THE PUNCH LIST / SEO
How do I tell if an SEO company is a scam?
The straight answer
The tells are consistent: a guaranteed ranking or a promise of page one in thirty days, a cold call or email “from Google,” a report that shows positions for phrases nobody searches, an account or a website the agency keeps in its own name, a refusal to say what was done this month, and a contract that locks you in for a year while the results are supposed to take three. Google sells no ranking and certifies no SEO company, so any claim of either is false. An honest engagement tells you the plan, does the work on accounts you own, shows you the work monthly, and measures calls.
The Punch List / What to do, in order
- Ask “what will you do in month one, and what will I see in the report?” A real answer names pages, profile work, listings and measurements. A vague one names “optimization.”
- Ask who will own the website, the domain, the Business Profile and the ad accounts. If any answer is not “you,” walk.
- Ask for the Search Console and analytics access to be set up under your Google account, with the agency added as a user. Never the reverse.
- Ask what happens at the end: can you leave month to month, and do you keep everything? A twelve-month lock with a thirty-day results promise contradicts itself.
- Ask what they measure. Calls and forms from the site, positions for the searches customers make, the map pack from where customers are. Not “keywords ranked.”
- Hang up on any call “from Google” about your listing. Google does not cold-call. Report it if you like; it changes nothing.
- Before signing anything, run the free scan and the AI answer check yourself, so you know your own baseline and can tell later whether anything moved.
The twelve red flags
- A guaranteed ranking. Google sells no position and no agency controls it — Google’s own page on hiring an SEO warns against exactly that promise. A guarantee is either a lie or a phrase nobody searches.
- Page one in thirty days. Real local SEO shows in months, not weeks. Thirty days is possible only for a search with no competition, which is a search with no customers.
- “We are calling from Google.” Google does not cold-call, and it has no “partner” program that certifies SEO companies. The Google Partner badge exists for Google Ads management only and says nothing about SEO.
- Secret methods. There are no secrets. Anyone who will not explain what they do is either doing nothing or doing something that will get you penalized.
- A report of vanity phrases. Twenty “keywords on page one” that turn out to be your own business name and phrases nobody types. Ask for Search Console, where the real searches are.
- The website in their name. A site built on the agency’s account, a domain registered by them, a platform you cannot export from. When you leave, the site does not come with you — that is the point.
- The Business Profile they “manage” under their login. Same trick, worse consequence: you can lose the listing.
- Bulk directory submissions and link packages. Five hundred listings on sites nobody reads and a hundred links from sites built to sell them. The listings do nothing; the links can earn a manual action, which you will inherit after they are gone. The backlinks post is about cleaning up after exactly this.
- Blog posts by the pound. Eight generic articles a month, rewritten from somebody else’s, that no customer reads and no engine cites. Volume is not a strategy.
- A year-long contract for a month-to-month service. The lock-in is there because the results will not keep you.
- No conversion tracking. An agency that cannot tell you how many calls the site produced last month is not measuring the thing you are paying for.
- Silence. Reports that arrive late or not at all, a contact who changes every quarter, a “what did you do this month” that goes unanswered. The work is not being done.
Why the scams work
Because SEO is slow and invisible, and an owner cannot easily tell the difference between an agency that is doing real work that has not paid off yet and one that is doing nothing. Both look the same at month two. The scam relies on that gap: collect for six months, send a report of vanity phrases, and by the time the owner concludes nothing happened, the contract is half over and the agency has moved on to the next one.
The defense is not to demand results faster — that is what makes owners fall for the thirty-day promise — but to demand visibility into the work. Real work has artifacts every month: the pages written, the profile changes made, the listings fixed, the measurements taken from where the customers are. An agency that can show those is doing the work. One that cannot is not, whatever the report says.
The questions that expose them
- “What exactly will you do in the first ninety days? List it.”
- “Which searches are we targeting, and how many people in my area make them?”
