SEO Agency Red Flags: 8 Patterns to Watch For

The $14,775 HVAC Story Most Owners Recognize Too Late

BlitzMetrics published a case file in 2025 about an HVAC owner who paid an agency $14,775 across one engagement covering SEO, a website rebuild, and social media. After months of monthly invoices, the owner's rankings had not moved. Leads were still arriving the way they always had, through referrals. The dashboard reports kept arriving and kept showing impressions climbing and "keywords ranked" growing. The phone kept not ringing.

The HVAC story is the archetype of the pattern this article exists to name. The agency was not malicious. The agency was producing activity that looked like work, billing for it on schedule, and reporting metrics that were technically real but commercially meaningless. The owner did not lack diligence; the owner lacked the vocabulary to name what was happening early enough to fire the agency before the spend hit five figures.

The patterns below are documented across BlitzMetrics, Stan Ventures, SEO Sherpa, Online Optimisation AU, Search Scale AI, and the Reddit-cited synthesis at rankz.co. Each one has produced its own version of the HVAC owner's story. Each one is verifiable through specific sentences in your contract, specific data in your analytics, and specific yes-or-no questions any honest agency can answer in writing.

Red Flag 1: The Phantom Retainer

The phantom retainer is the bedrock pattern. The client pays $3,000 to $15,000 a month for SEO services. Months pass, sometimes years. Rankings stay flat, leads stay flat, calls stay flat. The agency keeps insisting "SEO takes time" and the invoices keep arriving. BlitzMetrics described the pattern in 2025: agencies promising first-page rankings, delivering low-quality links and boilerplate blog posts, reporting impressive metrics that did not translate to leads, and continuing to invoice until the client had enough.

Red Flag 2: Vanity-Metric Reporting

The vanity-metric report is the visible artifact of the phantom retainer. Slick monthly PDFs full of impressions, "keywords ranked," and traffic spikes that never become phone calls. Analytics That Profit named the pattern in 2024: untrustworthy agencies love vanity metrics because they look good and are easy to manipulate. A 10,000 impression increase is worthless if the people seeing the brand in search results are never going to become customers. Search Scale AI listed templated PDF reports that look the same every month with different dates plugged in as the second of their twelve red flags in 2025.

The honest version is to report leads, calls, form fills, and revenue attributed to organic, and to admit when those went down. A report that shows 147 metrics but cannot answer "are we getting more leads from search this month than last quarter" has failed its primary purpose.

Red Flag 3: The 12-Month Lock-In With No Exit

A 12-month engagement is not automatically a red flag. A 12-month engagement with no exit clause tied to performance almost always is. SEO Sherpa and Online Optimisation AU both documented the math in 2024 and 2025: at $800 per month for 12 months, the no-exit contract is $9,600 down the drain if results never arrive, and the firm requiring strict 12-month lock-in often knows the results will not retain the client through normal renewal mechanics.

The honest version is month-to-month or quarterly with a written cancellation clause. If the work is good, the renewal handles itself. If the work is bad, the client is not held hostage to an arbitrary calendar. Top Line Media Group named the inverse pattern directly: agencies promised results, locked firms into 12-month contracts, then delivered silence.

Red Flag 4: The "Guaranteed Number One" Bait

Stan Ventures documented the pattern explicitly in 2024: the most common guaranteed-SEO scam involves promising rankings for keywords no one actually searches for, long-tail zero-volume keywords that are easy to rank for but generate no traffic. The brand achieves "page one" on a phrase its prospects will never type, and the agency books the win in the report. OuterBox Design documented the variant: some agencies run Google Ads on the client's behalf and present the paid placement as "ranking on page one." Same outcome: a real-looking screenshot, no real organic traffic.

Google itself states publicly that no one can guarantee a number one ranking. An agency offering one is either misleading the client or running a tactic the client would refuse if they understood it. The honest version is range forecasts based on competition and domain age, with explicit caveats about the variability built into search algorithms.

Red Flag 5: Asset Hostage

The asset-hostage pattern shows up at the moment of attempted breakup. Try to leave the agency and discover the website, the Google Business Profile, the hosting, the content, and the analytics are all in the agency's name. The client either pays a release fee or starts over from zero. BlitzMetrics published an explicit 2025 case: an agency took down a client's website and Google Business Profile and demanded another $8,000, despite doing no meaningful work. Websults and protocol80 Horror Stories document the variant where agencies build websites on proprietary software only they can access, a "golden pair of handcuffs" in protocol80's phrasing. If the client tries to fire them, they lose the website, the content, and the SEO history.

The verification is administrative rather than technical. Ask for the login to your domain registrar, your hosting account, your GA4 property, your Google Search Console verification, your GBP, and your analytics suite. Confirm the owner's name on every account. If the agency cannot produce these credentials within a business day, the asset hostage is already in place; the only question is the size of the eventual ransom.

Red Flag 6: The Offshore Black Box

The offshore black box is the staffing pattern most agencies will not discuss publicly. A polished local salesperson signs the client. A senior local strategist appears in the kickoff call. After kickoff, the actual work is produced by an offshore account with no SEO context, billing the agency at a fraction of what the client pays, and the senior strategist who closed the deal never touches the file again. Hire Overseas and JumpFly both documented the pattern in 2025, noting that client investment pays for layers of managers and overhead while the heavy lifting is outsourced for a fraction of the billed rate.

Blueprint Training framed the operational pattern: a turn-and-burn staffing model where the agency brings in newbies, trains them lightly, throws them into a workload over their heads, burns them out, and repeats. The honest version is to name the human doing the work, put them on the call, and let them sign the report. If the agency cannot tell the client which specific person is producing each deliverable, the work is being done by someone the agency does not want the client to see.

Red Flag 7: Cookie-Cutter Strategy

Cookie-cutter strategy is the pattern where a generic checklist gets applied to every client regardless of industry, geography, or competition. Search Scale AI named the diagnostic: if the agency sold the client a fixed package without auditing the site, the competition, and the local market, the work is generic. Search Engine Magazine's 2025 Local SEO Playbook framed the cost: a cheaper agency that does not understand the market will cost more in the long run than a specialist who does.

The honest version is a multi-week diagnostic before any retainer talk: SERP analysis, competitor inventory, technical audit, customer-language research, and a documented strategy specific to the client's market. The diagnostic produces a deliverable. The deliverable looks different for every client because every client's situation is different. If the agency's onboarding deliverable for a Brantford foundation contractor looks identical to the deliverable for a Hamilton accountant, the agency is selling a checklist, not a strategy.

The Verification Checklist

The patterns above are verifiable. Run this checklist against your current agency relationship, or against any agency soliciting your business:

The verification pass takes about ninety minutes and costs nothing. The patterns it surfaces are not subtle. Agencies running them recognize the questions and either answer cleanly or stall. The stall is itself the diagnostic.

If the verification pass surfaces any of the patterns above, the next decision is what to do about it. Formative Digital runs an agency-takeover audit that documents the current relationship's gaps and produces the migration plan.

Frequently Asked Questions