Shopify SEO Agency Red Flags: What Burned Founders Missed

Quick answer: The red flags that matter most are a guaranteed ranking, reports built on search terms nobody uses, deliverables you cannot list, an agency that controls your accounts, and secrecy about how links and content are made. Google’s own guidance says no one can guarantee a #1 ranking and that you should ask for explanations if something is unclear. Each flag below comes with a question to ask on a sales call and a sign of a good answer. They are patterns to check, not proof that anyone is acting in bad faith.

The sales call is the cheapest place to find out how an agency works, and most founders go in without a list of what to ask. This is that list.

It is written for a founder of a Shopify store in Australia or the US who is about to hire an SEO agency, or doubts the one they have. Each flag has what it looks like, why it matters, a test for the call, and good and bad answers.

Two things first. We sell SEO, so read this knowing that and hold us to the same list. And nothing here names an agency or says any particular agency does these things. One flag alone can have an innocent explanation; several together are a reason to slow down. This is general information, not legal advice. Earlier in the process? See how to choose a Shopify SEO agency in Australia and what to prepare before hiring a Shopify SEO agency.

What Google says about hiring an SEO

This list starts from Google’s own page for people hiring an SEO, “Do you need an SEO?” in Google Search Central (last updated 5 June 2026, checked 30 October 2026). It says “No one can guarantee a #1 ranking on Google”, warns about SEOs who allege a “special relationship” with Google or advertise a “priority submit”, and says to be careful if a company is secretive or will not clearly explain what it intends to do. It also lists questions to ask: examples of previous work, what results to expect over what timeframe and how success is measured, how you will communicate, and whether they are interested in your business. The eight flags below turn that into tests for a Shopify store.

Eight red flags, and how to test each on a call

1. A guaranteed ranking, or a guaranteed “page one”

What it looks like. “Guaranteed page one in 90 days.” “Money back if you are not number one.” A traffic or revenue forecast stated as certain.

Why it matters. The agency does not control the result. Google’s Search Essentials says a page can meet its technical requirements and best practices and still not be crawled, indexed or served. So a guarantee of the result either promises something outside the agency’s control or has an exit hidden in the wording.

The Australian Competition and Consumer Commission (ACCC) sets a related standard for business claims to consumers. Its page on false or misleading claims says a claim must be “accurate, truthful and based on reasonable grounds”, that this covers a quotation and a website, and that businesses shouldn’t “make promises they can’t keep, or make predictions without solid evidence”. That page is about claims to consumers, and I am not saying any particular guarantee breaches the law; whether it applies to your agreement is a question for a lawyer, and this is not legal advice. As a yardstick it works: a prediction should arrive with its reasoning.

Test it. “What exactly do you guarantee, in writing, and what happens if it does not happen? What is that forecast based on?”

A good answer guarantees what the agency controls (scope, reporting, who does the work and when), describes results as expected or possible, and says plainly that Google decides the rankings. A bad answer names a ranking or revenue figure with a date, or goes vague when you ask what happens if it is missed.

2. Rank reports on terms nobody searches

What it looks like. A monthly report saying “8 of 10 keywords in the top 3”, with green arrows. The keywords are your brand name or oddly specific phrases.

Why it matters. A ranking is only worth something if people search the term and buy. In Search Console, Google defines an impression as a user seeing, or potentially seeing, a link to your site, and it records a position only when a link got an impression. A phrase nobody types gets no impressions and no position. Google also says the reported position is averaged across queries, and that your own search can differ from that average due to variables such as search history and location. So “I searched and you are number one” proves very little.

A report can look good while hiding the problem. Illustrative numbers, not from a real store:

“8 of 10 keywords in the top 3” is true, and the simple average position of 4.5 looks healthy. But eight terms are ones you would rank for anyway or almost nobody searches, while the two with nearly all the demand sit at 14 and 19. The report is accurate and says nothing about where the money is.

Test it. “Can I see the keyword list with Search Console impressions and clicks for each, over the last three months? How do you separate brand searches from the rest?”

A good answer reports from your own Search Console, splits brand from non-brand, groups keywords by product and collection page, and ties organic landing pages to orders in Shopify or GA4. A bad answer is a rank-tracker PDF with no impressions, clicks or orders.

3. Vague deliverables, and charging for what Shopify already does

What it looks like. A proposal listing “on-page optimisation”, “technical SEO”, “content” and “link building” with no counts or named outputs. Or an audit whose main findings are things the platform already handles.

Why it matters. Shopify’s SEO overview in its help centre (as at 30 October 2026) says these are handled automatically: canonical tags, the sitemap.xml and robots.txt files, theme title tags that include your store name, and SSL certificates (HTTPS). It also says Shopify themes automatically include product schema markup. It leaves to you work such as keyword research, titles, meta descriptions, URLs and image alt text, 301 redirects when you move or discontinue products, adding your domain to Search Console, monitoring page speed, internal linking and site structure, and content. A “technical audit” that reports a missing sitemap or robots.txt file on a standard store is checking a box. Real problems tend to sit in the second list, or in how a theme and apps behave.

