Seatext library / BotRefund evidence

How to Detect Pixel Poisoning in Your Google Ads Account

You can detect pixel poisoning by comparing Google Ads conversions against real business results, checking suspicious placement and referral data, and auditing the conversion tag and GCLID capture. The clearest warnings are sudden conversion...

Built for advertisers who need clear, refund-ready traffic evidence.

You can detect pixel poisoning in your Google Ads account by comparing ad-reported conversions with actual business results, checking where the conversions came from, and auditing the conversion tag itself. The clearest warnings are sudden conversion spikes with no matching sales, high conversion rates from one placement, and Google Ads data that no longer lines up with your CRM. If you only look at the dashboard, you can miss it.

What pixel poisoning in Google Ads actually is

Pixel poisoning happens when invalid traffic triggers your conversion tag. Bots, scrapers, click farms, or competitor scripts land on your site, complete actions that count as conversions, and teach Google Ads to optimize toward more traffic like that.

The word “pixel” can be confusing. Google Ads mostly uses a conversion tag or a Google tag, while Meta uses a pixel. The problem is the same: fake conversion events corrupt the signals your advertising platform learns from.

When the pixel is poisoned, your reported cost per conversion can look great while your actual cost per real lead climbs. That gap is the core symptom.

Signs that your Google Ads pixel may be poisoned

  • A conversion spike with no revenue bump. This is the most common early warning.
  • High conversion rates from one placement, device, or audience. The segment looks too good and then produces no real customers.
  • Cost per conversion drops while actual cost per qualified lead rises. The two numbers disagree.
  • Odd referral traffic. Sessions come from sites that don't match your audience or campaign targeting.
  • Forms completed in seconds. No scrolling, no time on page, no field corrections, and no meaningful session behavior.
  • A large gap between Google Ads conversions and backend orders or leads. This is the clearest signal to investigate.

None of these are proof by themselves. They are markers that tell you which segments to audit first.

Why it matters if you ignore it

Ignoring a poisoned pixel doesn't just waste today's budget. It trains Google's bidding and targeting on fake signals, so future budgets also get wasted. Real customers may see fewer ads because the account “learns” that bot traffic is cheap and converts well.

It also makes recovery harder. Refund disputes need evidence from the period of invalid traffic. If you wait months, the data is harder to reconstruct.

How to detect pixel poisoning: step-by-step

Before you start

Gather the access and data you'll need:

  • Google Ads account with view permission.
  • Analytics linked to your site, if available.
  • CRM or backend order and lead data for the same period.
  • Tag Manager or site code access to inspect the conversion tag.

The detection steps

  1. Pull conversion data by placement, device, and campaign. Look for segments with sudden spikes. Use the Segment feature in Google Ads to break out conversions by source, device, and campaign.
  2. Compare Google Ads conversions to real business outcomes. Export leads or orders from your CRM for the same dates. If Google Ads reports 200 conversions and your CRM shows 20, the missing 180 are suspicious.
  3. Check referral sources. In analytics, look at where conversion sessions came from. Unexpected domains with high conversion rates are a classic sign of bot traffic.
  4. Inspect the conversion tag. Open your site code or Tag Manager and confirm the Google Ads tag fires only on the intended event, not on every page or hidden elements.
  5. Look at session behavior around conversions. Fast form completion, no scroll, no field corrections, and uniform click paths suggest the “conversion” may not be human.
  6. Review GCLID capture. The GCLID is the Google Click ID that Google appends to ad click URLs. If your tag isn't capturing it correctly, you can't tie a conversion back to a specific ad click.
  7. Run a controlled test. Use Google Tag Manager preview mode or a browser extension that shows fired tags. Check whether the tag fires for known human sessions vs. suspicious sessions.

How to verify your fix

After you make a change, wait at least one full conversion cycle and compare Google Ads conversions with CRM data again. If the numbers line up for several days, the pixel is no longer recording the same fake signals.

Common mistakes when diagnosing pixel poisoning

MistakeWhy it misleads youWhat to do instead
Only checking Google AdsThe dashboard is the thing being poisoned.Compare with CRM, payment processor, or form database.
Calling every bad conversion a botLow-quality human traffic can also fail to convert.Look for repeatable technical and behavioral patterns.
Changing bids before auditingYou may optimize toward the same bad signals.Find the source first, then adjust campaigns.
Assuming Google filters catch it allAutomated filters miss sophisticated invalid traffic.Collect client-side evidence for suspected segments.

