Buying AI citations puts your rankings at risk: the red flags in a proposal, what a legitimate AEO scope looks like, and six questions that end the call.

There is a proposal open on your screen. It promises to get your business mentioned inside ChatGPT and Google's AI answers, guarantees a set number of citations every month, and asks for somewhere between £400 and £1,500 a month to do it. The email that came with it was confident, slightly urgent, and vague about method.
You want a straight answer about whether buying AI citations is legitimate, so here it is. It is not. Google confirmed that its search spam policies apply in full to its generative features, which puts manipulated or paid placement in an AI answer in the same category as bought backlinks. Beyond the policy, the product mostly cannot be delivered, because there is no fixed slot in an AI answer for anyone to sell you.
This post gives you a scoring checklist to run against the proposal in front of you, a plain comparison of what a real scope of work looks like next to a citation scheme, and six questions that will end the conversation quickly if the answer is no.
Key takeaways
- Buying AI citations means paying a third party to place your business inside AI generated answers, and Google treats manipulated or paid AI placements as spam under its existing search spam policies.
- No supplier can guarantee a mention in ChatGPT or an AI Overview, because those answers are assembled at the moment of the query from sources the system judges useful then.
- The clearest red flags are a guaranteed number of citations, per mention pricing, and a refusal to name the websites your business will appear on.
- A legitimate AEO scope names deliverables you can inspect: pages written, schema added, listings corrected, reviews earned.
- Sites caught by spam systems can lose ordinary search visibility, so the downside is not just wasted money but damage to the traffic you already have.
The offers vary in polish but almost all of them fall into three shapes, and it is worth knowing which one you are holding.
The first is placement on websites the seller controls or has an arrangement with, on the theory that AI systems read those sites and will repeat what they say. This is a private blog network with new branding. The second is bulk creation of profiles, listings and thin pages that mention your business across dozens of low quality domains, sold as building your entity. The third, and the most common, is simply ordinary content and listings work with an AI label on the invoice and a multiple on the price.
The third one is not dangerous, just expensive. The first two are the ones that can cost you the rankings you already have.
Worth noting who is being targeted. These approaches are not going to marketing directors at large companies, who have someone to ask. They are going to the aesthetics clinic in Newmarket, the building firm in Stowmarket and the family run garage on the edge of Bury St Edmunds, businesses with a real budget and nobody in house whose job it is to say no. The same template turns up again and again with a different sender name on the top of it.
Read the proposal with this list beside it and tick anything that applies.
One tick in the first group is enough to decline. Three or more in the second group and you are buying a report at agency prices.
The honest test is whether the deliverables are things you could inspect yourself at the end of the month.
| Aspect | Legitimate AEO work | Citation selling scheme |
|---|---|---|
| What you buy | Hours and named deliverables | Outcomes and mention counts |
| Deliverable | Pages written, schema added, listings corrected | A score, a report, a list of mentions |
| Where the work lands | On your website and your own profiles | On domains you have never seen |
| What you keep if you leave | Everything; it is your site | Nothing, and possibly a cleanup job |
| Guarantee offered | Effort and timescales | Placements and volumes |
| Risk to existing rankings | None | Real, and hard to reverse |
That bottom right cell is the one owners underestimate. A scheme is not neutral. It attaches your domain to a network of low quality sites, and spam systems are built to find exactly that pattern.
Google did not write a new rule for AI. It clarified that its existing search spam policies cover its generative responses, so AI Overviews and AI Mode sit under the same standards as the ordinary results. The reasoning is the part to remember: a tactic that is deceptive or manipulative in traditional search does not become acceptable because the target is a generated answer instead of a ranked page. Google has said it may act against sites that try it.
The consequence is not that you fail to appear in AI answers. It is that the search visibility you already have, the map pack position and the ordinary results that bring most of your enquiries, can be reduced or removed. Pages can quietly stop being indexed, which is a slow and confusing thing to diagnose from the inside; we wrote about that failure mode in our post on pages disappearing from Google without warning.
