Semrush Scam: How to Avoid Costly SEO Traps

Semrush can be a valuable tool for SEO, but it's not without its pitfalls. One common issue is the "fake" results from the tool's competitor analysis feature, which can lead to costly SEO traps.

These fake results are often caused by Semrush's tendency to over-estimate the number of backlinks a website has. For example, in the article section "Semrush Competitor Analysis: What You Need to Know", it's mentioned that Semrush can incorrectly attribute backlinks to a website, leading to inaccurate data.

This can lead to costly SEO decisions, such as targeting the wrong keywords or investing in link building strategies that won't yield results. It's essential to take the time to verify the accuracy of Semrush's data before making any SEO decisions.

Expand your knowledge: Website Search Engine Results

Here's the Red Flags section:

Be cautious of fake Semrush reviews and ratings, which can be easily manipulated by scammers.

A review claiming to be from a well-known digital marketing expert may be fabricated, as seen in the article's example of a fake review from a supposed expert.

Red flags include a review that seems too good to be true or lacks specific details about the user's experience.

Some scammers may even use stolen photos or identities to create fake reviews, making it difficult to distinguish between genuine and fake feedback.

No Reviews can be a major red flag. If you can't find any reviews or mentions of a website, it's best to use caution.

Trustpilot is a credible source for reviews, so check if the website has any ratings there. If not, it's a good idea to steer clear.

Being the first to submit a bad evaluation of a platform is not a desirable possibility. You don't want to be the one to warn others about a potentially scammy site.

If there are no reviews for the website, it's better to be safe than sorry. Don't risk wasting time on a site that might not compensate you.

A fresh viewpoint: Semrush Site Audit Tool

Cybercriminals are using Google Ads to promote malicious Semrush results when users enter related search terms.

Malicious domains used in the campaign include “semrush[.]click,” “semrush[.]tech,” auth.seem-rush[.]com,” “semrush-pro[.]co,” and “sem-rushh[.]com.”

The fake login page mimics Semrush’s interface but only offers the option to log in via “Log in with Google.”

This allows the attackers to harvest Google login details from unsuspecting users.

Google representatives have acknowledged the issue, but the problem lies with the company's inability to tackle it decisively.

The threat actors may gain access to sensitive business data by exploiting the integration of Semrush accounts with Google Analytics and Google Search Console.

Researchers have identified a pattern of malicious Google Ads redirecting to fake Semrush and Google account login pages.

Each ad uses a unique domain name that redirects to more static domains dedicated to the fake login pages.

The phishing page only enables the “Log in with Google” option, forcing victims to authenticate with their Google account username and password.

Victims are most likely Semrush users, given the path they took to get to the phishing page.

Additional information stored in a Semrush account, such as name, phone, business name, address, email, and the last 4 digits of a Visa card, could be leveraged by the threat actors to impersonate an individual or business.

Related reading: Keyword Research for Small Business

Fake audits are a common scam targeting businesses, especially those unfamiliar with SEO. They often come in the form of unsolicited emails or cold calls from supposed SEO experts claiming to be affiliated with SEMrush or Google.

These scammers prey on businesses' hopes of improving their online presence, offering "free audits" that supposedly reveal critical issues with their websites. No reputable agency will send unsolicited emails or make random cold calls.

The audit report is usually filled with errors and warnings, known as "false positives", which are minor technical issues or irrelevant data that have no real impact on the website's SEO performance. These reports are designed to create a sense of urgency and panic.

The scammers will insist that the business's online visibility will drastically suffer without immediate intervention, often citing SEMrush or Google as evidence. This is a tactic to get the business to invest in costly services to "fix" the issues.

Explore further: Online Presence Management

In some cases, the scammers may even convince the business to abandon their existing website and build a new one, loaded with black hat SEO tactics that can result in severe penalties. This is a recipe for disaster.

Here's how to spot a fake audit:

If you receive an unsolicited email or call offering a free SEO audit, it's best to ignore it or report it as spam.

Fake success stories are everywhere, and they're often just a scam in disguise. They claim to have grown their bank account by 100 times in just a few weeks, but the truth is, their "success" came from stealing money through a bogus online task website.

These posts are tricky because they encourage others to aspire to the same level of accomplishment as the poster. But, if a post boasts success and is followed by a promotion for a doubtful platform, it's not a true success story.

Here are some common types of SEO scams to watch out for:

Legitimate success stories don't include links to unknown websites or make claims that you can imitate their accomplishments. True achievers don't readily share their successes, and they certainly don't want you to have a part of their pie.

