The Click Fraud Protection Blog | ClickCease
ClickCease click fraud monitor

What Is Click Fraud and How to Protect Your PPC Ads

What is Click Fraud?

And how to stop ppc fraud.

The rise of digital marketing, specifically PPC campaigns, has done incredible things for companies. It lets them target specific demographics. It also puts them in front of consumers in a way that was never possible before. Since consumers have moved online, as that is where most purchasing decisions are made today, PPC has became a necessity for companies of all sizes and industries. A quick overview and then I’ll dive into what’s on your mind, click fraud.

But as incredible as PPC is for companies, it has its downsides. It exposes companies to competitors and makes them easy to target. This has led to an increase in click fraud, a practice competitors use to run companies out of the marketplace. Click fraud can be perpetrated manually or automatically. Its main purpose is to rack up clicks on competitors’ ads for the purpose of draining their ad budget.

Are you affected by click fraud? Read on as we guide you through the basics of click fraud and how to protect yourself.


click fraud bots
click fraud competitors

hacker click fraud

Mechanics of PPC and Paid Campaigns

PPC (pay-per-click) advertising, is a digital marketing model. It’s where advertisers pay to promote their brand or product through ads, and pay a small fee each time their ad is clicked.

Search engine advertising is one of the most popular forms of PPC advertising. It can be done on any of the various advertising networks. The most popular advertising network is Google AdWords. Using AdWords lets companies create and place ads on the Google search engine and Google’s other properties.


PPC lets advertisers bid and pay for ad placement in the search engine’s sponsored links. So if a picnic basket company bids on the keywords “outdoor picnic basket”, their ad will likely show up at the top spot of the search engines results page for that query. Every time the picnic basket company’s ad is clicked, they have to pay the search engine a fee. Paying a fee to the search engine may seem absurd, but if you’re running your PPC campaigns correctly, it’s worth it. Think of spending $5 to get a customer through your doors. You would probably spend that money and more, as it has the potential to lead to a sale. With this in mind, that $5 investment becomes trivial in the face of the expected benefits arising from the transaction.

PPC is a great way to increase profits in a company, but it’s like handling a weapon. Used correctly, it can do wonders; but used incorrectly, it can drain an ad budget with little to show for it.

(5 tips and tricks for a better campaign)

How Click Fraud is Executed

A quick Google search of the words “buy clicks”, is all you need to understand the vast and nasty world of click fraud. Clicks can be purchased, bots can be created, and fraud can be executed by a person, a bot, or a click farm.

When a person is hired to perpetrate click fraud, they’re often from a developing country, and may charge as little as $5 for 100 clicks. The hired worker will sit at a desk and click a specific ad or ads over and over again. Because it’s such a tedious task, developers have created automated tools, referred to as “bots”, to carry out the fraud.

Bots are let loose to rack up clicks on a particular ad, and can be programmed to be relatively simple or really advanced. Not all bots are bad or created with bad intentions. But because click fraud is a tedious task that simply requires an ad button to get clicked over and over, bots are the perfect tool. The third way that click fraud can be executed is through click farms. Click farms have gained people’s attention because they’re rapidly growing in number. A click farm is the digital equivalent of a dairy farm, only instead of rows of cattle attached to machines, workers. They are often in developing countries, and get paid a pittance to sit at desks. These farms click on ads for their living.

However click fraud is executed, it’s a growing problem. It’s gotten so bad that an estimated 90% of all campaigns suffer from click fraud. And the general consensus is that up to 20% of a company’s total advertising budget gets wasted on fraudulent clicks.



Who is affected? 

Click fraud affects businesses of all types and sizes.

If you think of a local service provider such as a locksmith or a plumber, their whole business strategy in terms of digital marketing lies in PPC advertising. Imagine getting locked out of your house, or having a plumbing problem at 9pm with no idea what to do. The first place you turn to is the internet. You would likely search, “locksmiths around me”, or, “plumbers in area code x” and click on the first ad you see. On the other hand, consider large companies that run huge PPC campaigns to attract the attention of customers.

There are 3 industries in particular though, that are more vulnerable to click fraud than others. According to a 2015 Bloomberg click fraud report, the 3 most affected industries or categories of business, are finance, family, and food. The reason for this is that they all have a relatively high cost-per-click (CPC) and search volume. An industry with a huge amount of traffic and expensive keywords means more room for fraudsters to hide themselves. It also means less risk of getting caught, and a higher payout. Here at ClickCease we see that the most affected micro industries are: Locksmiths, DUI Lawyers, Water damage repair and… dentists. It seems that local service providers are prone to a higher rate of click fraud due to the competition, high CPC and the knowledge of the market.

No matter how little or how much money gets spent on campaigns, one thing is for sure. Every company that’s using PPC networks like Google AdWords or Bing Ads, is either vulnerable to click fraud, or has been a victim of click fraud.




Dealing With Invalid Clicks on Campaigns

With click fraud being a massive (and growing) problem, you probably assume that the ad networks are taking serious steps to prevent it. Fortunately, the most popular one, Google AdWords has an Ad Traffic Quality Team. They work to detect and handle invalid clicks, but unfortunately, the steps have not been significant enough.

In order to filter out invalid interactions, the AdWords Ad Traffic Quality Team examines every interaction on an ad. The team looks at various data points, including time of the interaction, IP address, if there are duplicate interactions, and other patterns and trends.

