How Do I Know if an SEO Agency Is Legit?

You verify a legitimate SEO agency the same way you'd verify any supplier: independently. Ask for two client URLs, check their traffic and backlink growth yourself in a public tool, look at three links the agency actually built, and read the contract for who owns the content. An agency that resists any of those four requests has answered the question.

Reputation, testimonials and a polished site tell you almost nothing — they are the cheapest part of the operation to fake. What follows is the set of checks that produce evidence rather than impressions, and they take about an hour.

Check 1 — Look at links they built, not links they claim

Ask for three live URLs of pages containing links they placed for a client in the last six months. This single request separates most of the field.

Then open them and ask:

Is the link inside the body of a real article, or in a footer, sidebar, or author bio? Footer and sidebar links are worth a fraction of in-content editorial links.
Does the host site have real traffic and a real audience, or is it a content farm publishing across a dozen unrelated niches? A site with posts about crypto, dentistry and pet insurance in the same month is a link farm.
Is the article about the topic it links to? Relevance is the signal; a high Domain Rating on an unrelated site is largely decoration.
Is the link marked rel="sponsored" or rel="nofollow"? Not automatically bad, but if they're selling link building and everything they place is nofollowed, you're paying for referral traffic and being told it's SEO.

If the answer is "we can't share client work," that's a reasonable position for named clients — but they can anonymise the client and still show you the linking page. Refusing to show any link they've ever built is not a confidentiality position.

Check 2 — Verify one case study independently

Take a case study with a named client. Put the domain into any free traffic-estimate tool and any backlink checker — free domain rating checkers will do — and see whether the growth curve matches the story. You're not looking for exact numbers; estimates are rough. You're looking for direction and timing.

The tell is a case study describing a "312% traffic increase" over a period where the domain's referring domains and estimated traffic are flat. Percentages with no baseline are the standard way to dress up small numbers: going from 40 visits to 164 is a 310% increase.

Check 3 — Audit their own site

An agency's own site is the one piece of work they fully control. It won't rank for "SEO agency" — nobody does without years of effort — but it should be technically clean: indexable, fast enough, sensible titles, working schema, and a backlink profile they built themselves.

This check has limits, and it's worth being fair about them. Plenty of excellent practitioners neglect their own marketing because they're busy with client work. A shoemaker's-children site is a yellow flag, not a red one. What is a red flag is an agency site with the same spammy footprint they'd give you: thin location pages, stuffed keywords, and 400 referring domains from directories nobody has heard of.

Check 4 — Read four clauses in the contract

Asset ownership. Content, accounts, and analytics properties must be yours. Some agencies publish "your" blog on a subdomain they own, and it vanishes when you leave.
Link disclosure. Do they commit to telling you where every link was placed? Without this you cannot audit anything, and you inherit whatever they built if it goes wrong.
Notice period. Twelve-month terms with no exit clause are the mechanism by which underperforming retainers persist. Six months plus 30 days' notice is reasonable.
What happens on termination. Do the links stay? Many bought placements are rented — they are removed when the invoice stops. Ask explicitly.

Check 5 — Confirm the reporting can prove them wrong

Legitimate reporting is falsifiable. It ties specific work to specific movement, and it includes the things that didn't work.

Ask what the monthly report contains. If the answer is a rankings screenshot and a list of tasks completed, you have no way to distinguish a good month from a bad one. A report that names referring domains gained, pages indexed, and conversions from organic is a report that can be checked — the standard set out in reporting link building results to a client.

Insist on direct access to your own Google Search Console and analytics. Not a PDF export — the accounts.

Red flags that are close to disqualifying

A guaranteed #1 ranking. Google's own guidance on hiring an SEO names this as a warning sign. Nobody controls the ranking; the guarantee is either hedged in the small print or attached to keywords nobody searches.
Unsolicited cold email claiming your site has "critical errors". Volume outreach with a manufactured problem.
A "special relationship with Google." No such relationship exists. Google Partner status applies to Ads, not organic search.
Vagueness about link sources, combined with per-link pricing that is implausibly low. Under $50 a link means private networks or bulk placements that carry genuine risk.
Deliverables measured only in hours. Hours are an input. You are buying outputs.
No named person doing the work. Ask who specifically will touch your account and what else they're on.

Signals that look bad but aren't

Vetting cuts both ways, and a few things get good agencies rejected unfairly:

A small team. Two experienced people frequently beat a fifty-person agency where your account lands with a junior.
Refusing to promise a timeline for rankings. This is honesty, not evasion. The honest answer is a range with conditions.
Recommending you spend less than you offered. Rare, and a strong signal. An agency telling you to fix your content before buying links is describing how the work actually sequences.
No case study in your exact industry. SEO fundamentals transfer. Insisting on a niche match narrows the field to whoever happens to have one client like you.

What "legit" doesn't mean

Legitimate does not mean effective, and it does not mean the spend is right for you. A completely honest agency can still be the wrong purchase if your site has thin content and twelve referring domains — at that stage the constraint is usually work you can do yourself.

That includes the link side. Reciprocal exchange trades one in-content link for another between site owners in related niches, with no money changing hands for the placement. Backlinkster runs that model and verifies each link is live by code, which also solves the disclosure problem above: you can see every placement, because you agreed to each one. Five swaps a month are free; the plans cover higher volume.

Judge an agency against what you could achieve without one, not against zero.

Frequently asked questions

How do I know if an SEO agency is legit? Ask for three live URLs of links they built, one verifiable case study, and a contract that gives you ownership of all content and accounts. Check each yourself with a free backlink tool. Agencies that refuse all three requests are not protecting client confidentiality — they are avoiding an audit.

What are the biggest SEO agency red flags? Guaranteed rankings, unsolicited cold outreach about "critical errors," claims of a special relationship with Google, refusal to disclose link sources, and reporting that consists only of a rankings screenshot. Google's own guidance on hiring an SEO lists the ranking guarantee as a warning sign.

How can I tell if my current SEO agency is doing anything? Look at referring domains over the contract period in any backlink tool, and at indexed pages and impressions in Search Console. If referring domains are flat and no new pages have been published, work has not happened regardless of what the report says. Auditing your backlink profile shows you how to read it.

Should an SEO agency guarantee results? No agency can guarantee a ranking, because none of them control the algorithm or the competition. What they can reasonably commit to is defined output — a number of articles, technical fixes, and referring domains per month — and to being measured against it.

Is it a bad sign if an SEO agency's own site doesn't rank? On its own, no. "SEO agency" is one of the most contested terms on the web and many good practitioners spend their time on client work. What matters more is whether their site is technically clean and whether its backlink profile looks earned rather than bought.

Can a cheap SEO agency actually damage my site? Yes. The main mechanism is link building — bulk placements from private networks can trigger manual actions or algorithmic suppression, and undoing it means recovering from a Google penalty. This is why link disclosure in the contract matters more than almost any other clause.

The bottom line

Legitimacy is checkable, and the checks take an hour: three real links, one verified case study, four contract clauses, and reporting that could show a bad month. Every one of them is a request a straightforward agency will meet without friction. The friction itself is the finding.