How to Spot a Fake SEO Offer: Red Flags for Owners
Learn the warning signs of a fake SEO offer, the questions to ask before paying, and how to check any agency's claims against your own site.
If you run a small business, you have probably had an email, call or LinkedIn message from someone offering to "fix your SEO". Some come from honest freelancers and agencies. Many are mass-mailed templates that aim to sell you something you do not need, or something that could harm your site.
This guide shows you the warning signs, the questions that separate real providers from fake ones, and a simple way to check any claim against your own website before you spend money.
In short: No one outside the search engine can control where your pages rank, so any offer that promises a position, a timescale or "instant" results is a red flag. Real SEO work is explained in plain terms, can be checked by you, and does not depend on secrecy, pressure or tricks. Ask for specifics, check your own site first, and never hand over logins to a stranger.
Why fake SEO offers work
SEO sounds technical, results take time, and most owners cannot easily tell good work from bad. Scammers rely on that. They send a polished message, mention a few "problems" with your site, and add urgency.
Google's spam policies are a useful yardstick, because they describe what the search engine treats as manipulation.
The big red flags
Promised rankings or traffic
"Position one in 30 days" or "10,000 extra visitors a month" cannot honestly be promised. Search results change constantly, competitors act, and the search engine makes the final decision. A serious provider talks about the work they will do and how you will measure progress, not outcomes they cannot control.
"Instant" or very fast results
Changes need to be crawled, processed and assessed before they show in search. Anyone claiming dramatic change in days is either vague about what they mean or planning something risky.
Secret methods
You are entitled to know what will be changed on your site and why. "Proprietary techniques" with no explanation usually hide cheap, low-value work, or tactics that break search engine rules.
Pressure and fear
Watch for "your site has been flagged", "offer ends today" or "your competitor has just signed up". Real providers let you take time, read a proposal and ask questions.
Requests for passwords and admin access, up front
A genuine provider may eventually need access to your website or analytics. They should not need your main admin password before you have agreed the scope in writing. Offer a named user account with limited permissions that you can remove later, rather than sharing a login.
Link buying and "assured" backlinks
Buying or selling links to influence rankings, and excessive link-swapping schemes, count as link spam in Google's spam policies. Offers of "500 backlinks for a flat fee" usually mean low-quality links that can put your site at risk.
Fake offers at a glance
| What you hear | What it often means | What to do |
|---|---|---|
| "We can see errors on your site" (no details) | A template sent to thousands of owners | Ask for the exact URLs and issues |
| "Top position in weeks" | A promise nobody can control | Walk away |
| "Instant report, just send your login" | Fishing for access | Share nothing; run your own scan |
| "Cheap links for your site" | Often link spam | Decline; see Google's policy |
| "Secret method" | Nothing to show, or rule-breaking | Ask for a written plan |
| "Pay today or lose out" | Pressure tactic | Take at least a few days |
Phishing dressed up as SEO
Some "SEO offers" are not about SEO at all. They are phishing emails that try to get you to click a link, open an attachment or enter a password. Warning signs include a sender address that does not match the company's real domain, a generic greeting like "Dear website owner", unexpected attachments, and a link that goes somewhere different from the name shown.
Watch out: Never open an attachment or log in through a link in an unsolicited "SEO report". If you are curious, search for the company yourself and contact them through the website you find.
To learn how senders prove who they are, see SPF, DKIM and DMARC explained for small business owners. It will not catch every scam, but it explains why a message can look official and still be fake.
What a legitimate cold approach looks like
Not every unsolicited message is bad. A fair one comes from a named person with a real company website you can verify. It points to specific findings on specific pages, such as a missing title on your contact page, rather than "errors" in general. It makes no promises about rankings, asks for no passwords, and leaves you free to say no or reply next week.
What honest SEO work looks like
Good providers usually:
- Start by understanding your business, customers and goals.
- Describe the work in plain English and show examples of the changes they will make.
- Focus on things you can check: crawlability, page titles, useful content, site speed, structured data and a clean link profile.
- Report on measures that matter to you, such as enquiries and calls, not just rankings.
- Give you a clear scope, a clear price and a clear way to stop.
- Leave you owning your website, analytics and content.
Much of this your own team or developer can do too. Avoiding accidental blocking is covered in robots.txt mistakes that block Google from crawling your site, and local details in LocalBusiness schema markup.
Questions to ask before you pay
Send these in writing and judge the answers:
- What exactly will you change on my site? Good answers name pages and tasks.
- How will you measure success? Look for enquiries, calls or sales, not only rankings.
- Where will links come from, if you build any? Honest answers describe earning links, not buying them.
- Who will do the work, and where? Vague answers about "our team" deserve follow-up.
- What access do you need, and can I remove it afterwards? Limited permissions are reasonable.
- What happens if I stop? You should keep everything created for you.
- Can you explain a recent piece of work in plain English? If not, they may not understand it either.
Tip: Ask for the answers and any reference sites in writing, and check examples yourself. Anything you cannot verify should count for little.
Check your own site first
Before you respond to any offer, find out what is actually wrong with your site. Then you can tell whether a message describes real problems or invents them.
- Search for your business name. If your site shows up with the right title and description, basic indexing is working.
- Open Google Search Console, if you have it set up, and look at the indexing and performance reports. It is free and shows what Google reports about your site.
- Run the free single-page SEO scan at seo.lordevo.com to see page-level issues such as missing titles, descriptions and headings, explained in plain language. Then compare them with an outside provider's claims.
Our guide to reading an SEO audit shows how to decide what matters first, so a long list of warnings does not frighten you into buying unnecessary work.
What to do if you already paid
- Stop further payments and keep all emails, invoices and contracts.
- Contact your bank or card provider as soon as possible and ask about a dispute.
- Remove access: change passwords, delete any user accounts you created for them, and check your site for changes you did not approve.
- Review your links. If you suspect low-quality links were built, read Google's spam policies, and ask a qualified professional what to do next.
- Report it. Most countries have a consumer protection or fraud reporting body that accepts reports of scams.
Keeping your site software up to date and your accounts protected also makes it harder to misuse any access you gave. For WordPress sites, our hardening checklist is a good place to begin.
Key takeaways
- Treat promises of rankings, traffic or speed as a warning, not a selling point.
- Verify unsolicited "we found problems" messages against your own site.
- Never share main admin logins or open unexpected attachments from a cold approach.
- Do not buy links to influence rankings, or pay for "secret" techniques that you cannot see.
- Ask for a written plan, a clear scope and the right to stop at any time.
- Run a free scan and check Search Console before deciding what needs fixing.
FAQ
Is every unsolicited SEO email a scam?
Not necessarily, but most are generic mass mailings. Check the sender's real website, ask for specifics, and do not act on pressure.
Are free audits always a trap?
No. A free report can be a fair way to see what a provider can do. The concern is when it is vague, demands logins, or exists only to push a fast sale. Compare it with your own scan.
How long does real SEO take to work?
It varies by site, competition and the changes made, and nobody can give an honest exact date. Providers should explain what they expect to change and when you can start measuring it.
Should I hire someone at all?
It depends on your time and skills. Many fixes are manageable in-house, and a good freelancer or agency can help with the rest. Use the questions above to choose carefully.