Start with identity and ownership
A professional-looking website or social profile is not proof that a provider is established. Confirm the legal or operating business name, a working business email, a physical service address where one is represented, and a person who is accountable for the proposal. Search the name independently rather than relying only on links the salesperson sends. Check that the portfolio links open and that the named work can be explained.
Ask who will own the domain, hosting account, analytics property, advertising accounts and source files. These should normally be registered to the client or transferred under clear contract terms. A provider may administer accounts, but the client should know who can access them and how to regain access if the relationship ends.
Evaluate proof without accepting a sales story
Request two or three relevant examples and ask what the provider actually did. A screenshot of a ranking, traffic graph or dashboard is incomplete without the date range, channel, geography, baseline and definition of a lead. Ask for permissioned references when available. A case study should explain the starting situation, work delivered and limitations; it should not quietly turn correlation into proof that one tactic caused every result.
Treat guaranteed ranking, guaranteed lead counts or an alleged private relationship with Google as warning signs. Google itself tells businesses that no one can guarantee a number-one ranking. A credible proposal describes controllable tasks, reporting and decisions that depend on search engines and customers—not an outcome the agency cannot control.
Read the scope, payment terms and exit path
A useful agreement lists deliverables, review rounds, client responsibilities, payment dates, third-party costs, cancellation terms, data handling and what happens at handoff. “SEO” or “complete website” is too vague on its own. Clarify whether copy, photography, accessibility checks, hosting, maintenance and analytics setup are included or quoted separately.
Do not rush a deposit because a discount is supposedly ending today. Confirm the invoice payee and payment instructions through a second channel, especially if bank details change unexpectedly. Keep signed proposals, receipts and approvals in a shared company location. If a contract is unclear or financially significant, seek independent legal advice before signing.
Use a low-risk verification call
Ask the provider to walk through the work plan in plain language. Listen for specific questions about customers, business goals, existing systems and constraints. A competent team should be able to explain why a task matters, how it will be checked and what assumptions remain. Vague jargon is not proof of fraud, but repeated refusal to explain basic ownership or costs is a reason to pause.
Compare proposals on comparable work rather than choosing the lowest headline price. A lower quote may exclude copy, integrations, support or accessibility review. A higher quote is not automatically safer. Verify the team, contract, account ownership and milestones independently, then choose the option whose scope and risks you understand.
Practical checklist
- Verify the business identity and portfolio outside the sales email.
- Keep domain, analytics and advertising accounts under client ownership.
- Ask for written deliverables, exclusions, payment terms and handoff details.
- Reject guaranteed Google rankings and unexplained urgency.
In short
A legitimate provider should be comfortable with written scope, transparent account ownership and independent verification. If important facts cannot be checked, pause before paying.
This article is general educational information, not legal, privacy, cybersecurity or financial advice. Confirm requirements for your situation with a qualified professional.