Skip to content 
Most bad SEO is not a scam. It is ordinary incompetence, or a provider selling a bundle that does not fit your site, and you get poor value rather than defrauded. Worth separating, because the two need different responses.
Actual SEO scams have a mechanism. Someone has designed the arrangement so they get paid without delivering anything, and usually in a way you cannot easily check. Here are the specific cons, how each one works, and the checks that expose them before you pay.
SEO Scams at a Glance
- Guaranteed rankings: they choose the keyword, then deliver a top position on something nobody searches
- Fake urgency audits: automated reports flagging trivial issues as critical, sent cold
- Impersonating Google: calls about your listing being suspended or unverified
- Assets in their name: your Business Profile, Analytics or domain registered to them
- Brand-name rankings: reporting position one for your own business name, which you already had
- Invisible retainers: monthly fees with no verifiable output and reporting only from their tools
The single most protective habit: own every account yourself and add the provider as a user. Most of the cons below become impossible if you do that one thing.
On this page
A Scam Is Not the Same as a Bad Provider
This distinction gets collapsed constantly, and it matters because the remedy differs.
A bad provider genuinely tries and does poor work. They apply a checklist without diagnosing, they produce thin content, they miss things. You have overpaid for weak service, which is a commercial dispute, and the answer is usually to leave and hire better.
A scam is structured so nobody can check. The metric is chosen to be meetable, the accounts are held where you cannot see them, the work is unverifiable, or the pitch contains a claim its author knows to be false. That is not poor service, it is deception, and there is a reporting route for it.
The tell is not quality. It is verifiability. Ask yourself whether you could prove the work happened if you had to. If the arrangement is built so you cannot, that design is the thing to worry about, regardless of how the results look.
The Cons, and How Each One Works
1. The Guarantee, Where They Choose the Keyword
The pitch: guaranteed first page, or guaranteed top three, sometimes with a refund promise.
The mechanism: the guarantee applies to keywords the provider selects. They pick phrases with almost no search volume, or long strings nobody would ever type, or your own brand name. You get a report showing position one, the guarantee is technically met, and no additional customer ever arrives.
Google’s documentation on hiring an SEO states plainly that nobody can guarantee a number one ranking, and warns specifically against providers who claim to guarantee rankings, allege a special relationship with Google, or advertise a priority submission route. None of those three things exist.
The check: ask which exact keywords the guarantee covers, in writing, before signing. Then look up their search volume yourself. A guarantee on terms you chose, with real volume, is a different proposition, and almost nobody will offer one.
2. The Cold Audit With Manufactured Urgency
The pitch: an unsolicited email or call saying they have found critical errors on your site, often with a PDF attached listing dozens of problems in red.
The mechanism: the report is machine-generated in seconds from a free tool and sent to thousands of businesses. The “critical errors” are typically trivial or entirely normal: missing meta descriptions, images without alt text, a handful of pages not indexed for perfectly good reasons. The urgency is manufactured to shortcut your judgement.
Google addresses this directly, comparing unsolicited SEO email to any other spam and advising the same scepticism. It also notes that it does not evaluate or endorse third-party SEO tools, and that those tools have no access to its internal ranking data, so a tool’s score is not a verdict on anything.
The check: ask them to explain, in plain language, why one specific flagged item is costing you money. A real practitioner can. A generated report cannot, because nobody read it before sending it.
3. Impersonating Google
The pitch: a call or email claiming to be from Google, or a Google partner, saying your Business Profile is unverified, about to be suspended, or needs urgent action. Sometimes a fee is requested to “verify” or “fix” it.
The mechanism: straightforward impersonation, exploiting the fact that most business owners do not know how Google actually contacts them. Verifying a Business Profile is free. Google does not phone you demanding payment to keep a listing live.
The check: never act on the call. Log in to your Business Profile directly and look at whether there is any actual notice there. If there is not, there is no problem. And never give anyone your Google account credentials, because a provider never needs them: they get added as a user on your profile instead.
