google ads

Click Fraud on Google Ads: How to Tell and What to Do

Clicks climbing with no calls? See what Google already filters and credits for click fraud, then decide if a paid protection tool is worth it.

Your Google Ads spend is climbing, the click count looks busy, and the phone has barely rung all week. Or you opened the account this morning and saw a burst of clicks that seemed to come from one place in one short window. It is natural to suspect click fraud on Google Ads, whether from a competitor with time on their hands or from bots burning through your daily budget. Underneath that suspicion is a plain fear: you may be paying for clicks that were never going to become customers. The good news is that you can check a lot of this yourself, inside your own account, without buying anything. Google already filters some of this traffic before you are billed, and it keeps a record you can open. The harder part is telling real invalid traffic apart from the problems that look just like it, and that is where you can save the most money.

Key Takeaways

Google filters before it bills

Traffic Google flags as invalid before the billing cycle closes is removed from your charges and campaign numbers, and activity caught later can get a credit "where appropriate and possible," which is not a promised refund.

The Invalid clicks column is not money owed

It counts clicks Google already filtered out, so a big number there shows protection working, not a debt Google has to repay.

The 60-day window is your deadline

Google's Click Quality Form covers suspected invalid traffic from the past 60 days, and it asks for dates, campaigns, keywords, GCLIDs, IPs and lead outcomes.

A paid tool comes last, not first

Buy click fraud protection only when a documented, repeating loss survives your settings review and Google's investigation, and the tool costs less than the spend it would catch.

Know What Google Already Filters and Credits Before You Pay Anyone

Google calls this problem invalid clicks, and its definition of invalid clicks covers three kinds: accidental clicks caused by where an ad was placed, automated traffic from bots or deceptive software, and manual clicks meant to run up an advertiser's costs or a publisher's earnings. A competitor clicking your ads to drain your budget falls in that third group. So does a bot farm. Google does not charge you for clicks it identifies as invalid.

The work happens in two stages. According to Google's page about invalid traffic, its Ad Traffic Quality team uses automated filters, machine learning and manual review. Traffic it finds invalid before the billing cycle ends is taken out of your billing and out of your campaign metrics, so you never pay for it. If Google identifies activity as invalid after you have already been billed, it says it issues an invalid-activity credit in the next billing cycle "where appropriate and possible."

Read that last phrase carefully, because it decides what you should expect. A credit is a billing adjustment Google applies when its own review supports it. It is not a cash refund on request, and it is not a promise that every click you find suspicious will come back to you. Google's Ad Traffic Quality site describes the same protection from the other side.

A closed laptop beside a folded paper billing statement and a pencil on a plain oak desk.
Before assuming the worst, check what Google has already kept off your bill.
Filtered, credited and investigated are three different things
What happensWhen it happensWhere you see itDo you pay for it?
Filtered invalid clicksBefore the billing cycle closesInvalid clicks and Invalid interactions columnsNo, removed before billing
Invalid activity creditNext billing cycle, after later detectionBilling Summary adjustment and the credit reportPaid first, then credited where Google finds it appropriate and possible
Click Quality Form reviewAfter you report activity from the past 60 daysAn emailed finding from GoogleDepends on the finding; no click-by-click verdict is shared
What happensFiltered invalid clicks
When it happensBefore the billing cycle closes
Where you see itInvalid clicks and Invalid interactions columns
Do you pay for it?No, removed before billing
What happensInvalid activity credit
When it happensNext billing cycle, after later detection
Where you see itBilling Summary adjustment and the credit report
Do you pay for it?Paid first, then credited where Google finds it appropriate and possible
What happensClick Quality Form review
When it happensAfter you report activity from the past 60 days
Where you see itAn emailed finding from Google
Do you pay for it?Depends on the finding; no click-by-click verdict is shared

See Exactly What Was Filtered in Your Own Account

You do not need a third-party tool to see what Google caught. Three places in your account tell you what was filtered, what was credited later and how your numbers look after those credits. Each one answers a different question, so it helps to open all three. None of them costs anything, and together they take a few minutes.

