12 Web Design Agency Red Flags (Including the Hosting Hostage Trick)
Every month a business owner calls us because they cannot leave their current web company. The agency owns their domain, or the site runs on a system nobody else can touch, or canceling hosting deletes the site they paid $8,000 for. Every one of these situations was visible in the contract before they signed.
This is our field guide to web design agency red flags, based on the wreckage we have helped clean up. We run Grindstone Design in Jacksonville, and we would rather you catch these with any agency, including us, than learn them the expensive way. For each flag you get why it hurts, how to check before signing, and the exact contract language to ask for.
Which Web Design Agency Red Flags Cost Owners the Most?
The ownership traps do the most damage, so they lead the list. Flags 1 through 4 can cost you your domain, your site, or both. Flags 5 through 9 cost you money and months. Flags 10 through 12 are hiring-stage warnings that predict the rest.
1. They register your domain in their name
Your domain is your business address on the internet, and whoever is listed as registrant owns it, no matter who paid. When an agency registers yourbusiness.com under their own account and name, you cannot transfer it, point it elsewhere, or stop them from holding it during a dispute. Owners have paid four figures to buy back their own name.
Check before signing by looking up your domain at lookup.icann.org, or asking who will be listed as registrant. If the answer is anything but you, stop.
Ask for this line in writing, "Client is the sole registrant and owner of the domain, registered under an account controlled by Client." Better yet, buy the domain yourself for $15 and grant the agency access.
2. The site runs on a proprietary CMS
Some agencies build on their own closed platform instead of WordPress, Shopify, Webflow, or another portable system. The pitch is simplicity. The reality is that your site only exists inside their software, so leaving the agency means abandoning the site and starting from zero.
Check by asking one question, "If we part ways, what do I walk away with?" On a portable platform the answer is an export of files and content. On a proprietary CMS the honest answer is nothing, though you will usually hear a vaguer version.
The contract line to require, "Site is built on [named platform] and Client may export all files, content, and data at any time."
3. The free or cheap website with a mandatory hosting contract
This is the hosting hostage trick, and it is the most common scheme on this list. The build costs $0 or $500, and the contract requires hosting at $150 to $300 per month for 24 to 36 months. You pay $5,000 or more over the term, cancellation forfeits the site, and you own nothing at the end.
The math gives it away. Nobody builds websites for free, so check any suspiciously cheap build for a hosting term hiding in the agreement. Search the contract for "term," "minimum," and "cancellation" before you sign anything.
The clean structure is a build price you own outright, plus month-to-month hosting you can move anytime. Typical honest hosting for a small business site runs $20 to $50 per month.
4. No written IP transfer on final payment
Under US copyright law, the creator owns design and code by default, even when you paid for it. Without a written transfer clause, the agency legally owns your website, and some enforce that during disputes by taking the site down.
Check every contract for an intellectual property section. Its absence is the finding, and it is absent from a surprising share of small agency contracts.
Ask for this sentence, "Upon receipt of final payment, all rights, title, and interest in the website design, code, and content transfer to Client." Any professional shop agrees in minutes. Hesitation here tells you the lock-in is the business model.
5. A stock template sold as custom design
Buying a template is fine, and we say so plainly in our guide to how much a website costs, where template builds anchor the lowest tier. The scam is paying $6,000 for "custom design" that is a $60 ThemeForest theme with your logo dropped in.
Check by asking which theme or starting point the build uses, then compare the quote to template-tier pricing. You can also paste a finished portfolio site into a theme detector like wpthemedetector.com and see what it really runs on.
For a genuine custom project, ask the proposal to state the number of unique page designs and to include design mockups for approval before development starts.
6. No staging site
A staging site is a private working copy where the build happens and where future updates get tested. Agencies that build directly on your live site, or nowhere you can see, leave you with launch-day surprises and no way to review progress against the timeline.
Check by asking where you will review the work in progress. The answer should be a URL you can open from your own computer, updated throughout the build.
