The SEO industry has a trust problem and it earned it. For every agency doing careful, honest work there's another selling guaranteed rankings, secret methods and 500 backlinks a month to business owners who have no way of knowing better.
This guide is buyer protection, not an anti SEO rant. SEO works, bad SEO doesn't. Here are the biggest red flags, what legitimate work actually looks like, the excuses catalogue, the pricing patterns and how to check whether your current provider is doing anything at all.
The warning signs at a glance
A dodgy agency often... | A legitimate agency usually... |
|---|---|
Promises guaranteed rankings | Sets realistic expectations about timelines |
Hides behind 'secret methods' | Explains priorities and approach clearly |
Pushes huge backlink numbers | Focuses on link quality and relevance |
Never asks about your business goals | Asks about goals, margins, services, geography |
Locks you into long contracts with vague scope | Offers fair terms with clear deliverables |
Controls your website and data | Gives you full access and ownership |
Sends reports full of fluff | Reports on leads, outcomes and next steps |
That table alone filters out a lot of noise. The rest of this article goes deeper: how the tricks work, why they keep working and the specific tests that expose them.
Why SEO attracts dodgy operators
This isn't unique to SEO, but SEO is especially vulnerable: the work is complex enough to sound impressive without the client being able to verify it, results take time (which gives poor providers months of cover), most owners don't know what normal SEO work looks like, some metrics are easy to dress up as progress and many businesses evaluate proposals on confidence rather than clarity.
Dodgy SEO often survives not because it convinces experts, but because it sounds plausible to busy business owners with twenty other things to worry about. That's the gap this article closes.
The economics explain the persistence: a templated operation can service 200 clients with three staff and some automation, so even a 60% annual churn rate stays profitable, because acquisition is cheap when the pitch is a guarantee. Legitimate agencies carry senior salaries and capped client lists, which is why they can't and won't match the price. Understanding that maths is half the defence: when the price seems impossible for the promise, it is and you're looking at the 200 client model.
The 10 biggest SEO red flags
1. Guaranteed rankings
No agency controls Google's algorithm. Results depend on competitors, algorithm updates, site condition and dozens of variables nobody can fully predict. 'We guarantee page one' is sales theatre, designed to close the deal rather than deliver the result. The ACCC's guidance on advertising and selling reinforces that businesses must be able to substantiate their claims, ranking guarantees fail that test.
2. Secret or proprietary methods with no explanation
A structured internal process is fine, most good agencies have one. The red flag is 'proprietary' used as a wall to avoid any transparency. If they can't explain their general approach in plain English, be cautious. You don't need every internal template. You do need to understand the strategy well enough to trust it.
3. Promises of huge backlink volumes
Volume based link promises ('50 backlinks per month', '500 links included') are among the most reliable red flags in the industry. Low quality links don't just fail to help, they can actively harm your site and Google's spam policies have targeted manipulative link schemes for over a decade. Legitimate link building focuses on quality, relevance and editorial value. Our SEO deliverables breakdown explains what real authority work involves and why it costs more than people expect.
4. No real questions about your business
A serious agency asks about your goals, services, target areas, margins, lead sources, current performance and competition before proposing anything. If they pitch a package without understanding your business, they're selling a template, not a strategy.
5. Vague monthly deliverables
'Ongoing optimisation.' 'Monthly SEO work.' 'Authority campaign.' These sound like services, but without defined scope they're just labels and the retainer becomes impossible to evaluate. Professional presentation does not equal professional delivery, accepting vague deliverables because the agency 'seems professional' is the single most common way businesses end up here.
6. No access to your own accounts or data
Your domain, hosting, CMS, GA4, Search Console and ad accounts should always be yours, an agency gets access, never ownership. If an agency builds your site on their hosting, controls your domain or won't give you admin access to your analytics, you're one disagreement away from losing everything. You should know exactly what you own and what you're renting.
7. Lock in contracts with weak transparency
Long contracts aren't automatically bad, a 6 month initial term with clear deliverables and a fair notice period can be reasonable. The red flag is the combination: long lock in plus vague scope plus poor reporting plus unclear exit terms. That combination traps you with no way to evaluate performance or leave.
