How to Tell If a Website Agency Is Actually Legit

If you run a small business in New Zealand, there's a good chance you've had a message land in your inbox or your Facebook DMs this month from someone offering to build or fix your website. That's not unusual anymore, and getting cold contacted isn't itself a red flag. What's changed is how easy it's become to look convincing without actually being anyone real, and that's worth knowing how to check before you hand over money or access to anything.

Short version: don't judge on the pitch. Judge on whether there's a real, findable, accountable person behind it, and whether what you're being charged actually matches what's being built.

It's never been easier to fake the work

Building something that looks like a website now takes minutes, not weeks. AI tools can generate a full site from a short prompt, and there are thousands of ready made templates sitting on marketplaces that just need a logo and a colour swapped in to look like a finished, bespoke job. The outreach itself can be mass produced too, the same generated pitch going out to hundreds of businesses at once with your business name dropped into a template message. None of that is automatically dishonest. Sometimes a template genuinely is the right, fast, affordable answer for a simple job, and there's nothing wrong with using modern tools to work efficiently. The problem is when that's what you're actually getting while being told, or charged, like it's something else entirely. That gap between what's implied and what's delivered is where the actual harm sits, not in the tools themselves.

Ask for a name, not just a company

A real business, even a genuinely tiny one, has an actual person attached to it. If every message comes from "The Web Team" or a generic company name with nobody willing to put their own name to it, that's worth noticing. Ask directly who you'd actually be working with day to day, and see whether you get a real name and a straight answer back, or something vague that dodges the question entirely.

Call the number. Actually call it.

If there's a phone number in their signature or on their site, ring it before you agree to anything. You're checking two things: is it a real New Zealand number with a proper area code, not an overseas call centre routed through a generic 0800 line, and does whoever picks up actually know your business and can answer specific questions about it, rather than reading from a script that could apply to anyone. A legitimate local operator will happily jump on a call, most actually prefer it to email. One that goes quiet, stalls, or gets cagey specifically about a phone conversation is telling you something worth listening to.

Check if they actually exist outside the message they sent you

Search the person's name and the business name independently of whatever they sent you. A genuine New Zealand business will usually show up with a registered NZBN, which anyone can look up for free on the official register in under a minute, along with some kind of footprint beyond the outreach itself: a real website of their own, reviews you can trace back to actual people rather than five star ratings with no text attached, or a LinkedIn profile that's been active for longer than a week. None of these checks take long, and a legitimate operator won't mind you running them. If anything, most will point you toward their reviews and their NZBN themselves before you even think to ask.

Notice if there's pressure to move fast

A legitimate local business is generally happy for you to take a few days, talk to someone else, or think it over. Heavy pressure to decide immediately, a discount that disappears if you don't sign today, or reluctance to put anything in writing before you pay a deposit, are all tactics that work specifically against people who'd otherwise have time to check the things above. Real urgency in business is rare. Manufactured urgency is common, and it's usually a sign someone doesn't want you looking too closely.

Be careful how much you pay upfront

A staged payment structure, something on signing, more at a build milestone, the rest on delivery, is normal and protects both sides. Being asked to pay the full amount before any work has started, especially by someone you've never actually spoken to on the phone, removes your only leverage if the work doesn't show up or doesn't match what was promised. It's a completely reasonable question to ask outright: what happens, and what can you actually do, if you pay and the site never appears.

The high price for a template site problem

There's nothing wrong with platforms like Wix or Squarespace for the right job, plenty of honest small operators use them and price fairly for it. The problem shows up when someone charges a custom build price, sometimes several thousand dollars, for what turns out to be a barely modified template on one of those platforms, one you'll also keep paying a separate monthly fee for, without ever being told that upfront. Ask directly what the site is actually being built on, and what happens to it if you ever want to leave. A straight answer costs nothing. Evasiveness on that specific question is one of the clearest signals going.

Watch the portfolio, not just the pitch

If someone shows you "past client work," save one of the images and run it through a reverse image search. It sounds like overkill, but it takes thirty seconds and it catches a genuinely common trick, the same stock photos or the same handful of site screenshots getting reused across completely different fake business names. It's also worth asking to see a live, working link to a real site they've built, not just a screenshot. Screenshots can be mocked up in minutes. An actual working website with its own domain, that you can click through yourself, is much harder to fake.

What to actually ask before you commit

A short list that does most of the work: What's your name, and is there a New Zealand number I can call you on? What platform or code is this actually built on? What happens to my site if I stop paying you? Can I speak to an existing client directly? None of these are aggressive questions, and anyone legitimate will answer them without hesitation. The hesitation itself is the answer, if it shows up.

Where this leaves you

None of this means every cold message is a scam. Plenty of genuine local businesses, ForgePoint included, reach out first, because that's simply how small businesses find each other in a market this size. The difference was never about who made first contact. It's whether there's a real person with a real NZ number who's happy to explain exactly what you're paying for, what it's actually built on, and what happens to it afterward. Run through the checks above with anyone before you sign anything, us included. A few phone calls and a couple of searches is a small amount of time against what a bad build, or a disappeared deposit, actually costs you.