We Reviewed Your Website… Before You Spend a Dollar, Read This

Caption:​ Before reacting to claims about your website, take time to evaluate the source and decide whether a review is actually needed.

If you own a business with a website, you’ve probably gotten an email like this:

We reviewed your website.

You’re not showing up on Google.

We found several errors.

We can get you on the first page of Google.

Reply today and we’ll send you a free website audit.

It’s written to worry you. That’s the whole point.

If you believe it, you know what happens next. You reply, they send you a “report,” and the sales pitch starts.

Before you do that, stop for a second. The real question isn’t whether the email is right or wrong — it’s whether you’re going to let a stranger’s cold email decide what you do next.

And it’s not just email, either. The same pitch shows up as a cold call, a LinkedIn message, sometimes even a postcard in the mail. The channel changes. The pitch doesn’t.

“Looking at the Claims”

Most of these emails say the same five things:

• We reviewed your website.
• You’re not showing up on Google.
• We found several errors.
• We can get you on the first page of Google.
• We’ll give you a free audit.

Each one sounds important. None of them actually tells you anything you can use. Let’s go through them one at a time.

“We Reviewed Your Website”

Sounds impressive — until you ask one question.

What does “reviewed” actually mean?

A real review means someone understood your business, read your content, looked at what you sell, walked through the customer experience, and figured out whether your site is actually helping you reach your goals.

An automated scan is not that.

Software can crawl a public page and spit out a report in ninety seconds. That report might contain a few useful things — but it isn’t a review of your business. It’s a scan of your HTML.

But here’s the bigger question underneath that one: did anyone actually look at your website at all, or did they just get your name and email off a list — bought, scraped, or pulled from a public directory — and send the same email to everyone on it?

There’s an easy way to check. If you’ve gotten three or four of these today, pull them up side by side. Read past the logo and the sender name. A lot of the time, it’s the same email, word for word, just swapped out with a different company name at the top and bottom. Nobody read your site. Nobody ran a scan. Somebody bought a list, wrote one email, and sent it to everyone on it — you included.

You don’t know which one you got — a real scan, or nothing at all. So the claim tells you almost nothing.

“You’re Not Showing Up on Google”

This is the line that usually does the damage.

Not showing up for what?

Google doesn’t have one search result — it has a different result for every single search. So what were they actually searching?

• Your business name?
• One of your services?
• A product you sell?
• A question your customers ask?
• Your city or service area?
• Some keyword they picked at random?

There’s another thing worth checking before you worry: are they talking about a regular search result, or the map listing? A lot of “you’re not showing up” claims are really about Google Maps — the local pack of businesses with pins on a map, tied to a physical address.

If your business doesn’t have a physical location — you’re online-only, you work from home, or you serve customers without a storefront — then not showing up on the map isn’t a problem to fix. It’s not something you’re missing out on. You can’t rank in a map listing tied to an address you don’t have, and no amount of money spent will change that. Anyone pitching you on “map visibility” without asking whether you even have a physical address to put on one isn’t paying attention to your actual business.

If they won’t tell you the exact phrase — or whether they even mean a map listing instead of a regular search result — there’s no way to know if the claim means anything at all.

“We Found Several Errors”

Sure. Every website has something that could be improved. That’s not news.

The real question isn’t whether something can be fixed. It’s whether fixing it actually changes anything for your business.

Before you take the claim seriously, ask:

• What errors, specifically?
• How were they found?
• Do they affect your visitors?
• Do they affect search engines?
• Will fixing them move the needle at all?

A technical nitpick isn’t automatically a business problem. Don’t treat it like one until you know it is.

“We Can Get You on the First Page of Google”

You’ll see this promise in a thousand emails a week.

The first page for what?

Ranking first for your own business name isn’t the same as ranking first for one of your services. A local search isn’t the same as a national one. A paid ad isn’t the same as an organic result.

And here’s the part most of these emails leave out: for a lot of competitive searches, the “first page” spots that actually get clicked are paid ads — meaning you’re not paying for SEO work, you’re paying Google directly, and often a lot more than whatever this email is quoting you. Ranking organically, without paying per click, is possible, but it’s a lot harder than the email makes it sound, and it almost never happens fast.

There’s also a bigger shift happening that makes the whole promise shakier — and it’s not a small one anymore. Research from SparkToro found that of every 1,000 Google searches, only around 360 actually end in a click to a website; the rest are answered right there on the results page. And when an AI Overview shows up for a search, click-through for the top-ranking result has dropped by as much as 58% compared to before AI Overviews existed, according to Ahrefs. So even landing the number-one spot doesn’t mean what it used to. You can do everything right and still watch the click go nowhere, because the answer was already given before your site was ever seen.

Nobody controls Google’s rankings, and nobody controls whether an AI summary decides to send someone to your site or just answer the question itself. A good professional can improve your site, sharpen your content, and fix real technical problems — but no honest person can guarantee where you’ll land, or whether “landing there” even means what it used to. Anyone who promises that isn’t being straight with you.

“What If They’re Right?”

Fair question. What if they actually found something real? What if your site does need work?

Maybe. Doesn’t matter.

Whether or not the email happens to be right doesn’t change what you should do next. The decision to review your website is yours to make — not something a cold email gets to trigger on your behalf.

If it genuinely worries you, do your own review, and you don’t need to spend a dollar to start. Search your own business name and your main services yourself, in a private or incognito window, and see what actually comes up. If you have a physical location, check your free Google Business Profile — that’s where map visibility actually lives. If you want real data instead of a guess, Google Search Console is free and shows you exactly what searches are bringing people to your site right now, no vendor required.

Once you’ve looked yourself, decide what you actually want examined further. Pick tools you trust, or hire someone you chose — not someone who chose you. Look at what they find. Decide what actually helps your business. Then, and only then, decide what to do.

