Google click fraud

Click fraud is one of the biggest issues that worry our clients, especially when it comes to Google ads.

The $60 Billion Problem

According to cyber security firm Cheq, click fraud costs marketers over $61 billion per year.

How can you make sure you’re not being defrauded and your ad spend isn't wasted?

$61 billion is a mind-boggling number of wasted ad spend.

Click fraud is a very valid concern in PPC marketing, with some clear ramifications:

  • Budget Drain: This is the obvious concern - no company or marketer wants their budget drained by click fraud!
  • Measurement Issues: When you get a ton of invalid or fraudulent clicks in your PPC campaigns, it can really distort your data and make accurate predictions and measurements very challenging.
  • ROI Concerns: It can really mess up your ROI numbers. It might look like ROI is swinging wildly up and down if all of a sudden you have a large number of invalid clicks.

Key Takeaways

  1. Click Fraud costs marketers over $61 billion per year.
  2. Google is getting better at combating click fraud, but it’s still imperfect.
  3. Qualifying leads & conversions is probably the most effective way to combat Google click fraud.
  4. Enhanced conversions and offline conversions are essential for Google ads.
  5. Marketers should add forms & CAPTCHA validation to fend off spammy traffic.
  6. Try independent software like Clickcease, Fraud Blocker, Clickguard, and TrafficGuard.
  7. Avoid display networks as they’re most susceptible to Click fraud, even the Google display network.

What is Click Fraud?

Graph to illustrate Ad Click Fraud

Click fraud is the practice of repeatedly clicking on a pay-per-click (PPC) advert, which generates worthless traffic and fraudulent charges for the advertiser. 

👉 The motivations for click fraud vary:

  • Bot & Crawler Traffic47% of all internet traffic is from bots, and this problem is only getting worse with time. This is the most common source of click fraud. Often these clicks can be random in nature, rather than a targeted attack.
  • Malicious Competitors - Competitor’s may be trying to deplete a rival’s advertising budget
  • Greedy Publishers - Publishers might click on display ads to boost their own website earnings 
  • Fraud Rings - This is where sophisticated criminals put together elaborate ad frauds.
  • Accidental Clicks - The internet is full of real humans who will unfortunately click on ads by mistake (we’ve all done it) and thus sometimes advertisers can be charged for those accidental clicks. 

Famous Cases

👉 Here are some famous click fraud cases over the years.

  1. Uber vs. Fetch Media (2017): Uber sued Fetch Media after they charged them for fraudlent ads. Incredibly, Uber paused $100m in ad spend and saw absolutely no difference in results! 
  2. Lane's Gifts v. Google (2006): Lane's Gifts filed a class-action lawsuit against Google who eventually settled for $90 million, after becoming fed up of invalid clicks.
  3. Google DoubleClick Bid Manager Click Fraud (2017): The "HyphBot" ad fraud exploited Google's DoubleClick ad exchanges, generating fake ad impressions through fake websites.
  4. Methbot (2016): The Methbot clickfraud scam was reportedly responsible for up to $1 billion in losses to the advertising industry.
  5. Google TrueView Fraud: This report alleges that Google misled advertisers (including fortune 500 brands) over many years through the way they charge for video ads.

The Cost of Click Fraud

A research report from Juniper Research suggests some startling statistics:

  • $172 billion per year is going to be lost to ad fraud by 2028, a massive increase from the estimated $84 billion lost for 2023.
  • Fraud mitigation platforms are anticipated to recover about $23 billion in lost ad spend in 2023, with this figure expected to more than double by 2028.
  • The report anticipates a 105% increase in ad fraud from 2023 to 2028.
  • Fraudulent clickthroughs are projected to increase from 37 billion in 2023 to over 65 billion by 2028.

How to Protect Yourself From Click Fraud

prevent click fraud

There are some very important steps that marketers can take to help prevent click fraud from Google and other PPC platforms as well.

  1. CAPTCHA - Add CAPTCHA to all forms and landing pages to help prevent bots from submitting anything.
  2. Block Spam Scripts - Add any other spam protections add-ons that may help block automated script submissions.
  3. Honeypot technique - Many forms now have a built-in 'honeypot' that shows a hidden form field to bots but not real users.
  4. Location Targeting - Always ensure that you target ads to precise locations and avoid high-risk locations.
  5. Adjust location Settings - to 'only presence in' to ensure ads only show to users actually located in the targeted areas.
  6. Audience Settings - Make sure that you have tight audience settings in place.
  7. Negative Keywords - Always add irrelevant keywords to your Google ads as negative keywords, especially high-volume generic terms.
  8. Exact Match - The more precise you target your keywords, the less likely it is you'll fall victim to click fraud.
  9. Avoid Display Ads - The Google Display Network is a notorious source of irrelevant / bot traffic, we recommend turning this off always within Google ads.
  10. Raising Bids - Unfortunately, the lowest bidders on Google ads are typically landed with the lowest quality traffic. Get those bids to a competitive level to see the quality of traffic & customer improve.
  11. Consider 3rd party click fraud tools- to help identify invalid and fraudulent clicks.  
  12. Regular Reviews - You need to constantly monitor campaign performance, check for any abnormalities and tweak settings accordingly within Google ads.

