Why you keep getting emails offering website help

You didn’t do anything wrong. Your website isn’t broken. You just got caught in one of the largest numbers games in marketing: cold email sent at scale by people who’ve never seen your website and never will.

Every business owner gets them. “Your Google ranking has dropped.” “We found errors on your site.” “We can get you on page one.” I get them too, even as a marketing consultant. Some days I get the same template twice from two different “agencies.”

Calling these spam makes them sound random, like a phishing scam or a fake prize notification. That’s not usually what’s happening. Most of these emails come from a genuine, if grubby, corner of the marketing industry: appointment setters and outsourced lead-gen operators who get paid per reply, not per result.

Here’s the chain: an individual freelancer, a small agency, or increasingly an AI tool writing on someone’s behalf, pays a lead-gen operator or uses cheap software to blast a template to thousands of website owners. It costs almost nothing to send. If one person in ten thousand replies, that’s a lead sold or a client won. What happens after you reply, whether you actually get useful work, is a completely separate question from whether the email was sent in good faith.

That’s the part worth understanding: you genuinely cannot tell from the email who is on the other end. It could be a skilled freelancer using cold outreach as a legitimate channel. It could be an overseas call centre working off a script. It could be nobody, an AI system generating and sending the message with no human ever reading your website at all. The email looks the same either way. That uncertainty is the actual problem, not spam filters.

You don’t need security software for this, you need to read the email properly. The tells are almost always the same:

**It’s not personalised.**“Hi,” “Hello,” or “Dear Website Owner” instead of your name means it went to a list, not to you specifically.

**You’re in BCC**, or you can see other addresses in the CC field. That’s a mass send, full stop.

**There’s no unsubscribe link.** A real business sending you a real email includes one, because they’re required to. Mass senders skip it because they’re not following the rules anyway, and if you reply, you’ve just confirmed your address is live.

**The questions are generic.** “Did you know your site could get more traffic?” applies to every website on earth. A real audit references something specific to your actual site.

**There’s no way to check who they are.** No phone number, no company website, no LinkedIn profile that turns up a real person at a real company.

**The formatting is a mess.** Mismatched fonts and sizes are the fingerprint of a template that’s been copy-pasted and merged badly before sending.

This is the most common version, and it works because it’s designed to scare you into replying before you think about it.

One I received named an actual client of mine and claimed their “website visibility is not increasing.” Here’s their real organic search trend from Google Search Console over the same period: steady growth, month on month. Was there something to improve on that site? Probably, there always is. Was the site failing the way the email implied? No. The claim wasn’t based on looking at the site. It was based on nothing, dressed up to look like a diagnosis.

I don’t just delete these, sometimes I test them.

One email offered to run advertising for a business called Rainbow Flag Australia, promising exposure to “2.8 million visitors” on their website. I ran their domain through SEMrush. Their actual estimated organic search traffic was around 800 people a month. Not 2.8 million. Not close.

So I asked them to prove the number. That was the 22nd of March. I followed up twice. By the 6th of April, three and a half weeks later, I’d received nothing. No data, no explanation, no correction. Just silence.

That’s the actual test. Not whether the email sounds professional, not whether the offer sounds appealing, but what happens when you ask a straightforward question and wait for the answer. A real business with a real number behind it will show you the number. 

Everyone else goes quiet.

I’m not telling you your website is perfect. It might genuinely have issues, most sites do. The problem was never that they’re always lying about that part, it’s that you have no way to verify it from the email alone. So verify it somewhere else:

• Check your own Google Analytics and Search Console reports. Any real errors show up there directly, not filtered through a stranger’s sales pitch.

• Click around your own site. Do the buttons work? Do the links go where they should?

• Get a second, independent opinion from someone who isn’t the one trying to sell you the fix.

That last one matters more than it sounds. 

As for their free report, or your own automated scan, whether it comes back with a 98% score, doesn’t tell you if your site converts visitors into customers. Automated tools check whether an H1 tag exists. 

They don’t check whether it says anything useful.

Ignore it, or test it the way I tested Rainbow Flag Australia’s numbers, either is a reasonable response. What I’d avoid is replying just to be polite, and I’d never hand over website or hosting logins to anyone who cold-emailed you first, no matter how official they sound.

If you want an actual answer about your website, not a templated scare tactic, get in touch and I’ll look at the real data with you.