Click fraud Google Ads reporting classifies as invalid clicks — from automated bots to competitors deliberately exhausting your daily budget to accidental taps on Display inventory — represents ad spend with no genuine business intent. For South African businesses running Google Ads campaigns in South Africa, every such click costs real Rand while adding nothing to enquiries, leads, or sales.
Google's automated systems filter the majority of invalid traffic before you are charged. The filtering is real and meaningful — but it is not complete. Sophisticated bots that execute JavaScript and rotate through residential IP addresses, sustained competitor clicking, and low-quality Display placements can slip through. What follows is how to spot the gaps in your own account and what to do about them.
Using Google's own documented reporting tools and the credit process Google publishes, this post walks through detecting invalid traffic patterns in your account, limiting ongoing exposure, and filing for a billing credit when automated filtering falls short.
Quick Answer
Click fraud in Google Ads — bots, competitor clicking, and accidental Display taps — is any interaction that does not represent genuine user intent. Google automatically removes the majority of invalid traffic from your billing before month-end. For what slips through: add the Invalid Clicks column to your campaigns view to spot anomalies, audit your placement report weekly and exclude zero-conversion placements, apply IP exclusions for identifiable repeat offenders, and file Google's Click Quality Form within 60 days of suspicious activity to request an Invalid Activity billing credit.
Jump to a section
Concerned Your Ad Spend Is Leaking to Invalid Clicks?
Send us your current campaign setup and we will identify where your budget is most exposed to invalid traffic — and what to tighten first.
Get a Free AuditClick Fraud Google Ads Accounts Face: Definition and Types
Click fraud, as defined in Google's invalid clicks documentation, is any click on a paid ad that does not represent a genuine user interested in the advertiser's product or service. Google identifies three categories:
- Automated traffic: bots and deceptive software tools that generate clicks without human involvement.
- Manual clicks with bad intent: competitors or individuals deliberately clicking your ads to drain your budget or inflate publisher revenue.
- Accidental clicks: poor ad placement, particularly on the Display Network and mobile apps, where users tap an ad by mistake.
Search vs Display exposure: Invalid traffic on the Search Network is predominantly intentional — bots or competitor clicks on high-value keywords. On the Display Network and in-app placements, accidental and bot-generated clicks are substantially more common, driven by poorly curated long-tail inventory. If you run Display campaigns without active placement management, that is typically where invalid traffic is most concentrated.
In high-CPC categories — legal services, financial advice, insurance, high-value retail — the incentive for competitor clicking Google Ads advertisers face is real. A competitor who knows your average CPC can deplete a modest daily budget in under an hour by repeatedly clicking your most expensive ads. The motivation is not to acquire customers; it is to remove your ads from the auction.
For South African operators, this dynamic is most visible in categories with a small number of direct competitors competing for the same search queries — local professional services, niche retail, and B2B lead generation are the most frequently affected. This is not a uniquely South African problem, but the smaller pool of searchers means fraudulent clicks represent a larger share of your total daily volume than they might in a larger market.
How Google's Invalid Click Filtering Works
Google's invalid click filtering runs in multiple stages before you see a charge on your account, using a combination of automated filters, machine learning, and manual review.
The first stage filters obvious non-human traffic in real time — known bot signatures, repeated clicks from the same IP within a short window, and interactions that do not match normal human behaviour patterns. These clicks are removed before they appear in your reports or billing. A second automated pass runs within a few hours of the click event and checks for additional suspicious patterns. Traffic that passes both automated stages but is still flagged as suspicious goes to Google's specialist team for manual review.
Key point
Invalid traffic caught before the end of your billing cycle is automatically removed from your charges — no action required on your part. Invalid traffic identified after payment may appear as a credit on your next billing statement. Google does not disclose the specifics of its detection methods to prevent bad actors from reverse-engineering the filters.
One quirk worth knowing: Google Ads reports may occasionally show more conversions than clicks for a campaign. This happens when a conversion fires from a click that Google later identifies as invalid and removes from click metrics — the conversion remains valid because the user action was genuine, even though the originating click was filtered. If you see this in your reporting, it is not an error; it is the filtering system working as intended.
Google's filtering is substantial, but it has documented limits. Sophisticated bots that execute JavaScript, simulate mouse movements, and rotate through residential IP pools are designed specifically to evade automated detection. Sustained competitor clicking from a small number of real devices — which produce human-like engagement signals — can also pass through automated filters. The gap between what Google catches and what reaches your billing is where your own monitoring matters.
