Is Your Website Maintenance Plan a Scam? How to Tell

VenbitThe Venbit TeamJuly 24, 20265 min read

The short answer

The fastest way to tell if your maintenance plan is real: ask for last month's update log and a live test-restore of your backup. A legitimate provider produces both in minutes. If the request gets dodged, stalled, or met with excuses, you're likely paying for a hosting invoice dressed up as maintenance.

Key takeaways

  • Most 'scam' plans aren't outright fraud, they're plans that quietly do nothing while billing monthly.
  • The decisive test: ask for the last update log and a real backup restore. Both should take minutes to produce.
  • Red flags: no reports, no answer on where backups live, and a domain registered in the provider's name.
  • You can spot-check some of this yourself in a couple of minutes with a free tool.
  • A legit provider welcomes the request. Reluctance is the answer.

Here's the fastest test there is. Email your maintenance company and ask for two things: last month's update log, and a live restore of your most recent backup to prove it works. A provider actually doing the work can produce both in minutes. If you get excuses, delays, or a change of subject, you have your answer.

Most maintenance "scams" aren't dramatic fraud. They're plans that charge you every month while quietly doing little or nothing, betting you'll never check. The good news is that checking is easy.

The two-part request that settles it

Copy this into an email to your provider. It's polite, reasonable, and revealing.

  1. 1"Can you send me the update log for last month?" A record of what software was updated and when. Any real maintenance service keeps this and can forward it right away.
  2. 2"Can you show me a test restore of my latest backup?" Proof that backups exist, are recent, and actually work. A provider doing this properly restores to a staging copy and shows you it came back clean.

Both of these are normal client requests. Neither is an ambush. The reason they work is that you can't fake them after the fact: either the work has been happening and the records exist, or it hasn't and they don't.

The other red flags

Beyond that one test, these patterns tend to travel with plans that aren't doing much:

  • No reports, ever. You've never once received a summary of what was done. Real maintenance leaves a paper trail.
  • Vague answers about backups. They can't tell you where backups are stored or how often they run.
  • Your domain is in their name. A provider holding your domain is keeping you from leaving. Check who owns it.
  • You can't reach a person. Requests vanish into a queue and come back weeks later, or never.
  • The site is visibly falling behind. Slow load, an SSL warning, or an outdated look, while you're paying for upkeep.

What you can verify on your own

You don't have to take anyone's word for the basics. A few of these take two minutes:

  1. 1Check SSL. Look for the padlock and "https" in your address bar. A warning or a missing padlock on a maintained site is a bad sign.
  2. 2Check who owns your domain. A public WHOIS lookup shows the registered owner. It should be you or your business, not the provider.
  3. 3Run a free checkup. An outside scan tells you if the software and speed look neglected.
  4. 4Test your own contact form. Submit it and confirm the message actually arrives. Silent form failure is exactly what maintenance is supposed to catch.

If your own quick checks disagree with what you're paying for, that gap is the story. For the questions to ask a replacement provider, see the questions to ask before hiring a maintenance company.

If you need to move to someone honest

If the two-part test came back with excuses, it's probably time to switch. Before you do, make sure your domain, hosting, and logins are in your name so you can leave cleanly. Then find a provider who reports plainly and answers questions without flinching.

Our maintenance plans start at $99 a month, and we'll hand you an update log and prove a backup restores on request, because that's just what doing the work looks like. You can talk to a real person at (425) 314-1415. If you'd rather stay where you are, keep your current provider and just hold them to the same standard.

More website answers

Every question in this series, from Website Problems, Solved.

Symptoms & emergencies19
What happens if...9
Cost & pricing7
Plans & hiring10
Ownership & switching9
Platform-specific7
Seattle & local2
Venbit

The Venbit Team

Web design & SEO, Seattle

Venbit is a Seattle-area web design, SEO, and digital marketing studio. Since 2011 we've designed, built, and ranked small-business websites for clients across the Puget Sound and around the country, so the numbers and advice here come from real projects, not a content mill.

Common questions

Questions, answered straight.

Straight answers about website fixes for your business. If yours isn't here, ask us directly and we'll give it to you straight.

Ask the team

Ask for two things: last month's update log and a live test restore of your backup. A provider doing real work produces both quickly, because the records already exist. Excuses, delays, or a change of subject are the tell. You can also spot-check yourself by confirming SSL is valid, testing your contact form, and running a free checkup to see if the software looks neglected.

No. Price alone doesn't decide it. A cheap plan can be honest automated updates, and an expensive plan can be doing nothing. What matters is whether real work happens and whether the provider can prove it. Judge by the update log, the backup restore, and clear reporting, not by the monthly figure. That said, ultra-cheap plans often mean automated-only work with no human checking anything broke.

It's worth pressing on. Many hosts keep backups only a few days and don't guarantee a successful restore, so 'the host handles it' can mean your safety net is thinner than you think. A real maintenance provider keeps off-site backups separate from the host and can demonstrate a restore. If yours points to the host and can't show you a working restore, treat that as a gap.

Secure your ownership first. Confirm your domain, hosting account, and all admin logins are in your name, not the provider's, so you can walk away without losing control of your own site. Save any reports or documentation you have. Then line up a replacement before you cancel, so there's no gap where updates and backups stop. Only after that is settled should you end the arrangement.

Free 30-minute strategy call

Let's talk about your project.

Tell us what you need and we'll give you an honest read on the project, the timeline, and what it takes, before you spend a dollar. Based in Seattle, working across the Puget Sound.

4.8 on Google 5.0 on Yelp