So what is a "legitimate" agency? Let's compare two agencies.
Let's start with
Scuba Divers of America (SDA). This is an Arizona-based agency. Although the name is not visible on
this site, it is the same organization. I believe anyone who checks them out will agree it is a scam. If you read through the materials carefully and check out the claims, you will find it is a complete fraud. It says its world-wide referral form is accepted by all agencies, including PADI, but if you go to the PADI site you will find a clear statement that they do not recognize any training done by this organization. Check out the agency address on Google Earth (as I did a few years ago), and you will find it is a vacant lot. The agency and its related organizations were created by the owner after he was kicked out of NAUI. With nowhere else to go, he created his own agency. With all of its fraudulent claims, the company he formed to do the instruction still has a B+ rating with the Better Business Bureau, and people "duped" into taking their online nitrox course report that their cards are accepted for nitrox fills.
Now let's look at
UTD. I think everyone would agree that this is a very legitimate agency, but its origin sounds a whole lot like the origin of Scuba Divers of America. Its owner was a part of the GUE leadership until they had a falling out. He was then a part of NAUI leadership until they had a falling out. He then formed his own agency, just as SDA did. UTD is certifying divers around the world. People are paying a lot of money for that certification, and I assume its graduates have their cards recognized without difficulty. (I have a number of cards from them, but I have never had to show them for anything.)
So what's the difference? I know that UTD is insured, and to get insured as a scuba training agency, UTD had to have its standards reviewed and accepted by the insurance agency. I doubt if SDA has done this, but I can't be sure. SDA says its standards are consistent with the RSTC standards, and if they are, they should have no trouble getting insurance--if they are willing to pay the premiums.
But is being insured the only barrier to legitimacy? I honestly have no idea. I am in fact baffled as to why SDA continues to perpetrate a fraud when it would apparently be very easy to become legitimate.
If I decide this afternoon to form a scuba agency, come up with a new name, copy some established agency's standards, and buy a card-making machine, how would I be any different from any other agency listed on the Wikipedia page? Does anyone know the difference, because I clearly don't?