Detecting Suspicious Activity in Your Account
Google Ads provides native reporting signals that let you identify invalid traffic patterns without any third-party tool. The diagnostic sequence below works through those signals from the broadest check to the most specific.
Step 1 — Add the Invalid Clicks column
In your campaigns view, click the Columns icon and search for "Invalid clicks." Add both the invalid clicks Google Ads surfaces as a count and the "Invalid click rate" percentage. Per Google's reporting documentation, this column shows filtered click volume and the invalid click rate Google Ads campaigns accumulate, broken down by campaign, ad group, or keyword. A rate meaningfully above the norm for your vertical is the starting signal; the absolute number tells you how much spend the filtering protected.
Step 2 — Check GA4 engagement signals
Switch to GA4 and filter sessions from your Google Ads campaigns. Look for three patterns that indicate low-quality traffic rather than genuine user interest:
- Very short average session duration (under a few seconds) with no scroll depth recorded
- A spike in sessions from a single city or region that does not match your normal audience geography
- Click volume concentrated in a specific time window — often late at night or in the early morning — that does not align with your customers' usual behaviour
None of these signals is definitive in isolation. Seasonal events, a news mention, or a campaign targeting change can all produce anomalies. The diagnostic question is whether the pattern is new, sustained, and accompanied by unusually low conversion activity from the affected traffic.
Step 3 — Audit the placement report
For Display and Performance Max campaigns, go to Campaigns → Display → Where Ads Showed (or the Insights tab in PMax). Sort placements by spend, then by conversion rate. Any placement with meaningful spend and zero conversions over an extended period is a candidate for exclusion. Mobile app placements — particularly games, utility apps, and content aggregators — account for a disproportionate share of accidental and bot clicks on the Display Network.
| What you see in reporting | Possible explanation | Next check |
|---|---|---|
| Click spike, no conversion movement | Bot traffic or competitor clicking | Check GA4 session quality; check timing distribution |
| High spend from mobile app placements, zero conversions | Accidental taps on Display inventory | Placement report → exclude bundle IDs |
| Repeated clicks from a narrow geographic cluster | Competitor clicking or click farm | Check IP data in server logs; consider IP exclusion |
| Sessions under 2 seconds, no scroll depth | Bot traffic or very poor landing page relevance | Confirm landing page load speed; check IP origin |
| More conversions than clicks in a campaign | Google filtered a click post-conversion; normal system behaviour | No action needed; not a sign of fraud |
Key point
The placement report and the Invalid Clicks column together give you most of what you need to detect click fraud Google Ads accounts face without a third-party tool. These native signals are there by default; the diagnostic value comes from looking at them regularly, not just when something looks wrong.
How to Limit Your Exposure
Once you have identified suspicious activity, the available mitigation tools vary by campaign type. Understanding those limits is as important as knowing what to do.
IP exclusions — the basics and the limits
If you have identified specific IP addresses responsible for repeated invalid clicks — through your server logs or a third-party reporting tool — you can exclude them at the campaign level. In Google Ads: Settings → Additional settings → IP exclusions → enter the IP address → Save. To block a CIDR range, enter the network prefix without the final octet.
There are two material constraints to know before relying on this approach:
- 500-IP cap per campaign. Google Ads allows a maximum of 500 IP exclusions per campaign. For sustained or organised click fraud using IP rotation, this ceiling is reached quickly.
- Not available for all campaign types. IP exclusions do not apply to Performance Max, App, video, hotel, or Smart Display campaigns. If your budget is allocated primarily to Performance Max — which an increasing number of SA advertisers have been directed toward by Google's own recommendations — IP-level exclusion is not an option for that spend.
What does not work: Manually adding individual IP addresses after every click spike. Click fraud at any scale uses dynamic IPs, residential proxies, or multiple devices. Individual IP exclusion is a backstop, not a defence strategy — it is most useful for blocking a known competitor's office IP that you have confirmed through server logs.
Placement exclusions — the higher-leverage move
For Display and PMax campaigns, placement exclusions are more scalable than IP exclusions. Pull the placement report weekly. Sort by spend descending, then filter for placements with zero or near-zero conversions over a representative period. Exclude mobile app placements (identifiable by their bundle ID format) that have no commercial relationship to your offer. Removing app placements entirely from Display campaigns is a common and defensible starting point for reducing accidental and bot-generated clicks.
