Lead Generation Agency Red Flags: 12 Warning Signs Before You Sign

The biggest red flags when hiring a lead generation agency are promises they cannot back in writing, risks they push onto you (like sending from your main domain), and reporting you cannot audit. A good agency explains exactly how it finds prospects, protects deliverability and counts results, then puts that in the contract. Below are 12 warning signs, why each one matters, and what to ask for instead.

This is a field guide for the sales call and the contract review. If you want a scored checklist for comparing several agencies, use our lead generation agency checklist alongside it.

Who wrote this: Nerdy Joe is the content site of Koldify, a done-for-you cold email agency, so we are on the agency side of this table. Every red flag below applies to us too, and you should hold us to it.

The 12 red flags at a glance

Red flag 1: Guaranteed results with nothing in writing

"We guarantee 30 meetings a month" sounds great on a call. The problem is what happens when it does not arrive: if the promise is not in the contract with a definition and a remedy, you have nothing to enforce.

Not every guarantee is a scam. Some agencies write a floor into the plan. Belkins, for example, lists a guaranteed appointments-per-year figure on its starter plan. The difference is that it is published and tied to a defined offer.

What to do instead: ask "What exactly do you guarantee, over what period, and what happens if you miss it?" Then ask to see that sentence in the agreement.

Red flag 2: They want to send from your main domain

Your main domain carries your invoices, customer support and hiring email. Cold outreach carries real risk of spam complaints, and Google tells bulk senders to keep user-reported spam below 0.1% and never reach 0.3%. If a campaign goes wrong, you want that damage on a separate domain, not on the one your business runs on.

An agency that says "it looks more authentic from your real domain" is optimizing for its numbers with your asset.

What to do instead: require separate sending domains. At Koldify we use separate sending domains on infrastructure we own and operate, and never the client's main domain. Other good agencies set up domains in the client's name. Either model can work, as long as it is clear who owns what and your main domain is never touched.

Red flag 3: Vague answers about where the list comes from

Ask "Where do the contacts come from?" and listen for specifics: which data source, which filters, how emails are verified, and how current customers and competitors are excluded. "Our proprietary database" with no further detail is a warning sign, especially if the same list could be sold to your competitors.

Bad data shows up fast as bounces. Apollo's own guidance says a bounce rate of 8% or higher calls for immediate action, and sending platforms like Smartlead let you auto-pause campaigns at lower thresholds such as 3% or 5%.

What to do instead: ask for a sample of 25 to 50 records before launch. Spot-check them yourself, for example by searching a few in Apollo to see if titles and companies match. Confirm in writing that your list is not shared with other clients.

Some tool links here are affiliate links (disclosure).

Red flag 4: No deliverability plan

If an agency cannot explain how its emails reach the inbox, they often do not. A real plan covers authentication, warmup, sending limits and monitoring.

The baseline is not optional. Google requires bulk senders to authenticate mail with both SPF and DKIM and to publish a DMARC record, and bulk sender status starts at close to 5,000 messages a day to personal Gmail accounts.

What to do instead: ask these four questions:

• How long do new inboxes warm before campaigns send?
• How many emails per inbox per day, and how do you ramp?
• How do you check inbox placement, and how often?
• What happens when a domain's health drops?

Good answers are specific. For reference, Smartlead advises two or more weeks of warmup for existing accounts and one to two months for new domains, and Koldify warms inboxes for about three weeks before campaigns typically launch around week four. If you want to verify placement yourself, inexpensive tools exist: PlusVibe placement tests start at $19 a month as of October 2026.

Red flag 5: Huge volume from the first week

"We'll send 20,000 emails in week one" is not a selling point. New inboxes that blast volume get flagged. Apollo, for example, recommends starting at 50 emails per day per mailbox and raising volume only after you see a 5%+ reply rate.

What to do instead: ask for the ramp schedule. A careful agency can tell you roughly what volume looks like in week one, week two and month two, and why.

Red flag 6: Reporting built on vanity metrics

Watch what the agency puts at the top of its reports. Emails sent, open rates and "engagement" are easy to inflate. Open tracking in particular is unreliable: Apple Mail Privacy Protection can preload images through Apple's servers, which fires tracking pixels even when nobody read the message.

What to do instead: agree up front on the numbers that matter:

• Positive replies (people who said yes, maybe or tell me more)
• Meetings held, not just booked
• Opportunities created and pipeline value
• Bounce rate and spam complaints, as health checks

If an agency resists reporting on these, it is telling you something.

Red flag 7: Long lock-in with no performance exit

A 12-month contract for an untested channel is a lot of risk to carry. Many established agencies do not ask for it. According to their own sites, SoPro states no minimum contract, Cleverly runs month to month, and Pearl Lemon Leads advertises no long lock-in.

Some lock-in is understandable when setup costs are real. A fair agency will still give you a way out if they do not deliver.

What to do instead: ask for month-to-month terms, a short paid pilot, or a performance exit clause tied to the metrics from red flag 6. Our guide to lead generation pricing models covers retainer and pay-per-lead terms in more detail.

Red flag 8: A "lead" that nobody has defined

Pay-per-lead and pay-per-appointment deals can be fair, but only if "lead" means something. Without a definition, an out-of-office reply, a "not interested" or a student with a Gmail address can all end up on your invoice.