Put it in the schedule, "Client will have access to a staging environment for review at each milestone." This one also protects the agency, so refusal is strange and worth reading as a process problem.
7. They keep ownership of your content and photos
Copy, photography, and videos produced during the project sometimes stay the agency's property under the contract, licensed to you only while you remain a client. Leave, and legally you cannot reuse your own about page or the photos of your own crew.
Check the IP section for the words "license," "non-exclusive," or "for the duration of the agreement" attached to content. Those words mean rented, and they belong in the same clause as flag 4.
The line to require, "All content, copy, photography, and media created for this project become Client's property upon final payment." Your own logo and any photos you supplied should never appear in an agency ownership clause at all.
8. Vague revision terms
"Reasonable revisions" is the phrase that launches a thousand invoices. Without defined rounds, either you get nickel-and-dimed at $95 per change, or an unscrupulous shop declares your third feedback email "out of scope" and bills a change order on a site you have not approved yet.
Check the proposal for a number. Rounds included, what a round covers, and the rate afterward. Our list of questions to ask a web design agency covers how to pressure-test this on the sales call before the contract stage.
Workable standard language, "Two rounds of consolidated revisions per design phase are included. Additional revisions billed at $X/hour with written estimate first."
9. No post-launch support terms
Sites break. Plugins conflict, forms silently stop sending, and an update knocks a layout sideways. When the contract ends at launch with no warranty, every one of those becomes a negotiation with a vendor who already has your money.
Check for a defined warranty window and a response-time commitment. Thirty days is a floor, 60 to 90 is standard on professional builds, and the hourly rate after the window should be printed now rather than quoted later.
Contract line, "Agency will correct defects at no charge for 90 days post-launch, with response within 2 business days." Distinguish this from a maintenance plan, which is a separate ongoing purchase.
10. A portfolio with no live URLs
Screenshots prove nothing in 2026, since anyone can mock up a homepage image or borrow one. A portfolio without clickable links to live sites means the work may be stolen, dead, or worse than the picture suggests.
Check by visiting 3 or 4 portfolio sites and clicking around. Slow loads, broken pages on your phone, and copyright dates from 2021 all tell you about the ongoing relationship, since those are current clients on display. Then call one, because owners will happily tell you whether invoices matched quotes.
There is no contract line for this one. It is a walk-away check that costs 20 minutes, and it filters both agencies and freelancers, a comparison we mapped in our agency vs freelancer breakdown.
11. They refuse to give you admin access
You should hold administrator credentials to your own website, your hosting account, and your analytics. Agencies that provide only editor access, or no access, are building a wall between you and your property. The stated reason is always safety. The functional result is dependency.
Check by asking directly, "Will I have full admin access to the site and hosting account at launch?" Watch for the deflection about clients breaking things, which has a simple fix. You hold admin and simply do not use it day to day.
Contract line, "Client will receive administrator credentials for the website, hosting, DNS, and analytics accounts at launch." Losing access later, after a dispute, is the expensive version of this discovery.
12. A 5-page site that requires a sales call to price
Enterprise projects need scoping calls. A brochure site for a plumber does not, and agencies that hide all pricing behind a mandatory call are optimizing for pressure selling, where the quote depends on how you dress and what you drove to the meeting.
Check their site for ranges, starting prices, or published packages. An agency confident in its pricing will name at least a floor in public or in the first email. We publish ranges and answer pricing questions by email, and any shop can.
No contract line here either. It is a filter for the shortlist stage, along with the vetting steps in our guide to hiring a web design agency.
