How to Spot Bad SEO Companies Before They Damage Your Search Program
Look past sales language and ranking snapshots. A sound evaluation focuses on what the provider changes, how those changes are reviewed, what evidence supports the work, and whether the process fits a regulated or high-trust business.
How to Spot Bad SEO Companies Before They Damage Your Search Program
Bad SEO companies are not defined only by obvious spam. The most damaging vendors deliver activity reports, keyword rankings, and backlink counts that never translate into qualified intake or entity recognition.
A provider can also be a poor choice when clients cannot verify the work, sensitive content requires repeated correction, reporting overstates what the data proves, or the agency makes unsupported claims about rankings and Google AI features.
Evaluate the relationship through specific evidence: implementation logs, content and reviewer records, link disclosures, technical rationale, analytics setup, account ownership, and the distinction between observed outcomes and untested explanations.
For regulated and high-trust businesses, the diagnostic test is simple: ask any candidate agency to show how its deliverables build reviewable, attributable authority rather than generic traffic volume.
Key Takeaways
- Judge an SEO provider by traceable work, not by the volume of meetings, dashboards, or status language.
- Require a clear method for researching regulated subject matter and routing sensitive claims through appropriate review.
- Treat rankings as one diagnostic signal: agencies focusing only on keywords are failing in the AI search era.
- Ask for change logs, ownership, rationale, and expected user or search impact for meaningful technical and content work.
- Identify agencies that use marketing slogans about structured data, publishing patterns, or special formatting for Google AI features to mask a lack of technical depth.
- Check whether reporting separates observed changes from explanations that are still hypotheses.
- Protect ownership of accounts, content, analytics, and website access so an agency transition does not create avoidable disruption.
- Use contract, workflow, content, link, and reporting evidence together before deciding to continue, correct, or replace a provider.
Introduction
Bad SEO companies are not always obvious. Some use clearly risky tactics, but others look professional, communicate often, and still leave a client unable to explain what was changed, why it was changed, or whether the work fits the business.
For a law firm, healthcare organization, financial-services business, or another high-trust entity, that uncertainty matters because SEO touches public claims, website governance, reputation, and the systems used to measure demand.
A useful review therefore starts with evidence rather than labels. Ask what work was completed, where the work lives, who approved it, which search or user problem it was intended to address, and how the agency distinguished an observed result from an assumption.
Then inspect the quality of the actual outputs: technical fixes, content revisions, internal links, source use, structured data, link acquisition, reporting, and access controls. Stop looking at outcome promises and start looking at process transparency: the goal is to determine whether the provider has a transparent, defensible way to diagnose problems, prioritize work, document decisions, and adapt when the evidence changes.
This guide is designed to help buyers and existing clients look past the slogans and evaluate the actual technical workflows that separate established specialists from generic generalists.
What Most Guides Get Wrong
Common red-flag lists often overemphasize price, personality, or whether an agency owns proprietary software. Those signals are weak on their own. An expensive provider can still produce generic work: I have seen companies pay five-figure monthly retainers to bad SEO companies that simply have better sales teams.
A lower-cost provider can still be disciplined about scope and documentation. The more useful question is whether the provider can show how its work connects to your site, your audience, your regulatory constraints, and the evidence available in your analytics and search data.
If an agency claims its process is a black box that you aren't allowed to see, it is hiding a lack of depth, not a secret formula. Transparency does not mean revealing every internal template. What matters is that you can review the work affecting your business: recommendations, implementation history, content decisions, link activity, access, approvals, and reporting assumptions.
Also be cautious with explanations that turn correlation into causation. A traffic increase after a change does not by itself prove the change caused it, just as a decline after an update does not automatically prove an algorithm update was responsible.
A useful review asks what changed, what other explanations are plausible, and what evidence would support the next action. True authority is built on evidence over promises.
Can you verify what the SEO agency actually did?
Start with traceability. For each meaningful SEO task, you should be able to identify the affected page or system, the problem being addressed, the recommendation, the implementation status, and the person or team responsible for approval.
That does not require constant meetings or a particular project-management platform. It requires a record that lets a client reconstruct what happened. Technical work should be specific enough to review.
If an agency says it improved crawlability, ask which issue it identified and what changed. If it says it improved internal linking, ask which pages gained links and why those relationships were chosen.
If it changes structured data, ask what the markup describes and whether the visible page supports the same information. If it acquires or places links, ask for the relevant source, destination, and rationale rather than accepting a total link count.
Reporting should also distinguish work completed by the agency from events it merely observed. Rankings, impressions, clicks, leads, and conversions can all be useful, but none of them substitutes for a change history.
Be cautious when access is restricted without a clear security reason, when completed tasks cannot be tied to an implementation, or when the agency spends forty minutes of a one-hour call discussing trends or Google updates rather than showing you the specific technical documentation or content briefs it produced that week.
