Freelancer vs agency
vs DIY: how to avoid
getting scammed.

Before you pay anyone a deposit for a website, the decision that matters most isn't freelancer vs. agency vs. DIY builder — it's whether the person or company you're about to pay is who they say they are, and whether the money you send is protected if the work never shows up.

None of this is theoretical risk. The Federal Trade Commission's Consumer Sentinel Network Data Book — the annual compilation of fraud reports the FTC receives from consumers and businesses — has recorded total reported fraud losses in the multiple billions of dollars every year for the past several years, with online and freelance-services scams a consistent category. Small business owners hiring a stranger off the internet to build something as central as their website are a natural target. That doesn't mean avoid freelancers or cheap options — it means know what to check first.

Red flags to watch for

Most website scams and bad-faith engagements share a handful of patterns. If you see two or more of these, slow down before you send money:

Freelancer vs. agency

Neither option is inherently safer — a solo freelancer with five verifiable years of work and real references can be a far better bet than a shell-company "agency" with a stock website and no team you can actually name. The structural differences worth weighing:

For a full breakdown of what each option actually costs at different project sizes, see how much a small business website costs in 2026.

What a written contract should actually include

"No written contract" was on the red-flags list above because it's the single easiest protection to get right, and the easiest one owners skip when they're excited to get started. A short agreement — it doesn't need to be a legal document drafted by an attorney — should spell out:

• Exactly which pages and features are included, and what counts as a change request outside scope
• The total price, the payment schedule, and what triggers each payment (contract signed, first draft delivered, site launched)
• A start date and a target delivery date
• How many rounds of revisions are included before extra hours are billed
• Who owns the domain name, hosting account, and source code once the project is paid in full
• What support or fixes are covered after launch, and for how long

If a freelancer or agency resists putting any of this in writing — even in a simple email you both reply "agreed" to — treat that resistance itself as information.

Questions to ask before you pay a deposit

Send these questions in writing before you commit. A legitimate developer or agency will answer all of them clearly and without hesitation; hedging or dodging any of them is itself a signal.

• Can I see three live websites you've built, and can I contact one of those clients?
• What's included in the price — is SEO setup, mobile optimization, and a contact form part of the quote, or extra?
• Who owns the domain, hosting account, and source code when the project is done?
• What's the payment schedule, and is any of it held in escrow or milestone-based?
• What happens if I'm not happy with the first draft — how many revision rounds are included?
• Who do I contact if the site breaks after launch, and is that covered or billed separately?
• What's the realistic timeline, in writing, with a start and delivery date?

When DIY is actually the right call

Hiring anyone — freelancer or agency — isn't automatically the safer or smarter option. If your budget is genuinely near zero, your needs are simple (a single page with your hours, location, and contact info), and you're comfortable maintaining the site yourself, a DIY builder like Squarespace, Wix, or a simple WordPress install removes the vetting problem entirely: you're not trusting a stranger with your money or your domain, because you're doing the work yourself.

The tradeoff is time and ceiling. DIY builders take real hours to learn, and they cap out on performance, SEO flexibility, and design differentiation earlier than a custom build does — we cover that tradeoff in detail, including when it's smart to start on a builder and migrate later, in custom website vs. template: what your small business actually needs. If you'd rather not spend your own hours on it, that's exactly the trade you're paying a freelancer or agency to make for you — which is why vetting them properly matters so much.

Where to safely find a developer

If you're hiring rather than building it yourself, where you find the person matters almost as much as who they are.

Upwork and Fiverr both offer real protection if you use their built-in payment systems instead of moving off-platform. On Upwork, fixed-price contracts are paid through the platform's escrow-style system — funds are set aside when work begins and released to the freelancer only after you approve the milestone, and Upwork has a formal dispute-resolution process if something goes wrong. Fiverr works similarly: payment goes through Fiverr, not directly to the seller, until you mark the order complete. The single most important rule on either platform is simple — never agree to take the conversation or the payment outside the platform. That's precisely the step that removes your protection, and it's the request scammers make most consistently.

Referrals from another small business owner you trust, who can show you the actual site that person built for them, are typically the highest-confidence source — you're not vetting a stranger's claims, you're looking at finished, verifiable work and talking to a real reference by default.

Agencies are easiest to check through their own published work and client list — look for a real physical address or registered business entity, live sites you can test yourself, and a contract that spells out ownership, timeline, and payment schedule before any deposit changes hands.

If you already sent money and something feels off

If you're mid-project and the developer has gone quiet, missed a deadline without explanation, or is asking for more money before delivering anything you've already paid for, act quickly rather than waiting to see if it resolves itself:

• If you paid through Upwork or Fiverr, open a dispute through the platform before the automatic payment-release window closes — both platforms have a formal process for exactly this situation.
• If you paid by credit card or a payment app that supports it, contact your card issuer or bank about disputing the charge. The earlier you raise it, the more options you typically have.
• Report the incident to the FTC at reportfraud.ftc.gov. It won't necessarily get your money back, but it feeds the data that helps track patterns and protect other small business owners.
• Save every message, invoice, and screenshot before you confront the person — you'll want the paper trail intact for a dispute or report either way.

None of this is a substitute for vetting upfront — but knowing the recourse exists is part of why paying through a platform with dispute resolution, rather than direct wire transfer or a gift card, is worth the small amount of platform friction it adds.