How to Vet an Ecommerce Agency Before You Pay a Cent

One documented case: a business owner paid an agency €500 upfront. Partway through the engagement, the agency deleted the client’s live ad campaigns to pressure continued payment. A separate case: an agency with access to a client’s own social media pages used that access to contact the client’s customers directly, and posted fake five-star reviews under the client’s business name. These aren’t cautionary tales invented to scare small business owners into caution for its own sake — they’re documented patterns, and the thread connecting almost every version of this story is the same: the business never actually owned its own accounts, domain, or assets. The agency did, functionally, even if the contract implied otherwise.

That single fact — who actually owns what, on paper and in the account settings — is the difference between a bad agency experience costing you a few wasted weeks and it costing you your ad account, your customer list, or your ability to even switch providers without starting from zero.

What to actually check, in order

Before any money changes hands, get in writing, specifically: the Shopify store, the domain registration, the ad accounts (Meta, Google, whichever platforms apply), and any custom code written, all remain owned by you, with the agency granted collaborator or manager-level access rather than primary ownership. This single point resolves the majority of horror stories before they can start, because an agency that can’t hold your assets hostage has far less leverage to misbehave with, even if they wanted to.

Ask for two or three real, currently active clients you can actually contact directly — not testimonials on a website, not logos, an actual name and a way to reach them. A legitimate agency with real results will have clients willing to spend five minutes on a call saying so. Reluctance here, or a pattern of “testimonials only, no direct contact,” is worth taking seriously as a signal on its own.

Get the scope of work written down specifically enough that both sides could point to it later and agree on what was and wasn’t included — not “website redesign” but “homepage, three product page templates, and a checkout page, with two rounds of revisions.” Vague scope is where both honest misunderstandings and dishonest scope-creep tend to live, and a specific, written scope protects both a good client and a good agency from that ambiguity.

Ask directly how the engagement ends if either side wants to stop — what happens to access, to work in progress, to any retainer paid but unused. A straightforward, already-thought-through answer is a good sign. Hesitation or vagueness here is worth noticing, the same way you’d notice a landlord being evasive about how a deposit gets returned.

None of this vetting process costs anything but time — a phone call, a written scope document, and a direct ownership clause, all before a single payment is made. The businesses in the horror stories above almost universally skipped this because they were in a hurry to launch, which is an understandable pressure but an expensive one in hindsight.

The payment structure itself is a signal, not just a formality

How an agency wants to be paid tells you almost as much as anything else on this list. A large lump sum requested entirely upfront, before any work is visible, concentrates all the risk on your side of the table — if the relationship goes wrong in week two, you’ve already paid for the whole engagement with nothing to show for it. A structure tied to milestones (a deposit to start, a payment at a defined checkpoint, a final payment on delivery) keeps both sides honest, because the agency has an ongoing reason to keep delivering rather than an ongoing reason to stall once they’ve already been paid in full. It’s worth treating “we require 100% upfront, no exceptions” as a real yellow flag worth asking about directly, not a normal industry standard to accept without question — plenty of legitimate agencies don’t operate that way.

What structured engagements look like when this is built in from the start

A fixed-scope build or a Landing Page Sprint sidesteps most of this risk by design rather than by trust: fixed price agreed upfront, a fixed timeline, a specifically defined deliverable, and ownership of the finished asset transferred to you as a stated part of the engagement, not an afterthought negotiated after a dispute starts. That structure exists because it’s the version of “hiring help” that doesn’t require blind faith in a stranger’s good intentions — it just requires reading the scope before signing it.