A buyer does not need to micromanage every action, but should be able to audit material changes and understand how the provider is using the client's budget and website access.
Key Points
- Ask for a change log that ties completed work to specific pages, templates, or technical systems.
- Check whether recommendations have an owner, approval state, implementation state, and rationale.
- Require disclosure of link activity that affects your site rather than accepting only aggregate backlink counts.
- Compare reported deliverables with what can actually be found in the CMS, repository, analytics setup, or site.
- Treat meetings as coordination, not as evidence that SEO work was completed.
💡 Pro Tip
Ask the agency to walk through a recently completed task from diagnosis to implementation. A good walkthrough should show the evidence used, the decision made, the change itself, and how the result will be evaluated.
⚠️ Common Mistake
Confusing a responsive account manager with proof that the underlying SEO work is accurate, implemented, or useful.
Does the provider understand your regulated subject matter?
Content quality is one of the fastest ways to identify a poor fit. A capable SEO provider does not need to be the final authority on every legal, medical, or financial topic, but it should know where its expertise stops and where subject-matter review begins.
Before publishing, examine how the agency researches terminology, chooses sources, handles claims, records reviewer comments, and updates content when facts or rules change. Generic copy often reveals itself through vague definitions, unsupported superlatives, mismatched terminology, or language that sounds persuasive but would make an internal expert uncomfortable.
Those problems are not fixed by adding more keywords. For sensitive topics, the provider should be able to explain which statements came from client-approved information, which require expert review, and which should not be made at all.
The workflow should also respect the client's legal or compliance process rather than treating review as an obstacle. Search optimization can help make accurate information easier to find and understand, but it should not pressure a business to publish claims it cannot substantiate.
During vendor selection, inspect samples for factual precision, audience fit, source discipline, and editorial restraint. If the agency says it can write effectively for any industry, ask how it adapts research and review when the subject matter carries higher consequences for readers or the business.
A simple test is to ask the agency to define three complex terms specific to your niche. If its writers don't know the difference between negligence and liability in a legal context, they are a bad fit for your firm.
Key Points
- Ask who is responsible for factual review when content addresses legal, medical, financial, or other sensitive subjects.
- Inspect samples for accurate terminology, useful specificity, and language that matches how real clients or patients ask questions.
- Check whether the content workflow records research inputs, reviewer feedback, and final approval.
- Confirm that writers can distinguish search intent from permission to make a claim.
- Reject a workflow that treats compliance review as an avoidable delay rather than a required business constraint.
💡 Pro Tip
During evaluation, give the provider a nuanced topic from your field and ask how it would research, draft, and route the piece for review. The quality of the process matters more than a polished answer on the spot.
⚠️ Common Mistake
Approving content because it contains the target terms even though an internal expert would need to rewrite its substance.
Is the strategy building durable visibility or only chasing keywords?
A weak SEO strategy can become a collection of isolated keyword targets. That may produce a long spreadsheet, but it does not automatically create a coherent site. A better review asks whether the agency understands the entities and relationships already present in the business: the organization, professionals, services, locations, topics, publications, and other real-world facts the site can support.
The real work is building entity authority: connecting your brand to established nodes in the Google Knowledge Graph through structured data, authoritative citations, and semantic relevance, while maintaining consistent, useful information across the site and connecting related content in ways that help users and search systems understand context.
Structured data works when it describes information that is genuinely present, and a strong partner knows how to use Schema.org beyond the basics. Author pages, professional profiles, association references, and third-party mentions contribute context when they are accurate and relevant: a strong partner looks at your entire digital presence so that your LinkedIn profile, your professional associations, and your guest contributions all signal the same high level of expertise to search engines.
Ask how keyword targets fit into broader topic coverage, how duplicate or overlapping pages are handled, how internal links reflect real relationships, and how the agency verifies public facts about the organization and its experts.
A strategy that cannot explain those connections treats your website as an island and optimizes pages in isolation, without a clear model of the site as a whole.
Key Points
- Ask how target queries map to existing services, experts, locations, and informational topics without creating unnecessary duplicate pages.
- Review whether structured data accurately reflects visible page content and goes beyond the basics (e.g., Physician, Attorney, or Service schema).
- Check for consistent naming, authorship, service descriptions, and organizational details across relevant pages.
- Ask how internal links are chosen and whether they support real topical or navigational relationships.
- Check whether the agency builds author entities for the experts within your company and keeps third-party mentions and professional profiles accurate.
💡 Pro Tip
Search for your brand name in Google. If no Knowledge Panel appears, ask your agency for a specific 90-day plan to trigger one. The plan should explain which consistency, site-structure, content, and evidence issues the agency would address.
⚠️ Common Mistake
Treating a #1 ranking for a single query as proof that the brand's broader search presence is accurate, coherent, and durable.
