How to Verify a Website's Real SEO Traffic Before You Buy It

Buying a website without verifying its actual organic traffic is like purchasing a used car based on the seller’s word alone. Screenshots from Ahrefs or Semrush are trivially easy to fake or cherry-pick, and inflated traffic numbers are one of the most common tactics used to justify an inflated asking price. The only way to know what a site truly earns from Google is to look at the data the seller cannot fabricate: Google Search Console.

Why Traffic Screenshots Are Not Enough

Third-party SEO tools like Ahrefs, Semrush, or Moz estimate organic traffic using their own crawl data and click-through rate models. These estimates can be wildly off — sometimes by a factor of two or three — and they are easy to manipulate. A seller can screenshot a peak period, crop out a recent decline, or simply present data for a subdomain or geographic segment that looks better than the whole picture.

Even when screenshots appear genuine, they only show what the tool estimates, not what Google actually recorded. For any acquisition above a few hundred euros, relying on those images alone is not due diligence — it is wishful thinking.

What Google Search Console Reveals

Google Search Console (GSC) is the authoritative source for organic search performance because it comes directly from Google’s own index and measurement system. It shows:

• Total clicks from organic search, by day, week, or month
• Impressions, meaning how often pages appeared in search results
• Average position per page or query
• Top queries and pages that drive traffic
• Click-through rate (CTR) per keyword

Crucially, GSC data cannot be altered retroactively. A seller cannot edit past months to hide a traffic drop. That historical record is what makes it the gold standard for verification.

How to Request Access as a Buyer

You should never ask a seller to send you exported files or screenshots from GSC — those can be edited. Instead, request read-only access to the actual property inside their Google Search Console account. Here is how that works in practice.

Step 1: Ask the Seller to Add You as a Verified User

In GSC, the site owner goes to Settings → Users and permissions → Add user, enters your Google email address, and sets your permission level to Restricted (read-only). You will receive an email invitation to confirm.

This gives you live access to the real data inside their account. You are not trusting a file they sent you — you are reading the same interface they use.

Step 2: Review the Full Date Range

Once inside, expand the date range to the maximum available period, which is 16 months. Look at the clicks graph and identify:

• The overall trend: is traffic growing, flat, or declining?
• Any sharp drops that coincide with Google algorithm updates (compare against the known update calendar)
• Seasonal patterns versus genuine growth

A healthy site shows gradual, sustained growth. A spike followed by a collapse is a red flag — it may indicate a link scheme, parasite SEO, or a penalty that has since kicked in.

Step 3: Check the Top Pages and Queries

Navigate to the Performance report and switch the view to Pages, then sort by clicks. This tells you:

• Which pages are responsible for the majority of traffic
• Whether the site depends on a single viral article or has a diversified portfolio of ranking content
• Whether the top pages are evergreen or likely to decay

Then switch to Queries and look at the branded versus non-branded split. A site where most traffic comes from its own brand name is far less sellable than one where most visitors arrived through informational or commercial keywords.

Step 4: Cross-Reference with Google Analytics (If Available)

GSC measures search visibility; Google Analytics measures what happens after the click. If the seller also grants you read access to their Analytics property, check:

• Whether the sessions recorded in Analytics roughly match the clicks in GSC (a large gap can suggest click fraud or bot traffic)
• Bounce rate and average session duration on the top organic landing pages
• Whether organic traffic converts into any measurable goal (email signups, purchases, ad clicks)

A site with high GSC clicks but near-zero engagement in Analytics is worth investigating further before proceeding.

Step 5: Look for Manual Actions and Coverage Issues

Inside GSC, go to Security & Manual Actions → Manual actions. If there is a manual penalty on the site — for unnatural links, thin content, or spam — it will appear here. A seller cannot hide this from you once you have direct access.

Also check Indexing → Pages to see how many URLs are indexed versus excluded. A large number of “Crawled – currently not indexed” pages can indicate content quality issues that Google has quietly demoted.

Red Flags to Watch Out For

Even with GSC access, stay alert to patterns that suggest the traffic is not as valuable as it looks:

• Traffic heavily concentrated in a single country with low purchasing power, while the monetisation strategy targets another market
• Very high impressions but very low clicks, indicating the site ranks for informational queries it cannot monetise
• Recent traffic recovery after a long decline, which may mean the seller is listing precisely at the peak before another drop
• No correlation between traffic and revenue — if clicks are high but the monetisation reports show flat income, something is off

What to Do If the Seller Refuses Access

Legitimate sellers understand that GSC access is standard due diligence. If a seller refuses outright, treats the request as unusual, or offers only exports and screenshots, treat it as a significant warning sign.

In some cases, a seller may offer a video call where they share their screen and navigate through GSC live. This is an acceptable alternative — you can ask them to scroll through different date ranges, switch between pages and queries, and show the manual actions panel in real time. It is harder to fake than a static file, though less reliable than direct access.

If a broker is involved, a reputable marketplace will often facilitate access verification as part of their standard process. Ask them explicitly what data they validated before listing the site.

FAQ

Can Ahrefs or Semrush data be completely wrong?

Yes. Third-party tools estimate traffic using their own models and do not have access to actual click data. Discrepancies of 30 to 70 percent compared to real GSC data are common, and the direction of the error is not predictable — a tool might overestimate or underestimate depending on the site’s niche, language, and keyword profile.

How long should I request access before making an offer?

Request access as early as the serious negotiation stage, ideally before signing any letter of intent. You want enough time to analyse at least 12 months of data, identify seasonal patterns, and verify that any recent growth is sustained rather than a one-time spike.

Is it safe for the seller to give me access?

Yes, read-only access in GSC lets you see traffic data but does not allow you to make any changes to the property, submit sitemaps, or alter settings. There is no risk to the seller’s site from granting Restricted access.

What if the site was recently migrated to a new domain?

A domain migration resets the GSC property. Ask the seller to grant you access to both the old and new properties. The old property will show the historical traffic baseline, while the new one will show how well the migration was executed and whether rankings have been preserved.

Can I verify traffic for a site listed on a marketplace without direct GSC access?

Some marketplaces (Flippa, Motion Invest, Empire Flippers) verify GSC data themselves and publish aggregated summaries. This reduces — but does not eliminate — risk. If the acquisition is significant, always request your own direct access rather than relying on a marketplace’s summary, which may have been captured at a favourable moment.