Ad tech stocks
TEAD0.55▲ +8.59%186013.51▲ +7.48%SAX36.96▲ +4.23%MNTN10.60▲ +4.23%PSKY9.90▼ -4.16%OMC76.17▲ +3.45%WPP387.90▲ +3.14%INUV0.58▲ +2.97%TRU62.86▲ +2.85%DSP12.63▲ +2.60%CCO2.40▲ +2.34%APP284.30▼ -2.11%PUB96.44▲ +2.03%SCOR4.59▼ -2.03%RDDT145.32▲ +2.02%STGW8.30▲ +1.97%APPS11.30▲ +1.80%ZETA32.07▲ +1.58%NFLX68.55▼ -1.49%SIRI25.53▼ -1.35%035420191200.00▼ -1.29%4755681.70▼ -1.26%BABA108.85▲ +1.22%AZRN0.82▼ -1.20%IHRT2.08▼ -1.19%U41.40▲ +1.15%HAVAS17.85▲ +1.13%DEC24.90▲ +1.06%LFTO15.65▼ -0.95%CPNG13.76▼ -0.83%IBTA39.11▼ -0.74%SNAP5.44▲ +0.74%BIDU87.46▲ +0.68%NEXN9.05▲ +0.61%OUT27.58▼ -0.61%AAPL331.05▼ -0.59%PUBM18.84▲ +0.59%VER12.15▲ +0.58%47511238.50▲ +0.57%SPOT489.81▲ +0.50%META728.66▲ +0.48%TTD12.22▲ +0.45%24331308.00▲ +0.38%SST2.61▼ -0.38%GOOGL342.87▼ -0.35%TBLA3.37▲ +0.30%0700431.00▼ -0.23%CRTO15.23▲ +0.23%SFOR46.10▲ +0.22%PINS18.93▲ +0.21%RAMP37.59▲ +0.20%PERI8.71▲ +0.17%CART43.09▼ -0.07%DV13.48▼ -0.04%MGNI25.25▼ -0.04%SNOW339.48▼ -0.03%43243564.00▲ +0.03%ROKU152.31▲ +0.02%CDLX2.94▲ 0.00%ILLM0.65▲ 0.00%WBD30.95▲ 0.00%
Ticker byClearTrust
Presented byClearTrust· Advanced solutions to prevent ad fraud and boost traffic quality.

Not every visitor is a person.

Invalid traffic (IVT) is any ad impression or click that did not come from a real, interested human: crawlers, bots, hijacked phones, spoofed apps, fake TVs. The IVT Desk follows the fight against it every day and explains how it works, how it is caught, and how to keep it out of your budget.

12fraud stories this week
22case files
40IVT terms

How invalid traffic gets caught

1/7
visit▭Incoming visithuman or bot?✓Known listsbots, spiders, data centers✓Device & network signalsIP, user agent, headless traits✓Behaviourmouse, timing, patterns▦Quality scoree.g. a TQI Score™!GIVT filteredroutine, list-based!SIVT flaggedneeds analytics★Clean bidsafe to buy
1
A visit arrives

Every impression starts as a visit from a device. Some are people; some are crawlers, scripts or hijacked phones pretending to be people.

  1. A visit arrives: Every impression starts as a visit from a device. Some are people; some are crawlers, scripts or hijacked phones pretending to be people.
  2. Layer 1: known lists: The easy catches: declared crawlers on the IAB/ABC Spiders & Bots List, known data-center IP ranges, non-browser user agents. The MRC calls this GIVT.
  3. Layer 2: device and network signals: Next, deeper checks: does the device claim to be an iPhone but behave like a Linux server? Is it a headless browser or a residential proxy? Inconsistencies are red flags.
  4. Layer 3: behaviour: Bots can fake a fingerprint, but it is hard to fake human behaviour at scale: timing, scrolling, click-to-install gaps, impossible volumes. Behavioural analysis catches SIVT.
  5. One score to act on: Signals are combined into a score buyers can act on in real time. ClearTrust’s TQI Score™, for example, rolls 150+ filters into a single number.
  6. Pre-bid: don’t buy it: With pre-bid filtering, bad traffic is never bought. Clean requests go through to the auction.
  7. Post-bid: prove it and claw it back: Post-bid measurement audits what was bought. Invalid impressions are reported, excluded from billing and, where contracts allow, refunded.

GIVT: the easy catches

General invalid traffic is traffic that routine filters identify from lists and simple rules: declared search-engine crawlers, known data-center IP ranges, non-browser user agents, pre-fetch and monitoring tools. The Media Rating Council expects every measurement vendor to filter it.

SIVT: the sophisticated kind

Sophisticated invalid traffic is designed to look human and needs advanced analytics to find: bots that mimic browsing, hijacked devices, residential proxies, domain and app spoofing, SSAI spoofing, ad stacking and incentivised manipulation.

