How to check suspicious Google Ads clicks

Start with the campaign and dates that concern you. Compare Google's invalid-click reporting and any billing adjustments with the visits recorded on your website. Then check the protection options available for that campaign type.

Read moreRead less

Keep a few examples of the pattern you noticed, including times and destination pages. If you need help, those details let support investigate a specific issue instead of guessing from a high account-wide click total.

Where can you check invalid clicks in Google Ads?

Google Ads has its own systems for identifying invalid traffic. Its invalid-click reporting and billing adjustments are useful starting points when you suspect a problem. Compare the affected campaign and dates with the visits recorded on your website. Some activity may already have been filtered from charges, so check the account before treating every flagged website visit as money lost.

Look for a repeatable pattern you can describe: a particular campaign, time period or group of visits. Save the relevant details if you need to request an investigation. Check which exclusions are available for that campaign type and how they are applied in your connected account. Search and Performance Max do not necessarily offer the same controls. If you are unsure which action is supported, use the current Google documentation and ask about your specific campaign. That gives you a clearer next step than adding broad exclusions based only on a high click count.

Source: Google Ads: invalid clicks

Where can you check invalid clicks in Google Ads?: Google Ads report; Billing adjustments; Visits to inspect.
Google Ads report → Billing adjustments → Visits to inspect.

Why do ad clicks and website visits show different totals?

Your advertising account and website analytics count different things. A visitor can click twice during one session, leave before a slow page loads or decline analytics cookies. A redirect can also remove campaign parameters. Start by checking these possibilities when the numbers do not match; the difference alone cannot tell you how many clicks were fraudulent.

Use the same date range and time zone in both reports. Check that you selected the same campaign and landing page, and allow for reporting delays. Open the actual destination URL and follow any redirects to see whether its campaign information is kept. If an enquiry becomes a sale several days later, include that delay when reviewing results. For recurring discrepancies, save a specific example with the click time and destination. It will give the person maintaining your tracking a much clearer starting point than a screenshot of two unexplained totals.

Why do ad clicks and website visits show different totals?: Click recorded; Visit recorded; Dates and filters matched.
Click recorded → Visit recorded → Dates and filters matched.

How can you tell why a visit was flagged?

Open an example flagged visit and check when it happened, which campaign brought it and what the visitor did. Several visits from one address may deserve a closer look, but offices and mobile networks can share addresses. A customer researching a costly purchase may also return repeatedly. The visit's timing and behaviour help you judge whether the flag makes sense.

Then check what happened after the flag. Was the visit recorded for review? Was access restricted on the website? Was an available action sent to an advertising account? Check the status shown for your setup. If you cannot explain a particular decision, save its date, campaign and record details for support. Looking closely at a few examples is a useful way to learn the dashboard, spot a configuration problem and decide whether a rule needs adjusting before you apply it more widely.

How can you tell why a visit was flagged?: Visit details; Reason for the flag; Action taken.
Visit details → Reason for the flag → Action taken.

What happens after a suspicious click is detected?

There are several possible responses to a suspicious visit. The system can record it for review, apply a supported website action or send an available exclusion to a connected advertising account. The option depends on the integration and campaign. Check which response your setup uses before judging the result from a dashboard total.

A website block happens after a visitor has reached your site. It cannot undo the original ad click. An advertising exclusion is intended to affect later ad delivery, subject to that platform's rules. Check whether the action was applied successfully and whether the account connection needs attention. If you manage Google, Meta and Microsoft campaigns, review each connection separately; their controls differ. For an unresolved case, give support the campaign type, approximate time and action status. Those details make it easier to find out whether you need to adjust a setting, reconnect an account or investigate the visit further.

What happens after a suspicious click is detected?: Visit flagged; Response selected; Status checked.
Visit flagged → Response selected → Status checked.

How to investigate a sudden increase in ad clicks

Suppose a campaign suddenly receives more clicks without more enquiries. Before investigating, you only know that costs have risen. Pausing the campaign may stop the spending, but it can also stop genuine customers reaching you. Start by noting the affected dates and checking whether you changed the budget, targeting, offer or landing page around that time.

Next, inspect the traffic source and a few visits from the affected period. Test the enquiry form yourself. If you find a page problem, repair it. If a particular group of visits looks suspicious, review the available protection settings for that campaign and record the change you make. Afterwards, watch both the suspicious activity and genuine enquiries. This before-and-after example shows how to narrow the response. To assess your own result, compare similar days and keep other campaign changes in the record so you can see what helped.

