We have taken on more "rescue" projects at Outgle than we would like to admit. A founder shows up with a half-built site, a domain they do not control, and a WhatsApp thread full of unanswered messages. By the time they reach us, they have usually already paid. This article is not about scaring you away from hiring an agency. It is about the specific things you can check before you hand over money, so you do not end up being the next story we hear.
A scam IT agency rarely announces itself. Nobody puts "we will disappear after the deposit" in their pitch deck. Instead, the warning signs show up in small, easy to miss details during the sales conversation, long before any code gets written. Once you know what to look for, they are actually not that hard to spot.
Why This Keeps Happening to Startups and SMBs
Founders are usually moving fast when they hire for web design or development. There is a product to launch, a deadline from an investor or a client, and not much time to vet ten agencies properly. Scam operators and low-quality vendors know this. They are built to exploit urgency, not to compete on quality.
Add to this the fact that most of this hiring happens over chat and email, often across countries and time zones, and you get a situation where trust is based almost entirely on a portfolio page and a confident sales call. That is thin ground to build a business decision on.
Red Flag 1: They Ask for Full Payment Upfront
Deposits are completely normal. Most legitimate agencies and freelancers ask for 30 to 50 percent before starting work, which covers their time and gives both sides some commitment. That is fair.
What is not fair is a demand for 100 percent payment before any work begins, especially if it comes with pressure like "this rate is only available today" or "we need it upfront because we had bad experiences with clients before." That second excuse might even be true, but it does not change the fact that you are now carrying all the risk in the relationship.
This is part of why we built our own Grow Now Pay Later structure, 30 percent upfront and the rest on an EMI basis, specifically for founders who do not want to bet their entire budget on trust alone before a single milestone is delivered.
Red Flag 2: No Contract, or a Contract That Explains Nothing
If an agency is comfortable starting work on a verbal agreement or a two-line email, that comfort should worry you. A real contract does not need to be complicated, but it should clearly state the scope of work, the timeline, the payment schedule, who owns the final files and domain, and what happens if either side wants to walk away.
Vague contracts are just as risky as no contract. "We will build you a modern website" tells you nothing. How many pages? Which platform? Who writes the content? Is SEO included or extra? A serious agency answers these questions in writing before you sign, not after you ask a second time.
Red Flag 3: They Control Your Domain, Hosting, or Source Code
This is one of the most common ways clients get trapped. An agency registers your domain "for convenience," sets up hosting under their own account, and builds the site in a way that only they can access or export. Everything looks fine until you want to leave, make a bigger change, or switch providers. Suddenly you are being quoted a "release fee," or worse, you cannot get access at all.
Your domain should be registered in your name, under your own account. Your hosting should be something you control, even if the agency manages it for you day to day. Ask directly: "If I stop working with you tomorrow, what exactly do I walk away with?" A good agency answers this without flinching.
Red Flag 4: Guaranteed Results That No One Can Actually Guarantee
"We will get you to page one of Google in 30 days." "We guarantee 10,000 followers this month." Anyone who works in SEO or digital marketing for a living knows these promises are not honest, because rankings and organic growth depend on factors no agency fully controls, including your competitors, your niche, and algorithm changes nobody gets advance notice of.
A legitimate agency will tell you what they can influence with strategy and effort, and what they cannot promise as a fixed outcome. If someone skips that nuance entirely and just gives you a number and a date, they are selling you a feeling, not a plan.
Red Flag 5: A Fake or Exaggerated Location
This one is personal for us. Outgle is a Karachi-based agency, and we say that openly, on our site, in our proposals, everywhere. We have seen agencies invent a US or UK address, sometimes just a shared mailbox service, purely to look more "trustworthy" to Western clients. When the work goes wrong, that fake address does not help you, and it usually means the rest of their pitch was built the same way, on appearance instead of substance.
Where a company is based is not a quality signal by itself. Great work comes out of Karachi, Lagos, Manila, and small towns everywhere. What matters is whether they are honest about who they are. If an agency needs to pretend to be somewhere they are not, ask yourself what else they might be willing to fake.
Red Flag 6: No Verifiable Portfolio or Case Studies
A portfolio full of generic template screenshots, with no links to live sites, no client names, and no explanation of what was actually done versus what came pre-built in a theme, is not a portfolio. It is a slideshow.