8. Reports full of vanity metrics
Keyword counts. Impressions. Domain Authority. 'Visibility scores.' Traffic spikes on irrelevant posts. If the report never connects work to leads, enquiries or revenue, it's likely smoke. Our guide to honest ROI measurement explains which metrics matter and which are noise.
9. Suspiciously cheap pricing for full SEO
Proper SEO takes specialist time: strategy, technical work, content, outreach, reporting. 'Full service SEO' for $299/month means corners are being cut, usually via templates, automation or junk links. Understanding what SEO is worth for your business helps you calibrate what realistic pricing looks like and market rate pricing shows what each budget tier genuinely buys.
10. They cannot explain what has actually been done
Ask your agency 'what changed this month?' If the answer is vague, deflective or jargon heavy, that's a problem. A legitimate agency explains actions, rationale and next steps in plain English. If they cannot clearly explain what they're doing, why and how progress gets measured, that is not sophistication. It's a warning sign.
Pricing patterns and what they usually mean
The quote | What it usually means |
|---|---|
$99 one time 'SEO fix' | An automated audit PDF and some meta tags. Harmless at best, the upsell funnel starts here. |
$299 to $500/month 'full service' | 2 to 3 hours of templated activity. Not enough time to move competitive rankings, priced to be too cheap to question. |
'Pay per ranking' or 'pay on results' | Cherry picked easy keywords, risky tactics or attribution arguments. The rare honest versions have very detailed fine print, read it. |
$2,000/month with no scope document | Possibly excellent, possibly nothing. The price says senior time, only the scope says whether you get it. |
$5,000/month pitched in the first call | Enterprise pricing needs enterprise justification: competition analysis, defined deliverables, named team. Without those it's just a bigger number. |
Price alone is never the verdict. Price against scope, hours and evidence is. The consistent tell across every dodgy pattern: the number is specific and the work is vague.
The excuses catalogue
Every stalled campaign produces explanations. Some are legitimate, the same words from a dodgy provider mean something different. Here's how to tell them apart:
The excuse | When it's legitimate | When it's a red flag |
|---|---|---|
'It was an algorithm update' | They name the update, show what moved, explain the diagnosis and adjust the plan | It's the third update blamed this year and the plan never changes |
'SEO takes time' | Said upfront with a timeline, while leading indicators (impressions, long tail rankings) visibly improve | Said at month 8 with nothing measurable moving and no explanation of what 'time' is building |
'It's a competitive market' | Backed by actual competitor analysis: who outranks you and specifically why | Used as a blanket shrug with no names, no gaps identified, no strategy response |
'We're building foundations' | The foundations are listed: fixes shipped, pages restructured, tracking live | Month 6 and the foundations are still invisible and unlisted |
'Rankings fluctuate' | True for individual keywords day to day, said alongside a stable overall trend | Used to dismiss a sustained decline nobody has investigated |
The pattern: legitimate explanations come with evidence and a change of plan. Excuses come alone and they come repeatedly.
Real dodgy tactics businesses still get hit with
These aren't theoretical. They happen to Australian businesses every week: cold emails claiming 'critical SEO errors' (automated, generic, designed to create panic), fake urgency around 'Google penalties' (real penalties are rare, verify in Search Console before panicking), agency created microsites and doorway pages that funnel traffic they control, so the traffic vanishes when you leave, bulk directory spam sold as 'citation building', charging monthly for reports while barely touching the site, and content nobody asked for on random topics, published purely to show activity.
The 2026 vintage: new flavours of dodgy
The classics above are evergreen, but the industry's grifters update their inventory. Four newer patterns worth recognising:
AI content mills at scale. Forty 'SEO articles' a month at a price no human review could survive. Google's guidance targets mass produced content made primarily for rankings and sites running these programs increasingly get caught in core updates. Volume is the tell: nobody reviews forty articles properly for $600.