That way, you’re the one driving, not them.

“What a Real Offer Looks Like”

None of this means every SEO company is running a scam, or that you should never work with anyone. It just means you should know the difference between a real offer and a cold email pitch before you say yes to either one.

A legitimate offer usually looks pretty different from the emails we’ve been picking apart. It comes with a real, specific proposal — what exactly will be done, and to which pages. It doesn’t promise a ranking, because nobody honest can guarantee one. It comes with references you can actually call, not just testimonials on a website. And it tells you upfront how you’ll know if it worked — which numbers should move, and by when — instead of staying vague about results the way the cold email did.

If a company can’t or won’t give you those four things, that’s worth noticing, no matter how they first got in touch with you.

“Delete It. Mark It as Spam. Don’t Reply.”

You might feel like you should be polite about it — a quick “no thank you” instead of just deleting it. That instinct is right for a real person or a business you actually deal with.

This isn’t that.

There’s no relationship here to protect. You didn’t ask for this email, and there’s no rapport to keep intact the way there is with a vendor you picked yourself. Politeness is for people you actually have something with.

Replying doesn’t even do what politeness normally does, either. These go out in bulk, often to thousands of addresses at once, scraped from public listings or contact forms — which is exactly why your reply sometimes bounces. A lot of the time, nobody’s even reading it. And if it does go through? You’ve just confirmed your address is live and somebody’s watching it — which tends to get you more of these, not fewer. An inbox that responds is worth more to them, not less.

So here’s what to actually do: delete the email, and if your inbox lets you, mark it as spam instead of just trashing it. That does two things a plain delete doesn’t — it teaches your own filter to catch the next one, and it feeds spam detection that works across providers, so the sender’s next batch is a little less likely to land in anyone’s inbox at all. Use “block sender” too, if it’s there.

Don’t reply. Not even to politely decline. Unsubscribe links sometimes work — but only on the senders who were already playing by the rules. Don’t waste time chasing one down on every single email.

It also helps to cut down on how many of these you get in the first place. If you own a domain, check whether your WHOIS information is public. When you register a domain, your name, email, and phone number are published in a public database by default — and automated bots constantly scan that database for newly registered domains, harvesting contact details that get sold and resold to exactly the kind of senders we’ve been talking about. A lot of registrars offer free or cheap WHOIS privacy protection that replaces your info with a proxy address instead. It won’t stop everything, but it closes one of the main doors these lists get built through.

Worth knowing, too — a lot of these emails likely break the law. The FTC’s CAN-SPAM Act requires every commercial email to include truthful sender information, a subject line that isn’t deceptive, a valid physical postal address, and a clear way to opt out. A lot of the emails we’re talking about are missing at least one of these — no real address, a subject line dressed up to look personal rather than promotional. These aren’t just annoying. A lot of them aren’t playing by the rules to start with.

If you’re getting four or five of these a day, that volume is the whole strategy. These cost almost nothing to send by the thousand, so the sender doesn’t need many people to bite for it to pay off — which is exactly why you’ll keep getting them no matter how you respond to any one of them. You don’t need to weigh each email on its own merits. You need a habit: delete, mark as spam, move on. That’s what actually gets your time and attention back.

Not because every sender is lying to you. Not because every claim is false. You do it because it’s an unsolicited sales pitch, and it doesn’t deserve more of your attention than that.

“You’re Not the Only One Getting These”

If you’re getting several of these a day, so is nearly every other business owner you know. It’s worth bringing up with them — at a networking meeting, in a group chat, wherever business owners already talk to each other.

Compare notes. If three of you got the exact same email with a different name at the top, that confirms it’s a list, not a real review — and it’s a lot easier to believe once you’ve seen it with your own eyes across a few different businesses. Share which senders you’ve reported as spam. Share what a real, useful review actually turned up, if you’ve ever paid for one and it was worth it. That kind of comparison is worth more than any single vendor’s pitch, because it’s coming from someone with nothing to sell you.

You don’t need to solve this alone, and you don’t need to figure it out from scratch every time a new one lands in your inbox.

“If You’d Like a Second Opinion”

Everything above is really one point made a few different ways: don’t let a stranger’s cold email decide what happens with your website. That still leaves a real question sitting there for some of you — maybe the email got you thinking, or maybe something’s genuinely felt off about your site for a while and you just haven’t known where to start.

Yes, I help with exactly this kind of thing — which is precisely why I’m telling you not to trust a cold email about it. The difference isn’t that I’m offering help and they are. It’s that you’re the one reaching out, on your own schedule, with no urgency manufactured to rush you into it.

If that’s you, you don’t need to figure it out alone, and you don’t need to guess. Schedule a quick call with me and we’ll talk through your business, your website, and what you’re actually trying to accomplish — no scan, no automated report, no pressure. Just a real conversation about what’s working, what isn’t, and whether anything’s worth doing next. If you’d like to know more about who you’d be talking to first, you can find that at nutsandboltscoach.com or thomaslvaughn.com — either one gets you to the same place.

And if it’s not me — if you already have someone you trust, or you’d rather work with someone local, or you just don’t want to talk to me — that’s completely fine too. Reach out to them instead. The point was never “call me specifically.” It’s that the decision, and who you make it with, should be yours.

You’re still the one deciding. This is just an easier way to start.

“The Bottom Line”

If the email does get you thinking about your website — fine, that’s a reasonable thing to feel. Just do it on your own schedule. Decide what you want looked at, pick who you trust to look at it, and judge the results yourself. Your website is a business asset. Decisions about it should come from your goals, not from a stranger’s cold email designed to sell you something.

Next time one shows up, don’t ask whether you should reply.

Ask whether they’ve actually given you enough to justify changing your plans.

Most of the time, the answer’s no.