Weigh the trade honestly. You are risking a working channel in exchange for mentions that may not exist on a channel that is not yet your largest source of work. For a plumber in Haverhill or a clinic in Newmarket getting most of its bookings through the map pack, that is a bad bet even before the ethics come into it.
There is a second cost that does not show up in a risk assessment. Cleaning up after a scheme means chasing removals from sites that have no interest in helping you, on domains you cannot log into, sometimes registered in a country with no contact address. That work is slow, unbillable to anyone, and it is the reason link cleanup consultants still exist twenty years after the first link networks were sold.
This is worth understanding because it makes every guarantee refutable in one sentence at the meeting.
An AI assistant does not hold a ranked list of businesses waiting to be served. When somebody asks for a recommendation it assembles an answer at that moment from whatever sources it judges useful, and those judgements shift with the phrasing of the question, the user's location, the model version and what the system happened to retrieve. Ask the same question twice in a week and you can get different businesses both times. Nothing about that process contains a slot that a supplier could reserve.
Which means a guarantee has only two possible explanations. Either the seller does not understand the system, or the mentions will be manufactured on sites they control. Neither is worth £600 a month.
If you are on a call and want to know quickly, ask these in order.
Any supplier doing honest work answers all six in under five minutes. It is not a hostile set of questions; it is the same list we would expect a client to ask us, and who you would actually be dealing with should never be a mystery in this trade.
The frustrating part of all this is that the outcome the scheme promises is genuinely achievable. It is just earned rather than bought, and it happens to be the same work that improves your ordinary search results.
Spend the budget on pages that answer real customer questions with real numbers, on making your business details identical everywhere online, on structured data, and on a steady flow of reviews that describe the actual job. That is what makes an assistant confident enough to name you, and the step by step version for one assistant is set out in our guide to earning ChatGPT citations, with the wider discipline explained in the plain guide to answer engine optimisation.
For what it is worth, we do not sell AI visibility as a separate product either. The search work sits inside the monthly website plan, and the prices are published rather than quoted per opportunity, which is itself a useful thing to compare a proposal against.
Yes. Google confirmed that its search spam policies apply in full to its generative features, including AI Overviews and AI Mode, so paid or manipulated placement in an AI answer is treated as spam in the same way bought links are. Google has said it may take action against sites that do it, and that action affects ordinary search visibility too.
No. AI assistants build each answer at the moment of the query from sources they judge useful then, so there is no reservable position to sell. A guarantee means either the seller misunderstands the technology or the mentions will be created on websites they control. Both are reasons to decline the proposal.
Ask for named deliverables rather than promised outcomes, a list of the exact websites anything will be published on, examples of work with clients named, and published pricing. A legitimate agency will explain what it cannot promise before you ask. Vagueness about method combined with confidence about results is the clearest warning sign there is.
Stop the renewal, then get a list of every page created in your name and every site it appears on. Where you have control, remove the pages. Where you do not, document them. Then focus on rebuilding legitimate signals on your own site, and monitor your ordinary search performance for the next few months.
Paying an agency for time spent on genuine work is completely legitimate. Advertising inside AI products, where it is clearly labelled as advertising, is also legitimate. The line is disclosure and mechanism: paying for editorial style mentions designed to look organic is the part Google's spam policies cover, whatever the invoice calls it.
It is usually worth an hour of somebody's time before committing to a twelve month contract. A senior review of an agency proposal is a small cost against a five figure commitment, and our marketing systems consultancy exists partly for exactly that sort of second look.
Reply with question one from the list above. Name three websites my business will be mentioned on. The answer, or the absence of one, will settle it faster than any amount of research, and you will have spent two minutes rather than two weeks.
The uncomfortable truth behind this whole market is that the honest route is slower and less exciting than the pitch. Nobody sends a cold email offering to correct your Google Business Profile and write eleven properly researched service pages over four months. It does not sound like a shortcut, because it is not one. It is also the only version that still works after the next policy update, and there will be a next one.
If you would like somebody to read a proposal you have been sent and tell you plainly what it is, send it over and we will tell you what we would do instead, at the prices we publish for everyone.