Click Spam, known also as cookie dropping, is a deceptive tactic where fraudsters generate a high volume of fake clicks to illegitimately claim credit for user conversions. This practice inflates click metrics without delivering genuine user engagement, leading to skewed analytics and wasted advertising budgets.
In click spam schemes, malicious actors simulate user clicks, often through automated scripts or bots, to create the illusion of legitimate traffic. These fraudulent clicks are typically generated without the user's knowledge and can occur before any actual user interaction with an ad or app. The goal is to have these fake clicks attributed to real user conversions, thereby earning unmerited commissions or payouts.
Key indicators of click spam include:
To combat click spam, implement the following strategies:
When setting up click spam detection mechanisms, in order to prevent any false flaggings, there are various filter presets for most common use that will use thresholds and configurations to match Ecommerce, Lead Gen, Mobile App Installs and many more activities:
Click Flooding and Click Spamming are classic attribution Fraud where the fraudster abuses the attribution window. High-volume offers (or games) are especially vulnerable to these tactics.
These are real and show ARPU (Average Revenue Per User) values but are misattributed from Organic traffic. Our filter only flags the conversions with a CTIT/Session-Time above the 1h mark. So in the case of mixed traffic, the good conversions are not flagged.
Typical traffic patterns for these are low Conversion Rates (below 0.15%), and higher amounts of session time (above 1h). Our filter flags Click Spam when more than 35% of the installs show a session time above 1h. This threshold can also be configured but has proven to be a good setting.
Checking the Click Data would show high amounts of Click Flooding reasons, Excessive Duplicate Clicks.
Argument with Partner:
The average CTIT / Session-Timwe compared to other partners is a significant outlier which is a clear Attribution Fraud Pattern, and these users originally belonged to Organic Traffic. We expect that most installs have a Session Time below the 1h mark.