Add the Invalid clicks and Invalid interactions columns

In Campaigns, open Columns, choose Modify columns, and add "Invalid clicks" and "Invalid interactions." These columns show clicks Google filtered out before billing, as the invalid traffic help page explains. You can divide invalid clicks by total clicks for the same date range to see the filtered share. Just do not call that number your loss. It is the part Google stopped, and you were not charged for it.

Check Billing Summary for an Invalid activity adjustment

Credits for activity caught after billing show up in Billing Summary as an "Invalid activity" adjustment. If you see one, Google found something after the fact and adjusted your charges. If you see none, that does not prove nothing was wrong. It only means no later credit was issued for that period.

Pull the invalid activity credit report

In Report editor, Google offers a template called "Invalid activity credit report: Search and Performance Max." The invalid activity credit report breaks credits down by campaign and shows the credited amount, credited clicks and your metrics after the adjustment. This is the view to use when you want to know what a campaign really cost you once credits are applied.

Cut Your Exposure With Settings That Cost Nothing

Some of what feels like click fraud is traffic your own settings invited in. Four settings decide a lot of who can click your ads, and each one is free to change. Change them one at a time, so you can tell which change made the difference. If you change all four on the same day, you will not know which one worked.

Switch location targeting to presence only

New campaigns often use a location option called "Presence or interest," which can show your ads to people who are merely interested in your area, even if they are somewhere else. If you serve a local area and out-of-area clicks are no use to you, switch to "Presence: People in or regularly in your targeted locations." Google's guide to preventing clicks outside your targeted locations walks through this setting. If a report showing clicks from far away is what set off your worry, this is the first thing to check.

Look at Search Partners and Display separately

A Search campaign can also run on Google Search Partners and, in some setups, the Display Network. You choose these under Networks when you create or edit a Search campaign. Segment your results by network. If partner or display clicks bring in far fewer calls and forms than Google Search does, uncheck them as a controlled test and watch qualified leads for a few weeks. If specific partner sites are the issue, Google also lets you exclude placements at the account level, and those exclusions now apply to the Search partner network as well.

Use IP exclusions for specific known addresses only

You can exclude IP addresses at the account or campaign level, and that works for a specific address you have good reason to block. It is not a fix for a geography problem, which location exclusions handle better. It also has limits: one public IP can stand for many people in an office, on a mobile carrier or at a cafe, and campaign-level IP exclusions do not work for every campaign type. Block an address only when the evidence behind it is solid.

Build your ad schedule from Day and hour data

Open the Day and hour view and compare when clicks arrive with when calls, forms and bookings actually happen. Ad scheduling lets you limit ads to the hours that bring qualified inquiries, or to the hours someone is there to answer the phone. Paying for clicks at 2 a.m. that turn into voicemails nobody returns can look like fraud on a report, when it is really a scheduling gap.

A switched-off desk phone next to a small table clock and a blank notepad on a wooden counter.
Clicks that land when nobody can answer look like waste, and the schedule is the fix.

Run the Fifteen-Minute Check Today

This whole review is free, and you can do it yourself today with the account you already have. If you cannot get into your own account to run it, that is its own problem worth fixing first, and our post on what to do when an agency won't give you your Google Ads account covers it.

The fifteen-minute click fraud check

  1. 1

    Minutes 0 to 3, filtered clicks

    In Campaigns, add the Invalid clicks and Invalid interactions columns. Write down the date range and the filtered share, and remember it is traffic Google already removed.

  2. 2

    Minutes 3 to 6, locations

    In Settings, open Locations and check whether the campaign uses "Presence or interest" or presence only. Check the included and excluded areas too.

  3. 3

    Minutes 6 to 9, networks

    In Settings, open Networks and note whether Search Partners and Display are switched on. Segment results by network.

  4. 4

    Minutes 9 to 12, clicks against calls

    Open the Day and hour view, segment by network, and compare click spikes with your call log, form leads and booked appointments for the same hours.

  5. 5

    Minutes 12 to 15, evidence

    Save dated screenshots. If one pattern still looks wrong, note the dates, campaign, keywords, GCLIDs and any server log entries for Google's form.