The Google Ads negative keywords discipline applies the same logic to the Search Network: precise exclusions reduce waste from irrelevant queries and, by extension, reduce the pool of placements that attract low-quality traffic. A well-structured exclusion list at both the keyword and placement level is the single highest-leverage operational defence against wasted spend — whether from intent mismatch or invalid clicks.
Search Partners — an often-overlooked source
Search Partner traffic runs through third-party sites that have opted into Google's search network. Invalid traffic rates on Search Partners can be meaningfully higher than on Google Search proper. If you are running campaigns with Search Partners enabled and your placement report shows unexplained spend from search partner domains, go to Settings → Networks and uncheck "Include Google Search Partners" for that campaign. Review the performance impact over several weeks before making a permanent decision.
Third-party click fraud tools
Tools such as ClickCease and FraudBlocker detect suspicious sessions in real time and automatically push IP exclusions to your account — addressing the lag between identifying an offending IP and excluding it manually. They operate within Google's 500-IP campaign limit but typically manage a rolling block list rather than a static one.
Google Ads click fraud protection through a third-party tool makes the most sense when you are in a high-CPC vertical with a significant Display component and have confirmed unfiltered invalid traffic that native exclusions are not resolving. For most SA operators at modest budgets, starting with native monitoring and active placement management is the right sequence before adding a paid subscription.
Claiming an Invalid Click Credit from Google
Filing a billing credit claim for click fraud Google Ads systems did not filter automatically requires specific, time-stamped evidence — not general suspicion. The process runs through Google's Click Quality Form, and understanding it before you file prevents the most common mistakes that result in rejected claims.
The 60-day rule
Google's manual investigation covers traffic from the past 60 days only. If you identify a click fraud pattern that extends beyond 60 days of the current date, the historical portion of that traffic cannot be reviewed. Set a recurring monthly check — adding the Invalid Clicks column to your campaigns view takes less than a minute — so you catch patterns before the review window closes.
What to do before filing:
- Download a date-range report from Google Ads showing clicks, invalid clicks, conversions, and click-through rate for the affected campaigns. Include the period when you first noticed the anomaly.
- Export session data from GA4 for the same period — session duration, bounce rate, geographic distribution, and device breakdown for those campaigns.
- If you have server access, collect the specific IP addresses that show repeated clicks within short windows. The more specific your evidence, the stronger the claim.
- Note the keywords or placements where the suspicious activity is concentrated.
How to file:
Navigate to Help inside your Google Ads account and search for "Click Quality Form" to access the submission form. Third-party practitioners report that submitting from an account with billing access — which has access to payment details — produces the smoothest process. Provide the date range, the affected campaigns, the evidence you gathered, and a clear description of the pattern. Third-party accounts of the process suggest a response within several business days, though this is not stated as a fixed timeline in Google's own support documentation.
What you receive if the claim is approved:
The credit appears on your next billing statement as an "Invalid Activity" adjustment — it is a billing credit, not a cash refund. You will find it under Billing → Transactions → Adjustments. The credit reduces your next invoice; it does not get returned to your bank account.
Strong claim: "Between [specific dates], campaign X received an unusually high number of clicks from a small number of IP addresses in a short window. GA4 shows near-zero session duration and zero scroll depth for those sessions. Conversions from those sessions: zero. The same keywords in other date ranges show a material conversion rate." Specific, evidence-backed, time-bound, and supported by GA4 session data.
Weak claim: "I think competitors are clicking my ads because my budget ran out faster than usual." No specific IPs, no session data, no date range, no comparison. Google's investigation team has no material to investigate.
For ongoing monitoring, cross-reference your Google Ads audit against your Invalid Clicks data — accounts that carry high invalid click rates without active exclusion lists are often also carrying other structural inefficiencies that compound the waste.
Running Google Ads Without Knowing What Portion Is Wasted?
Share your account structure and we will review your invalid traffic exposure, placement coverage, and exclusion gaps — no obligation, and we will respond within 24 hours.
Request a Free ReviewWhy South African Businesses Choose Growth Pulse Media
Every Growth Pulse Media account is managed by senior practitioners with operator-side commercial experience in the South African market — no junior account managers, no white-labelling, and no offshore execution. Founder Dirk van Greuning built and scaled a large South African ecommerce business before founding the agency, which means we treat your ad spend as a margin decision, not a reporting metric.
