Competitors Clicking Your Ads: How to Recognize, Stop and Prove It

Morning, a search campaign in its third month. Suddenly the daily budget runs out by eleven, clicks are double the usual, and calls and leads are at a quiet-day level or lower. The first thought is that competitors are clicking your ads. Sometimes that is true. Sometimes the culprit is bots, a broken form or a new aggressive player who raised bids. The only way to tell these cases apart is data.

This article is about competitor click fraud in the narrow sense: a person or a small group deliberately clicking your ads to burn your budget. The big picture of click fraud is covered in the article click fraud; here we look at how to recognize competitors specifically, how it differs from bots, what to do in the ad account and how to document the clicks for a complaint.

Why competitors click your ads

The motive is simple: in a pay-per-click auction, a rival's spent budget is your win. If a competitor's ad hits its daily limit early in the morning and stops showing, the auction gets cheaper for the rest of the day and the customers go to whoever is left.

Competitor click fraud is most common in niches with expensive clicks and local demand: legal services, repairs, medical services, towing, delivery, real estate. There a single click costs real money, the number of competitors in a city is limited, and everyone knows everyone else.

In large niches and broad geos it happens less often: a rival's budget is too big to drain noticeably by hand, and hiring a botnet costs more than it seems. There, "competitors" more often turns out to be ordinary bot traffic or placement fraud.

Signs that someone is clicking your ads

No single sign proves click fraud on its own. What decides is the combination and its repetition over several days.

Repeat clicks from the same IPs and devices

The most common trace. A real person clicks an ad once or twice: saw it, visited, maybe came back later. A competitor comes back every day, sometimes several times a day. In the visit log it looks like:

• the same address with clicks every day or several times a day;
• the same subnet or provider when the address is dynamic;
• the same device, browser and screen resolution across different addresses.

Allow for mobile networks and offices: many people can sit behind one address. So look at the address together with the device.

Spikes at the same hours

A competitor clicks on their own schedule: in the morning while the budget is still there, or during the lunch break. On an hourly click chart this shows up as a peak at the same time every day that is absent from conversions. If the clicking is manual, the spikes fall within working hours and disappear on weekends.

Clicks with no actions

A visit lasting a few seconds, with no scrolling, no going beyond the first page, no call and no lead. One such visit is normal. A series from one address or device is a reason to take a closer look.

Interest in the most expensive keywords

A competitor knows which keywords are the most expensive and profitable and clicks exactly those. If the growth in clicks without conversions is concentrated on two or three commercial keywords while informational queries behave as before, that is typical of targeted click fraud.

Geo near a rival

In local niches it is useful to check the click geolocation. If a series of empty clicks comes from the area where a known competitor is based, that is one more piece of the puzzle. IP geolocation is not very precise, so this is a weak sign, not proof.

How competitor click fraud differs from bots

The difference matters, because the measures are different.

There is also a mixed case: a competitor hires someone to do the clicking, and that someone uses bots on residential and mobile proxies. Then the addresses are residential and varied, but the browsers and behavior give the automation away. How to tell such visits apart is covered in bot traffic signs, and how farms with live workers operate in click farm clicks.

Before you blame competitors

Check three things that produce a similar picture:

1. The auction changed. A new advertiser raised bids, you started getting more cheap untargeted impressions, or the platform broadened query matching. Look at the search terms that got clicks.
2. Conversion tracking broke. The form does not submit, the phone number is not displayed, the goal stopped firing. Submit a test lead yourself.
3. The traffic changed. New placements switched on in the partner network, or the campaign expanded to new geos or audiences.

If everything is fine and the signs of click fraud repeat several days in a row, move on to protection.

What you can do in the ad account

Exclude IP addresses

In search campaigns you can exclude the addresses repeat clicks come from. This works against one person or an office with a fixed address. Against mobile and dynamic addresses it works poorly: the address changes, and platforms limit the length of the exclusion list.

Adjust the schedule and geo

If the clicking happens in the morning, move most of the budget to the hours when conversions come in. If the clicks come from one area and customers from the whole city, narrow or adjust the geo. This does not eliminate click fraud, but it makes it more expensive for the competitor and cheaper for you.

Contain the most expensive keywords

Move the most attacked keywords into a separate campaign with its own budget. Then click fraud burns that budget but does not stop your other campaigns.