What to do instead: write the definition into the agreement. A useful one covers:

• Title and seniority range
• Company size, industry and geography
• What the person actually did (replied with interest, accepted a meeting, attended)
• What does not count (existing customers, duplicates, competitors, no-shows)
• How disputes are handled and how fast

Red flag 9: Nothing to approve before launch

If the first time you see your campaign is in a prospect's forwarded complaint, the process is broken. Your market will judge your brand by those emails.

What to do instead: require written sign-off on three things before anything sends: the target list criteria (plus a sample), the offer, and the full sequence copy. At Koldify, lists, offer and copy are built with the client and approved before launch. Any good agency should work this way.

Red flag 10: You never see the raw replies

Some agencies filter replies and pass along only what they label as "qualified." That hides two things you need: the leads they misjudged, and the objections your market keeps raising.

What to do instead: ask where replies go and who answers them. You should be able to see every reply, positive or not. Koldify routes replies to the client, who handles the conversation, the booking and the closing, but even agencies that book meetings for you should give you full reply access.

Want a second opinion? If you are reviewing an agency proposal and something feels off, book a 30-minute call with David at Koldify. He will go through it with you, even if you end up hiring someone else.

Red flag 11: Shrugging off compliance

Cold email is legal in many markets when done right, but the rules have teeth. Under the US CAN-SPAM Act, each email in violation can draw penalties of up to $53,088, according to the FTC. The FTC also says both the company whose product is promoted and the company that sends the message may be held legally responsible. Hiring an agency does not move that risk off you.

The basics include accurate sender information, a non-deceptive subject line, a valid postal address, a clear way to opt out, and honoring opt-outs within 10 business days. Prospects in other countries may fall under stricter rules.

What to do instead: ask how opt-outs are captured and synced, which address appears in emails, and how they handle prospects outside the US. If the answer is "don't worry about it," worry about it.

Red flag 12: Proof you cannot check

Logo walls and big totals are easy to put on a website. Look for proof with enough detail to be real: a named client, a time frame and a specific result. Even then, treat headline numbers as marketing until you talk to a client yourself.

For transparency, here is how Koldify presents its own proof (from koldify.io): Vidsec got 160+ ready-to-buy leads in 2 months and closed $12,000+; Black Stone Funding Group got 120+ leads in 60 days; Skrapper got 140+ interested leads. Ask any agency, including us, for a reference you can call.

What to do instead: ask for two references in a business like yours and call them. Ask what the first 60 days looked like, what went wrong, and whether they would hire the agency again.

Smaller warning signs worth noticing

These are not deal-breakers alone, but two or three together should slow you down:

• They will not explain pricing until after a long discovery process, then push for a same-day signature.
• A large non-refundable setup fee with no clear list of what it covers.
• The person selling you will never work on your account, and you cannot meet who will.
• They claim to work for every industry and every deal size.
• They cannot tell you who you are not a good fit for.

How to vet an agency in one week

1. Day 1: send the 12 questions from the table above by email, so the answers are in writing.
2. Day 2: review their sample list and sample sequence. Check 10 records yourself.
3. Day 3: call two references.
4. Day 4: read the contract for the guarantee wording, lead definition, term, exit clause and data ownership.
5. Day 5: compare against at least one other agency, or against running it yourself.

For the full hiring process, see how to hire a lead generation agency.

If you would rather run it yourself

Some readers finish this list and decide to keep outbound in-house. That is a reasonable choice when you have the time. The core stack is a data source such as Apollo, a sending platform such as Instantly, Smartlead or PlusVibe, and separate sending domains with warmed inboxes. Our guide to cold email infrastructure walks through the setup.

Nerdy Joe is a certified Apollo.io Managed Services Partner and a PlusVibe Certified Silver Partner, which is part of why we recommend those tools, but the red flags above apply no matter which tools anyone uses.

Where Koldify fits

Koldify is one option, built around avoiding the red flags above: separate sending domains on infrastructure we own, about three weeks of warmup, lists and copy you approve before launch, replies routed to you, and month-to-month terms. See our lead generation services and cold email services pages for details.

We are not the right fit if you want an agency to take sales calls and close deals for you, or if you need phone or paid-ads lead generation rather than email. If you want a straight answer on whether we fit, book a 30-minute intro call with David. And if you already have a proposal from another agency, bring it, and David will walk through it with you against this list.

Sources

• Google email sender guidelines: https://support.google.com/a/answer/14229414
• FTC CAN-SPAM Act compliance guide for business: https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business
• Postmark on open tracking and Apple Mail Privacy Protection: https://postmarkapp.com/support/article/1257-open-tracking-and-apple-mail
• Apollo data overview: https://knowledge.apollo.io/hc/en-us/articles/45824429846669
• Apollo email sending limits: https://knowledge.apollo.io/hc/en-us/articles/4409233349005-Email-Sending-Limits-Overview
• Smartlead email warmup: https://www.smartlead.ai/email-warmup
• Smartlead high bounce rate protection: https://helpcenter.smartlead.ai/en/articles/274-what-is-high-bounce-rate-auto-protection-in-smartlead
• PlusVibe pricing (placement tests): https://plusvibe.ai/pricing
• Belkins cold email services: https://belkins.io/cold-email-services
• SoPro pricing: https://sopro.io/pricing/
• Cleverly cold email agency: https://www.cleverly.co/cold-email-outreach-agency
• Pearl Lemon Leads cold email: https://pearllemonleads.com/cold-email/
• Koldify results: https://koldify.io