Our client load is deliberately limited to ensure each account receives consistent senior attention. We run campaigns in-house — no white-labelling, no offshore execution — and we understand the South African market from the buyer's side as well as the advertiser's side.
For South African advertisers who want active management that includes ongoing placement exclusions, invalid traffic monitoring, and budget protection alongside media buying strategy, you can see what that looks like on our Google Ads management service page. A no-obligation consultation is available via the contact form — we will get back to you within 24 hours.
Who This Is NOT For
Advertisers running only brand search campaigns. If your campaigns exclusively bid on your own brand name, competitor clicking incentive is low — nobody benefits from draining your brand budget — and your audience is sufficiently narrow that invalid traffic rates tend to be well below average. Active click fraud monitoring is unlikely to be a productive use of time at that scope.
Businesses who want to recover historical spend from more than 60 days ago. Google's investigation window is firm. If you have not been monitoring invalid clicks and suspect fraud from months past, a Click Quality Form will not produce a credit for that period. The more realistic path is to implement monitoring now and start the 60-day clock on future anomalies.
Advertisers whose primary campaign is Performance Max. IP exclusions do not apply to PMax campaigns. If your entire Google Ads strategy runs through a single Performance Max campaign, the mitigation tools covered in this post are either unavailable or require structural campaign changes before they can be applied. The right starting point for PMax advertisers is placement-level exclusion lists and a parallel Search campaign structure that permits more granular controls.
Frequently Asked Questions
Does Google automatically refund click fraud?
Google does not issue cash refunds for click fraud. Invalid traffic caught by Google's automated filters before the end of your billing cycle is removed from your charges without any action on your part — you simply are not charged for it. If invalid traffic is detected after billing, or if you file a successful manual claim through the Click Quality Form, the credit appears as an "Invalid Activity" adjustment on your next billing statement. It reduces your next invoice; it is not returned to your bank account.
How do I know if a competitor is clicking my ads?
You cannot confirm competitor identity with certainty from inside Google Ads, but certain patterns are consistent with competitor clicking: a sustained click spike on your highest-CPC keywords during business hours, with near-zero conversion from those sessions in GA4, and session durations that suggest no genuine browsing. If you have server access, repeated clicks from the same IP or subnet during a narrow time window are the clearest signal. Google Ads' built-in "Invalid clicks" column will show you how much Google's own filters caught — any volume above that is what you are investigating.
What is the 500 IP exclusion limit in Google Ads?
Google Ads allows a maximum of 500 IP addresses to be excluded per campaign. Once that limit is reached, no additional IPs can be blocked for that campaign without removing existing exclusions first. This limit makes IP exclusion a useful tool for blocking known, fixed-IP offenders — a competitor's office network, for example — but insufficient as a standalone defence against organised click fraud that uses rotating IP addresses or residential proxies. Note that IP exclusions are also unavailable entirely for Performance Max, App, video, hotel, and Smart Display campaigns.
Should I use a third-party click fraud protection tool?
Third-party tools like ClickCease and FraudBlocker automate what Google Ads' native tools do manually — detecting suspicious sessions and pushing IP exclusions to your account in near-real time. They are most valuable in high-CPC verticals with significant Display or competitor-clicking exposure, where the cost of invalid traffic clearly exceeds the tool's subscription cost. For the majority of SA advertisers running modest Search-focused budgets, starting with native monitoring (Invalid Clicks column, placement report, GA4 session quality) and active exclusion management is the right sequence — add a third-party tool once you have confirmed the native tools are not closing the gap.
Can I exclude placements from Performance Max to reduce invalid traffic?
Performance Max does not support the same direct placement exclusion interface as Search or Display campaigns — the mechanism works differently. Account-level placement exclusions via Content Suitability settings (previously called Brand Safety) block specific content categories and are self-service. For URL-level exclusions on PMax, practitioners have reported that this has required a Google support request rather than a self-service option — but the PMax interface has changed materially since 2024, so verify the current process in Google's own Help Center before filing. This limitation is one reason practitioners recommend running a parallel Search campaign structure alongside PMax for high-intent keywords where tighter controls matter.
Protect Your Google Ads Budget From Invalid Traffic
Growth Pulse Media manages Google Ads accounts in-house with senior-level attention, active placement exclusion management, and ongoing monitoring for invalid traffic patterns. We work with a limited number of clients to maintain that standard — no juniors, no white-labelling, no upselling products you do not need.
No obligation — send us your details and we will get back to you within 24 hours.
Get a Free Google Ads Consultation