"I just ran some PPC ads on Google for a real estate client.

We noticed that our forms will being filled out by bots! 

We tried calling the leads and they were all duds - The phone numbers were fake and make people we spoke to said they never actually clicked on our ad" 

–Anonymous PPC Marketer

The above is an incredibly common situation, especially for lead-generation clients like real estate, business services, home services etc.

The good news is that there's a simple solution to combatting this problem within Google ads...

The #1 Method To Prevent Google Click Fraud

I'm going to explain the most important concept in preventing click fraud, specifically within Google search ads.

👉 You need to have strong lead qualification and conversion tracking.

Google Ads is a machine with a goal - To get you as many conversions as it can.

If you just let Google Ads run by itself and don't tell it what constitutes a "qualified lead" then you run the risk of the algorithm pumping your account full of low-quality conversions.

On the other hand, if you connect a CRM to Google Ads and leverage enhanced conversions, then you can actually tell Google ads not to count spammy leads as a conversion.

By doing this, you are training the Google Ads algorithm to go and find you more of the good leads, and less of the bad ones.  

This means that next time Google's ad auction runs, they're far more likely to only push 'legitimate' leads to your advert. 

What is Google Doing About Ad Fraud?

Google AI Click Fraud Detection

Google has invested heavily into preventing ad fraud.

The incentive for them is obvious - If they don't, they risk losing trust in their entire platform.

👉 Here are some of the things they're doing:

  1. They use machine learning and automatic filters "to detect and filter as much invalid and fraudulent activity as possible."
  2. They use automated detection systems to stop advertisers paying for invalid clicks e.g. if a user immediately bounces or they detect a bot click.
  3. They manually review cases of click fraud the their automated systems might not have picked up on.

Google's main problem is their display network.

They offer ad placements on over 2 million websites, videos & apps where you ads may appear.

Amongst advertisers, it's well known that many clicks coming from the display network are very low quality.

Wordstream wrote a report that identified the massive problem of click fraud in the display network, showing just how big of an issue this is, even with Google's system in place to try and weed out spammy sites with fake traffic.

This is one of the key reasons that we always recommend turning off search network & audience network on your Google ad campaigns.

Unfortunately, with Google's new AI-driven advertising campaign type 'performance max' you cannot turn this off.

It's not so much of a problem with Ecommerce sites because it's easy for Google to optimize towards the goal of sales. But as discussed, when Google is optimizing towards people filling out a form on a website, there's a much greater risk that their algorithm will push bot traffic or low-quality traffic to yout website.

How Does Google Compare vs. Other Ad Platforms?

In Google's defense, they're probably the most sophisticated company in the World when it comes to combatting click fraud, especially in search.

According to click fraud detection company Polygraph, these are the click fraud rates by ad network in 2024:

  • TikTok Ads: 74%
  • Twitter/X Ads: 61%
  • Facebook Ads: 57%
  • LinkedIn Ads: 48%
  • Reddit Ads: 33%
  • Microsoft Ads: 14%
  • Google Ads: 11%
  • Instagram Ads: < 1%

The Future of Click Fraud

Despite the rising prevalence of click fraud, there is hope for the future with new technology.

Let's look at some of the things that should help massively prevent click fraud in the future:

  1. Artificial Intelligence (AI) - This is already being used in large part by companies like Google, but the technology is still improving rapidly. AI will be able to analyze a huge amount of data and quickly spot patterns and anomalies to help identify likely bots or fraudulent activities way faster than any human possibly could.
  2. Blockchain Technology - Essentially, blockchain could be used to track ad and verify ad clicks, so that you know each and every click is legitimate.
  3. MFA - Platforms should have more advanced authentication features in the future, so that only real people are being set up with accounts. This clearly isn't the case right now, but this technology should improve.
  4. Cross-Platform Data Sharing: Most of the general public won't like this, but platforms could share data to help identify fraudulent activity more easily. 

Summary

PPC marketing has some fantastic benefits, and the threat of click fraud shouldn't put you off entirely.

But if you're not completely on top of your Google Ads account and implementing things like lead qualification and enhanced conversions, then you do run the risk of falling victim to click fraud.

Our final piece of advice is just to monitor and measure everything - at the end of the day, ad networks like Google and Facebook are literally just huge, machine-driven algorithms. You need real humans in there making sure that they're actually driving qualified business leads through their advertising platforms.

Stewart Dunlop

Stewart

CEO