Seatext library / BotRefund evidence
Click-Level vs. Impression-Level vs. Conversion-Level Fraud Detection: How the Three Layers Differ
Click-level fraud detection analyzes individual clicks for bot behavior, impression-level analysis checks whether ads were actually seen, and conversion-level analysis catches fake signups, manipulated attribution, and bogus affiliate commissions. Each layer targets a different...
✓ Built for advertisers who need clear, refund-ready traffic evidence.
Click-level fraud detection examines each click for bot-like behavior. Impression-level analysis checks whether an ad was actually seen. Conversion-level analysis looks for fake signups, fake affiliate commissions, and manipulated attribution paths. Each layer catches a different fraud type, and none is sufficient on its own.
Here is the short version: click-level catches bots in the traffic, impression-level catches viewability fraud and ad stacking, and conversion-level catches lead fraud and fake conversions. The table below compares the three by the criteria that matter when you choose fraud protection.
| Criterion | Click-level | Impression-level | Conversion-level | Plain-language takeaway |
|---|---|---|---|---|
| What it catches | Bot clicks, ghost clicks, impossible pointer speeds, grid-aligned movements | Viewability fraud, ad stacking, invisible placements | Fake signups, fake affiliate commissions, last-click hijacking, cookie stuffing, coupon extensions | Each layer hunts for a different way fraudsters steal budget. |
| Best fit | Advertisers paying per click who want to reject invalid traffic before it inflates CPC costs | Brands paying for impressions (CPM) or display campaigns where bots sit on a page without clicking | Affiliate programs and lead-gen campaigns where payments happen after a signup or purchase | Choose based on where you lose money—clicks, views, or payouts. |
| Blind spot | Misses fraud that happens after the click, like manipulated attribution or fake commissions | Misses clicks that are real but driven by bots, and misses post-click manipulation | Misses pre-click bot traffic if the conversion still looks behaviorally normal | Relying on one layer leaves big gaps for sophisticated fraud. |
| Typical tools | Behavioral scripts, honeypots, mouse-movement analysis, speed checks | Viewability pixels, ad servers with impression counting, IVT filters | Conversion scoring, attribution path analysis, click-to-conversion timing checks | Tools differ because the evidence lives in different parts of the user journey. |
| Evidence type | Mouse paths, click intervals, session duration, tab behavior | On-screen visibility, ad size, page position, engagement with the creative | UTM parameters, referral paths, device fingerprints, form-fill behavior | You need proof that fits the fraud you are reporting. |
What each layer actually does
Click-level fraud detection looks at the event itself. A tool runs a script on your site that records how the click happened. Did the pointer move in a straight line? Was the interaction faster than a human could possibly perform? Does the session show no scrolling or clicking? These signals separate human clicks from bot clicks.
BotRefund’s detection, for example, uses 106 independent checks, including Impossible Tab Speed and window.open Tamper. A single anomaly is not a verdict—the system cross-checks evidence across browser, network, device, and behavior data before flagging a visit as bot or human.
Impression-level analysis asks a different question: did anyone actually see the ad? Fraudsters can load an ad in a hidden iframe, stack multiple ads on top of each other, or serve ads that are never in the viewport. Impression-level tools measure viewability and invalid traffic before a click even occurs. A bot can pass this layer—because the impression is valid—and still trigger a fake click later.
Conversion-level analysis shifts focus to the end of the funnel. It checks whether a signup, lead, or sale is real and whether the right party gets credit. This matters because the most expensive fraud often hides in real-looking sessions where an affiliate manipulates the attribution path in the final seconds before conversion. Last-click hijacking, cookie stuffing, and coupon-extension overwrites all look like legitimate conversions to click-level tools.
Why the distinction matters for your budget
Most advertisers start with click-level protection because it’s easy to install and catches obvious bots. But the money you lose is not always in the click. BotRefund notes that bot clicks steal up to 20% of Google and Meta ad budget. That’s the click-level problem. The conversion-level problem is different: you could pay a commission or a CPL for a “lead” that a bot assembled using headless browsers, human-in-the-loop CAPTCHA solving, and spoofed data pools.
