?

Judge the work immediately and the results at 4 to 6 months. The work (audits delivered, pages changed, tracking fixed) is visible in weeks. Anyone invisible for 90 days has already answered the question. Results follow the work on a delay, which is exactly why you evaluate them separately.

Next steps: pick your path

• Vetting a new provider? Run their proposal against the legitimate versus dodgy table, then use the ten question list before signing anything.

• Worried about your current one? Score the checklist honestly, request the 90 day work log and give the response the weight it deserves.

• Want a second opinion? Send us the proposal or monthly report and we will tell you what looks real, what looks vague and what we would ask next. Straight assessment, no pitch, even if the verdict is 'your agency is fine'.

Sources and further reading

• ACCC: Advertising and promotions. Substantiating claims, genuine reviews and transparent dealings.

• ACCC: Unfair contract terms. Protections for small business standard form contracts.

• Google Search Central: Do you need an SEO?. Google's own hiring guidance, including its warning signs.

• Google: Spam policies for web search. Link spam, auto-generated content, cloaking, doorway pages and other manipulation.

• OAIC: Australian Privacy Principles. Your obligations when providers can access customer data.

• Australian Cyber Security Centre: Learn the basics. Caution with unsolicited 'problem' contacts and account security.

General information only. Rules vary by situation, particularly around advertising claims, privacy, reviews and consumer law. If you're unsure about compliance, get professional advice.