GEO and 'AI search' snake oil. 'We'll get you recommended by ChatGPT for $500/month.' Visibility in AI answers is a real emerging discipline, but it's earned the same way as everything else: genuine expertise, clear pages, real mentions. Nobody has a hotline to the models and anyone selling guaranteed AI citations is selling the 2026 version of guaranteed rankings.
AI polished audit spam. The old 'critical errors on your website' cold email, now fluently written and personalised by AI. Better grammar, same scam. The tell is unchanged: they diagnosed you before ever seeing your analytics.
Review gating tools sold as compliant. Software that routes unhappy customers away from public reviews, marketed as 'reputation management'. The ACCC has warned specifically about suppressing negative reviews, a tool doesn't launder the practice.
Who gets targeted hardest
Cold outreach dodgy SEO disproportionately hunts trades and healthcare, where owners are busy, budgets exist and technical verification is rare. If that's you, the honest playbooks for SEO for trade services and healthcare practice visibility show what the real work looks like, which is the best vaccine against the fake version. Venue owners and professional firms get their own flavours (fake directory renewals and 'exclusive' lead gen sites respectively), hospitality search presence and professional services SEO strategies cover the legitimate versions.
Anatomy of a dodgy monthly report
The monthly report is the one artefact every client holds, so it's where the difference between real and fake work is most visible. Walk through the typical fluff report section by section:
Report section | The fluff version | The real version |
|---|---|---|
Opening summary | 'Another strong month of SEO growth!' regardless of the data | Three sentences: what was done, what moved, what's next |
Traffic | A big line graph, no segmentation, includes bot and brand traffic | Organic non brand traffic to money pages, with the trend explained |
Rankings | 40 keywords, half of them your own business name, all green arrows | The 10 terms that produce enquiries, wins and losses both shown |
Work completed | 'Ongoing optimisation and monitoring' | Dated list: pages changed, content published, fixes shipped, links earned with URLs |
Leads | Absent entirely | Forms, calls and their sources, reconciled against your own records |
Next month | 'Continue optimisation efforts' | Named priorities with reasons, carried over honestly if delayed |
One more tell that costs nothing to check: compare this month's report with one from four months ago. If entire paragraphs are identical, you're reading a template and templates don't do SEO.
Your actual legal protections in Australia
Businesses assume they have no recourse against a dodgy provider. That's not quite true and knowing the landscape changes how confidently you negotiate:
Misleading and deceptive conduct rules apply to B2B. The Australian Consumer Law's prohibition on misleading conduct in trade or commerce protects business customers too. An agency that claimed guaranteed rankings or invented case study results to win your contract may have crossed that line.
Unfair contract terms cover small business standard form contracts. If you signed the agency's standard contract and your business is under the thresholds, terms that create a significant imbalance (unilateral price rises, impossible exit clauses, the agency keeping everything on termination) can be challenged as unfair and penalties for including them now exist.
Your assets are yours regardless of the fight. Content you paid for under an agreement giving you ownership, your domain registration, your data: leaving a provider doesn't forfeit them, whatever the exit conversation implies.
None of this makes lawsuits sensible for a $1,500 retainer dispute, the practical power is in the letter that mentions these things accurately. Get real legal advice for real disputes. The bigger point stands: 'it's just marketing services' does not put a provider beyond the law.
Ten questions dodgy agencies hate
Keep these in your pocket for any sales call. None of them are hostile, all of them are clarifying, which is exactly why they work: How many hours does this retainer buy and at whose seniority? Can I see last month's report for a similar client, redacted is fine? Which three links did you earn for a client recently, actual URLs? What would make you tell a client to stop SEO? Who writes the content and who reviews it? What happens to everything if we part ways? What did you deprioritise for a client last quarter and why? Which of my competitors would you study first? What's a realistic month 6 for a business like mine? And what do you need from us to make this work? Fluent, specific answers to seven or more: proceed. Deflection on half: you've learned what the retainer would feel like.
