How do I spot a fake web developer or agency?

Most developers are honest, but a fake web developer or agency can take an advance and disappear, or deliver a pirated template and hold your domain hostage. The warning signs are usually visible before you pay, if you know where to look.

Here are the red flags and the quick checks that protect you.

Ten warning signs of a fake web developer

1. Portfolio of screenshots only. No live links you can open and test.
2. Sites in the portfolio credit someone else. Check the footer of each site.
3. Full payment upfront. Honest providers accept milestone payments.
4. Prices far below everyone else. Often a template reused for many clients.
5. No video call. They avoid showing who they are.
6. No company details. No address, registration or real team names.
7. Reviews you cannot verify. Only testimonials on their own site.
8. Domain in their name. They want to register it for you and keep the login.
9. Pressure tactics. “Offer ends today” or “only two slots left”.
10. Vague contract or none at all.

Quick checks you can do yourself

A brand-new domain is not proof of fraud, but together with other red flags it is worth noting. Our guide on checking reviews explains how to spot fake ones.

How a fake web developer usually operates

Common patterns include taking an advance and going silent, delivering a template with your logo swapped in, using pirated themes that later get hacked, or keeping the domain and charging high fees to release it. Knowing these patterns makes them easier to spot early.

How to protect your money

• Pay in milestones tied to work you can see on a staging site.
• Use payment methods with buyer protection where possible.
• Sign a written agreement listing scope, timeline and ownership.
• Keep copies of all messages and files.

How to protect your website

• Register the domain yourself, in your own name.
• Buy hosting in your own account and add the developer as a user.
• Ask for full admin access before the final payment.
• Ask which themes and plugins are used and confirm they are licensed.

What to do if you were already scammed

Stop further payments, collect all evidence, and report the case to the platform you used or to local consumer and cybercrime authorities. If the domain is in the fake web developer’s name, contact the registrar and ask about their dispute process. Then secure every login you can reach.

Example: a near miss

A shop owner received a very low quote with a portfolio of polished sites. One quick check showed that three of those sites had a different agency’s name in the footer, and the provider refused a video call. The owner walked away before paying. Checks like this take minutes and catch most cases. A genuine provider will understand why you ask, because good developers have also seen a fake web developer copy their work. If anyone becomes defensive when you ask for proof, treat it as another warning sign.