What counts as a red flag, and what does not
A red flag is something in a proposal, a call or a contract that makes it hard for you to judge the work, own the result or leave. It is not a high price, a small team or a company that talks about itself in an awkward way. Plenty of honest providers are all three.
Small businesses are targeted by weak SEO offers more than large ones, for a simple reason. An owner is busy, does not know the field and cannot easily tell whether a monthly report is good. That is the gap a bad provider sells into. The ten signs below are the ones that show up most often. If you see one, ask about it in writing. If you see three, walk away.
For the opposite side of this page, the questions that bring good answers out of an honest company, see questions to ask a small business SEO company. And if you have not yet settled what kind of help to buy, the overview of the options and their trade-offs is the better starting point.
Walk away from anyone who guarantees rankings, will not give you access to your own accounts, sells links by the package, or locks you in for a year.
Red flags 1 to 4: what they promise
1. A guaranteed ranking
"Page one in 90 days or your money back." No company controls Google or any other search system, and rankings move for reasons that have nothing to do with the work being done. A guarantee is either a misunderstanding of how search works or a sales line. If a refund is offered, read the conditions. They are often written so the target is a rare phrase nobody searches, which makes it easy to hit and useless to you.
2. "Our secret method" or "insider relationships with Google"
There is no secret method. Google publishes a great deal of guidance on how its search works, and the useful practices are well known. A company that claims proprietary access is selling mystery to avoid describing the work. Good providers explain what they do in plain words and are happy to be checked.
3. A number of backlinks as the main deliverable
"Fifty links a month" is a volume promise about output, not an outcome. Links from other sites do matter in search, but links that are bought, swapped in bulk or placed on sites that exist to sell links can do harm. Ask where the links will be placed and show you examples. If the answer is a list of sites you have never heard of, be careful. A glossary entry on what a backlink is explains why quality outweighs count.
4. A claim they can fix something instantly
"We will have you ranking by next week." Some changes show quickly, such as a corrected map category. Content and trust take months. A single fast timeline for everything means nobody has looked at your situation.
Red flags 5 to 7: what they will not show you
5. Reports with no Search Console data
Google Search Console is free. It shows how many times your pages appeared in Google and how many people clicked. Any company working on your site should use it and should give you access to your own property. A report built only from the company's own tool, a proprietary score or a rank tracker for keywords they chose can look excellent while your phone stays quiet. Read what Google Search Console is if you have not opened it yet.
6. They will not say what they actually did
A monthly report should say, in sentences, which pages were written or changed, which listings were fixed, what happened and what comes next. "Optimization activities completed" is not a sentence anyone can check. If you cannot tell what you paid for, you cannot tell whether you got it.
7. No examples you can verify
A case study that names no client, a screenshot with the name blurred or a list of famous logos without a story behind them. Ask for a business like yours, a live site and a person you could contact. Honest providers with real results are usually glad to share them. Providers with none will find a reason they cannot.
Red flags 8 to 10: how they hold on to you
8. They own your accounts
This is the one that does the most lasting damage. If the company creates your Google Business Profile, your analytics or your listing accounts under its own login, you may find that leaving means losing your map listing, your reviews or your history. Everything that matters should be in your name, with the company added as a user or manager. Check this on day one, not in month eleven.
9. A long contract with a hard exit
Twelve months, automatic renewal, ninety days' notice, and a clause that requires payment of the remaining term. Some contracts are shorter and still contain a hidden commitment, for instance a setup fee that is not refunded or content that the company retains the rights to. A company that is confident in its work can offer a short first term and a plain exit. If you are comparing structures, small business SEO packages shows where the fine print tends to sit.
10. Pressure to decide now
"This price is only good until Friday" or "we have one slot left for your area". Real work has no deadline that falls neatly on your decision day. Pressure is meant to stop you comparing. Send your questions in writing and see what happens. A good company will wait.
Taken together, flags 8 to 10 describe the path in the diagram above. You sign for a long term, the accounts sit with them, and leaving costs you the thing you wanted. That is why ownership and exit are the first two things to settle.
Amber flags: not deal-breakers, but ask
Some signs are worth a question rather than a refusal.
An unusually low price. A low price is not a trap by itself, and our page on cheap SEO for a small business goes into what a small budget can honestly buy. The question is what is left out. If the answer is "the work", look elsewhere.
Heavy use of jargon. Some of it is unavoidable. But a good provider translates, and one who does not may be hiding thin work behind vocabulary.
A team of one. A solo consultant can be excellent. Ask what happens when they are sick or busy.
An overseas team. Not a flag in itself. Writing quality and local knowledge are what count. For local searches, someone must know how people in your area talk about your service.
