How Do I Know If My Digital Marketing Agency Is Legit?

It usually starts as a quiet suspicion. The invoices arrive on time, the monthly report is full of upward-pointing charts, and yet the phone is not ringing any more than it did a year ago. So the question forms — one that thousands of business owners type into Google every month: is my marketing agency actually legit?

The uncomfortable truth about this industry is that its worst operators and its best ones send invoices that look identical. The difference lives in seven places you can check yourself, this week, without a confrontation. This guide walks through each — and how to tell the difference between an agency that is underperforming and one that was never really working at all.

Check 1: Do You Own Your Own Accounts?

Log in — right now — to your own ad account, your Google Business Profile, your website admin, and your social profiles. Not screenshots the agency sends; actual login access under your own credentials. Legitimate agencies operate as authorized managers on accounts the client owns. Operators build hostage situations: everything registered under the agency, so that leaving means starting from zero. If you cannot access what is yours, that is not a red flag — it is the finding.

Check 2: Can You See the Actual Work?

Every service has a verifiable artifact. Content: the posts exist, dated, on your profiles. Paid campaigns: the ads are visible in your ad account and in Meta's public Ad Library. SEO: pages were built or changed, and Search Console (which you should have access to — see Check 1) shows the activity. Ask for the artifact behind every line item on the invoice. A legitimate agency answers with links. The other kind answers with philosophy.

Check 3: Does the Reporting Show Outcomes or Activity?

A report built on impressions, reach, and engagement rate describes activity. A report built on calls, inquiries, booked appointments, and cost per lead describes outcomes. Activity metrics are not fake — but an agency that only ever shows activity is answering a question you did not ask. Request one addition to next month's report: leads generated and what each cost. The response to that request tells you most of what you need to know.

Check 4: The Silence Test

Legitimate agencies communicate on a rhythm — a named contact, scheduled check-ins, answers within a business day. Trouble sounds like this: the salesperson who signed you vanished, replies take a week, every call reaches someone new, and questions about results get answered with reassurance instead of numbers. Communication decay is rarely just communication decay; it usually tracks the work itself.

Check 5: Verify the Agency Itself

Ten minutes of due diligence you may never have done after signing: does the agency's own website practice what it sells? Are the case studies identifiable businesses you can find and verify, or anonymous "Client A" stories with stock photos? Do reviews exist on Google and industry platforms, from real named businesses? An agency that cannot market itself or show verifiable work is telling you its capability level directly.

What Underperformance Looks Like vs. What Fraud Looks Like

Here is the fair distinction: marketing has ramp time, algorithms shift, and honest agencies have slow quarters. Underperformance looks like transparency about disappointing numbers plus a concrete adjustment plan. Illegitimacy looks like opacity — inaccessible accounts, unverifiable work, activity-only reporting, and reassurance in place of data. Slow results with full transparency deserve patience. Good vibes with no verifiable work deserve a cancellation letter — and if that is where you are, take your accounts (Check 1) before you send it, then start fresh with a better process for choosing a new agency. If the issue is specifically search visibility, our guide to SEO and AI search marketing in NJ covers what a legitimate engagement there should look like.