SEO Agency Red Flags: 10 Costly Mistakes to Avoid
By Istiak Ahmed Soikot, Founder and CEO, Rank OG
Key takeaways
- SEO agency red flags are warning signs that separate honest providers from ones that waste your money or damage your site, with Google naming the biggest ones: guaranteed rankings, cold outreach, secrecy about methods, and link schemes. A guaranteed number one ranking is the first red flag, since it signals the agency misunderstands search or plans penalizable tactics.
- Walk away from claims of a special relationship with Google or priority submission, since Google never accepts money to include or rank sites.
- Demand to see exactly how links are built and where they come from: quoted link counts, private networks, and hidden placements carry the heaviest penalty risk, and you should never have to link to an SEO.
- Do not buy special AI search files or guaranteed AI mentions, since Google says it does not use new machine-readable files or markdown to appear in search, and standard SEO best practices still matter for AI features.
- During the audit, grant only read-only Search Console access, keep your domain, website, analytics, and Search Console registered in your name, and require reports that tie work to traffic, leads, and revenue rather than vanity metrics.
SEO agency red flags are the warning signs that separate honest providers from ones that waste your money or damage your site. Google itself names the biggest ones: guaranteed rankings, cold outreach, secrecy about methods, and link schemes. Learn all ten before you sign anything.
This guide draws straight from Google’s own hiring guidance and spam policies.
Can an SEO agency guarantee you the number one spot on Google?
No. Google states it plainly: “No one can guarantee a #1 ranking on Google.” Rankings depend on the algorithm, your competitors, and hundreds of signals no vendor controls. This is the first of the SEO agency red flags because a guarantee is not confidence, it is a sign the agency either misunderstands search or plans to use tactics that get your site penalized.
Honest agencies commit to deliverables, quality standards, and reporting. Dishonest ones promise the outcome they cannot control: “first page in 30 days” or “number one for your keywords.” Google adds that if an SEO guarantees first place during an audit, you should find someone else.
What does it mean when an agency claims a special relationship with Google?
It means you should leave. Google’s hiring guide says to beware of SEOs that “claim to guarantee rankings, allege a ‘special relationship’ with Google, or advertise a ‘priority submit’ to Google.” Google never accepts money to include or rank sites, and organic results cost nothing. There is no insider track. Anyone selling one is selling fiction.
Should you trust SEO agencies that cold-email you?
Be very skeptical. Google’s hiring guide says: “Be wary of SEO firms and web consultants or agencies that email you out of the blue.” It even quotes a real spam email Google itself received. Legitimate providers win business through reputation, referrals, and visible work, not bulk outreach.
What if the agency will not explain what it will do?
That is one of the clearest SEO agency red flags. Google advises: “Be careful if a company is secretive or won’t clearly explain what they intend to do.” Ask for explanations, because Google holds you responsible for the actions of any companies you hire, and deceptive work on your behalf can get your site removed from Google’s index.
Listen for the phrases that hide vagueness: “proprietary methods,” “secret sauce,” “trust the process.” Real SEO is not a trade secret. The principles are public, and the value is in execution. Secrecy about methods is one of the most reliable SEO agency red flags, because an honest agency can tell you, in plain language, what it will change on your site and why.
How do you spot dangerous link building before it hurts your site?
Ask one question: “Exactly how do you build links, and which sites will they come from?” Then check the answers against Google’s spam policies. Link spam includes buying or selling links for ranking purposes, excessive link exchanges, automated link creation, low-quality directory links, and optimized links dropped into forum comments.
Red flag answers include quoted link counts as a selling point, “private networks” of sites, and no list of where links come from. Google warns: “You should never have to link to an SEO,” and says to avoid link popularity schemes or submission to thousands of search engines. Of all the SEO agency red flags, this one carries the heaviest penalty risk, so check it before signing, not after.
Should you buy the special AI search files and GEO hacks agencies sell?
This is one of the newer SEO agency red flags, and Google has addressed it directly. In its official guide on optimizing for generative AI features, Google says: “You don’t need to create new machine readable files, AI text files, markup, or Markdown to appear in Google Search (including its generative AI capabilities), as Google Search itself doesn’t use them.”
Google also says standard SEO best practices still matter for AI features, and that “seeking inauthentic ‘mentions’ across the web isn’t as helpful as it might seem.” When a proposal sells llms.txt files or guaranteed AI mentions as line items, you are paying for things Google says do not work. Ask vendors whether their AEO or GEO advice matches Google’s official AI guidance, and watch the reaction.
What access should you give an agency during the audit?
Read-only Search Console access, and nothing more. Google’s hiring guide is explicit: if an SEO offers to do an audit, “only grant read access to Search Console (at this stage, don’t grant them write access).” Your domain, website, Google Business Profile, analytics, and Search Console should be registered in your name, with the agency added as a user. Put that in writing before work starts.
How do you know whether reports show real work or vanity metrics?
Ask how the agency measures success, then look at what the reports tie to your business. Google’s hiring guide lists “What kind of results do you expect to see, and in what timeframe? How do you measure your success?” among the questions to ask every candidate. Reports that show only keyword positions for obscure terms or raw impression counts, without connecting anything to traffic, leads, or revenue, are activity theater.
Honest reporting shows what changed on the site, what moved in search, and what that meant for the business. Vague reports are quieter SEO agency red flags than a penalty, but they cost you just as much over a year of retainers. If the agency only surfaces when the invoice is due, that silence speaks for itself.