What is AdWords Doing About This

AdWords retention teams and support agents are constantly receiving complaints from advertisers: “A Competitor is clicking on my AdWords ads. ”

The normal response these advertisers will receive is a template answer which basically says that the clicks are from normal user behavior.

After invalid clicks are detected, AdWords will filter out clicks before they reach your account reports, if they are considered invalid. Additionally, if you think AdWords missed fraudulent clicks on your account, you can have the team investigate. They will process your request within a few days. If the clicks are in fact found to be fraudulent, AdWords will reimburse your account, but only 2-3 weeks after the fraud took place, and only if you notice it and claim it.

The immediate result of this, is that your ad budget would be exhausted prematurely, resulting in missing critical opportunities. Your ad would also not be online for a few hours or days. Additionally, Google’s click fraud criteria are identical for each and every advertiser. So while 10 clicks from the same IP address in a period of a day is completely normal for one advertiser, another might see it as click fraud.

Though Google has practices in place to protect your PPC campaigns, they’re often just not enough.

(Read more about what AdWords is doing about this HERE).


With click fraud costing companies billions of dollars every year, you have to ask yourself: “who is responsible for stopping it?”.

Who should be the “police” and reprimand the fraudsters, or serve them penalties like fines or jail time? And are there laws in place protecting you?

In terms of click fraud and the legal system, there is currently no law in place to protect you. Since click fraud happens so fast, and attacks can come from around the world at once, it’s hard for legislators to create a body of laws that pinpoint the act of click fraud and claim it as illegal. Additionally, a click is only fraudulent if it is done with a fraudulent intention. This makes it really tough to decipher fraudulent clicks from legitimate ones. Click fraud is hard to identify and even harder to tackle.

There is a US law called the Wire Fraud Act. It was established to prosecute financial fraud using telecommunications. The law comes with a 20 year sentence. But it’s used in very limited cases. And nobody that’s been accused of click fraud has gotten this kind of sentence.

Are you a victim? 


click fraud

The best ways to check for click fraud in your accounts is to:

Monitor account activity: Check your analytics often and look out for strange trends, spikes, or patterns. One spike that should set off alarm bells is a sudden spike in your CTR. This is a telltale sign, as someone is purposely looking for your ads and clicking on them repeatedly. Also be aware of the locations your clicks are coming from. If you’re in the US and you see lots of clicks coming from the Ukraine, something is up.

Measure engagement: Analyze your data and determine if it’s suspicious. Check your KPIs and look for red flags like abnormally high CTRs with few conversions. If you’re getting a large amount of clicks that don’t equate to more conversions, you may be a victim.


The more competitive an industry, the more click fraud it will see. Local service providers such as locksmiths, plumbers and lawyers see an extremely high amount of fraud. These campaigns will normally see manual click fraud.

Big brands and highly visible campaigns will see more bot click fraud.

How to Manually Block Click Fraud 

Manually blocking click fraud and protecting yourself from future fraud is labor intensive, but it’s possible.

Here are some actionable steps you can take to decrease or negate invalid clicks on your ads:

1. Set Up IP Exclusions: Take the time to identify the IP address that’s associated with the fraudulent clicks you’re getting. You’ll then want to set up an exclusion to block your ad from the IP address that’s receiving your ad.

2. Run Remarketing Campaigns: With remarketing campaigns, you’re only showing ads to people who’ve visited your page in the past. Running remarketing is great for two reasons. 1. They ensure you’re staying clear of click fraud, and 2. They ensure your ads are only visible to relevant audiences.

3. Adjust Your Targeting: If you suspect your ads are receiving invalid clicks, it’s time to adjust your targeting. If you’re getting clicks from a certain geographic location, you should exclude those regions and their languages. Most click farms are in developing countries. That’s why you would see a large amount of clicks from one specific place. Additionally, try to avoid targeting large groups of people. Target niche sites and demographics that you know well and are familiar with.

4. Use Smart Techniques to Throw Off Bots: One of the most popular ways of avoiding bot clicks is with a captcha security system. Many companies frown upon using captchas. They feel it annoys customers and disrupts the user journey. That’s what makes a honeypot field a great solution. A honeypot field is an invisible field that only bots can see. A bot will often mistakenly fill in the honeypot field instead of the real field, alerting you to fraudulent clicks.

Protect yourself from click fraud with DIY techniques is a good idea. But many advertisers lack the time or resources to be checking each and every click for validity.

How to Automatically Block Click Fraud

The damage and loss that click fraud can cause you and your business is significant. But that doesn’t mean that you need to lose hope. Luckily for you there are solutions out there that can automatically protect you, and block fraud. When Google AdWords and the other ad networks aren’t doing enough to protect you from click fraud, you can count on ClickCease.

The ClickCease solution integrates with your campaigns to stop click fraud automatically. The algorithm monitors each and every click to collect valuable data. It also detects real potential customers from fraudulent ones, and blocks fraudulent clicks. Even better? The smart system will hide an ad from a fraudster if and when it detects a fraudulent click. It’s not just a solution to augment your campaigns, it’s crucial to your business’s success.

When you want to get the most out of your ad budget and campaigns, turn to ClickCease, the company that protects over 274,000 campaigns in 181 countries.

Start blocking click fraud.

(No Credit card required)

Loni Schuman

Hi! I'm Loni and I'm a content creator here at ClickCease. I hope you find these blogs enjoyable and insightful. Happy reading :)


This site uses Akismet to reduce spam. Learn how your comment data is processed.

Following is FUN!

Share some with a fellow advertiser!