Do the reports help you make decisions or just display activity?
Ranking reports are not inherently bad. The problem is using them as if they explain performance by themselves. Search results can vary by query, device, location, personalization, and feature layout, while business outcomes depend on what happens after a user arrives.
A useful report therefore combines several layers of evidence. It can show visibility and traffic trends, but should also identify which pages and query groups moved, what important site changes occurred, whether tracking changed, and what business actions followed.
If an agency attributes a gain to its work, ask what evidence supports that explanation and what competing explanations were considered. Seasonality, brand activity, news coverage, technical releases, demand shifts, and measurement changes can all affect the same chart.
Likewise, a bad agency will blame Google for a drop in traffic, while a specialist with a documented system will point to the specific data points in its logs to explain the shift and the planned pivot.
The provider should be able to separate facts from hypotheses and state what it plans to test next. Reporting should also expose unresolved work. An impressive performance summary is incomplete if priority technical issues remain open, content is stuck in approval, analytics events are broken, or important pages were changed without documentation.
The purpose of a report is not to create a positive narrative. It is to help the client decide what to keep, stop, investigate, or prioritize next.
Key Points
- Ask for reporting that segments performance by meaningful page groups, query themes, and business actions rather than a single blended total.
- Require a clear distinction between observed changes, likely explanations, and untested hypotheses.
- Review tracking changes alongside performance changes so measurement shifts are not mistaken for marketing impact.
- Pair ranking or traffic data with a log of implementations and unresolved issues, and request a sample technical roadmap that spans at least six months.
- Question claims that an agency caused a result when the evidence only shows that two events happened around the same time.
💡 Pro Tip
Choose a recent increase or decline and ask the agency to explain it using the report, implementation log, and analytics setup. Then ask to see its standard operating procedure for a site migration or a content audit. If it doesn't exist, the agency doesn't have a system.
⚠️ Common Mistake
Letting a provider take credit for every positive movement while attributing every negative movement to forces outside its control.
What should a credible SEO company say about Google AI Overviews?
AI-related sales claims deserve the same scrutiny as traditional ranking claims. Google first tested its generative search results under the name SGE; they now appear as AI Overviews and other Google AI features.
Their emergence has exposed many bad SEO companies. Because AI search relies on clear claims, structured data, and authoritative citations, generic SEO tactics are failing. A bad agency will tell you that AI is just a fad or that it is still waiting to see what happens, a sign that it is not keeping pace with the technical evolution of search.
A strong partner is already engineering your content to be AI-ready: improving technical accessibility, creating self-contained blocks of information that AI can easily chunk and cite, making pages easier to understand, supporting claims with appropriate evidence, clarifying authorship, reducing duplication, and keeping important business information accurate.
That work stays valuable even when the presentation of search results changes. If the provider monitors whether a brand or page appears in AI-generated responses, ask it to record the query, surface, date, and result, so you can compare how a query was answered at a point in time.
The same applies to third-party AI products such as Perplexity, where citations, mentions, and recommendations are tracked separately from leads and customers. What I've found is that bad SEO companies continue to produce long-form content that is difficult for both humans and AI to parse.
In the AI era, clarity and authority are better. If your agency isn't talking about citation eligibility and entity mapping, it is using an outdated playbook that will lead to a significant loss in visibility as AI search becomes the standard.
Key Points
- Ask the agency how it is specifically optimizing for AI Overviews and how it separates documented Google guidance from its own observations and experiments.
- Look for a focus on answer-first content structures in its writing samples, and reject promises that structured data or a specific answer format will guarantee inclusion in Google AI features.
- Determine whether the agency monitors your brand's sentiment and citation share in AI responses, with the query, surface, date, and recorded result for each check.
- Prioritize accurate, well-supported pages that remain useful regardless of how search features are presented.
- Avoid agencies that treat AI SEO as an add-on rather than a core part of the strategy, and read AI-search reporting alongside conventional search, analytics, and business data.
💡 Pro Tip
Ask your agency to show you which of your current pages are being cited by Perplexity or Google AI Overviews, and how it distinguishes a citation, mention, recommendation, and business conversion. If it can't, it isn't monitoring AI visibility.
⚠️ Common Mistake
Assuming a #1 traditional result guarantees inclusion in an AI-generated response or proves that an AI surface will drive business.
Is the SEO provider creating compliance, ownership, or brand risk?
An SEO provider can create risk even when no dramatic search penalty occurs. Content can misstate a service, omit an important qualification, overstate an outcome, or create unnecessary review work for internal experts.
In law, finance, or medicine, an incorrect claim can lead to regulatory fines or a loss of professional licensure, and content that requires hours of your time to edit and correct means you are paying the agency to create work for you.
Technical changes can also create governance problems if nobody records who changed templates, redirects, tracking, canonicalization, or structured data. Link work can become a problem if the client cannot identify what was acquired or why.