4. Registering Your Assets in Their Name
The pitch: nothing. This one is not pitched, it just happens during setup while you are grateful someone else is handling it.
The mechanism: the provider creates your Google Business Profile, Analytics property, Search Console account, or even registers the domain, under their own ownership rather than yours. Leaving becomes expensive because they hold the assets. Some then charge a release fee, or simply stop responding.
This is the most damaging item on the list and the least dramatic-looking, which is exactly why it works.
The check: today, without waiting for a problem, log in to each account and confirm you are listed as owner and the provider is a user. If it is the other way around, that is the conversation to have this week.
5. Reporting Rankings You Already Had
The pitch: a monthly report showing strong positions and steady progress.
The mechanism: the tracked keywords include your business name, your own brand plus a service, and terms you already ranked for before they started. You would rank first for your own name whether or not anyone was working on the site. The report is technically accurate and describes nothing that was achieved.
The check: ask for the keyword list and remove every term containing your business name. Look at what is left, and at what those terms did compared with the baseline when work started. If nobody recorded a baseline, that omission is itself informative.
6. The Retainer Where Nothing Verifiable Happens
The pitch: ongoing monthly optimisation.
The mechanism: a fee is charged monthly, the reporting comes from the provider’s own dashboard rather than accounts you own, deliverables were never specified in numbers, and nothing on your site visibly changes. Any question is answered with something about algorithm updates and long timeframes.
The check: ask what changed on the site last month, specifically, with URLs. Real work leaves traces you can see in your own CMS. If nothing has changed on any page for two months, nothing is being done.
7. Link Schemes Sold as Authority Building
The pitch: a set number of high authority backlinks per month, often with impressive-sounding metrics.
The mechanism: links come from private networks, paid placements on sites that exist only to sell links, or bulk directory submissions. It can produce a short-term lift, which is what makes it saleable, and the risk lands on you rather than them. Google’s spam policies cover link schemes explicitly, and its guidance is blunt that you are ultimately responsible for what anyone you hire does on your behalf.
Google also states that you should never have to link to an SEO, which rules out the reciprocal-link version of this.
The check: ask for the last ten placements they made for another client, as URLs. Open them. If the sites have no real audience, no editorial standards and pages of unrelated outbound links, you are looking at a network.
8. Bait Pricing
The pitch: a headline monthly fee well below the market, sometimes with a discount that expires this week.
The mechanism: the entry price covers almost nothing, and the components that make SEO work, content, implementation, links, get billed separately once you are committed. The advertised figure was never the price.
The check: ask for a written list of what is excluded and what gets billed on top before signing. What is actually included in SEO packages decodes the usual line items, and how much SEO costs gives you a floor to sanity-check any quote against.
9. Case Studies That Cannot Be Verified
The pitch: impressive results with percentage increases and anonymised clients.
The mechanism: percentages with no starting number can describe almost anything. Four visits to twenty is a 400% increase. In the worst version the case studies are simply taken from someone else’s site, which is easier to check than most people realise.
The check: ask for a live URL of a site they worked on, and absolute numbers rather than percentages. Then search a distinctive sentence from the case study in quotation marks and see whether it appears on another agency’s website.
Checks That Expose Them in Minutes
None of these require any SEO knowledge.
| Check | What it catches |
|---|---|
| Log in to your own accounts | Whether you actually own your Business Profile, Analytics, Search Console and domain. Catches the asset-hijack con. |
| Strip brand terms from the keyword list | Rankings being reported that you already had. Catches the inflated-report con. |
| Look up the volume of any guaranteed keyword | Guarantees on terms nobody searches. Catches the guarantee con. |
| Ask what changed last month, with URLs | Retainers where nothing is happening. Catches the invisible-work con. |
| Open ten of their recent link placements | Private networks and paid link farms. Catches the link-scheme con. |
| Search a sentence from their case study | Copied or fabricated results. Catches the fake-proof con. |
| Ask for exclusions in writing | Bait pricing. Catches the price that was never the price. |
Any provider worth hiring answers all seven without hesitation, because for them the answers are simply facts. Reluctance is the finding, not the answer itself. For the broader version of this conversation before you hire anyone, how to choose an SEO company covers the questions worth asking and what a real answer sounds like.
