How to tell if your SEO agency is legit — 10 real tests covering reporting, deliverables, transparency, and red flags. Free 30-min audit.

A legitimate SEO agency in 2026 ties reporting to leads (not just rankings), publishes a clear monthly deliverables list, gives you direct access to GSC and GA4, refuses to guarantee specific rankings, has at least 3 verifiable client case studies, and welcomes hard questions about technical work. Anything else is a content mill or scam.

Quick Answer:

Legit agencies: report leads (not just rankings), give you direct GSC/GA4 access, refuse to guarantee rankings, list real clients, and answer hard technical questions. Run if any of these fail.

The 10 Tests A Legit Agency Passes

1. They Report Leads, Not Just Rankings

Legit reports show: organic traffic → form fills → lead quality → revenue attribution. Bad reports show only “you went from #15 to #8 for X.”

2. You Have Direct GSC + GA4 Access

You should own these accounts and grant the agency access — not the other way around. Agencies that hold your GSC/GA4 hostage are scammy.

3. They Refuse To Guarantee Rankings

Anyone promising “page 1 in 30 days” for competitive terms is lying. Real agencies promise process, not outcomes. Rankings depend on Google.

4. Monthly Deliverables Are Spelled Out In Writing

A legit contract says: “4 long-form posts, 1 technical audit, 5 internal links, 2 outreach campaigns, 1 monthly report.” Vague contracts = vague work.

5. They Have 3+ Verifiable Case Studies

Real client names, real metrics, real before/after data. “Increased traffic 300%” with no client name is fiction. Sprout Sage has 9 NZ case studies plus 65+ US/UK/CA/IL clients on record.

6. They Show You The Actual Content Before It Goes Live

Drafts in Google Docs, not surprise blog posts. You should approve every piece. Otherwise, AI-spun content slips through.

7. They Answer Hard Technical Questions

Ask: “How do you handle faceted nav indexing?” or “What’s your approach to log file analysis?” Legit agencies answer specifically. Scams deflect with marketing speak.

8. They Refuse To Buy Backlinks

Legit agencies do digital PR, broken-link building, guest posts on real sites. They reject paid link networks and PBNs. If your agency mentions “we’ll buy you 50 backlinks for $500,” fire them.

9. They Have A Clear Cancellation Clause

30-60 day notice. No 12-month lockups (or limited to enterprise contracts). Easy exits = confidence in their own work.

10. They Will Tell You Honestly When You Should NOT Hire Them

Legit agencies turn down clients who would not benefit. Scams pitch everyone.

Red Flags That Should End The Conversation

• “Guaranteed #1 rankings”
• “100 backlinks for $99”
• No clear monthly deliverables
• Refusing to share strategy details
• Using vague terms like “synergize SEO efforts”
• $99-499/mo “full SEO” packages (math doesn’t work)
• Reports with screenshots only, no actual data
• Hidden third-party subcontractors

See red flags when hiring a web design agency for adjacent warning signs.

How To Audit An Agency Before Hiring

1. Ask for 3 client references — call them
2. Request the last 3 monthly reports they sent another client (redacted)
3. Ask: “What would you do in month 1 for my business specifically?”
4. Ask their content writers’ names — real agencies have named writers
5. Ask which tools they use (Ahrefs, SEMrush, Screaming Frog all valid)
6. Ask about their cancellation policy
7. Ask: “What clients have you fired and why?”

The last question is brilliant — only legit agencies have actually fired clients (for being abusive, asking for black-hat work, etc.)

How To Audit Your CURRENT Agency (After 3-6 Months)

• Have organic leads grown? (yes/no)
• Are you ranking for new keywords each month? (check GSC)
• Has organic traffic grown 20%+ in 6 months?
• Are reports showing revenue, not just rankings?
• Can you list 5 specific things they did last month?

If 3+ of these fail, fire them. See should you fire your SEO agency 2026.

Why Sprout Sage Passes All 10 Tests

We tie every report to leads. Clients own GSC/GA4. We never guarantee rankings. Contracts list every deliverable. We have 9 NZ case studies and 65+ active clients. We refuse paid links. 30-day cancellation. We turn away 30%+ of inquiries that would not benefit. See our case studies.

What To Do If You Discover Your Agency Is NOT Legit

1. Stop new payments
2. Pull all reports + access credentials
3. Send 30-day cancellation notice in writing
4. Reclaim domains, GSC, GA4, GBP
5. Audit the work they did (often you have to undo PBN links)
6. Hire a legit agency to clean up

FAQ

Is it normal for SEO agencies to require 6-12 month contracts? Premium agencies sometimes require 6-month minimums because SEO genuinely takes time to compound. But 12-month lockups with no early-exit clause are red flags. Mid-market agencies should offer month-to-month or 30-60 day notice. We do month-to-month.

Should I trust an SEO agency that won’t share client names? Sometimes — under NDA, especially for enterprise or sensitive industries (legal, finance). But they should still describe verticals, geographic regions, and metric improvements. Pure refusal to share any details usually means there are no real results.

What if my agency is “doing the work” but I’m not seeing results? After 6 months of consistent work with no movement, something is wrong: wrong strategy, wrong keywords, technical issues, or wrong fit. Get a third-party audit. We will do this for free as part of our 30-min audit.

How do I verify the agency is doing the technical work they claim? Ask for screenshots of GSC indexing changes, Lighthouse score improvements, or specific schema markup changes. Real technical work leaves audit trails. If they cannot show evidence beyond “we did it” — they did not.

Get A Free Independent SEO Agency Audit

We will look at your current agency’s work and tell you straight whether they are legit or not. No pitch — even if the answer is “stick with them.” Book a free 30-min audit.