Check the invalid clicks report

Google Ads has invalid click columns: the platform shows how many clicks it has already recognized as junk and not charged for. If the share is growing, the platform sees the attack itself. More in the article on invalid clicks in Google Ads.

What you can do with filtering

The ad account does not see what happens after the click: which browser, what behavior, how many times this person has already visited the site. Filtering on your side covers that part.

• A click cap per address and device. Do not let the second, third or tenth visit of the same visitor within a day through to the offer, and do not count it as a new visitor.
• Filtering out data centers, VPNs and proxies. If a competitor hired someone to do the clicking, most of that traffic will come through server networks. More in the article VPN, proxy and data center IPs.
• Browser checks. They cut off automation pretending to be human. A comparison of approaches is in JS check or IP blocking.
• Your own blacklist. Addresses that definitely belong to whoever is clicking can go into an IP blacklist, which has no length limit, unlike the exclusion list in the ad account.

It is important to understand the boundary. A filter on your site does not cancel the charge for the click: the platform takes the money at the moment of the click. What it does is keep click fraud from spoiling your stats and campaign optimization and, most importantly, give you a log with evidence for a refund.

ArtisanClo filters out bots, data center traffic, VPNs and proxies and caps repeat clicks from one address. In the click log every visit shows the reason code behind the decision, the address, network, device and time, and the built-in tracker counts spend, conversions, profit and ROI by campaign. So you can see what share of the budget went on empty clicks, with numbers you can attach to a request.

How to document click fraud

The platform needs facts, not feelings. Collect them in advance.

1. Export the visit log for the attack period: time, IP, provider, device, browser, ad tag, click ID.
2. Group by address and device. Show how many clicks came from each recurring source and over what period.
3. Match it against the platform report. Find the same clicks in the ad account by time and click ID. A click tag in the link is indispensable here: without it, linking a site visit to a click in the ad account is hard. How to pass it is covered in the article click ID and SubID.
4. Calculate the damage. The number of suspicious clicks, their cost and their share of spend for the period.
5. Save the charts. Click distribution by hour and day, showing the recurring peak without conversions.

Keep the exports: if the attack continues, a second request with several weeks of history carries more weight than the first.

How to report it to the platform

Google Ads has a form for invalid click requests. On other platforms, go through support or your account manager. In the request, include:

• the account and campaign IDs;
• the period and approximate number of suspicious clicks;
• the signs: repeat addresses, hours, lack of actions;
• the attached export with addresses, times and click IDs.

The platform will run its own review. If it recognizes the clicks as invalid, the money will come back to the account, usually as an adjustment. If not, you still have a list of addresses to exclude and data for tuning your filters. It is worth knowing in advance how to avoid restrictions when you file frequent requests and disputes with the platform: the rules are described in the article on Google Ads advertising policies.

How to spot click fraud before the budget runs out

The sooner you see an attack, the less it costs. A few habits that take minutes a day:

• Compare morning with evening. If more than half the daily budget is spent by noon while conversions are below a third of the usual, that is a reason to open the visit log rather than wait for the end of the day.
• Keep your "normal" numbers at hand. The average share of repeat visits, the average CTR on your main keywords, the usual number of clicks in the first hour. An anomaly is only visible against the norm.
• Set up alerts. A sharp rise in clicks or spend within an hour without a rise in conversions is a signal worth getting in your messenger, not finding in a report a week later.
• Check the top addresses once a week. Sort visits by the number of clicks from one address and device. The same visitor at the top several weeks in a row is almost certainly not a customer.

What not to do

• Click the competitor back. The platform will recognize such clicks and will not charge for them, and you will lose time.
• Switch off your ads entirely. That is exactly what the person clicking wants.
• Exclude huge address ranges. Along with the competitor you will cut off customers from the same area or carrier.
• Draw conclusions from a single day. Click fraud repeats; a one-off spike more often turns out to be chance or a bot.

Summary

Competitor click fraud is real, but it is not the most common cause of empty clicks. It is given away by repeat clicks from the same addresses and devices, spikes at the same hours, short visits with no actions and interest in the most expensive keywords. What sets it apart from bots is low volume, home networks and real browsers. In the ad account, excluding addresses, scheduling and moving expensive keywords into a separate campaign help; on your side, a cap on repeat clicks, filtering server networks and a blacklist. Collect a log with addresses, times and click IDs: you need it both for tuning protection and for getting money back. You cannot stop click fraud completely, but you can make it expensive for the competitor and cheap for yourself.