If It Has Already Happened
Practical order, damage control before recrimination.
- Regain ownership of your accounts. Business Profile, Analytics, Search Console, domain registrar, hosting. This first, because it gets harder once a dispute starts.
- Revoke their access to everything, including any server or CMS credentials.
- Export your data before anything else disappears. Search Console history in particular, since you cannot recover it later.
- Document what you were promised. Proposal, emails, reports, invoices. A dispute you cannot evidence is a dispute you lose.
- Get an independent look at the site before changing anything, especially if links were bought. Removing things blindly can compound the damage.
- Report it if the conduct was deceptive. Google’s guidance points United States businesses to the Federal Trade Commission, and directs complaints against companies outside the United States to econsumer.gov. The contract terms that determine your position are covered in what should be in an SEO contract.
Recovery is usually possible. Bought links can often be dealt with, thin content can be replaced, accounts can be rebuilt. What you cannot recover is the time, which is the real cost.
Frequently Asked Questions
How do I know if my SEO company is scamming me?
Check verifiability rather than results. Do you own your own accounts, was a baseline recorded before work started, does the keyword list contain terms other than your brand name, and can they tell you what changed on your site last month with URLs. If the honest answer to several of those is no, the arrangement is built so you cannot check, and that is the finding.
Is guaranteed SEO always a scam?
Guaranteed rankings, effectively yes, because nobody controls Google’s results and Google says so directly. What can legitimately be guaranteed is the work: deliverables, timelines, reporting and compliance with published guidelines. The distinction is between guaranteeing effort, which is reasonable, and guaranteeing outcomes, which is not within anyone’s power.
Can SEO actually damage my website?
Yes, and this is the part people underestimate. Link schemes, mass automated content and careless technical changes can all get a site demoted or removed from search results. Google is explicit that the site owner carries responsibility for what a hired provider does. Limit access, get compliance with Google’s guidelines written into the agreement, and keep ownership of your own accounts.
Does Google ever call businesses about their listing?
Treat any call claiming to be Google about your listing as suspect, particularly if payment or your account credentials are requested. Verifying a Business Profile is free, and a legitimate provider is added as a user on your profile rather than needing your login. Check for notices by logging in to the profile yourself instead of acting on the call.
What should I do if an SEO holds my accounts hostage?
Google Analytics and Search Console can be recreated, though you lose the historical data, which is why exporting early matters. A Business Profile can be recovered through Google’s ownership request process. Domains are the hardest case and may need the registrar’s dispute process. Take advice on the specific situation, since the route depends on which asset and which platform.
Are cheap SEO services always scams?
No. Cheap and fraudulent are different problems. A narrow scope done honestly at a low price is fine. What makes a low price dangerous is buying a broad scope at a price that cannot possibly cover it, because the gap gets filled with templated work or bought links. Whether the spend makes sense at all is a separate calculation, covered in is SEO worth it for a small business.
The Honest Summary
Every con on this list depends on you not being able to check something. So the defence is not expertise, it is structure: own your accounts, record a baseline before anyone starts, insist on deliverables with numbers, and ask what changed last month with URLs attached.
Do those four and most of this becomes impossible to run against you, regardless of how little SEO you understand.
And if you are currently being pitched something and cannot tell which category it falls into, a second opinion costs nothing. If you want an SEO expert for hire who will tell you the proposal in front of you is fine and you should sign it, that is a perfectly likely outcome. Send me what you were pitched and I will tell you which of the patterns above it matches, if any.
Google references come from Google Search Central documentation: its guidance on hiring an SEO and its spam policies, both linked above. The reporting routes named are those Google itself directs businesses to.