What contract terms should make you pause?
Long lock-in periods with no performance review point and punishing exit fees. SEO takes time, so a reasonable initial term is normal, but a year-long contract with no way to evaluate progress is a trap. Ask: can I leave after the initial term? What happens to my data, accounts, and content if I cancel? Are there early termination fees?
Pressure to sign fast is part of the same pattern. “This price expires Friday” is a sales tactic, not a business reality. A serious agency answers your questions, gives you time to check references, and puts deliverables and exit terms in writing.
How do you check an agency’s references and past work?
Google’s hiring guide gives you the script: ask for examples of previous work and success stories, and ask past clients whether the SEO provided useful service, was easy to work with, and produced positive results. Then verify. Look at the client sites yourself and check whether the claimed rankings match what you can see.
Two things kill a candidacy fast. First, anonymous proof: a logo wall, a tool-generated score, or testimonials you cannot trace back to a real business. Second, defensiveness when you ask basic questions. Classic SEO agency red flags like these tell you what the working relationship will feel like before you pay for it.
Red flags versus green flags at a glance
Use this table when you compare proposals side by side. One of these SEO agency red flags alone may be a misunderstanding, but several together describe how the agency actually operates.
| Area | Red flag | Green flag |
|---|---|---|
| Promises | Guaranteed number one ranking or first-page placement in weeks | Commits to deliverables, standards, and realistic timelines |
| Google claims | “Special relationship” with Google or “priority submit” | Says rankings cannot be bought and cites official guidance |
| Outreach | Cold spam email criticizing your site in general terms | Found through reputation, referrals, or visible work |
| Methods | “Proprietary” secrets, will not explain what it will change | Explains every change in plain language, shares reasoning |
| Link building | Bulk link counts, private networks, no source list | Describes specific outreach tactics and discloses placements |
| AI search pitches | Sells special files or guaranteed AI mentions | Follows Google’s official AI optimization guidance |
| Access | Demands full control before the audit; owns your accounts | Read-only audit access; your accounts stay in your name |
| Reporting | Vanity metrics only, silent between invoices | Ties work to traffic, leads, and revenue; reports regularly |
| Contract | Long lock-in, heavy exit fees, pressure to sign fast | Clear deliverables, review points, clean exit terms |
| Proof | Anonymous logos and unverifiable claims | Named references you can call and sites you can check |
The verdict is simple. Green flags describe a process you can hold accountable. Red flags sell certainty no one can deliver, and the invoices keep coming long after the results stop.
What should you do if you already signed with a bad agency?
Picture a small business that paid six months of retainers and saw no new leads. The first move is an independent check: get read-only access to your own Search Console and analytics, list every change the agency made, and compare the reports against actual traffic and inquiries. If the agency resists sharing that information, the resistance confirms the problem.
Next, check what was actually built. Look for links from spammy sites, keyword-stuffed pages, or mass-produced content, the tactics Google’s spam policies penalize. Document everything, use the contract’s exit terms, and reclaim your accounts. If you believe you were deceived, Google notes that in the United States the Federal Trade Commission handles complaints about deceptive or unfair business practices, and you can file at the FTC website or call 1-877-FTC-HELP.
What to do next
- Run every proposal through the ten checks above and score them side by side.
- Ask each finalist Google’s core questions: past work examples, expected results and timeframe, how success is measured, and whether they follow Google Search Essentials.
- Ask who owns your domain, website, Search Console, and analytics, and get the answer in writing.
- Get a free SEO audit to see what honest diagnosis looks like, or talk to us about which engagement model fits your goals.
Frequently asked questions
Can any SEO agency guarantee first-page rankings?
No. Google states that no one can guarantee a number one ranking, and it warns against SEOs making that claim. Rankings depend on the algorithm, competitors, and signals no vendor controls. An agency can guarantee work quality, reporting, and effort, never positions.
Is it normal for an SEO agency to keep its methods secret?
No. Google advises caution when a company is secretive or will not clearly explain its plans. Legitimate SEO follows public principles, and honest providers describe what they will change and why. Secrecy usually hides tactics that break search guidelines, which can put your site at risk.
Are cheap SEO packages always a red flag?
Very low prices are a warning sign when they sit far below what real work costs. Quality SEO needs audits, content, technical fixes, and genuine outreach, all of which take time. Rock-bottom fees often fund automation, bulk links, or thin content that can trigger penalties.
Should an agency ask for full website access during the audit?
No. Google says to grant only read access to Search Console at the audit stage. Your domain, website, and analytics should stay registered in your name with the agency added as a user. Full control before diagnosis is a power grab, not a professional standard.
What should I do if my agency used spammy tactics on my site?
Document every change, reclaim your accounts, and audit for bought links, keyword stuffing, or mass-produced pages. Fix or remove what violates Google’s spam policies. In the United States, you can also report deceptive practices to the Federal Trade Commission through its website or by calling 1-877-FTC-HELP.
Sources
Google Search Central: Do You Need an SEO? Tips for Hiring an SEO
Google Search Central: Spam Policies for Google Web Search
Google Search Central: Guide to Optimizing for Generative AI Features on Google Search
Sources checked November 2026.
Choosing an SEO partner is one of the few marketing decisions that can harm your business if you get it wrong. A free SEO audit gives you honest findings with no obligation, and the contact page is the fastest way to reach a real expert who answers directly.