What a legitimate SEO proposal looks like
A proper proposal makes you feel informed, not confused. It includes: clear scope (what's included, what's not, how often, who does what), evidence they actually listened to your goals and market, realistic timelines, clear priorities with reasons, deliverable detail specific enough to evaluate progress against, a measurement approach covering leads as well as rankings, access and ownership confirmation and transparent pricing. Our guide to choosing an SEO agency covers the full evaluation process, including the reference calls and contract terms.
Area | Legitimate proposal | Dodgy proposal |
|---|---|---|
Rankings | Sets realistic expectations | Guarantees page one |
Strategy | Explains priorities clearly | Hides behind jargon and mystery |
Backlinks | Quality and relevance focused | Quantity promises ('500 links/month') |
Reporting | Ties work to business outcomes | Vanity metrics and graphs only |
Access | Client owns all accounts | Agency controls everything |
Deliverables | Clear, specific, measurable | Vague, fuzzy, undefined |
Business context | Asked about your goals and market | Pitched a package without questions |
Pricing | Transparent and justified | Suspiciously cheap or hidden extras |
How to read a case study like a sceptic
Five checks expose most inflated case studies:
The baseline. 'Traffic up 400%' from 50 visits a month is 250 visits. Percentages without starting numbers are decoration.
The timeframe. Over what period? Compounding over three years is normal, the same graph compressed to imply three months is marketing.
The metric. Traffic and rankings are inputs. Did leads, calls or revenue move? If the case study never mentions money, ask why.
The attribution. Was anything else running: ads, a rebrand, a new location, seasonality? Honest case studies name the other variables.
The relevance. A national ecommerce win says nothing about ranking a Ballarat plumber. Ask for something in your industry and size bracket.
How to check if your current agency is actually doing anything
Things you can check right now, no technical skills required: Have key pages actually been updated recently? Is there a written list of completed work from the last 3 months? Are you getting more relevant enquiries from organic search? Have identified technical issues actually been fixed? Is new content strategic or random? Is your Maps visibility strengthening? Can your agency explain what changed and what's next?
Simple tests to run: Ask for the last 90 days of completed actions in writing. Ask which specific pages were worked on and what changed. Ask what's different in GA4 or Search Console compared with 3 months ago, then check the projected numbers yourself against what you're paying. Ask how recent work ties back to your business goals.
SEO shouldn't feel invisible forever. Some results take time, the work itself should be visible from month one. If you can't see evidence of action after months of payments, something is wrong.
Red flags in reporting, communication and account management
The slow burn warning signs: months pass with no strategy adjustment, every monthly meeting sounds identical, reporting is deliberately hard to interpret, direct questions get deflected, performance issues are always Google's fault, and nobody can tell you what the next priorities are. A legitimate agency makes you feel informed, clear on priorities and confident in what's happening. Not confused, dependent or shut out.
Red flags by relationship stage
The tells change shape as the relationship ages. Same provider, different disguises:
Stage | What dodgy looks like here |
|---|---|
Sales call | All confidence, no questions. Your industry knowledge assumed rather than demonstrated. Price quoted before they've seen your analytics. |
Contract | Long term, vague scope, agency owns accounts, exit terms missing or punitive. The paperwork is where the trap is built. |
Onboarding | No access requests, no kickoff questions, no audit. Work 'begins' with nothing needing your input, which means nothing specific is happening. |
Months 2 to 4 | Reports arrive, site doesn't change. Every meeting is a re pitch of the strategy rather than an account of the work. |
Month 6+ | Excuses catalogue in rotation. Strategy identical to day one. Questions about specifics produce jargon or delay. |
Exit | Sudden fee to 'transition', access withheld pending 'process', content ownership newly ambiguous. How a provider behaves on the way out is who they were all along. |
Three DIY sniff tests (ten minutes, no tools)
The site: search. Search site:yourdomain.com.au in Google. Do the pages you're paying for actually exist and get indexed? Are there dozens of thin, near identical pages you never approved? Both answers matter.
The content read. Open the two most recent articles published under your name and read them aloud. Would you say those sentences to a customer? Do they contain a single fact specific to your business? AI mulch fails both within a paragraph.