What to do after you detect suspicious conversions

  1. Isolate the suspicious segment. Pause or exclude the placement, device, audience, or campaign that looks poisoned before pausing everything.
  2. Confirm the conversion tag is set to the correct events. Check each conversion action in Google Ads and make sure the tag only fires on the intended action.
  3. Keep evidence. Capture GCLIDs, timestamps, IP addresses, user agents, and behavioral signals for each suspicious conversion.
  4. Prepare a refund dispute report if appropriate. A report with evidence is what a Google review process needs. A hunch is not enough.
  5. If the problem is large or technical, get a professional audit. This is particularly useful when you need audit-ready documentation for a refund claim.

Key facts about Google Ads invalid traffic and pixel poisoning

Data pointWhat it means for your account
Global ad fraud is projected to cost advertisers over $100 billion in 2026.Ad fraud is large enough to affect most accounts, not just high-spending ones.
Average invalid click rate across Google Ads campaigns is 11% to 14%.A typical account may see roughly one in eight clicks come from non-human traffic.
Google's automated filters catch less than 50% of invalid traffic.A clean-looking Google Ads account can still have poisoned conversion data.
Invalid traffic consumes 10% to 30% of programmatic ad spend.The share of waste varies by channel, targeting, and campaign type.
A $50,000 per month Google Ads account could lose $5,000 to $15,000 per month.The financial risk of ignoring invalid traffic grows with budget.

These are aggregate industry figures. Your account may be above or below them. The point is that a clean dashboard does not guarantee clean clicks.

Limitations: when this detection advice doesn't apply

Manual detection cannot identify every bot. Sophisticated invalid traffic can use residential proxies, real mobile devices, or click farms that behave like normal users.

A spike in conversions is not always fraud. It can be a successful campaign, a new audience, seasonality, or a tracking bug. Compare periods and look at evidence before treating a segment as poisoned.

If your account shows signs of a security breach, such as unexpected campaigns, new users, or changed settings, follow Google's account compromised procedures first. Pixel poisoning is a data quality problem; a hijacked account is a different emergency.

Pixel poisoning terms you may see

  • Conversion tag — the Google Ads code that tracks an action on your site.
  • GCLID — the Google Click ID that identifies which ad click led to a session.
  • Invalid traffic — clicks or impressions that Google considers not genuinely interested.
  • SIVT — Sophisticated Invalid Traffic, which automated filters often miss.
  • Pixel poisoning — fake conversion events that corrupt ad optimization.

Frequently asked questions

Can Google Ads detect pixel poisoning automatically?

Google filters some invalid traffic before it reaches billing. But according to BotRefund audit data, Google's automated filters catch less than 50% of invalid traffic. The remaining sophisticated invalid traffic often needs manual evidence submission.

What is the difference between a low conversion rate and a poisoned pixel?

A low conversion rate can mean your message or offer doesn't match the audience. A poisoned pixel usually creates surprisingly high conversions with no real results behind them. Check backend outcomes, not just the rate.

How long does it take to confirm pixel poisoning?

It depends on traffic volume. With high volume, a pattern may appear in a few days. With low volume, you may need two to four weeks to compare enough sessions. Don't overreact to one day.

Do I need a tool to detect pixel poisoning?

No. You can start with the manual steps above. But tools that capture client-side behavioral evidence make proof easier, especially for refund disputes.

Can a poisoned pixel affect my Google Ads account history?

It can affect optimization and reported performance. If you let bot conversions keep feeding into bidding, Google Ads will keep using those signals. That is why detection and correction matter quickly.

Further reading and comparison sources

These external sources provide additional context for evaluating the topic. Their inclusion is not an endorsement.

How BotRefund can help

BotRefund is designed for advertisers and agencies that want to detect invalid traffic before it poisons their Google Ads conversion signals. It uses client-side behavioral detection to examine click behavior, ghost clicks, trap interactions, pointer paths, motion, speed, and session patterns. It also captures GCLIDs with behavioral evidence and generates audit-ready refund dispute reports.

It is not a replacement for Google's own account security review. You need to add the BotRefund script to your site; setup takes about one minute and requires no credit card. After the script runs, you can review the evidence and decide whether to pursue a refund dispute.

Install BotRefund for free