These are operational risks that can be evaluated directly. Ask whether the agency understands the advertising rules for your profession (e.g., ABA rules for lawyers), whether sensitive content has a defined review path, whether the agency accepts corrections without resisting necessary scrutiny, and whether publication rights are separated from drafting rights when the client requires that control.
Review account ownership as well. The client should know who owns analytics properties, search-platform access, domain and CMS credentials, content files, reporting exports, and any automation that would need to survive a provider change.
A sound exit does not require hostility; it requires documentation. If the relationship ends, another qualified team should be able to understand what was done, what remains open, and which assets belong to the client.
For reputation, focus on factual accuracy and user value rather than volume. Publishing thin or generic pages merely to create more indexed URLs makes the site harder to maintain and teaches search engines that your brand is not a high-level authority. Over time, this makes it harder to rank for the truly valuable, high-intent keywords.
Key Points
- Map the approval path for sensitive content and confirm who has final publication authority.
- Audit ownership of analytics, search tools, CMS access, content files, and other business-critical accounts.
- Require enough technical documentation that a replacement provider could understand important changes and open issues.
- Review link activity and content claims for relevance, accuracy, and business risk rather than relying on volume metrics.
- Evaluate whether the agency reduces internal rework over time or repeatedly sends deliverables that require substantial correction.
💡 Pro Tip
Track the edit rate of the content the agency provides. If your team is rewriting more than 20 percent of its work, the agency doesn't understand your niche.
⚠️ Common Mistake
Waiting until contract renewal to discover that key accounts, content files, implementation records, or website knowledge are difficult to transfer.
A 30-Day Audit for Your SEO Provider
Request the project log, implementation history, and material deliverables covering the last 90 days.
Expected Outcome
A traceable record of what the provider says it completed and what can be verified in the site or connected systems.
Review the last 5 content deliverables for factual accuracy, search intent, sourcing, reviewer involvement, and unnecessary generic language.
Expected Outcome
A practical view of whether content quality fits the subject matter and the client approval process.
Ask for a technical explanation of your entity authority and Knowledge Graph status, including site structure, internal linking, structured data, and how keyword targets connect to real services, experts, topics, and locations.
Expected Outcome
An assessment of the agency's understanding of modern AI search and of whether the strategy is coherent beyond isolated keyword rankings.
Review the edit rate and compliance friction of the deliverables, then audit reporting assumptions, account ownership, unresolved work, and the records needed for a clean transition.
Expected Outcome
Evidence for a continue, correct, renegotiate, or exit decision based on documented work and business risk.
Frequently Asked Questions
How can I tell if an SEO company is using 'Black Hat' tactics?
Look for methods the provider is unwilling to disclose or explain, especially link activity such as a sudden influx of low-quality links from unrelated websites, hidden or deceptive page changes, doorway-style publishing, copied or mechanically generated low-value content, and recommendations that appear designed to manipulate search systems rather than help users.
Do not rely on the label alone. Ask what was changed, where links came from, who approved the work, and how the tactic fits published search guidance. A provider should be able to give you enough detail to assess risk on your own site. Secrecy around material link or content activity is a stronger warning sign than a dramatic name for the tactic.
What is a 'fair' price for high-quality SEO in regulated industries?
Price varies by market and competition, but in high-trust verticals like legal or healthcare, you should expect to pay for the industry deep-dive and technical documentation required. Scope, site condition, content needs, technical complexity, review requirements, and the amount of subject-matter involvement all change cost.
Extremely low retainers usually indicate that the agency is using a one-size-fits-all template and offshore generalist writers. A fair price is one that allows the agency to dedicate specialist hours to your account.
Evaluate it against a written scope and the work you can verify: compare what is included, who performs it, how sensitive content is reviewed, what technical implementation is covered, how links are handled, what reporting is provided, and which assets you own. You want to see exactly how every dollar of your budget is being converted into a documented asset.
Can a bad SEO company actually hurt my website's reputation?
Yes, significantly. A poor provider can create reputation and governance risk through inaccurate content, unsupported claims, irrelevant link activity, weak user experiences, undocumented technical changes, or account ownership problems.
In regulated industries, this can be devastating because it is much harder to rebuild trust than to build it correctly the first time, and incorrect medical or legal advice on your site can lead to real-world liability.
If it happens, preserve access and logs, identify the affected pages or systems, correct factual or technical problems, and document the remediation. For a regulated business, involve the appropriate internal reviewer when public claims or professional rules may be affected. A bad SEO partner is not just a financial drain: it is a brand risk.
Start with a secure workspace.Build toward your Growth Report.
Secure SMS begins the path. Then confirm your email, create a password, add your workspace context, and complete your Growth Brief. Your Growth Report presents the available evidence and clearly marks what is still missing; Google connections remain optional.