The link list request. Ask for last quarter's link placements with URLs, then open three. Real sites with real readers or template blogs whose every post links to a different unrelated business? The second kind means your 'authority campaign' is a subscription to a link farm.
Ten minutes, once a quarter. If a provider knows you run these checks, the checks mostly never find anything, which is precisely the point.
Green flags: what good actually looks like
The inverse list matters too, because relentless suspicion has its own cost. Signs you've found a keeper: they've told you 'no' at least once (wrong keyword, wrong priority, wrong spend), they volunteer bad news before you find it, the reports get shorter and clearer over time, not longer and denser, they ask for things (approvals, expertise, photos) because real campaigns need client input, their recommendations sometimes reduce your spend, and you could explain your own SEO strategy to someone else, because they've made you understand it. That last one is the strongest signal in the industry.
What to do if you think your SEO agency is dodgy
Don't panic. Do take these steps in order: 1. Gather your documents: proposal, contract, reports, invoices, access details. 2. Check ownership: confirm admin access to your domain, CMS, GA4, Search Console and ad accounts, request anything missing in writing. 3. Ask for a concrete list of the last 90 days of actions. 4. Review your contract: notice period, what happens to deliverables, what you own. 5. Get a second opinion before cancelling, sometimes the work is fine and the communication is broken, other times the work is genuinely substandard. 6. Back up everything: export analytics data, download Search Console reports, copy all content and credentials.
If your agency has access to customer data through your website or analytics, the OAIC's Australian Privacy Principles are worth reviewing too: understand what data they can touch and confirm your privacy obligations are still being met while you sort the relationship out.
The red flag checklist
# | Red flag to score yes or no |
|---|---|
1 | Guaranteed rankings or page one promises |
2 | Vague deliverables with no defined scope |
3 | Poor transparency (can't explain what's been done) |
4 | No access to my own website, analytics or data |
5 | Backlink quantity promises ('500 links/month') |
6 | No focus on conversions, leads or business outcomes |
7 | Cannot clearly explain their strategy or approach |
8 | Long lock in contract with weak scope and no clear exit |
9 | Suspiciously cheap pricing for 'full service SEO' |
10 | Reports full of vanity metrics with no commercial interpretation |
0 to 2 yes answers: probably fine, keep assessing with the verification habits above.
3 to 5: have the direct conversation this month, with the specific gaps written down.
6 or more: start the exit steps. The relationship is costing more than money.
What a dodgy provider actually costs: a worked example
The retainer is the visible cost. Here's the full bill, using numbers we see regularly in cleanup work:
The direct spend: $800/month for 14 months of 'full service SEO' before the owner pulled the pin. $11,200 paid for templated suburb pages, junk directory links and reports nobody could interpret.
The cleanup: auditing what was done, removing or rewriting 30 thin pages, reviewing the link profile, rebuilding tracking that was never actually configured and recovering account access held under the agency's email. Roughly $4,000 to $6,000 of remediation before any forward progress begins.
The invisible cost: 14 months of compounding handed to competitors. The business that started honest work the same month is now 40 plus pages, dozens of reviews and a year of authority ahead and that gap doesn't close at the same speed it opened.
The trust cost: the owner now believes 'SEO doesn't work', which means the channel that fits their business best stays unused for another two years. This is the industry's real damage and it's why this article exists.
Total: roughly $17,000 in cash plus a year of position, to end up behind where doing nothing would have left them. Every verification habit in this guide costs minutes against that arithmetic.
What we recommend at Elev8d
We wrote this guide because cleaning up after dodgy SEO is a regular part of our intake and it's the most expensive way to buy SEO twice. How we approach search engine optimisation in Melbourne is the inverse of every flag above: no lock in contracts, full client ownership of every account and asset, named senior people doing the work and reporting that leads with enquiries rather than impressions.
If you're mid contract and uneasy, don't cancel in a panic, run the checklist, ask for the 90 day work log and judge the response. Providers doing real work answer easily. The other kind get defensive and that answer counts too.
FAQs
How do I verify an SEO penalty claim?
