We read 210 real customer reviews from web design clients — not on agency websites, but on BBB, Trustpilot, Google, and Reddit. The patterns of scams and disappointments were shockingly consistent. The same tactics appear again and again, across different agencies, in different cities, targeting different industries.
This guide is not about naming and shaming specific agencies. It is about giving you the red flags so you can spot a bad deal before you sign a contract and hand over your money.
Red Flag #1: Your Website Is Held Hostage
This is the most common scam in the industry, and it often does not feel like a scam until you try to leave. The agency registers your domain name under their account. They host your website on their servers. Your email runs through their systems. Everything works fine — until you want to switch providers.
When you ask to leave, they refuse to hand over the domain, the hosting credentials, or the website files. Some charge exorbitant "transfer fees" — $2,000 to $5,000 is common. Others simply stop responding. You are left with two options: pay whatever they demand or start over from scratch with a new domain and a new website.
How to protect yourself: Register your own domain through a major registrar (Google Domains, Namecheap, Cloudflare). If the agency insists on registering it for you, ensure the domain is registered in your name with your email as the contact. Get this in writing before work begins.
Red Flag #2: Bait-and-Switch Pricing
The initial quote sounds reasonable — $1,500 for a professional website. But then the add-ons start. SEO setup is $500 extra. Mobile optimization is $800 extra. A contact form is $200 extra. SSL certificate installation is $150. Before you know it, the $1,500 website costs $4,500 — and you feel committed because you have already paid half and they have your content.
Some agencies use a different variant: they quote a low upfront price but lock you into a 24–36 month "maintenance" contract at $299/month. That $1,500 website actually costs $8,676 over two years. Try to cancel early, and there is a $2,000 termination fee.
How to protect yourself: Ask for a comprehensive, line-item quote before signing anything. Specifically ask: "Is mobile optimization included? Is SEO included? Are there any monthly fees beyond hosting? What happens if I want to cancel?" Compare what is included versus what costs extra. If the answers are vague, walk away.
For context on what a professional website should actually cost, see our transparent pricing breakdown.
Red Flag #3: Fake Portfolios
Some agencies display beautiful websites in their portfolio that they did not build. They scrape designs from Dribbble, Behance, or other agencies' portfolios and present them as their own. Others show real sites they built — but those sites were designed by a team member who has since left the company, and the current team cannot replicate that quality.
How to protect yourself: For any site in their portfolio, visit the live URL and check the footer for credits. Ask the agency for client references you can actually contact. If they cannot provide references, that is a major red flag. Also check the portfolio site's WHOIS data — if the domain is registered to a different agency, you have your answer.
Red Flag #4: Disappearing After Payment
The pattern: enthusiastic communication during the sales process, prompt responses before you pay, and then — silence. Emails go unanswered for days, then weeks. Phone calls go to voicemail. Deadlines pass without deliverables. The project drags on for months. Some agencies eventually deliver something, but it is a fraction of what was promised. Others simply vanish.
In our review analysis, this was the second most common complaint — appearing in 47 of 210 reviews (22%). Many of these reviewers had paid 50–100% of the project cost upfront.
How to protect yourself: Never pay more than 50% upfront. Structure payments around milestones: 30% to start, 30% at design approval, 40% at launch. Use a payment method with buyer protection (credit card, not wire transfer). And get a written contract that specifies deliverables, deadlines, and refund conditions.
Red Flag #5: Refusing to Hand Over Passwords
Your website. Your domain. Your hosting. Your analytics. Your Google Business Profile. You should have admin-level access to all of it. If an agency sets up any of these accounts and refuses to share the login credentials, they are building dependency, not a website.
How to protect yourself: Before work begins, establish that you will have admin access to every account created for your business. Get this in writing. If the agency uses a proprietary CMS that you cannot access without them, consider that a red flag — you should be able to edit your own website.
Red Flag #6: No Contract or Scope of Work
A handshake deal or a casual email agreement is not a contract. Without a written scope of work, there is no agreement on what you are getting. How many pages? What features are included? What is the timeline? What happens if either side wants to make changes? What are the refund terms?
Agencies that avoid contracts are not being "easy to work with" — they are preserving the ability to under-deliver without accountability.
How to protect yourself: Insist on a written contract that includes: detailed scope of work, number of pages and features, timeline with specific dates, payment schedule with milestones, revision policy, ownership and transfer terms, and cancellation/refund conditions. If an agency will not provide this, they are not worth your business.
Red Flag #7: Offshore Outsourcing Disguised as Local
There is nothing inherently wrong with international teams. But there is a major problem when an agency presents itself as a local operation while secretly outsourcing all work overseas. You think you are working with a team in Austin, but your website is being built by contractors in a different country who do not understand your local market, your industry, or your customers.
The signs: communication only via email (never phone or video), responses that arrive during off-hours for your time zone, language quality issues, and designs that feel generic rather than tailored to your industry.
How to protect yourself: Ask for a video call with the person who will actually design and build your site. If they refuse or always have an excuse, that is your answer. Check the agency's LinkedIn to verify team members exist and are located where the agency claims to be.
How Zelov Studio Is Different
We built our entire business model to address every one of these red flags:
- You own everything. Your domain, your hosting, your files, your analytics. We set it up, you own it. If you ever leave, everything goes with you — no transfer fees, no hostage situations.
- Transparent, all-inclusive pricing. Our pricing page shows exactly what you get at every tier. No hidden fees, no surprise add-ons. Mobile optimization, SEO, and contact forms are included at every price point.
- A real portfolio of real work. Every site in our portfolio is live and verifiable. We will connect you with past clients who can speak to their experience.
- Written guarantees. Our On-Time Guarantee and Until-You-Love-It Promise are exactly what they sound like. If we miss a deadline or you are not happy, we make it right — in writing.
- No long-term contracts. Maintenance is month-to-month. Cancel anytime. No termination fees.
Learn more about our approach on the About page, or jump straight to pricing to see what a transparent web design engagement looks like.
What to Verify Before Signing Any Contract
Before you commit to any web design agency, run through this verification checklist. It takes 30 minutes and can save you thousands of dollars and months of frustration.
- Google the agency name + "reviews" and "complaints." Check BBB, Trustpilot, Google Reviews, and Reddit. Look at the one-star and two-star reviews specifically — the patterns matter more than the average score.
- Visit three live portfolio sites. Click through them on your phone. Check load speed with Google PageSpeed Insights. If the agency's own portfolio sites are slow or broken on mobile, that is exactly what you will get.
- Ask who will actually do the work. Request a video call with the designer or developer assigned to your project. If the agency cannot or will not introduce you to the person building your site, treat that as a red flag.
- Request a sample contract before paying anything. Read the sections on ownership, termination, and refunds. If there is no contract, or they pressure you to sign before reading it, walk away.
- Confirm domain ownership in writing. The contract should explicitly state that you own the domain, the hosting account, and all website files. If it does not, add it.
Legitimate agencies welcome these questions. They understand that clients have been burned before and they appreciate working with informed buyers. An agency that gets defensive, dismissive, or evasive when you ask about ownership, contracts, or references is telling you everything you need to know.
The best protection against a web design scam is not being smarter than the scammer. It is knowing the red flags before you start shopping, so you never engage with one in the first place.