Ask for live links you can visit yourself. Ask what specific problem the project solved, not just how it looks. If they cannot answer, or the "before and after" story sounds identical for every client they mention, that is worth noting. For reference, this is the kind of detail a real portfolio should include, actual sites, actual outcomes, not just mockups.
Red Flag 7: Communication That Is Vague, Slow, or Defensive
How an agency communicates before you pay them is usually the best preview of how they will communicate after. Watch for answers that dodge the actual question, responses that take days for something simple, or a defensive tone when you ask a reasonable follow-up.
On the other hand, an agency that says "we don't do that" or "that's outside our expertise" when it is true is actually showing you something good. Honesty about limits is rare, and it is one of the clearest signs you are dealing with people who plan to be around after the invoice is paid.
Red Flag 8: Pressure Tactics and Manufactured Urgency
"This price is only good until Friday." "We can only take one more client this month." Scarcity tactics exist in every industry, but in IT services they are almost always manufactured, since agencies are rarely turning away serious work over a pricing decision. If you feel rushed into signing before you have had time to read the contract properly, slow down on purpose. A legitimate opportunity will still be there tomorrow.
A Quick Comparison Table
| Signal | Likely Scam or Low-Quality Vendor | Likely Legitimate Agency |
| Payment terms | Full payment upfront, urgency-driven | Partial deposit, clear milestone schedule |
| Contract | None, or vague one-liner | Detailed scope, timeline, ownership terms |
| Domain and hosting | Registered under their account | Registered under your name/account |
| Results promised | Fixed rankings, guaranteed followers | Strategy explained, no fixed guarantees |
| Location | Fake or vague US/UK address | Transparent about where the team is based |
| Portfolio | Generic templates, no live links | Live sites, specific case studies |
| Communication | Slow, defensive, or evasive | Clear, direct, willing to say "no" |
What to Do If You Already Got Burned
If you are reading this after the fact, not before, you are not alone, and it is fixable more often than people think. Start by documenting everything, contracts, invoices, chat logs, and payment records. Try to recover access to your domain and hosting directly through your registrar or hosting provider's support team, since you may have more rights there than the agency implied. If a significant amount of money is involved, a chargeback through your bank or payment provider is worth pursuing quickly, since most have time limits.
This exact situation is why we set up Scam Recovery Support at Outgle, a case-based service for businesses that got burned by a bad agency or freelancer and need someone to assess what is salvageable, what needs to be rebuilt, and how to actually get ownership of their own assets back.
If you want the longer version of this story, told through real, lightly fictionalized situations from building an agency from the ground up, including a client who paid fifty dollars for a website and thousands more to fix what it broke, that is exactly what The Fifty Dollar Mistake Every Startup Founder Makes is about.
FAQs
How much should I pay upfront for a website project? Thirty to fifty percent is standard for most legitimate agencies and freelancers. Full payment upfront, before any work has started, is a common red flag.
Should I always use a written contract, even for a small project? Yes. Even a one-page agreement covering scope, cost, timeline, and ownership protects both sides and gives you something to point to if the project goes off track.
Who should own my domain name, me or the agency? You should. It should be registered under your own name and account, even if the agency handles the technical setup and renewals on your behalf.
Is it a bad sign if an agency is based outside the US or UK? No, location alone means nothing about quality. What matters is whether they are transparent about where they actually are, instead of faking a US or UK presence to seem more credible.
Can I trust an agency that guarantees first-page Google rankings? Be cautious. No one fully controls search rankings, since algorithms and competition change constantly. Reasonable agencies explain strategy and realistic timelines instead of guaranteeing outcomes.
What should I do first if I think I have been scammed by an agency? Document everything, contact your domain registrar and hosting provider directly to check what access you actually have, and contact your bank about a possible chargeback if payment was recent.
Are there official places to report a scam IT agency? Yes. In the US, you can file a report with the Federal Trade Commission and check the Better Business Bureau for existing complaints against the company before and after you hire them.
Conclusion
Most of these red flags are not dramatic on their own. It is usually a pattern, vague answers, pressure to pay fast, reluctance to put things in writing, that tells you what is actually going on before the contract is signed. Trust the pattern, not the pitch.
If you have already been burned by an agency that overpromised and disappeared, this is worth a real conversation before you hire again. Get in touch with Outgle and we will tell you honestly whether it is something we can help with or not.