How to investigate a sudden increase in ad clicks: Before: rising clicks; Check the cause; After: targeted action.
Before: rising clicks → Check the cause → After: targeted action.

Could a protection rule block a real customer?

A real customer might browse through a company network, use a VPN or switch from Wi-Fi to mobile data. Several people can also share one public IP address. These situations matter when you review repeated visits or a network-based flag. If you tighten a rule, check a sample of the affected visits and confirm that ordinary enquiries or purchases still work.

When someone reports a problem, ask which page they tried to use and approximately when it happened. Compare that information with the visit record before changing a broad account setting. Check whether an exclusion or website rule caused the problem, then adjust the relevant setting if needed. Keep a note explaining any exception so the next person managing the account understands it. Include staff, your agency and tools your website relies on in your checks, especially after installing protection or changing a site's forms and checkout.

Could a protection rule block a real customer?: Customer has trouble; Check the visit; Adjust the rule.
Customer has trouble → Check the visit → Adjust the rule.

What should you measure before switching protection on?

Before changing protection settings, save a report for the campaign you want to improve. Include its spend, clicks, landing pages and useful results: qualified calls, accepted enquiries or paid orders. Note the existing exclusions as well. Choose dates that reflect your normal business. A weekend promotion will usually bring different visitors from an ordinary Tuesday.

Keep a short note of changes during the trial, including new ads, budget increases, promotions and website edits. If sales improve after several changes at once, that note will help you understand what may have contributed. Check lead quality with the people answering calls or handling enquiries; a larger form-submission count can conceal more unsuitable requests. With a low-volume campaign, you may need longer to judge the effect on sales. You can still use the first week to confirm that tracking works, reports make sense and the right account is connected.

What should you measure before switching protection on?: Record current results; Note each change; Compare similar days.
Record current results → Note each change → Compare similar days.

How much money has click protection actually saved?

Start with what you were actually charged and the results your business received. A flagged visit does not automatically equal a paid click. Your advertising platform may already have filtered or credited some invalid activity. Check its reporting and billing adjustments before adding up a claimed saving from the same visits.

For a practical comparison, look at spend per qualified enquiry or paid order before and after the change. Include the subscription fee and the time you spend reviewing traffic. For example, if ten flagged visits are multiplied by a $4 average click price, the resulting $40 is an estimate of possible exposure, not proof of a $40 refund. Keep estimates labelled and explain the calculation. A useful review should show whether your account is producing better-quality enquiries or orders for its overall cost, with promotions, bid changes and other adjustments taken into account.

How much money has click protection actually saved?: Review flagged visits; Check billing credits; Compare useful results.
Review flagged visits → Check billing credits → Compare useful results.

Is MyClickShield installed on the right pages?

Check the landing pages receiving your paid traffic, rather than testing only the homepage. Confirm that the tracking snippet is installed through your chosen website or tag-manager setup and has not been added twice. If a campaign sends visitors through a redirect or onto a separate landing-page service, include that destination in the check.

Open a page in your own browser, move to the next step and look for the expected visit record. Test the form or checkout as a customer would. If your site changes pages without a full reload, check those route changes too. Review how the snippet behaves with your consent settings and ask the person managing your website to investigate missing records. Give them the affected URL, approximate time and installation method. After a website redesign or tag-manager change, repeat these checks before relying on the reports from a newly launched campaign.

Is MyClickShield installed on the right pages?: Add the snippet; Test a visit; Check the record.
Add the snippet → Test a visit → Check the record.

What should a useful traffic report show?

Start your report with the campaign, dates and question you investigated. For example: enquiries fell after a new placement started sending traffic. Show the change in spend and qualified enquiries, then add a few visits that explain why you investigated that source. Include the action taken and any question that still needs an answer.

If the report goes to a client, explain unfamiliar terms the first time you use them. They should be able to see what happened without interpreting a list of IP addresses. Keep the detailed records available for the person checking the account. Where a change has been made, say when you will review its effect and what you will compare. A short report with a specific follow-up is easier to use in a campaign meeting than a long list of blocked visits with no explanation of how customers or advertising costs were affected.

What should a useful traffic report show?: Affected campaign; Example visits; Next action.
Affected campaign → Example visits → Next action.