Practical guide

How to stop click fraud in Google Ads: six free checks, IP exclusions and when a paid tool is worth testing

How to stop click fraud in Google Ads with free checks first: measure what Google filters, tighten settings, exclude IPs, protect forms and escalate.

Last materially reviewed 2026-10-24

Quick answerTo stop click fraud in Google Ads, measure what Google already filters, tighten location and keyword settings, exclude repeat IP addresses where the campaign type allows it, protect your lead forms and ask Google to investigate what slipped through. Test a paid tool only after those steps leave a gap.

How to stop click fraud in Google Ads: start by measuring

The first step in stopping click fraud in Google Ads is to see how much invalid traffic Google already removes. In Google Ads, open Campaigns, click the Columns icon, search for Invalid clicks and apply it. That column shows clicks Google filtered before billing, which you are not charged for. Credits for traffic found later appear in Billing, under Summary, in the Adjustments menu as Invalid activity. The Invalid Activity Credit Report in the Report Editor shows adjusted clicks and cost.

Google says there is no industry standard for a normal invalid traffic rate, so judge your own account over time, not against a vendor average.

Step two: check your own data before blaming bots

Look for clicks that cost money and never convert, grouped by keyword, location, device and time of day. Two common patterns are less alarming than they look, according to Google. A zero-second visit may only mean the analytics tool needed a second click to record time on page. Repeated visits from one IP address may be many devices behind one network, because offices, universities and mobile carriers can share a public IP.

Google also notes that third-party tools often flag traffic Google has already filtered, so a tool's count can overstate what you were charged for.

Step three: tighten the settings Google gives you

  • Location: change the option from Presence or interest to Presence to focus on people physically in your area, and exclude areas you do not serve.
  • Keywords: add negative keywords for searches that bring clicks without customers.
  • Content suitability: refine the settings that filter placements that do not match your goals.
  • Review change history when traffic jumps, because budget, keyword or audience changes can raise clicks without any fraud.

Step four: exclude repeat IP addresses where allowed

Fraud Blocker's guide gives the path: select a campaign, open Settings, choose Additional settings, open IP exclusions, enter the addresses and save. It says Search, Display and standard Shopping campaigns allow IP exclusions, while Performance Max, Demand Gen, Smart Shopping, hotel, video and app campaigns do not. Check Google Ads Help for the current limits before building a long list.

You need the addresses first. The same guide says most analytics tools, Google Analytics included, do not show visitor IPs, so you capture them yourself, which it says usually takes a developer. Google's investigation checklist asks for web server logs with IP addresses, which is one place to look. Block sources that click repeatedly and never convert, not every shared address, because an address can serve many real people.

Step five: protect lead forms, then ask Google to investigate

  • Forms: Google recommends reCAPTCHA, server-side validation and, where it fits, a double opt-in email, because Google's filters cannot stop fake submissions on your own site.
  • Goals: choose Leads as the objective and optimize for qualified leads or booked appointments, not raw form fills.
  • Investigation: you can submit a request through the Click Quality Form for activity in the last 60 days. Prepare your customer ID, date range, campaign names, keywords, server logs with IP addresses, click identifiers and a short reason the traffic looks wrong.
  • Expectations: Google says it cannot confirm which individual clicks it marked invalid, and Fraud Blocker's refund guide reports a low approval rate from its own experience, so treat a credit as a possibility, not a plan.

Step six: decide whether a paid tool is worth a trial

If those steps leave a gap, test a tool on a short trial and compare its blocked-click report with your Invalid clicks column and your conversion data. A break-even test is simple: the monthly fee divided by your average cost per click is the number of extra invalid clicks it must stop each month. The best click fraud protection software guide groups five tools by meter, the Fraud Blocker review covers one option, and the pricing guide explains its click meter.

Continue when useful

Next: Best click fraud software

Best click fraud protection software for Google Ads: five tools grouped by what each counts and where it works, plus the free Google checks to try first.

Open Best click fraud software →

Sources used for this page

These records support the facts and comparisons above. Merchant-controlled records are labelled so you can separate product claims from independent evidence.

  1. Google Ads Help, About invalid traffic — Platform documentation · support.google.com · Merchant-controlled · checked 2026-10-24
  2. Google Ads Help, Invalid clicks: Definition — Platform documentation · support.google.com · Merchant-controlled · checked 2026-10-24
  3. Fraud Blocker article, how to exclude IP addresses in Google Ads — Merchant documentation · fraudblocker.com · Merchant-controlled · checked 2026-10-24
  4. Fraud Blocker article, how to get a refund for invalid clicks from Google Ads — Merchant documentation · fraudblocker.com · Merchant-controlled · checked 2026-10-24
  5. MRC Invalid Traffic Detection and Filtration Standards Addendum, June 2020 — Standards and certification reference · mediaratingcouncil.org · Publisher independence not verified · checked 2026-10-24
  6. Fraud Blocker pricing page — Merchant documentation · fraudblocker.com · Merchant-controlled · checked 2026-10-24