An offer of a free audit. Often fine. Be sure it is an audit of your real business that names specific problems, not an automated scan that produces a score and a sales call.
Red flags that are new: AI visibility promises
Since people began asking ChatGPT and similar assistants for recommendations, a new set of pitches has appeared. Most of the red flags above carry over. "We guarantee ChatGPT will recommend you" is the new version of the guaranteed ranking, and for the same reason: no company controls what an assistant says. Another is a premium price for something called "AI optimization" that, when you ask, turns out to be ordinary website content under a new label.
What is reasonable is for a provider to check how assistants currently describe your business, to improve the pages and signals those tools draw on, and to report honestly on what they find. If you want to understand what actually influences those answers, read how AI assistants pick businesses.
If you have already signed with one of these
You are not stuck. A calm sequence works better than an angry email.
- Find out what you own. Check who the owner is of your Google Business Profile, Search Console and analytics. Ask for ownership or manager access to be moved to your own Google account.
- Get a copy of everything. Ask in writing for every page, article and file written for you, and for access to every report.
- Read the contract for the exit. Note the notice period and any payout clause. Send notice in the form the contract requires.
- Do not stop paying before you have the accounts back if the contract says payment continues, unless you have taken advice. A short call with a lawyer or a trade body is cheaper than a dispute.
After that, set the baseline with Google's own tools so you can judge whoever you hire next. The page on doing SEO yourself versus hiring help shows what you can cover alone while you decide.
Six phrases from real proposals, decoded
These are the kinds of lines that appear in cold emails and proposals, with what each tends to mean. They are illustrations of common wording, not quotes from any one company.
"We noticed your website has serious SEO issues." Sent to thousands of businesses by an automated scan. Ask them to name the three worst issues and where to see each. A real review can.
"Guaranteed first page placement." See red flag 1. The usual trick is a phrase nobody searches.
"Submit your site to 500 search engines." There are a handful of search engines that matter. This is an old line that still circulates.
"Proprietary AI-powered optimization." Ask what it changes on your site, in words you can check. If the answer is unclear, the label is covering something ordinary.
"Fully managed, nothing for you to do." Sometimes honest. Often it means they will not ask you the questions that make local pages accurate.
"Limited offer, ends Friday." See red flag 10.
Where to check a company before you sign
A few ten-minute checks cost nothing.
Search the company's name with words like "reviews" and "complaints". One bad review proves little. A pattern of the same complaint, such as being unable to leave, proves a lot.
Look at the sites they say they improved. Open one. Does it look well kept and say specific things? Is it clear who the business is and where?
Ask a local business owner you trust. A chamber of commerce or a trade group often knows who is dependable in your area.
Read the whole contract. Not the summary. The notice period, the renewal terms, the ownership of content and the payout clause are in the part nobody reads. If anything is unclear, ask in writing and keep the reply.
If a company does well on all four, the earlier warning signs are less likely to apply.
The opposite of a red flag: signs of an honest provider
It helps to know what good looks like, so you are not only scanning for faults. Honest providers tend to share a few habits.
They look at your business before they quote, and what they send back names specific things on your own site or profile. They tell you what they will not do. They are comfortable saying "that depends" and "we cannot know yet". They give you access to your accounts on day one without being asked. Their reports use numbers you could find yourself in Google's free tools, and each report says in a sentence what was done.
They also tend to talk about your customers, not about themselves. They ask what people ask you on the phone, which jobs make you the most money, and where you want to be in a year. That kind of curiosity cannot be faked from a template.
Finally, they let you go slowly. A short first term, time to compare and answers in writing are all signs of a company that expects to earn its place. If most of those are present, a single odd phrase in a proposal is worth a question and not a refusal.
How RunOctopus handles these
Most of the flags above are about control and proof, so here is what RunOctopus does and how it is measured.
RunOctopus is a done-for-you service. Its AI, Ollie, researches your business, then writes and publishes pages directly on your own website. A team plans, writes, reviews and publishes alongside Ollie. It works with Shopify, WordPress, WooCommerce and Wix, and you install, approve, upload and schedule nothing.
The first week brings 8 long-form articles, 6 pages and a custom interactive tool built for your niche. After that it is 175+ pieces of content a month, written, published and linked. You also get reports on where ChatGPT, Perplexity, Claude and Gemini name your business. The promise is more visibility on Google and in AI answers within 90 days, measured against the 90 days before you joined, or every dollar back.
For scale, an agency doing this work charges about $3,209 a month (2026 average, 439 providers) and publishes 4 to 12 pieces. Paste your address into the free site read. Ollie reads the site and shows the plan. No account, no call.