Open Search Console and check Manual Actions under Security and Manual Actions. If it's empty, there is no manual penalty, whatever the cold email says. Broader ranking drops from algorithm updates are not penalties, they're competition and they need diagnosis, not panic.
Are all cheap SEO providers dodgy?
No. A freelancer with low overheads doing a narrow, well defined scope can be excellent value. The flag isn't the price, it's the mismatch between price and promise. $400/month for Business Profile management: plausible. $400/month for 'complete SEO domination': not.
My agency reports rankings improving but leads haven't changed. Dodgy?
Possibly just incomplete. Rankings for the wrong terms produce traffic that never buys and rankings for the right terms take time to translate into calls. Ask which terms improved and what the search intent is. If they're ranking you for terms nobody commercial searches, the strategy is the problem even if the work is real.
Can I report a dodgy SEO agency in Australia?
For misleading claims or conduct, the ACCC accepts reports through its website and state consumer affairs bodies handle contract disputes. Realistically, most situations resolve faster through the exit steps above: secure your assets, document everything, leave properly and warn your network.
What if the dodgy agency built my website too?
Move carefully. Confirm who owns the domain (check the registrant, not who pays the invoice), get a full site backup before any conversation and check whether the CMS and hosting accounts are yours. If they own the domain, prioritise transferring it above everything else, a domain hostage situation is the worst version of this problem.
Is white label or outsourced SEO automatically dodgy?
Not automatically, plenty of legitimate agencies use specialist contractors for content or technical work. It becomes a red flag when it's hidden: you were sold senior local expertise and the work is templated offshore production nobody reviews. The question that resolves it: 'who exactly does the work on our account and who checks it?' Honest operators answer without flinching.
The agency ranks its own site for my service keywords. Problem?
Sometimes. Some providers run their own lead generation sites in your industry, meaning your retainer funds a competitor and if you leave, the site you helped rank keeps selling your leads to whoever pays next. Ask directly whether they operate lead gen properties in your vertical and area. It's a fair question with an easy honest answer.
Is a Google Partner badge proof the agency is legitimate?
It's proof of Google Ads spend thresholds and certifications, which is genuinely something, but it says nothing about SEO at all: the Partner program relates to advertising, not organic search. There is no Google certification for SEO and Google's own hiring guidance says as much. Treat the badge as one data point about their paid search operation and keep every SEO question in this article on the table.
The agency ranks number one for 'SEO Melbourne'. Doesn't that prove they're good?
It proves they can rank a site in a market they understand better than any client's, with unlimited internal resources and years of head start. It's a genuinely positive signal, better than invisibility, but it's their best case scenario, not yours. The more useful evidence is client results in markets like yours, which is exactly what the case study checks above are for. Plenty of excellent boutiques rank modestly for agency terms because their senior hours go to clients, plenty of mediocre operators rank well for them because that ranking is their sales funnel.
How long should I give a new agency before judging?
Judge the work immediately and the results at 4 to 6 months. The work (audits delivered, pages changed, tracking fixed) is visible in weeks, anyone invisible for 90 days has already answered the question. Results follow the work on a delay, which is exactly why you evaluate them separately.
Next steps: pick your path
Vetting a new provider? Run their proposal against the legitimate versus dodgy table, then use the full 12 question process before signing anything.
Worried about your current one? Score the checklist honestly, request the 90 day work log and give the response the weight it deserves.
Want a second opinion? Send us the proposal or monthly report and we'll tell you what looks real, what looks vague and what we'd ask next. Straight assessment, no pitch, even if the verdict is 'your agency is fine'.
Sources and further reading
ACCC: Advertising and promotions - Substantiating claims, genuine reviews and transparent dealings.
Google Search Central: Do you need an SEO? - Google's own hiring guidance, including its warning signs.
OAIC: Australian Privacy Principles - Your obligations when providers can access customer data.
Australian Cyber Security Centre: Learn the basics - Caution with unsolicited 'problem' contacts and account security.
General information only. Rules vary by situation, particularly around advertising claims, privacy, reviews and consumer law. If you're unsure about compliance, get professional advice.
