Marketing Agency Due Diligence: A 15-Min Check

Most businesses spend more time comparing two air-conditioner quotes than checking the agency that will handle their marketing budget. That is not carelessness. It is because agency due diligence sounds like a legal job, with lawyers, audits and long forms.

It does not have to be. This guide from IZI Digital Marketing gives you a 15-minute agency check built on free public tools. Run it on every name before you send a digital marketing RFP or book a meeting. The short video below covers the red flags from a buyer’s point of view.

PART 1 · DIAGNOSE

What Is Marketing Agency Due Diligence?

IN BRIEFMarketing agency due diligence is checking that an agency is real, qualified and safe to trust with your accounts before you share budgets or data. For a buyer, it is a screening step, not an audit. It sits at the very start of choosing a digital marketing agency in Malaysia.

Search for “agency due diligence” and most results are about buying an agency in a merger, with balance sheets and client contracts. That is a different job. As a client, you are not buying the business. You only need to answer three questions before an agency earns a meeting:

• Is it a real, registered business? A company you can hold to a contract, with a registration number you can look up yourself.
• Can it do what it claims? Certifications, live work and reviews that match the pitch, not just a polished website.
• Will your assets stay yours? Ad accounts, analytics, domain and content owned by your business, with the agency added as a user.

How deep you go should depend on what you stand to lose. A small one-off project needs less checking than a year-long retainer that controls your paid media.

BENCHMARK BRIEFING 1 OF 4

What Can You Verify About an Agency in 15 Minutes?

IN BRIEFMore than most buyers expect. Five free public sources cover company registration, platform badges, live ad activity, reviews and the agency’s own marketing. None needs a login or a sales call. Together they answer the first question in any guide to hiring a marketing agency: is this agency what it says it is?

Three minutes per check is realistic once you know where to look. The last row matters most, and it is the only one that needs the agency’s help. A written answer beats a verbal promise, because you can attach it to the contract later.

PART 2 · DESIGN

How to Check a Marketing Agency, Minute by Minute

IN BRIEFWork through five three-minute blocks in a fixed order, starting with the cheapest check that can end the process. Registration first, ownership last. Write one line of notes per block so you can compare agencies side by side, the same way you would score them in an agency pitch process.

The order is deliberate. Each block can knock an agency out, so you run the fastest, most final checks first and never waste the later minutes on an agency that already failed.

How to run a 15-minute marketing agency due diligence check

Open a blank note, set a timer and give each block three minutes.

1. Minutes 0–3 — Confirm the company. Search the agency’s name or registration number on SSM e-Search. Check the status is active and that the name matches the one on the proposal and invoice.
2. Minutes 3–6 — Test the badges. If the agency shows a Google Partner badge, click it; a real one links to a live profile. Google says partners must keep a minimum optimisation score of 70% and checks this daily, according to the Google Partners FAQs.
3. Minutes 6–9 — Look for live work. Search two of its named clients in the Google Ads Transparency Center and the Meta Ad Library. Case studies with no ads running anywhere deserve a question.
4. Minutes 9–12 — Read the reviews. Sort Google reviews by newest. Look for repeated complaints about lock-ins, silence or missing reports, and note whether the agency replies calmly.
5. Minutes 12–15 — Send the ownership email. Ask in writing who will own your ad accounts, analytics, domain and content, and what happens to them if you leave.

The badge check is not about prestige. Our guide on whether agency certifications matter explains what they prove and what they do not.

BENCHMARK BRIEFING 2 OF 4

Which Failed Checks Should Rule an Agency Out?

IN BRIEFNot every failed check is equal. No registration or refusing account ownership should end the process at once. A missing partner badge or few reviews is only a question to ask. Weight each result by how hard it is to fix later, as covered in our list of agency red flags.

The scores follow one rule: how costly is this to undo after you sign? An unregistered seller leaves you with no one to hold to a contract. A missing badge costs you nothing if the team can show strong work in other ways.

PART 3 · DEPLOY

The Ownership Question Most Buyers Forget to Ask

IN BRIEFYour ad accounts, analytics property, domain and content should belong to your business from day one, with the agency added as a user. Ask in writing before any meeting. The answer shapes everything else, including the digital marketing contract terms you negotiate later.

Most checklists online ask about results, team size and industry experience. Those matter, but they are easy to answer well in a pitch. Ownership is different. It is a yes-or-no question, and the answer is hard to fake once written down.

