SEO Agency Red Flags: Start With Their Rankings

Most business owners judge an SEO agency by its pitch deck. That is the one document the agency controls completely, so it tells you the least.

There is a better starting point, and it costs nothing. An SEO agency sells the ability to win search visibility. Its own website is the one project it runs with no client budget limits, no slow approvals and full control. If it cannot make progress there, the gap between promise and delivery is already on display.

This guide from IZI Digital Marketing shows you how to run that rankings test fairly and which SEO agency red flags carry real risk. It also covers what to do if you spot them after signing. It sits alongside our wider guide to choosing an SEO agency in Malaysia. In the video below, Google’s Search team explains how it recommends businesses interview and check an SEO before hiring.

PART 1 · DIAGNOSE

Does the SEO Agency Rank for Its Own Services?

IN BRIEFSearch the agency’s own service and city terms before you read its proposal. Visibility on page one or in Google Maps is not proof of skill, but a total absence is a warning. Our local SEO guide for Google Maps explains what that local visibility should look like.

Run the test the way a customer would. Open a private browser window so your own history does not skew results, then work through these checks:

• Service plus city searches. Try “SEO agency” plus the agency’s own city, then two or three narrower phrases, such as “SEO for clinics Petaling Jaya”. Note where the agency appears, if at all.
• Google Maps presence. A real local agency should have a verified Business Profile with genuine reviews, not five identical five-star posts from last week.
• Indexed pages. Type site: followed by the agency’s domain into Google. A handful of indexed pages from an “SEO expert” is odd.
• Its own content. Check whether the blog is useful and recently updated, or thin and copied.

Judge the test fairly. A new agency may not rank yet for “SEO agency Malaysia”, one of the most contested terms in local search. It should still show progress on narrower, long-tail phrases. The red flag is not a missing top-three spot. It is zero visible effort on the one site the agency fully controls.

BENCHMARK BRIEFING 1 OF 4

Which Own-Site Checks Reveal the Most About an SEO Agency?

IN BRIEFLong-tail rankings and dated, specific case studies reveal the most, because they are hard to fake. Award badges and follower counts reveal the least. Weigh each check by how easily it could be bought, and pair it with the questions in our guide to questions to ask an SEO agency.

Notice where the broad head term sits. Ranking for “SEO agency” alone is weaker evidence than it looks, because a few older domains or paid placements can crowd that result. A narrow phrase like “technical SEO for e-commerce KL” is harder to win without real skill. If an agency’s site is also slow, compare it with the thresholds in our Core Web Vitals guide.

PART 2 · DESIGN

What Are the Biggest SEO Agency Red Flags in a Sales Pitch?

IN BRIEFGuaranteed rankings, a claimed “special relationship” with Google, secret methods and link schemes are the pitch-stage flags Google itself warns about. Some other signals only need a follow-up question. Our general list of agency red flags covers warning signs across every marketing service.

Google’s own page on whether you need an SEO states plainly that no one can guarantee a number one ranking. It also warns against agencies that are secretive, email you out of the blue, or talk about link popularity schemes. Not all SEO agency red flags deserve the same reaction, though. Sort what you hear into three bins:

Guarantees deserve special attention because they often hide a trick: the agency picks obscure keywords nobody searches, then “guarantees” page one for those. Our breakdown of why SEO guarantees fail shows how to spot the swap.

BENCHMARK BRIEFING 2 OF 4

Which SEO Agency Red Flags Carry the Most Risk?

IN BRIEFLink schemes and full site access carry the highest risk because the damage lands on your domain, not the agency’s. Vanity reporting costs money but rarely harms the site. Our guide to white hat vs black hat SEO explains why the domain takes the hit.

The pattern is simple. Flags that touch your domain are worse than flags that touch your wallet. A bad contract costs money for a fixed period. Paid links can lead to a manual action that takes months to clear, as our guide to Google penalty recovery explains. Contract risks still matter, and our list of SEO contract red flags covers the clauses to strike out.

BENCHMARK BRIEFING 3 OF 4

When Do SEO Agency Red Flags Usually Show Up?

IN BRIEFMost warning signs are visible before you sign, but buyers tend to notice them only after month three, when reports fail to match enquiries. Checking early moves detection forward. Our guide to agency marketing reports shows what a useful month-three report contains.

The widest gap sits at the pitch and contract stages. That is the cheapest time to act, because walking away before signing costs nothing. Walking away at month six costs six months of fees plus any clean-up. Put your red-flag questions into a short written digital marketing RFP so every agency answers them before the contract, not after.

PART 3 · DEPLOY

How Do You Check an SEO Agency Before Signing?

