It happens more often than people admit. A small business owner finds a sleek agency website, exchanges a few enthusiastic emails, hands over a deposit, and then — silence. The phone number goes to voicemail. The address turns out to be a WeWork lobby in a city the “agency” hasn’t visited in two years. The portfolio was borrowed. The business registration? Never happened.
Vetting a freelancer or agency before you hire them isn’t paranoia. It’s basic due diligence, the same kind any smart buyer applies before a significant purchase. The good news: legitimate businesses leave trails. Business directories, state registries, and a handful of free public databases make contractor verification faster than most people realize. Here’s exactly how to do it — step by step, with no guesswork.
1. Start With a Business Directory Search, Not Just Google
Most people Google a vendor’s name and call it done. That’s a mistake. Google surfaces whatever the business has chosen to publish about itself — its own website, its own social profiles, maybe a press release it wrote. What you actually want is a third-party record: an independent listing that confirms the business exists in the real world.
US business directories like Manta, Dun & Bradstreet, and the Better Business Bureau aggregate company data from multiple sources. A listing in these directories doesn’t guarantee legitimacy on its own, but it does confirm that the business has been operating long enough to appear in commercial databases — and it often surfaces details the vendor never volunteered, including founding year, estimated employee count, and industry classification. If a supposed “full-service digital agency” was incorporated six weeks ago and shows zero prior history anywhere, that’s a data point worth weighing.
Local business directories specific to the vendor’s claimed city are also useful. A freelancer claiming to be based in Austin who has no presence in any Austin-area directory, no local reviews, and no state registration is waving a red flag without knowing it.
2. Pull Their State Business Registration Record
Every legitimate business entity in the United States — LLC, corporation, sole proprietor with a DBA — has a paper trail with state authorities. Pulling that record takes about three minutes and costs nothing.
Every state maintains a Secretary of State (or equivalent) business search portal. If you’re working with a vendor in Texas, search the Texas Secretary of State’s business search. California uses the California Secretary of State’s Business Search. Most states have similar portals. Type in the business name exactly as it appears on their invoice or contract, and look for: registration status (active vs. dissolved), registered agent, date of formation, and any name changes.
A business that’s been “active” for eight years and has a consistent registered agent is very different from one that was formed two months ago, has no registered agent listed, or shows a status of “delinquent.” If a vendor claims they’ve been in business for five years but their LLC was registered last spring, ask them to explain the discrepancy. Watch how they respond.
3. Verify the EIN and Ask for a W-9
Any legitimate US-based contractor you pay over $600 in a calendar year is legally required to provide a W-9 form with their Employer Identification Number (EIN) or Social Security Number. Asking for a W-9 isn’t rude or suspicious — it’s a standard accounting requirement. If a vendor balks at providing one, that’s a serious warning sign.
The IRS doesn’t offer a public EIN lookup for individual businesses, but the W-9 itself serves as a self-certification of legitimacy. The vendor is signing a document that carries legal weight. Fraudulent operators tend to disappear when paperwork with their actual identity gets involved. Pair this with the state registration check, and you’ve created a meaningful verification layer. For nonprofits or publicly traded companies, you can cross-reference EINs through the IRS Tax Exempt Organization Search if relevant.
4. Cross-Check Their Physical Address
This step sounds almost comically simple, but it eliminates a surprising number of problematic vendors. Take the address listed on their website, Google Maps it, and look at the Street View image.
Is it a real commercial space? A legitimate home office (which is perfectly fine for freelancers)? Or is it a virtual mailbox service address shared by 300 other businesses? Virtual addresses aren’t automatically disqualifying — plenty of remote-first agencies use them — but they become a red flag when combined with other inconsistencies: vague ownership, no verifiable staff, and a portfolio full of unnamed “confidential” clients.
If the address is a co-working space or registered agent address, simply ask the vendor directly where their team actually works. Legitimate operators have an easy answer. Evasive responses matter.
5. Check Their Online Citation Footprint
Real businesses accumulate citations over time — mentions of their name, address, and phone number across directories, review platforms, and industry sites. This footprint builds organically as a business operates. It’s very difficult to fake retroactively.
Search the business name across platforms like Yelp, Clutch (especially useful for agencies), Google Business Profile, and industry-specific directories. Look for: consistent NAP data (Name, Address, Phone) across listings, reviews that span multiple years, and responses from the business owner to those reviews. A company with 47 reviews dating back four years, with thoughtful owner responses, is demonstrably real. A company with three five-star reviews all posted on the same day, with no other directory presence, is not.
For freelancers specifically, LinkedIn is a strong verification tool. A profile with a complete work history, endorsements from named colleagues, and activity going back several years is hard to fabricate quickly. Compare the LinkedIn founding date to the state registration date. They should roughly align.
6. Request References — and Actually Call Them
Most clients ask for references. Almost nobody calls them. This is the single most underused verification step available, and it costs nothing but twenty minutes.
When you call a reference, don’t just ask “were they good?” Ask specific questions: How long did the engagement last? Did the project come in on budget and on time? How did they handle a problem or disagreement? Would you hire them again — and if not, why not? The answers to that last question are almost always more illuminating than the first three combined.
Ask the vendor for three references, and then request that at least one of them be a client from more than two years ago. Long-term relationships are hard to fabricate, and a satisfied client from 2021 telling you the same story as a satisfied client from last month is meaningful corroboration. If the vendor can only produce recent references, or if the references seem oddly scripted when you speak to them, factor that in.
7. Run a Quick Litigation and Complaint Check
This step takes five minutes and can save you from stepping into an active mess. The Better Business Bureau’s website lets you search any business by name and location and see filed complaints, how they were resolved, and the overall rating. An agency with fourteen unresolved complaints about non-delivery in the last year is telling you something important.
For deeper contractor verification, particularly for larger contracts, consider a PACER search (the federal court records system) or your state’s court records portal. Businesses involved in chronic litigation — especially as defendants in breach-of-contract cases — often show up in public court filings. This isn’t about finding someone who’s ever been sued; it’s about identifying patterns. A company sued three times in two years by former clients for non-delivery of services is a pattern, not bad luck.
You can also search the vendor’s name alongside terms like “scam,” “fraud,” or “review” in Google and Reddit. Forum threads where multiple people report identical experiences — upfront deposit taken, work never delivered, communication gone dark — are worth reading before you commit.
8. Trust the Combination, Not Any Single Signal
No single check is definitive. A business can be legitimately registered but still deliver terrible work. A talented freelancer might have a thin directory footprint simply because they work mostly through referrals and never bothered with listings. The point isn’t to find one disqualifying factor — it’s to build a composite picture.
When the state registration is active, the address checks out, the W-9 arrives promptly, the directory footprint is consistent, the references call back and speak freely, and the BBB shows no unresolved complaints — that’s a vendor worth trusting with your money and your project timeline. When three of those things are missing or inconsistent, you have your answer before you’ve signed anything.
Verify freelancer credentials and agency legitimacy the same way you’d verify any significant business decision: methodically, with multiple independent sources, and without letting enthusiasm for a slick pitch override the evidence in front of you.
The tools are free, the process takes less than an hour, and the alternative — recovering a deposit from someone who’s already disappeared — is never worth the risk you skipped to get there.