The Quick-Check Table
| Red flag | 5-minute check | What to require |
|---|---|---|
| Domain in agency's name | ICANN lookup of registrant | You as sole registrant |
| Proprietary CMS | "What do I walk away with?" | Named portable platform, export rights |
| Hosting hostage deal | Search contract for "term" and "cancellation" | Month-to-month hosting, site owned outright |
| No IP transfer | Read the IP section | Full transfer on final payment |
| Template sold as custom | Theme detector on their portfolio | Unique design count in proposal |
| No staging site | "Where do I review progress?" | Staging URL at each milestone |
| Agency owns content | Look for "license" language | Content ownership on final payment |
| Vague revisions | Find the number of rounds | Defined rounds plus hourly rate after |
| No support terms | Find the warranty window | 60-90 day defect warranty |
| No live portfolio URLs | Click 4 sites, call 1 owner | Walk away if it fails |
| No admin access | Ask directly at proposal stage | Admin credentials at launch |
| Call-only pricing for small sites | Check for published ranges | Walk away or get email pricing |
What Do Clean Ownership Terms Look Like?
You should leave a web project owning six things.
- The domain, registered to you
- The hosting account, in your name with the agency as an invited user
- The site files and database, exportable on demand
- All copy, photos, and media created for the project
- Full administrator access to everything
- A written IP transfer that took effect at final payment
That is the whole list, and none of it is exotic. Reputable agencies work this way by default because their retention strategy is doing good work rather than holding the keys. When we lose a client at Grindstone Design, they leave with everything, and the handoff takes one email.
If you are mid-relationship and unsure what you actually own, spend 30 minutes checking the domain registrant, your hosting login, and your admin access. Our free business audit includes an ownership check alongside the performance review, and we have flagged holdups for owners who had no idea.
What If You Are Already Trapped?
Escape is almost always possible, and usually cheaper than the fear suggests. If the agency holds your domain, a written request citing your payment history resolves many cases, and ICANN's transfer complaint process backs registrants who can show the business relationship. If the site is hostage on a proprietary platform, you rebuild on a portable one, and you only pay for the build once more rather than forever.
Price that exit realistically before you negotiate. A straightforward rebuild of an existing small business site runs meaningfully less than the original build in most cases, and our website redesign cost guide breaks the numbers down by scope. Owners who know the rebuild number negotiate with hostage hosts from strength, because $4,000 once beats $250 per month forever.
Do the quiet preparation first. Export what you can, screenshot every page, save your content and images, and copy your analytics access, all before announcing anything. Vindictive shutdowns are rare, but the owners they happen to always wish they had copied first.
If you are staring at a contract right now and something in it smells like this list, send it to us. We will tell you in plain language what the clause does, whether we end up working together or you sign with someone else entirely.
FAQ
Who legally owns my website if the contract says nothing?
By default, the creator does. US copyright law gives authorship of code and design to whoever produced it, and paying for the work does not transfer copyright by itself. Content you wrote and photos you supplied remain yours. This is why a written transfer clause on final payment matters, and why its absence from a contract is a red flag rather than a neutral omission.
How do I find out who owns my domain name?
Run your domain through lookup.icann.org and read the registrant field. Many results hide details behind privacy services, so also check which email account receives renewal notices and whether you can log in to the registrar. If your web company appears as registrant, or you have no registrar login at all, request a transfer to your own account in writing now, before any dispute exists.
Is agency hosting always a scam?
No, plenty of agencies resell managed hosting at $30 to $100 per month with real value added, like updates, backups, and monitoring. The difference is the exit, since honest hosting is month-to-month and your site leaves with you. The hosting hostage version has a multi-year minimum, a termination forfeit, or a site you never owned. Read the cancellation clause and you will know which one you are holding.
Can I ask an agency to change their standard contract?
Yes, and the reaction is diagnostic. The changes in this article, IP transfer, admin access, defined revisions, and a warranty window, are standard in professional agreements, so a reputable shop accepts them quickly or already includes them. A shop that refuses to put ownership terms in writing is telling you those terms are the product. Never accept "we don't really do contracts" on a four-figure project either.
What is the single biggest red flag on this list?
The domain registered in the agency's name, because it survives everything else. A bad site can be rebuilt and a hosting contract expires, but a domain held by someone else can cost you your business's accumulated search rankings, email, and brand address at once. It also takes the least effort to check, one lookup before you sign. Start there on every vendor you evaluate.
