7 Red Flags When Hiring a Web Developer in Pakistan

Every month, Pakistani business owners lose lakhs of rupees to website projects that were never going to finish. A boutique owner in Lahore pays a Rs 60,000 advance and the "developer" stops answering. A restaurant in Karachi gets a half-built site with someone else's logo still in the footer. The painful part? The red flags when hiring a web developer in Pakistan are almost always visible before the first payment — most people just don't know what they are looking at.

This guide is the other half of our [step-by-step playbook for hiring a web developer in Pakistan](https://frinjo.me/blog/how-to-hire-a-web-developer-in-pakistan-a-2026-playbook). That post tells you what to do. This one tells you what to run from. Memorize these seven, and you will dodge 90% of the bad deals in this market.

1. They want 100% of the fee before writing a single line of code

This is the oldest trick in the book, and it still works because it feels normal. "Sir, advance poori leni paregi, policy hai." It is not a policy. It is a trap.

Legitimate developers structure payment across milestones because it protects both sides. The industry norm looks like this: 25 to 30 percent to start, another chunk when the design is approved, and the balance when the site is live and you hold the admin access. A developer who demands the entire fee before producing a single deliverable has removed every financial reason to finish your project. This is exactly the mechanism through which most web development deposit fraud operates — it is documented across every hiring guide worth reading, and it is the pattern behind the horror stories you hear in every Pakistani business WhatsApp group.

The Pakistan-specific version of this red flag: the advance goes to a personal JazzCash or Easypaisa number, with no invoice, no company name, and no paper trail. If the money disappears, so does your evidence. What to insist on instead: an invoice with the developer's or agency's NTN on it, payment to a bank account in the business name, and milestones in writing. A developer who is serious about their business will not flinch at any of this.

2. Their "portfolio" is screenshots, not live websites

Open the portfolio. Now click. Does anything open?

Screenshots are not portfolio evidence. A screenshot can be taken of any website on the internet by anyone, in about four seconds. A developer who shows you a gallery of pretty images but cannot give you three live, working URLs — sites you can open on your own phone right now — either did not build those sites or built work they do not want independently reviewed. Ask for the URLs, open them yourself, and scroll to the footer. Then do one more thing most people skip: contact one of those businesses and ask, "Did this person actually build your website?" Two minutes of verification beats two months of regret.

Watch for the cousin of this trick: live URLs that are dead, parked, or redirect somewhere strange. A portfolio full of offline sites is a portfolio of clients who stopped paying for hosting — or never existed.

3. They refuse to put anything in writing

"Contract ki kya zaroorat hai, trust karein." If you hear this, stop.

A written agreement is not about distrust — it is the thing that makes trust possible. Any developer who resists putting the scope, the price, the timeline, the payment milestones, and who owns the domain and the code into writing is telling you exactly how they plan to handle disagreements later: without documentation, on their terms.

In Pakistan this does not need to be a 20-page legal document. A clear one-page agreement on company letterhead — or even a detailed, signed quotation with scope, price, timeline, and payment terms — covers you for most disputes. Serious disagreements can go on stamp paper. What matters is that the deliverables, the deadlines, and the money exist somewhere other than a voice note. Speaking of which — more on that in red flag #7.

4. The domain and hosting end up registered in THEIR name

This is the most expensive red flag on this list, because it turns a bad project into a hostage situation.

Whoever controls the domain account owns your website — not whoever paid for it, not whoever's business name is on it. If your developer registers your domain under their own email and their own account "for convenience," they can later refuse to transfer it, demand a payout, or simply let it expire out of spite when the relationship sours. The same applies to hosting: if the cPanel or hosting account is theirs, your entire website lives on someone else's property.

The rule is simple and non-negotiable: the domain is registered in your name, under your email address, from day one. A .com domain costs roughly $10–15 a year; a .pk domain goes through PKNIC with your CNIC. Either way, you hold the login. The developer can have delegated access to build the site — never ownership of the account. At handover, you should receive every login: domain registrar, hosting, WordPress or CMS admin, and email accounts. If a developer pushes back on this, ask yourself what they plan to do with control of your business asset. Our guide to [web hosting in Pakistan](https://frinjo.me/blog/best-web-hosting-in-pakistan-2026) explains which account setup keeps you in charge.

5. The quote is impossibly cheap — or suspiciously vague

Two opposite quotes, same danger.

The impossibly cheap quote: a "complete ecommerce website with payment gateway" for Rs 8,000, delivered in three days. Here is what Rs 8,000 actually buys in 2026: a nulled WordPress theme dumped on the cheapest shared hosting, your logo pasted in, and a developer who will not answer your messages by next month. Realistic 2026 bands in Pakistan look roughly like this: a simple business website Rs 50,000–150,000, an ecommerce store Rs 150,000–400,000, depending on features. Anyone quoting a tenth of the market rate is not efficient — they are cutting every corner you cannot see yet, from security updates to mobile layout. Check our [2026 website cost breakdown](https://frinjo.me/blog/how-much-does-a-website-cost-in-pakistan-2026-price-guide) to calibrate any quote before you accept it.

