Questions, answered.

Click fraud is any click on your paid ad from someone with no intention of buying: a competitor, a bot, a click farm or a script. You pay for each of those clicks just like a genuine one.

A small tracking script on your website records every visit from your ads: the IP address, the device and signs of automation. Each visit is checked against your click rules, such as three clicks in a minute from one IP address, or one device switching addresses, against signals like bots, Tor exit nodes and data centres, and against how the visitor behaves: whether they scroll, move, tap or type, or just sit there. Sources that break a rule are excluded from your campaigns; borderline ones are flagged for you to review.

Only sources that break your rules are blocked, and every block shows its reason. You can make a rule flag instead of block, choose a gentler protection level, put an address or range on the allowlist (for one website or all of them) so it’s never excluded, check any address to see why it was blocked, or remove an exclusion at any time. Tell ClickTrap which page means a sale or a lead, and anyone who reaches it is treated as a customer for 90 days: your rules leave them alone, and any automatic block already made for them is lifted.

Yes. Each area (bots and automation; VPNs, proxies and Tor; click limits; and behaviour) has its own switch and a level: Conservative blocks only the clearest cases, Balanced suits most websites and is where everyone starts, and Aggressive catches more but may now and then block a real visitor. You can also write your own rules.

Only visits from your ads: the IP address, the browser and device, the ad click’s details, the pages seen and for how long, and counts of scrolling, movement, clicks and key presses. Never what anyone types. It’s deleted at the end of your plan’s history period. Our data processing agreement covers it.

A shared list of offenders. IP addresses reported as fraudulent by several of our customers are excluded from your campaigns the first time they click one of your ads. Customers never see each other’s data, only whether an address is listed. It’s included with Patrol, Garrison and Fortress and costs £3 a month plus VAT on the other plans.

Yes. ClickTrap connects to your Google Ads account, including manager (MCC) accounts, and adds offending IP addresses to your campaigns’ exclusions automatically.

Yes. These campaigns don’t take IP exclusions of their own, so ClickTrap also adds blocked sources to your Google Ads account’s own exclusion list, which reaches every campaign. Google allows 500 addresses there, shared with any you added yourself, which are never touched. It happens automatically for websites that protect all campaigns, and you can switch it off for any website.

Yes, with one step by hand. ClickTrap tracks and checks every click on your Microsoft ads with the same rules as Google Ads. Microsoft doesn’t let any app add IP exclusions for you, so we keep a block list ready (up to 100 addresses per campaign, IPv4 only, which are Microsoft’s limits) and email you when it changes; pasting it into Microsoft Advertising takes about a minute. Your plan’s ad spend allowance counts Google Ads spend only.

Yes, on Patrol, Garrison and Fortress. ClickTrap recognises visits from Meta ads and checks them with the same rules. Meta doesn’t accept IP exclusions, so instead the tracking code can tell your Meta Pixel when a visitor’s source is blocked, and you exclude the audience built from it in your ad sets. Your plan’s ad spend allowance counts Google Ads spend only.

Yes, on Patrol, Garrison and Fortress. Visits from your LinkedIn ads are recognised, checked with the same rules and shown separately on Paid visits and Analytics, so you can see which were real. LinkedIn doesn’t accept IP exclusions or offer a way to leave those visitors out of your ads, so nothing is blocked there.

Yes. ClickTrap shows what search partner sites and mobile app placements cost you over the last 30 days, and switches them off for the campaigns you choose. Nothing changes in Google Ads until you approve it, and you can undo it for 30 days. On Patrol, Garrison and Fortress, it also lists the individual websites and apps where most of your display, video and Performance Max clicks were invalid or suspicious, for you to add to your account’s placement exclusions, with the same approval and undo.

Yes. For each website you can block paid clicks from a list of countries, or allow them only from the countries you sell to, and choose whether the IP is excluded or the visit just flagged.