When you finish, you will usually have one of three answers. The spike lines up with a setting you can change. The spike lines up with a tracking gap, so leads may be arriving without being counted. Or a specific, repeating pattern remains that nothing on your side explains. Only that third answer calls for an investigation request.

Tell a Tracking Gap From Real Invalid Traffic

Clicks with no calls feel like proof, but they are a symptom with several possible causes. No published dataset ranks how often each cause shows up for small businesses, so treat the order below as a sensible way to test, not a measured ranking. Start with the cheapest and most controllable explanation and work down.

  1. A measurement gap: Call tracking is missing, a form stopped sending, auto-tagging is off, or you are comparing Google Ads clicks with Google Analytics sessions. Google's own guide to clicks and sessions discrepancies lists many reasons those two numbers differ, and our post on Google Analytics showing zero or wrong visitors covers the tracking side.
  2. A targeting mismatch: Broad searches, interest-based location targeting, or ads running while nobody can answer.
  3. A network mix that does not produce leads: Search Partners or Display bringing clicks that rarely turn into inquiries.
  4. Landing page or offer friction: A slow page, a hidden phone number, or a form that fails on a phone.
  5. Invalid traffic Google did not filter: Real, and worth reporting, once the four above are ruled out.

Some signals look damning and are not proof on their own. A repeated IP address can be dozens of different people behind one office network, mobile carrier, university or cafe connection. A one-day spike is not proof either; Google says an unexpected traffic spike or a budget that runs out early does not always mean invalid traffic. A zero-second session in an analytics tool can be a measurement quirk, since some tools need a second hit to calculate how long a visit lasted. Google also explains that its numbers and third-party click data can differ for ordinary technical reasons.

A clipboard holding a blank sheet with faint pencil tick marks beside a closed notebook on a gray desk.
Match clicks to real calls and forms by the hour before calling anything fraud.

Get Google to Investigate the Clicks That Still Look Wrong

If a specific pattern survives your check, you can ask Google to look at it. The Click Quality Form covers suspected invalid traffic from the past 60 days, so do not wait weeks to file while you gather more screenshots. Google explains the process on its invalid traffic help page.

Google asks for precise evidence. Have these ready:

  • Account and scope: Your account ID, the date range, and the affected campaigns, ad groups and keywords.
  • Traffic records: Server logs, repeated IP addresses, device and browser details, and GCLIDs, the click IDs Google Ads attaches to each click.
  • Outcomes: What the clicks produced, such as calls, forms or nothing at all.
  • A short explanation: What looks unusual and why, in a few sentences.

Google says reviews typically take several business days, and it emails its finding. It will not tell you which individual clicks it judged valid or invalid, because sharing that could help people get around its detection. Describe the pattern, not a person. You do not need to name a competitor, and the form asks about traffic, not culprits. File it expecting a review, not a guaranteed credit.

Decide Whether Click Fraud Protection Is Worth Paying For

Search "click fraud google ads reddit" and you will find threads full of owners trading tool names and frustration. That shows how common the worry is. It does not tell you how common the problem is, and the figures you will run into usually come from companies that sell the fix.

Take one example and read it closely. Lunio, a company that sells click fraud prevention, reported in its Wasted Ad Spend Report 2023 that 5.5% of traffic from Google channels was invalid, in a sample of 2.6 billion paid clicks from its own customers between May 2022 and May 2023. It found 17.5% on non-Google channels. Lunio has a commercial interest in the size of that number, the sample is its own customers rather than all advertisers, and the classification is its own. Lunio's newer global invalid traffic report has the same limits. Treat these as signals of what one vendor flagged, not as a platform-wide rate or a share of your budget. No independent study found in the research gives a verified click fraud rate for small Google Ads advertisers, and Google does not publish a universal filtered percentage.

There is outside oversight of Google's side of this. The Media Rating Council sets invalid traffic detection and filtration standards, finalized in June 2020, and its March 10, 2025 accreditation letter says the listed Google Ads measurement statistics, including Search and Display clicks and invalid clicks, comply with its general and sophisticated invalid traffic provisions. That is evidence of an audited method. It is not a promise that every dispute goes your way. The MRC also notes in an April 2025 statement that it does not use the word "fraud," because fraud is a legal term that involves intent.

