How small businesses get burned by AI agencies, and the red flags

Most AI agencies are legitimate. But the same wave of interest that brought good ones also brought people wrapping old get-rich-quick schemes in AI language. The Federal Trade Commission has been shutting them down for it. You do not need to become a lawyer to tell the two apart. A handful of patterns cover most of it: what they promise you will earn, how hard they push you to sign, and how much they want before you have seen anything work.

The rest of this article lays out those patterns with real cases behind them, what a fair engagement looks like instead, and the questions that make a bad vendor squirm. We build and run automation for a living, so read the last section as an invitation: ask us the same questions.

The words worth knowing first

An AI agency (also called an automation agency) is a company you hire to build and operate automated workflows, chatbots, or AI agents for your business. That is different from software you buy off the shelf and set up yourself: you are paying for someone else's build, and usually someone else's ongoing attention too.

A scoped pilot is a small first project with a fixed price and a fixed list of what it does. It has an end date, and it happens before either side commits to anything bigger.

Shadow mode means the system runs against your real data and watches what it would do, without actually doing it. You get to check its work before it ever reaches a customer.

A rollback is the ability to turn the automation off and go back to doing the task by hand. It should be clean: no lost records, nothing else broken in the process.

Your data in your accounts means the logins, API keys, and customer records the automation touches stay in accounts your business owns. They are not locked inside a dashboard only the agency can open.

The FTC's three red flags

The FTC does not need to guess at this pattern. It has sued over it, repeatedly, and the cases line up around three things.

Earnings and outcome claims that sound too clean. In 2025 the FTC sued Air AI over alleged deceptive claims about business growth, earnings potential, and refund guarantees aimed at small businesses. The company and its owners were later banned from marketing business opportunities under a 2026 settlement. In a separate case, the FTC alleged that Click Profit marketed an "AI supercomputer" that would run online storefronts, while most consumers who paid for it earned little or nothing.

Pressure to decide fast, before you have seen it work. FTC filings describe high-pressure sales tactics as a recurring feature of these schemes, not a coincidence. A legitimate vendor can wait for you to check references and read a contract. One racing the clock usually has a reason.

A large payment demanded up front. The FTC's enforcement pattern repeats a specific combination: a big upfront fee, paired with automation promises, paired with ongoing fees taken out of your revenue afterward. FBA Machine, formerly marketed as Passive Scaling, took in a reported $15 million from consumers before a permanent ban. It had already rebranded once, to get away from its own negative reviews. A company renaming itself to escape its reputation is worth a search before you sign anything.

None of these flags alone proves a scam. Together, or paired with a vague answer about what you will actually get, they are worth walking away from.

What a fair engagement looks like instead

A vendor with nothing to hide tends to look the same across the board.

• A scoped pilot, not an open-ended retainer, as the first commitment. You see one workflow built, priced, and working before you talk about anything bigger.
• Shadow mode before go-live. The system runs on real cases and shows you what it would have done. The first time it acts on a real customer should not also be the first time anyone checked its work.
• A rollback plan in writing. What happens, specifically, if you cancel or if it breaks mid-shift. If nobody can answer that before you sign, it will not get answered after.
• Your data stays in your accounts. Ask where the logins live. If the answer is "our system," that is the agency, not you, holding the keys.
• References you can actually call, at businesses close to your size, not a case study with numbers nobody can check.
• A live demo, not a recorded video, and a plain answer about how much system access the build actually needs and why.

Questions that make a bad vendor squirm

Ask these before you sign, not after.

• If we cancel next month, what exactly happens to our data and our accounts?
• Can we watch this run in shadow mode before it ever touches a real customer?
• What is the rollback plan if this breaks during a busy week?
• Can we call two businesses close to our size who use this today?
• What admin access do you need, and why that much?
• What percentage of your builds actually go live on time?
• Who holds the logins and the audit record once the contract ends?

A vendor with a real answer to each one will just answer. A vague answer, repeated across two or three of these, is the pattern from the section above showing up in the room with you.

What a fair engagement should cost, broken down by setup fee, monthly run cost, and hourly rates, is its own answer: see what AI automation really costs. Before any agent gets near customer records at all, it is also worth checking what access an AI agent actually needs. A vendor's answer to that question is one of the clearest tests here.

The honest bridge

We are an automation company. We build and run digital workers for small businesses on top of the tools they already pay for, and we would rather you test us against everything above than take our word for it.

Every customer-facing action a digital worker of ours takes waits behind an approval gate, one tap from the owner. Everything lands in an append-only audit ledger, so nothing in the record can be quietly edited later. We publish our integration limits, including the weak spots, at /integrations. Pricing is a build fee, then a monthly to run it, not a number that grows once you are locked in.

Sometimes the honest answer is that you do not need an agency at all yet, whether that is us or anyone else. If you want to see whether the numbers make sense for your business before talking to anyone, the ROI calculator takes about two minutes and uses your own figures.