If you ignore the conversion layer, you may flag every unresponsive contact as fraud, which can make your team exclude a valuable audience. If you ignore the impression layer, you might overpay for display inventory that never reaches a human eye.
Who should use which layer
Choose click-level if…
- You pay per click and want to block bots before they inflate costs.
- You see sudden traffic spikes, abnormal bounce rates, or low time-on-site.
- You need proof to dispute invalid clicks with ad platforms.
Choose impression-level if…
- You run display or video campaigns where you pay for impressions or viewable impressions.
- You suspect ad stacking or invisible placements in partner networks.
- You need to verify that your creative was actually seen before you judge performance.
Choose conversion-level if…
- You run affiliate programs and pay commissions on signups or sales.
- You buy leads (CPL) and your sales team keeps receiving unreachable contacts.
- You want to hold or reject payouts before the payout cycle, not after.
The real trade-off: where the evidence lives
Click-level tools catch bots in the traffic. That is useful. But as BotRefund’s affiliate page points out, the commissions that cost you most are not from bot clicks—they are from real sessions where an affiliate manipulates the attribution path in the final seconds before conversion. None of those patterns show up as bot traffic; they look like legitimate conversions.
Similarly, impression-level tools can miss click fraud. A bot can avoid detection at the impression level and still trigger a fake click through malware or session hijacking. In some cases, bad actors bypass the impression entirely by accessing the click tracker directly, creating fraudulent clicks without a corresponding ad view.
This means a robust fraud strategy needs all three layers, but you can prioritize based on where you lose the most money.
A practical decision framework
- Map your risk. Do you pay for clicks, impressions, or conversions? That is your primary exposure.
- Audit current signals. Check your campaign data for spikes, unusual device or geography patterns, and low conversion rates.
- Test one layer first. If click fraud is obvious, start there. If payout fraud is your pain, go straight to conversion-level checks.
- Add layers based on gaps. After a few weeks, look at what slipped through—then add impression-level or conversion-level monitoring.
- Keep evidence. You need proof, not just scores, to dispute with ad platforms or negotiate with affiliates.
Limitations and when the advice does not apply
Click-level fraud detection is reactive by definition. The click has already happened, so the ad spend is already gone. It cannot stop the charge; it only helps you claim a refund or block future traffic.
Impression-level analysis can miss fraud that happens after the impression, and it does not protect you from post-click manipulation.
Conversion-level tools are most useful when you control the payout. If you cannot influence affiliate commissions or if your conversion data is too messy, the results may be less actionable.
Also, a single anomaly is not proof of fraud. Users on corporate VPNs, privacy tools, or unusual devices can look bot-like. Each signal should be cross-checked with other evidence before you label a visit as invalid.
Key facts at a glance
| Fact | Detail |
|---|---|
| Share of ad budget lost to bot clicks | Up to 20% of Google and Meta ad spend, per BotRefund |
| Detection checks | 106 independent checks used by BotRefund |
| Accuracy | BotRefund claims 99% accuracy when signals are corroborated |
| Setup | Add BotRefund to your website in about one minute; start with a free bot audit |
Frequently asked questions
Can click-level tools detect fake conversions?
Usually not. Click-level tools see a click that looks human; they do not see whether the resulting signup is real or manipulated. Conversion-level analysis is needed to catch lead fraud and attribution manipulation.
What does impression-level fraud look like in practice?
It looks like a bot browsing your site without ever triggering a click, or a publisher stacking multiple ads in a single invisible slot. Your impression counter goes up, but no human ever saw the ad.
Do I need all three layers?
Not necessarily. If you only pay per click, click-level protection is the priority. If you run affiliate payouts, conversion-level is essential. Use the framework above to decide based on your spending model.
How long does it take to see results from conversion-level analysis?
It depends on your payout cycle. If you audit before each payout, you can hold suspicious commissions immediately. The setup itself is fast—BotRefund can read UTM and click IDs from your traffic without platform integration.
What counts as evidence in a refund dispute?
You need logs that show the sequence of events: the click, the session behavior, and the conversion path. This usually includes timestamps, device fingerprints, and behavioral signals like pointer movement or form-fill speed.
Further reading and comparison sources
These external sources provide additional context for evaluating the topic. Their inclusion is not an endorsement.