Google Ads makes the point simple. Its access levels include Admin, Standard, Read only, Email only and Billing, so you can hold Admin and give the agency Standard access to run campaigns. Send the agency this short email:

• Ad accounts: “Will our Google Ads and Meta ad accounts be created under our business, with your team added as users?”
• Tracking: “Will we hold admin access to Google Analytics, Tag Manager and Search Console?”
• Web and content: “Is the domain, hosting and every page or post you write ours to keep if we part ways?”
• Exit: “What notice period applies, and what do you hand over when the contract ends?”

If paid search is in scope, add one more line: ask how the agency structures the first 90 days of Google Ads management. For a deeper channel-specific screen, see how to vet a Google Ads agency.

BENCHMARK BRIEFING 3 OF 4

What Does Skipping Due Diligence Cost Over a Year?

IN BRIEFThe real cost of a bad agency hire is time, not only fees. Problems tend to surface around month three, and notice periods, account rebuilds and a new search can push a clean restart past month seven. Reading what good agency marketing reports look like helps you spot trouble earlier.

In this model, the skipped check leaves five productive months out of twelve. The checked hire gets eleven. Fifteen minutes up front protects roughly half a year of marketing output, which matters far more than any single month’s fee.

PART 4 · DRIVE

After the 15-Minute Check: What Comes Next

IN BRIEFAgencies that pass move to your shortlist, get your brief and face deeper checks: a reference call, a meeting with the named team and a sample report. After signing, the same notes feed straight into marketing agency onboarding in the first 30 days.

The screen is the first gate, not the last. Once you have three agencies that passed, the next checks test the things public tools cannot show:

• One reference call per finalist. Ask a current client what happened in month three, and whether reports arrived on time without chasing.
• Meet the delivery team. Confirm the people in the pitch are the people on your account. Our list of questions to ask before signing works for any channel.
• Ask for a sample report. Remove the client name if needed, but look for leads and sales, not only clicks and impressions.
• Test the fit of the model. If the answers feel thin, compare against a freelancer or specialist using our guide to agency vs freelancer.

Keep your 15-minute notes in the same file as the brief and scorecard. When you sign, the ownership answers go straight into the contract, and your onboarding checklist starts with access already agreed.

BENCHMARK BRIEFING 4 OF 4

How Much Risk Does Each Level of Checking Catch?

IN BRIEFThe 15-minute screen catches most legal and ownership risk but little about working style. Reference calls fill the gap on delivery and reporting, and a paid trial is the only reliable test of results. Layer them in that order, then compare what passes against our guide to choosing an agency in Malaysia.

Read the table from left to right. The screen does its job on the risks that are hardest to recover from, and costs almost nothing. No level ever reaches 100%, which is why a short first scope with a review date still matters after every check has passed.

THE VERDICT

Fifteen Minutes Before Every Meeting

Agency due diligence works best as a habit, not a project. Run the same five checks on every agency before it earns a meeting: registration, badges, live ads, reviews and a written answer on ownership. Remove anyone who fails the first or the last, and turn softer failures into questions.

Then let the deeper checks do their job on the few names left. The buyers who get the most from an agency are rarely the ones with the biggest budgets. They are the ones who asked the plain questions early and kept the answers on file. If you want to see how a consulting-first provider approaches SEO services or paid media, put us through the same 15 minutes.

FAQ

Frequently Asked Questions

1. What is marketing agency due diligence?

It is the set of checks a business runs to confirm an agency is real, qualified and safe before hiring it. How deep it goes depends on the size of the contract. For most buyers, a 15-minute screen covering registration, badges, live ads, reviews and account ownership is the right starting point.

2. How do I check if a marketing agency is registered in Malaysia?

Use SSM e-Search with the agency’s name or registration number. What you look for depends on the result: the status should be active, and the name should match the proposal and invoice. If the agency will not share a registration number, treat that as a reason to stop.

3. Is a Google Partner badge required when choosing an agency?

No, but a claimed badge should be genuine. It depends on your channel mix: the badge matters most if Google Ads is central to the work. A missing badge is common for new or specialist firms, while a fake or expired badge is a serious warning sign.

4. Who should own the ad accounts when I hire an agency?

Your business should. The exact setup depends on the platform, but you should hold admin access to Google Ads, Meta, analytics and your domain, with the agency added as a user. Get this in writing before the first meeting and repeat it in the contract.

5. Can I skip due diligence if the agency came through a referral?

No, but you can shorten it. A referral tells you someone was happy, not that the agency fits your needs or ownership terms. Still run the registration and ownership checks; they take six minutes and protect you from the problems referrals rarely mention.