- “Who owns the site, the domain, the profile and the ad accounts, and what happens to them if I leave?”
- “Will you set up Search Console and analytics under my account and add yourselves as users?”
- “How do you measure the map pack — from my office, or from where my customers are?”
- “How do you count calls and forms, and will I see them by source every month?”
- “What do you do about AI search — the answers Google, ChatGPT and the others give?” (An honest answer names the engines and describes measuring them by asking. A blank look means they have not noticed the last two years.)
- “Can I leave month to month?”
A good agency will answer every one of these without flinching, in writing, before you sign. That is the whole test.
What an honest engagement looks like
A baseline before any work: positions for your real searches, the map-pack grid, what the AI engines answer, and last month’s calls and forms. A written scope that names the work by month. Everything built on accounts in your name, and everything yours the day you leave. A monthly report that shows what was done, what moved — impressions and the specific searches in the early months, positions and calls later — and what is next. Month-to-month terms, because the results should be what keeps you. And a straight “no” when you ask for a guarantee, followed by an explanation of why nobody honest can give one.
That is what we do, and it is described on the SEO page in the same words, so it can be held against us.
The check / Every link, read by the rules · One a month per domain
Your domain. Every site linking to it, read by the rules.
Type your domain. Every site the index finds linking to it is read by the same written rules as our backlink audit — spam patterns, pages that link out to hundreds of sites, sitewide commercial anchors, bursts born the same week — and you get the count — how many fail outright, how many are borderline — with the reasons and five examples. Free, no sign-up. The result is on this page in under a minute.
Takes ten to twenty seconds. Every site the index finds linking to yours, read by the audit’s rules. One check a month per domain.
Reading the link index…
Why domains were flagged
The shapes, and the top tier
Want it done instead?
Ask us the eight questions. The answers are on the site already.
The scope is written, the accounts are yours, the terms are month to month, the report shows the work and the calls, and there is no guarantee — because there cannot be. The first call starts with your baseline: what Google and the AI engines say about you today, checked before we speak.
FAQ / Answers
Questions people also ask
Can an SEO company guarantee first-page rankings?
No. Google sells no position and no company controls its results. A guarantee is either false or attached to a phrase nobody searches. An honest agency guarantees the work, the schedule and the reporting, and measures the outcome in calls and positions for the searches customers actually make.
Is Google calling me about my business listing?
No. Google does not cold-call businesses about their listings, and it does not certify SEO companies. Calls claiming your listing is about to be removed, or offering to “verify” it for a fee, are robocalls from third parties. The Business Profile is free and managed by you at business.google.com.
What should an SEO report include?
What was done this month, listed; calls and forms from the site by source; positions for the searches customers make, tracked from where they are; the map-pack grid; what the AI engines answer; and what is planned next. A report that shows only “keywords on page one” without the calls behind them is hiding the number that matters.
Who should own my website and Google Business Profile?
You, always: the domain in your registrar account, the site’s source and hosting in your name, the Business Profile under your Google account with the agency added as a manager, and the ad accounts owned by you with agency access. Anything held in an agency’s name is leverage against you the day you want to leave.
Read next / The Punch List
More answers.
SEO / 5-minute read
How long does SEO take to work?
What moves in the first weeks, what takes a quarter, what takes a year, and why — for a local service business, with the signs it is working before the calls.
Read the answer
SEO / 8-minute read
How do I check for toxic backlinks, and what should I do about them?
Where to see every link to your site, the four patterns that can earn a manual action, what to do about each this week, and how to build the disavow file right.
Read the answer
SEO / 5-minute read
Why did my Google rankings drop, and how do I find the cause?
The one-hour diagnosis — was it the site, the profile, Google or a competitor, in that order — with the report to open for each. Most drops are not penalties.
Read the answerNEXT STEP
See what Google and the AI engines say about you — in a minute.
Tell us your trade and your city. Before we call, we check what the engines answer and who takes the calls today — so the first call is a straight answer on whether your market still has room.