Fraud & IVT, live

All

Invalid Traffic and Click Fraud Target ChatGPT Ads

Instances of invalid traffic and click fraud have been detected affecting ads related to ChatGPT. This development highlights ongoing challenges in ensuring ad quality and combating fraudulent activity in digital advertising.

Case files

Real fraud operations, what they did and what they taught the industry.

All case files

Anatomy of a bot fraud scheme

1/7
!Fraud ringwants ad money!Botnetinfected devices / servers!Residential proxieshide the servers▤Fake or spoofed siteslook premium⇄Resellers & SSPssell the traffic★Advertisers payfor nobody✓Detectionpatterns give it away
1
The goal: real money for fake views

An ad fraud ring earns money every time an ad is “shown”. It doesn’t need people, just traffic that looks like people.

  1. The goal: real money for fake views: An ad fraud ring earns money every time an ad is “shown”. It doesn’t need people, just traffic that looks like people.
  2. Build the audience: It runs a Botnet: malware-infected phones and PCs, or rented servers running automated browsers that load pages and scroll like humans.
  3. Hide where it comes from: Data-center traffic is easy to spot, so traffic is routed through residential proxies: home internet connections, often from people who don’t know their device is involved.
  4. Send it to “premium” pages: The bots visit sites that are fake, or that spoof famous publishers’ names in bid requests so the inventory looks valuable.
  5. Launder it through the supply chain: The impressions are sold through resellers and exchanges, sometimes mixed with real traffic (sourced traffic), until they look ordinary.
  6. Cash out: Advertisers pay for impressions nobody saw. The money flows back up the chain to the ring. At its peak, the Methbot operation was estimated to earn millions of dollars a day.
  7. Where it breaks: Scale is the fraudster’s weakness. Identical behaviour, impossible device mixes, ads.txt mismatches and IP patterns expose SIVT. Detection firms, platforms and law enforcement have taken down many such rings.

Questions people ask about ad fraud

What is invalid traffic in advertising?

Invalid traffic (IVT) is any ad impression, click or visit that was not generated by a real person with a genuine chance of seeing the ad. It includes harmless automation such as search-engine crawlers as well as deliberate fraud like bots, hidden ads and spoofed websites. Advertisers should not pay for it, so the industry filters and measures it. More

What is the difference between GIVT and SIVT?

GIVT (general invalid traffic) is non-human traffic that can be caught with simple lists and rules, such as known crawlers, data-center IP addresses and self-declared bots. SIVT (sophisticated invalid traffic) is traffic built to look human, such as hijacked devices, residential-proxy bots, spoofed apps and hidden ads, and it needs advanced analytics to detect. More

How much money is lost to ad fraud each year?

Nobody knows precisely; published estimates range from a few billion to more than $80 billion a year depending on methodology. Juniper Research estimated $84 billion (22% of online ad spend) was lost in 2023, rising to $172 billion by 2028. Earlier ANA and White Ops studies put losses nearer $6 billion. All of these are modelled estimates, not audited totals. More

How do I know if my ad traffic is fake?

Look for numbers that do not behave like people: very high click-through rates with near-zero conversions, sessions lasting a second or two, traffic spikes at odd hours, clusters of identical devices or browsers, and visits from data centers or unexpected countries. The reliable answer comes from an independent IVT measurement or verification tool rather than from the seller's own reports. More

What is click fraud and how do I stop it?

Click fraud is the generation of fake or worthless clicks on pay-per-click ads, by bots, click farms, malware or competitors, so that someone profits or an advertiser's budget is drained. You reduce it by monitoring click patterns, excluding suspicious IP ranges, placements and apps, tightening targeting, using click-fraud detection tools and claiming refunds for invalid clicks. More

What is ad fraud?

Ad fraud is the deliberate faking of advertising activity, such as impressions, clicks, installs, leads or video views, so that someone gets paid for ads no real person saw or acted on. It is carried out with bots, malware, spoofed websites and apps, hidden ads and manipulated attribution, and it drains budgets while corrupting campaign data. More

What percentage of internet traffic is bots?

Roughly half, by some measures. Imperva's 2025 Bad Bot Report found automated traffic made up 51% of all web traffic in 2024, overtaking human traffic for the first time, with "bad bots" alone at 37%. That is all web requests, not ads specifically; the invalid share of measured ad impressions is usually far lower because much of it is filtered. More

Is ad fraud illegal?

Yes, deliberate ad fraud can be prosecuted as a crime. In the United States, operators have been convicted of wire fraud, computer intrusion and money laundering; the Methbot and 3ve ringleader Aleksandr Zhukov was sentenced to ten years in prison in 2021. Many cases are also pursued through civil lawsuits, platform bans and contract clawbacks rather than criminal charges. More

The IVT vocabulary