Google adds that an audit should give realistic estimates of improvement and of the work involved, and that you should check a third-party tool’s recommendations against its official guidance before making significant changes. A tool’s health score is the tool’s own; Google says these tools have no access to its internal ranking data.

Test it. “What are the deliverables for months one to three, as a list? How many pages will change, who writes, who approves, and what changes in my theme? Which audit findings does Shopify do by default?”

A good answer is a list of nouns with numbers and owners, tied to commercially important pages. What is included in Shopify SEO services in Australia shows a plain-language scope. A bad answer is verbs (“optimise”, “enhance”) with no counts.

4. Volume as the deliverable, and secrecy about how it is made

What it looks like. “50 blog posts a month.” “500 links a month.” Content with no named author or review. Links described only as “our network” or “outreach”.

Why it matters. Google’s spam policies list link spam, which includes buying or selling links for ranking purposes, excessive link exchanges, using automated programs to create links, and paid advertorials or native advertising with links that pass ranking credit, or with optimised anchor text, in articles, guest posts or press releases on other sites. They also define scaled content abuse as generating many pages mainly to manipulate rankings, “no matter how it’s created”, and give generative AI as an example. Google says violating sites may rank lower or not appear at all. Our post on the programmatic SEO trap on Shopify covers the page-count version.

Google is fair on one point: buying and selling links for advertising and sponsorship is a normal part of the web, and not a violation if the links are qualified with rel="nofollow" or rel="sponsored". The problem is not that links cost money. It is not knowing where they come from or how they are marked. Watch for the monthly “toxic link clean-up” too: Google calls the disavow tool an advanced feature to be used with caution, says most sites will not need it, and warns that incorrect use can harm your site’s performance in Search.

Test it. “Where will the links come from? Can you show five examples from past work, with the client’s permission? How are paid placements marked? Who writes the content and who checks it? Why does my site need a disavow, and do I have a manual action?”

A good answer is specific and slightly boring: named sites, named authors, a review step, links tied to real pages. A bad answer is “that is our proprietary process”. Google lists secrecy, or not explaining what they intend to do, as a warning in its own right.

5. They want your accounts, or they will own them

What it looks like. Search Console or GA4 set up under the agency’s login. Reports only in the agency’s dashboard. A request for your Shopify staff login and password.

Why it matters. The accounts hold your history. Google says only Search Console owners can add or remove users, and a verified owner proves ownership with a token on the site. If all verified owners are removed, remaining users lose access after a grace period, and data keeps being collected that nobody can view until ownership is verified again. A removed owner’s token stays valid unless it is deleted. In GA4, only Administrators can manage users.

Shopify has a proper route. Partners, including agencies and freelancers, send a collaborator request, and you give them a 4-digit code from the Security section of your Users page. You accept the request and set the permissions. Shopify says you cannot assign the Administrator store role to a collaborator or transfer store ownership to one, you can remove them, and access expires after 90 days without a login. A custom role can still carry broad permissions, so follow Shopify’s own advice and grant only what the work needs.

Test it. “Which Search Console property will you work in, and will I be the verified owner? How will you get into my store, and which role do you need? Can I see the same numbers in my own Search Console and GA4?”

A good answer has you as owner everywhere, the agency as a user with the narrowest role that lets it work, a collaborator request in Shopify (or a clear reason why not), and reports you can check yourself. A bad answer asks for your login, wants to be owner “for convenience”, or lets you see data only through its tool.

6. A “special relationship” with Google, or a secret AI formula

What it looks like. “We are a Google partner, so we get you indexed faster.” A tool “approved” by Google. Special files, schema or an “AI ranking” method said to be required to show up in AI answers. Or an ad-management agency hinting that its ads lift organic rankings.

Why it matters. Google’s hiring page says advertising with Google has no effect on your presence in its search results, and that Google does not evaluate or endorse third-party SEO tools. Its guide to AI features and your website says there are no additional requirements to appear in AI Overviews or AI Mode, and that you do not need new machine readable files, AI text files or markup, or any special schema.org structured data (last updated 10 December 2025, checked 30 October 2026). Google also says it does not guarantee that structured data will show up in results, even when a page passes its Rich Results Test.

This does not make GEO pointless. Google says the best practices for SEO remain relevant for AI features: a page must be indexed and eligible to show with a snippet, content should be helpful and people-first, and structured data should match the visible text. What the page rules out is a secret lever, and that pitch is the flag. GEO myths Shopify founders hear goes through the common ones.

Test it. “Where does Google say that? Can I see the page? What could I do myself without your tool?” Google’s hiring page also lists a question for agencies selling AI-search advice: is it aligned with Google’s official guidance on generative AI features?

A good answer points to published documentation, or says honestly where the evidence is thin and what is still a hypothesis. A bad answer is “trust me, I know people there”.

7. A contract you can enter but not leave

What it looks like. A 12-month term with auto-renewal, a notice period that only binds you, a fee to leave, or a clause letting the agency change terms while you cannot.

