When Should You Suspect Competitor Click Fraud on Your Ads?

Readiness checklist: when suspicion is warranted

Use the checklist below as a filter, not a verdict. Each item is easy to check in Google Ads or Meta Ads Manager.

• Click spike with no conversion lift. Clicks jump sharply while leads, calls, or orders stay flat. Real traffic usually produces at least some of the same actions that your campaign is set up to measure.
• Off-peak click bursts. A business audience suddenly appears at 2:00 AM to 5:00 AM, or your service area behaves as if it never sleeps.
• Repeated clicks from one IP or a narrow IP range. A single source hits your ad dozens of times in a short window, especially with no meaningful on-page behavior.
• Clicks right after a visibility change. The pattern starts after a new campaign launches, a budget increases, or an ad moves to a stronger position, often on a keyword that threatens a direct competitor.
• Very fast bounces. Sessions last a few seconds, show no scrolling, and never visit a second page.
• Location mismatches. You see high click volume from places you do not serve, or from data-center IPs that do not match real customers.
• Fake-looking form submissions. Leads arrive with invalid email domains, duplicated details, or completion times that are impossibly fast.

Hypothetical scenario. A B2B software company runs a search campaign on a competitor's brand keyword. Two hours after winning the top position, clicks jump roughly 300% between 2:00 AM and 4:00 AM. Sessions last under three seconds, most come from a small set of IP addresses, and form fills stay at zero. The pattern stops on the day the campaign pauses. This combination is a classic competitor click fraud warning sign.

Signs to wait on: when not to act yet

The same signals can be produced by normal marketing noise. Wait and watch when any of these are true:

• A marketing event explains the spike. You just sent an email, launched a promotion, or appeared in a press story.
• The clicks come from a placement you control. Audience Network and partner inventory can create accidental taps that look invalid but are not deliberate attacks.
• The spike is one day and does not repeat. A single flare-up is not a pattern.
• Real behavior is present. Sessions scroll, pause, move the mouse naturally, or return to the site later. Fraud is usually sterile and uniform.
• The IPs are mobile carriers in your service area. People click at odd hours on phones, and carrier IPs can look concentrated.

Giving a pattern 48 to 72 hours often separates a temporary flare-up from a repeatable attack.

The exception: when a competitor is likely

Sometimes the timing is too clean to ignore. These clues deserve a closer look:

• The pattern starts the same day you outrank a direct competitor.
• It follows a brand-keyword or competitor-keyword campaign launch.
• The clicks stop when the keyword or ad group goes dark, then return when it is turned back on.
• The traffic comes from business IPs during office hours, not from a bot data center.
• The cycle repeats weekly around the same times.

These are clues, not proof. A competitor may be clicking manually, paying a click farm, or using a bot. The evidence you need is the same in all three cases: sessions that look non-human, never convert, and line up with a competitive trigger.

What competitor click fraud means and why it matters

Competitor click fraud is the deliberate use of bots, scripts, click farms, or manual clicking to inflate another advertiser's costs. It is a subset of invalid traffic, which also includes accidental clicks, scrapers, and other non-human activity.

The real damage is not just wasted budget. Click fraud corrupts the data you use to make decisions. More clicks with no conversions lowers your conversion rate. When bots trigger conversion pixels, they create phantom conversions that can push bidding systems toward the wrong audience. Your return on ad spend can look acceptable while the real return is much lower.

Key facts at a glance

These figures come from BotRefund's published research and the studies it cites. They explain why small unexplained patterns deserve attention.

Your next move when suspicion is justified

Start with evidence, not accusations. A screenshot of a click spike is not enough for a refund request. Build a record before you change or pause anything.

1. Export the suspicious window. Pull dates, times, IP addresses, devices, browsers, landing pages, and Google Click IDs (GCLIDs).
2. Compare suspicious sessions to real sessions. Real users scroll, move the mouse unevenly, pause, and often return. Bots tend to have very short or very uniform sessions.
3. Check whether conversions moved. If clicks rose and conversions did not, the extra traffic is not buyers.
4. Confirm the pattern before you pause. Pausing immediately hides a repeatable attack and gives you less evidence.
5. Submit an invalid-click refund request. Google's automated filters catch less than half of invalid traffic, so manual evidence submission often matters.
6. Protect conversion pixels. Keep bot sessions from triggering conversion events so your bidding system stops learning from fake data.

Limitations: when this advice does not apply

This framework works best for accounts with enough traffic to see patterns. It is less useful when:

• Your click volume is very low. A single IP can look dangerous when the sample size is tiny.
• You use broad placements. Audience Network and similar inventory produce accidental clicks that are not fraud.
• You serve a global audience. Off-hours clicks can be normal business hours in another country.
• Your team or agency shares a VPN or office IP. Concentrated clicks can come from your own side.
• The odd clicks stop within 24 hours and match an email blast, promotion, or press mention.

You also cannot name a competitor from ad-platform data alone. You can prove that clicks are invalid. Proving who pushed the button is another question.

Frequently asked questions

Can I see which competitor is clicking my ads?

No. Ad platforms do not show a competitor's account name. You can see IP addresses, device data, timing, and behavior, and you can build a strong inference. A click-fraud tool can help you prove the clicks are invalid, but it cannot name the person behind them.

How many clicks make a pattern worth investigating?

There is no magic number. Watch for concentration: several clicks from the same IP, repeated bursts at the same hour, or a click jump that lines up with a campaign change. A single IP clicking dozens of times is more useful than a large total click count spread across normal traffic.

Will Google catch competitor click fraud automatically?

Google filters catch a large share of easy invalid clicks, but the research above says less than half of invalid traffic is caught. Sophisticated invalid traffic often needs manual evidence and a refund request.

Should I ask for a refund right away?

Not until you have documented evidence. Google accepts invalid-click refund requests with supporting proof. Click IDs and behavioral evidence are much stronger than screenshots of a spike.

Does BotRefund show me the competitor's name?

BotRefund's focus is proving that clicks are invalid, preparing refund evidence, and recovering wasted ad spend. Its behavioral checks include ghost clicks, trap behavior, pointer paths, input speed, and session patterns. It does not promise to identify a specific competitor company.