Yes. Switch on lead recording for a website and every form sent by a visitor from your ads appears under Leads, marked genuine, suspicious or invalid. Nothing typed into the form is recorded, and nothing on your website needs changing. If you’d rather stop fake enquiries before they arrive, add one attribute to your form and ClickTrap checks the visitor as the form is sent. You can also mark any lead as spam, which blocks its sender, or as genuine, which keeps them safe from your rules.

Yes. You’re alerted by email when suspicious clicks surge on a website, or when its paid visits stop arriving (often a sign the tracking code was removed). Alerts, a weekly summary and an hourly line of sources blocked can also go to a Slack or Microsoft Teams channel.

It gives you the evidence. Paid visits exports every Google ad click from a source you’ve blocked, with the click ID, time, campaign and the reason it was blocked, which is what Google asks for when you report invalid clicks. Analytics also shows which of those clicks Google filtered itself and which it charged you for, so you know which are worth claiming.

Google Ads allows 500 IP exclusions per campaign. Once your list gets long, ClickTrap looks for blocked addresses that come from the same network and proposes replacing them with a single range, which frees up space for new exclusions. You see every change and approve it before anything is updated, shared mobile networks and addresses on your allowlist are never merged, and you can undo it for 30 days. It’s free on every plan.

Every list exports to CSV and the monthly report prints or saves as a PDF. Garrison and Fortress also have a reporting feed: a private address that Google Sheets reads with IMPORTDATA, and Looker Studio through the sheet. Garrison and Fortress have a read-only API too, and webhooks that post to your own server when a source is blocked or an alert goes out.

ClickTrap installs like an app on Android, iPhone, iPad and computers, straight from your browser, with no app store. It opens on your dashboard and always shows your live figures.

It depends on how many websites you run and how far back you want to look. Sentry covers 1 website with 3 months of history; Patrol covers 5 websites with 6 months of history; Garrison covers 15 websites with 12 months of history; Fortress covers unlimited websites with 24 months of history.

Each plan protects Google Ads spend up to a monthly amount: Sentry £5,000, Patrol £25,000, Garrison £75,000, Fortress £120,000. We email you at 80% and when you reach it. Over the limit, exclusions already in place stay and visits are still recorded, but no new IP addresses are excluded until next month or until you upgrade.

Every plan comes with a 30-day free trial. We ask for a card at sign-up and take the first payment when the trial ends, unless you cancel first; we’ll email you 3 days before. There are no long-term contracts, and you keep access until the end of the period you’ve paid for.

Yes. ClickTrap works with Google Ads accounts in any country and any currency, and checks clicks from visitors anywhere. Plans are priced in pounds; you can pay by card in any currency and your bank converts it. We’re a UK company, so support is in English during UK office hours.

Prices are in pounds sterling and exclude VAT. UK VAT is added at checkout. EU businesses with a valid VAT number pay no VAT under the reverse charge, and businesses outside the UK and EU pay no UK VAT.

Yes, on Garrison and Fortress. Set up an agency and each client gets its own account, with its own websites and reports, all included in your plan: their websites and Google Ads spend count towards its limits, with no separate invoices. You and your colleagues switch between them from one login, and clients can have their own login that sees only their account. Your name and logo go on your clients’ monthly reports.

Most customers are protected in about 10 minutes. You add one line to your website, connect your Google Ads account and check the rules, which start with sensible defaults. There are step-by-step instructions for Google Tag Manager, WordPress, Wix, Squarespace and Shopify, and we check your website for the code. We can help if you get stuck.

Every plan has email support, with a first reply within 1 working day. Garrison and Fortress also come with priority support from a named account manager, who knows your account, with a first reply within 4 working hours.

Open Help and support in your account and start a request: you get a reference straight away, and the whole conversation stays in one place. Our replies come by email too, and you can answer just by replying. We’re here monday to Friday, 09:00–17:30 UK time, except bank holidays. Not a customer yet? Email support@clicktrap.co.uk.