Why it matters. The ACCC says that since 9 November 2023, small businesses are protected from unfair terms in new or varied standard form contracts if they have fewer than 100 employees or under $10 million in annual turnover. Its examples of terms that may be unfair include terms that let one party but not the other end the contract, penalise one party but not the other for ending it, or change the terms. Only courts decide whether a term is unfair, and terms setting out the upfront price are not covered. A long contract is not automatically a bad one, and this is not legal advice; if you do not understand a contract, talk to a lawyer. Shopify SEO retainer vs project covers when each format makes sense.

Test it. “What is the notice period, and does it bind us equally? What do I keep if I leave: content, accounts, redirects, documentation? Can terms or price change mid-contract?”

A good answer is short, symmetrical and written down, with a handover. A bad answer is a long lock-in, a leaving fee and “that is our standard agreement” when you ask to change it.

8. They pitch before they ask about your business

What it looks like. A templated proposal a day after the first call, before anyone has asked about your margins, best sellers or conversion rate.

Why it matters. Google’s question list includes whether the SEO is interested in your business: your differentiators, competitors and how customers find you. For a Shopify store the right first questions are specific. Which products carry your margin? Where do organic orders come from today? Is your problem traffic or conversion? Shopify SEO vs CRO: which to fix first shows how to tell.

Test it. Count the questions they ask you. Then ask: “What would make you say SEO is not my best next step?”

A good answer gives a specific reason SEO might be wrong for you and a plan to look at your data first. A bad answer is a quote before a diagnosis.

If you already see these flags in your current agency

You do not need a dispute to check. Do these in order and keep it factual:

1. Check who owns your accounts. In Search Console, open Settings, then Users and permissions, and see whether you are a verified owner. Google says that page is visible only to property owners, so if you cannot see it, you are not one. Check the Administrators in GA4 and the Users page in Shopify. If you are not an owner anywhere, ask to be added before anything else.
2. Pull your own numbers. Export clicks, impressions and position by page and query from your own Search Console for the last three to six months and compare them with the agency’s report. Differences are a reason to ask, not a conclusion.
3. Split brand from non-brand, and look at the buyer terms alone.
4. Check the Manual actions report in Search Console. Google says it notifies you there, and in the message centre, if a manual action affects your site.
5. Read the contract for the exit: notice period, renewal and what you keep.
6. Ask for last month’s work in writing, page by page.

If it still looks wrong, what to do when your Shopify SEO agency is not delivering goes through the options. For a contract problem, the ACCC says small businesses can seek help through an ombudsman or dispute resolution service; it does not provide legal advice.

Want a second opinion on what you have? Tell us about your store.

What a healthy engagement looks like

We hold Prism3 to the same list, so here is what we can say today. We do not guarantee rankings. Engagements are month to month, with no 12-month lock-in. We send a progress report every two weeks and a monthly report that ties the work to revenue and conversion outcomes, not impressions. We diagnose before we prescribe, and you talk to the person doing the work. You do not have to hire us to use any of this.

Key takeaways

• Google says no one can guarantee a #1 ranking, so test any guarantee first.
• A rank report needs impressions, clicks, a brand and non-brand split, and orders beside it.
• Ask for deliverables as a list with numbers and owners.
• Own Search Console, GA4 and your Shopify access. Give the agency the narrowest role that works.
• Ask where links come from and who writes the content. Secrecy and volume are warnings in Google’s own documents.
• Google says no special AI file or schema is needed to appear in AI Overviews or AI Mode.
• A contract should end as easily as it begins; only courts decide whether a term is unfair.
• A good agency asks about your business first and can say when SEO is not your next move.

FAQs

What is the biggest red flag when hiring a Shopify SEO agency?

A guarantee of a specific ranking or result. Google’s guidance for people hiring an SEO says no one can guarantee a #1 ranking. Ask what is guaranteed, in writing, and what happens if it does not occur. A guarantee on scope, reporting and delivery is reasonable.

Should I give an SEO agency admin access to my Shopify store?

Not by default. Shopify offers collaborator accounts for Partners: you share a request code, accept the request, set the permissions and can remove the account, and collaborators cannot be given the Administrator store role. Grant only the permissions the work needs. During an audit, Google advises read access to Search Console, not write access.

How do I check whether my agency’s rank reports are real?

Compare them with your own Search Console. Look at clicks, impressions and average position by query and page over the same dates, and split brand from non-brand. Position is an average, and what you see in one search varies with location and history, so one screenshot proves little.

Is a 12-month SEO contract always a red flag?

No. The question is whether the exit and change terms work both ways. The ACCC lists one-way exit, penalty and change terms among examples that may be unfair in standard form contracts, and says only courts decide. If unsure, see a lawyer before signing.

How long should I wait before judging an SEO agency?

Judge the work first and the results second. Google says some changes take effect in hours and others take months, and suggests waiting a few weeks to assess a change. In the first weeks you should see the deliverables you were promised, reported honestly. How long Shopify SEO takes covers the rest.

Want to ask us the same questions?

Ask us the same questions you would ask any agency. Our Shopify SEO service comes with no ranking guarantees, runs month to month and reports on revenue, not impressions. If you want a second opinion, on an agency you are weighing or on your store, tell us about your store or book a free 30-minute diagnostic. We look at your store before we recommend anything, and we tell you honestly if SEO isn’t the right move. No pitch.