The suspiciously vague quote is sneakier: "Website development: Rs 100,000." How many pages? Which features? Is content writing included? Is SEO setup included? What about a year of [maintenance](https://frinjo.me/blog/website-maintenance-cost-in-pakistan-2026-the-real-numbers)? A one-line quote is a blank cheque — the price will double mid-project when every obvious feature turns out to be "extra." A professional quote itemizes: pages, features, revisions included, timeline, payment milestones, and what happens after launch.

6. They have no verifiable identity

Ask three questions: What is your NTN? Are you registered with PSEB? Can I see your office or at least a Google Business Profile?

In Pakistan, checking this is easier than most people think. PSEB (Pakistan Software Export Board) registration is free and done online — any software house that bothered to register leaves a paper trail you can verify. SECP incorporation and an FBR-issued NTN are the basics of a real company. A developer operating purely on a WhatsApp number, with no invoice, no tax number, no registered address, and no online presence beyond a Facebook page created last month, is asking you to trust a ghost with your money.

This does not mean every good developer is a registered company — plenty of excellent freelancers work solo. But a solo freelancer should still have a verifiable trail: a long-standing Upwork or Fiverr profile with real reviews, a personal website, or clients you can call. "Trust me, I have 10 years experience" with zero proof is not a credential. If you are weighing a solo freelancer against an agency, our [freelancer vs agency breakdown](https://frinjo.me/blog/freelancer-vs-agency-website-in-pakistan-2026) shows where each option actually wins.

7. Every decision lives in WhatsApp voice notes

Nothing against WhatsApp — half of Pakistani business runs on it. The red flag is when the price, the scope, the deadline, and every promise exist only as voice notes you will never find again.

Voice notes are where accountability goes to die. They cannot be searched, they cannot be forwarded as evidence cleanly, and "maine aisa kab kaha tha?" becomes very easy to say three weeks later. Legitimate developers summarize: after a call, you get a message — "As discussed: 8 pages, Rs 90,000, 30% advance, delivery in 3 weeks, 2 revision rounds." It takes them ninety seconds and it protects you both. If your developer only communicates in disappearing voice notes and gets annoyed when you ask for things in writing, they are keeping their options open. Don't give them that option.

Red Flags When Hiring a Web Developer in Pakistan: Your 10-Minute Background Check

Before you pay anyone a rupee, run this checklist. It takes ten minutes and catches nearly every scam on this list:

1. Open three portfolio URLs on your own phone. All three must load and look like real businesses.

2. Google the developer's name and phone number with the word "scam" or "fraud" after it.

3. Ask for two past client references — then actually call them. Ask: did they deliver on time, and would you hire them again?

4. Get a written quotation with scope, timeline, milestones, and payment terms. No one-pagers that just say "website: Rs X."

5. Confirm the domain will be registered in your name and you will receive all logins at handover.

6. Check for a verifiable trail: NTN on the invoice, PSEB/SECP registration for agencies, or a long-standing freelance profile with real reviews.

7. Pay the advance to a bank account in the business name, never 100% upfront, and keep every receipt.

If a developer passes all seven, you are dealing with a professional. If they fail two or more, keep looking — the Pakistani market has plenty of honest developers, and our [hiring playbook](https://frinjo.me/blog/how-to-hire-a-web-developer-in-pakistan-a-2026-playbook) walks you through finding them step by step.

Already paid someone shady? Act fast, in this order

If you are reading this after the advance already left your account, do not wait and hope:

1. Stop all further payments immediately and screenshot everything — chats, voice notes, the portfolio they showed you, payment receipts with transaction IDs.

2. If you paid by bank transfer or card in the last 30 minutes, call your bank's helpline now. Under State Bank rules, banks must act fast on digital fraud reports — the first minutes matter most.

3. File a cybercrime complaint with the NCCIA (National Cyber Crime Investigation Agency) at complaint.nccia.gov.pk or call their helpline 1799. Attach your screenshots, the recipient's account or wallet number, and exact dates and amounts.

4. If the developer is a registered business, a legal notice citing your written agreement usually gets attention fast — which is exactly why red flag #3 matters.

Most victims never report, which is why the same scammers keep operating. Reporting takes an hour; it is the only thing that makes the next business owner's ten-minute background check turn up a warning.

The bottom line

A good developer welcomes scrutiny. They show live work, they write things down, they register their business, they put the domain in your name, and they take a reasonable advance — not the whole fee. The developers who get offended by basic verification are telling you everything you need to know.

Hiring right the first time is always cheaper than hiring twice. If you would rather skip the vetting lottery entirely, look at [WebStore Pro's website packages](https://frinjo.me/pricing) — fixed prices, written scope, your domain in your name from day one. That is what hiring a web developer should feel like: boring, predictable, and finished on time. Our [business website service](https://frinjo.me/services/business-website) covers exactly what most Pakistani small businesses need, with none of the seven red flags above.