How to spot a fake agency: red flags before you pay anyone.

TL;DR: You can spot a fake or unreliable web agency before you pay by checking three things: can they prove real work with live links, will they put scope, price, and ownership in writing, and do you keep control of your own domain, hosting, and files. If any answer is no, walk away. Most bad outcomes aren't dramatic scams. They're vague promises, no contract, and an agency that quietly owns the assets you paid for.

Losing money to a bad web agency rarely looks like a movie scam. It looks like a confident chat, a deposit, and then slow replies, missing work, and a site you can't even move because someone else controls it. The warning signs are visible before you pay, if you know where to look.

How can I tell if a web agency is fake or just bad?

Check whether they can prove real work, whether they'll put the deal in writing, and whether you keep ownership of your assets. A trustworthy agency passes all three easily. A fake or careless one fails at least one, usually early.

A "fake agency" here means anyone who presents themselves as a professional web team but can't show verifiable work, won't commit to written terms, or keeps control of things that should be yours. That covers outright scammers and the more common case: someone in over their head who will still take your money.

What are the biggest red flags before you pay a web agency?

The clearest red flags are no verifiable portfolio, pressure to pay everything upfront, no written contract, guaranteed "page 1 of Google," and any setup where they keep your domain, hosting, or files. One of these is a caution. Two or more means stop.

No portfolio you can actually click. Screenshots prove nothing. Ask for live website links they built, and check that those sites load and are real. Vague answers here are the single biggest tell.

Full payment demanded upfront. A deposit is normal and fair. Demanding 100% before any work, especially with no contract, removes every incentive to finish and every bit of your leverage.

No written scope or contract. If they won't put the exact pages, features, price, timeline, and ownership in a document you both sign, there is nothing to hold them to when things go wrong.

Guarantees of "page 1 on Google." Nobody can guarantee rankings, because nobody controls Google. A confident promise to get you to page 1 is either a lie or a sign they don't understand SEO.

They keep your domain, hosting, or files. This is the quiet one that traps people. If the agency registers your domain and hosting under their own account, they control your website, and a dispute can leave you locked out of your own business. Web developers holding domains and sites hostage is a well-documented problem (Bill Hartzer, billhartzer.com).

No real identity or address. A business that hides who it is, works only through a personal account, and has no traceable presence is a business you can't chase if it vanishes.

Why do so many website projects go wrong?

Because most failures come from a weak process, not outright fraud, and a weak process is easy to hide before you pay. 80% of website redesigns fall short of their full potential (SoftwareReviews, 2023).

That number matters because it reframes the risk. You're not only guarding against the rare thief. You're guarding against the far more common person who means well, takes your deposit, and delivers something that doesn't work, with no contract to fix it. The red flags above catch both.

Is asking for money upfront always a red flag?

No. A reasonable deposit is standard and protects the agency too. The red flag is the structure around it, not the deposit itself.

A fair setup is a deposit to start, then payments tied to milestones you can see: design approved, site built, site launched. That keeps both sides honest. The warning sign is full payment before anything exists, or new charges appearing for work that was clearly part of the original job. Pay for progress you can verify, not promises.

How do I protect myself before paying anyone?

Verify their work, get everything in writing, pay in stages, and keep your own accounts. These four steps remove almost all of the risk before a single rupee leaves your hands.

First, ask for live links and check them. Second, get the scope, price, timeline, revision limits, and ownership in a signed document. Third, pay a deposit and then by milestone, never everything upfront. Fourth, make sure your domain and hosting are registered in your name, on accounts you control, so nobody can lock you out. An agency that welcomes all four is one worth hiring. One that resists any of them has told you what you needed to know.