A small stack of blank index cards held by a binder clip next to a closed calculator on a light wooden table.
A protection tool earns its place only when the math on documented losses works.

So, when is click fraud protection for Google Ads worth it? Only when all of these hold:

  • The loss is documented: You have run the fifteen-minute check, fixed tracking and settings, and a repeating pattern still costs you money.
  • Google's review did not resolve it: You filed within 60 days and the pattern continues.
  • The math works: The tool costs less than the exposed spend it would realistically catch.
  • You set a test: A time-limited trial with a clear measure, such as fewer repeat suspicious visits with no drop in qualified leads.

A tool's flags are evidence to look into, not proof Google must credit. No tool can promise a Google credit, identify a competitor with certainty or stop every invalid click.

Can you tell click fraud from a settings problem?

Pick an answer to begin.

1. Your Invalid clicks column shows 40 clicks this month. What does that number mean?

2. How far back can Google's Click Quality Form look?

3. Many clicks came from one IP address. What is the best first step?

Frequently Asked Questions About click fraud google ads

Does Google Ads charge for invalid clicks?

Not for the ones it catches before billing. Google removes those from your charges and metrics. If it catches invalid activity after billing, it may issue a credit in the next billing cycle where appropriate and possible.

How do I see invalid clicks in Google Ads?

In Campaigns, open Columns, choose Modify columns, and add Invalid clicks and Invalid interactions. Check Billing Summary and the invalid activity credit report for later credits.

How do I stop click fraud on Google Ads?

You cannot stop every invalid click, but you can cut exposure. Use presence-only location targeting, review Search Partners and Display, exclude specific known IPs, and schedule ads for the hours that bring real inquiries.

Can I get a refund for fake clicks on Google Ads?

Google does not promise refunds. It filters invalid clicks before billing and may credit activity found later. You can request an investigation for the past 60 days through the Click Quality Form.

Does a repeated IP address prove click fraud?

No. Offices, mobile carriers, universities and cafes can put many people behind one public IP. Use it as one piece of evidence alongside dates, keywords and outcomes.

Is click fraud protection for Google Ads worth it?

Only after your own settings review and Google's investigation leave a documented, repeating loss, and only when the tool costs less than the spend it would catch.

Moving Forward

Click fraud on Google Ads is a real worry, and Google treats invalid clicks as a real problem too. It filters what it catches before you pay, credits some of what it finds later, and gives you columns, a billing adjustment and a credit report to see both. The settings that cut exposure are free, and the fifteen-minute check tells you whether you are looking at a setting, a tracking gap or a pattern worth reporting within 60 days.

Once you know which one you have, the anger has somewhere useful to go. You stop paying for out-of-area clicks and empty hours, you count the calls that were already coming in, and you file with Google only when the evidence holds up. That leaves you with a budget you can trust and decisions you can undo if they turn out wrong.

If you would rather have someone else work through it with you, Web Leveling can review your settings, networks, tracking, call records and lead outcomes together, and help you gather the evidence Google asks for. Our pay-per-click management work treats qualified calls and forms as the measure, not raw clicks, and we will not promise you a credit Google has not agreed to. We work with small and medium businesses across the country and overseas. Tell us what your Google Ads account is showing, and we will help you work out what is behind it.

Terms

Click fraud words in this post

Tap a term to see what it means.

Invalid clicks. Google's term for ad clicks that do not reflect genuine interest, including accidental, automated and deliberately wasteful clicks.

Invalid activity credit. A billing adjustment Google applies in a later cycle when it finds invalid activity after you were charged.

Click Quality Form. Google's form for asking it to investigate suspected invalid traffic from the past 60 days.

GCLID. The Google Click Identifier, a code Google Ads attaches to each ad click so it can be traced to an outcome.

Search Partners. Websites outside Google Search that can show your Search ads when that network is switched on.

Presence targeting. A location option that shows ads only to people in, or regularly in, the areas you target.

IP exclusion. A setting that stops your ads from showing to a specific internet address.