IN BRIEFRun six checks in order: own rankings, references, read-only access, link methods, a sample report and exit terms. Each takes under an hour. Together they catch most SEO agency red flags before money changes hands. Compare the results against our SEO agency Malaysia selection guide.

Work through these steps with every agency on your shortlist, and keep the answers in one sheet so you compare like with like:

1. Run the rankings test: search three of the agency’s own service and city phrases in a private window, and screenshot the results.
2. Call two references: ask past clients whether the work was useful, easy to follow and produced results, as Google’s hiring guidance suggests.
3. Grant read-only access for any audit: Google advises giving Search Console read access only at the audit stage, never write access.
4. Get link methods in writing: ask exactly how links will be earned, and reject any answer involving networks, bulk directories or “guaranteed DA”.
5. Ask for a sample report: it should connect rankings and traffic to enquiries, not just list keyword positions.
6. Read the exit terms: confirm you keep your content, accounts and data if you leave, and how much notice is required.

If a technical fix list comes out of the audit, decide early who will actually implement it. Our comparison of technical SEO implementation by an agency or a developer helps you assign that work before it stalls.

BENCHMARK BRIEFING 4 OF 4

What Separates a Credible SEO Proposal From a Risky One?

IN BRIEFA credible proposal spends most of its pages on diagnosis and named deliverables. A risky one spends them on promises and ranking screenshots. Measure the balance before you judge the offer, and check the deliverables against our guide to monthly SEO deliverables.

Proposals are where many SEO agency red flags hide in plain sight. A quick way to spot them: count the pages. If promises outnumber pages about your own site, the proposal was written before anyone looked at your site. Ask for a revised version built on a real audit. An agency that refuses is telling you how the next twelve months will feel.

PART 4 · DRIVE

What Should You Do If You Spot Red Flags After Signing?

IN BRIEFProtect your site first, then your contract. Secure your accounts, ask for a full list of changes and links, and get an independent check before you decide to stay or leave. Our guide to switching SEO agencies covers the handover.

Finding SEO agency red flags mid-contract is stressful, but panic moves often cause more damage than the agency did. Take these actions in order:

• Secure ownership. Make sure you, not the agency, own your Search Console, Google Analytics, Business Profile and domain accounts. Remove access you no longer trust.
• Request a change log. Google notes that you are responsible for the actions of anyone you hire, so ask for every site change and every link built on your behalf.
• Check Search Console. Look at the Manual actions and Security issues reports. An empty report means there is time to fix things calmly.
• Get an independent view. A second opinion separates a slow campaign from a harmful one before you spend on either recovery or a new agency.

One common trigger for bad link buying is a pay-for-results deal that rewards quick rankings at any cost. If that is how your current agency is paid, read our review of performance-based SEO before you renew.

THE VERDICT

Test Their Site, Then Test Their Promises

The most useful SEO agency red flags check takes five minutes and needs no expertise: search for the agency’s own services. Missing visibility on long-tail, local phrases tells you more than any slide deck. Strong visibility is only the entry ticket, though. After that, walk away from guarantees and link schemes, probe secrecy and vanity reporting, and give audit access on a read-only basis.

Once an agency passes both tests, the remaining question is fit. Our guide to choosing an SEO agency Malaysia businesses can trust covers that final step, and our SEO services page shows what a diagnosis-first engagement looks like in practice.

FAQ

Frequently Asked Questions

1. What are the biggest SEO agency red flags?

Guaranteed rankings, link schemes and secrecy about site changes are the biggest. It depends on what touches your domain. Flags that could trigger a Google manual action, such as paid links, carry more risk than weak reporting or an awkward contract.

2. Should an SEO agency rank for its own services?

Yes, at least for narrow service and city phrases. It depends on the agency’s age and the term. A new agency may not rank for the broadest keyword yet, but zero visibility anywhere is a warning sign worth asking about.

3. Is it a red flag if an SEO agency guarantees first-page rankings?

Yes, in almost every case. It depends on what exactly is guaranteed. Google states that no one can guarantee a top ranking, so guarantees usually rely on obscure keywords or risky tactics that can harm your site later.

4. What access should I give an SEO agency for an audit?

Read-only access to Search Console is enough for an audit. It depends on the stage of the engagement. Google recommends withholding write access at the audit stage, and you should keep ownership of every account throughout.

5. Can I leave an SEO agency if I spot red flags mid-contract?

Usually, but check your exit terms first. It depends on the notice period and ownership clauses you signed. Secure your accounts and request a full change and link log before you give notice, so the handover stays clean.