If you're considering a website like ppc.com, be cautious if you can't find any reviews. Trustpilot is a credible source for reviews, so check it out.

Looking for reviews is a crucial step in researching a website's legitimacy. Sometimes, there are no reviews at all.

In that case, it's best to use caution and avoid wasting time on a site that may not compensate you. Being the first to submit a bad evaluation is not a desirable possibility.

If you can't find any reviews, it's probably best to stay away from the website.

Some people claim to have grown their bank account by 100 times in just a few weeks, but these stories are often fake.

These fake success stories frequently offer a bogus online work platform at the bottom of the post, implying that these websites supported their success.

The truth is that the person behind the fake website is the one who makes the posts in the first place.

Legitimate success stories do not include links to unknown websites or make claims that you may imitate their accomplishments.

True achievers do not readily share their successes; they do not want you to have a portion of their pie.

Fake success stories can be tricky because they encourage others to aspire to the same level of accomplishment as the poster.

If a post boasts success and is followed by a promotion for a doubtful platform, it's not a true success story.

Avoid interacting with these phony stories or you risk losing all of your funds.

Fake success stories often try to get you to invest in a bogus online work platform, but these platforms are usually scams.

Recommended read: Online Search

SEO scams are a real threat to businesses, especially those unfamiliar with SEO. They often start with unsolicited emails or cold calls offering free SEO audits that show alarming "issues" with their websites.

Fake SEO audits typically follow a predictable pattern, beginning with unsolicited contact from a supposed SEO expert claiming to be affiliated with SEMrush or Google. They offer a "free audit" of the business's website, which is a red flag.

The audit report is filled with errors and warnings, often called "false positives", which are minor technical issues or irrelevant data that have no real impact on the website's SEO performance. These scammers will insist that your business's online visibility will drastically suffer without immediate intervention.

Types of SEO scams include unsolicited audits, fake Google affiliates, paid audits, blackhat SEO, and new website scams. Here's a breakdown of these types:

SEMrush is a well-known and trusted tool for SEO professionals, but its reputable name is often exploited by fraudulent agencies.

A new phishing campaign is targeting search engine optimization (SEO) professionals with malicious Semrush Google Ads that aim to steal their Google account credentials.

The bad actors are after Google Ads accounts that would enable them to create new malvertising campaigns. Semrush's visibility management software as a service platform serves 40% of Fortune 500 companies and 117,000 paying customers.

The fraudsters are taking an indirect approach to hacking Google advertisers and likely gaining access to Semrush accounts. They're using a malicious ad scheme for Google Ads that redirects to a fraudulent login page for Semrush.

The phishing page uses the Semrush brand, but only the 'Log in with Google' option is enabled, forcing victims to authenticate with their Google account username and password. The domain names registered are all variations on the Semrush name.

Here are some warning signs of this scam:

These are just a few examples of how scammers are targeting SEO professionals. It's essential to be cautious and verify the authenticity of any ads or offers you receive.

Fake SEO audits often follow a predictable pattern. Unsolicited contact is the first step, where businesses receive an email or phone call from a supposed SEO expert claiming to be affiliated with SEMrush or Google, offering a "free audit" of the business's website.

No reputable agency will send unsolicited emails or make random cold calls. They just don't need to. Fake SEO audits are often used to prey on businesses, especially those unfamiliar with SEO.

The audit report is filled with errors and warnings, often called "false positives." These are minor technical issues or irrelevant data that have no real impact on the website's SEO performance. Bogus audit reports are designed to scare businesses into thinking their website is critically flawed.

Once you're hooked, scammers offer costly services—sometimes thousands of dollars—to fix these "issues." They may even insist that you need an entirely new website. Don't fall for this unless they show you why.

Curious to learn more? Check out: What Is Keyword Research and Analysis in Seo

Here are the common tactics used by fake SEO auditors:

Notable people distributing large sums of money on social media are often fake, so it's essential to verify legitimacy.

Phony social media messages are extremely common, and many people fall victim to them. Always question the authenticity of events and online task platforms that promise large job rewards.

Check the post history to see if new accounts have been created recently, as scammers often create fake accounts to spread their scams. Verify credibility by confirming affiliations with real brands or individuals.

Compare followers and cross-reference usernames with official accounts; slight discrepancies suggest dishonesty. Always strive for an answer, and most of the time, it's the latter - a scam.

Suggestion: Social Media Optimization