- Home
- Features
Everything you need to shut fraud out.
ClickTrap is click fraud detection software for Google Ads. Every paid click is checked in layers, and the fake ones are blocked within minutes.
- Location United Kingdom
- Device Seen before: 3rd click today
- Network Data centre, not a home or mobile
- Behaviour Left after 2 seconds
What’s costing you?
Start with your problem. We’ll show you the fix.
01Catch it
Click rules
Sensible rules are on from day one. Make them stricter or gentler with one switch per area.
- Conservative, Balanced or Aggressive
- Clicks per IP address or per device, per minute, hour or day
- Quick leavers and clicks that never run JavaScript
Device fingerprinting
Recognises the same device when it changes IP address, so serial clickers can’t just reconnect.
- Repeat clicks counted per device
- A blocked device is caught again on a new IP
Bot and network detection
Spots automation and the networks real customers rarely use.
- Bots, headless browsers and AI agents
- Data centres and Tor exit nodes
- VPNs, proxies and tampered browsers with a Fingerprint key
Location rules
Block paid clicks from countries you don’t sell to, catching what slips past Google’s targeting.
- Block a list, or allow only a list
- Exclude the IP, or just flag the visit
Microsoft Advertising
Clicks on your Microsoft ads are checked too, with a block list ready to paste.
- Same rules and checks as Google Ads
Collective Shield
Addresses reported by several of our customers are blocked the first time they click your ads.
- Customers never see each other’s data
- Included with Patrol, Garrison and Fortress, £3 a month on other plans
02Block it
Automatic exclusions
Offending IP addresses go into your Google Ads exclusions within minutes, while the click is fresh.
- Synced to Google Ads every minute
- Manager (MCC) accounts supported
- Choose the campaigns each website protects
IP list optimisationFree on every plan
Google allows 500 IP exclusions per campaign. ClickTrap merges blocked neighbours into one range, so there’s always room.
- You see and approve every change first
- Mobile networks and your allowlist are never merged
- Undo for 30 days
TripwireOn Patrol, Garrison and Fortress
When flagged clicks pile onto one keyword, device type or town, it’s paused for a few minutes, then restored.
- Watch-only mode, to see what it would do first
- Keywords you protect are never paused
GatekeeperOn Patrol, Garrison and Fortress
Blocked visitors still see your website, but can’t call, message or send your forms.
- Preview exactly what a blocked visitor sees
- Works with the code already on your website
Performance Max, Demand Gen and YouTube
These campaigns refuse campaign IP exclusions, so blocked sources also go on your Google Ads account’s own list, which reaches them.
- Automatic, for websites protecting all campaigns
- Your own entries on the list are never touched
Search partners and mobile apps
See what search partner sites and in-app placements cost, and switch them off where they don’t pay.
- Clicks, cost and conversions for the last 30 days
- On Patrol, Garrison and Fortress, exclude the websites and apps that sent mostly invalid clicks
- Nothing changes until you approve it
Customers are never blocked
Anyone who reaches your thank-you page, or taps your number or email, is a customer: never blocked.
- No code, just your thank-you page or a click
- Conversions and cost per conversion in your analytics
03Keep data clean
Lead and form protection
Every lead from your ads is marked genuine, suspicious or invalid, so you know which to call back.
- No change to your website; nothing typed is ever recorded
- Optionally, stop invalid visitors’ forms before they reach your inbox
- Mark a lead as spam to block its sender, or genuine to keep them safe
Smart Bidding protectionOn Patrol, Garrison and Fortress
Only genuine conversions are sent to Google Ads, so Smart Bidding learns from real customers.
- Fake conversions held back; ones found later retracted
- Upload the leads that became customers, with the sale’s value
- A secondary goal until you make it primary
Clean audiencesOn Patrol, Garrison and Fortress
Keep bots out of your remarketing and lookalikes: each ad visitor is reported to your tags as verified or suspicious.
- Exclude suspicious visitors from every campaign
- Google Ads, GA4 and Google Tag Manager, Microsoft Advertising, Meta
04Prove it
Every click explained
Every paid visit with its campaign, keyword, location and device, and why it was flagged or blocked.
- Filter by quality, device and source
- An allowlist for your office, and a check for any address
Keyword, ad group and town for every clickFree on every plan
With your approval, a short tracking suffix brings each click’s keyword, match type, ad group and town.
- You see the exact change first
- Analytics by keyword, ad group and place, with CSV export
Reports to share, and refund evidence
A monthly report for your boss or client, and the evidence Google asks for in a refund claim.
- Monthly report emailed on the 1st
- A CSV of invalid clicks with their click IDs and times
- What Google filtered itself, and what it charged you for
- Your invalid click rate beside other advertisers’
- A feed for Google Sheets and Looker Studio on Garrison and Fortress
API and webhooksOn Garrison and Fortress
Read your figures, paid visits and exclusions from your own systems, and hear the moment something happens.
- A read-only API token, for your own reports
- Signed webhooks for new blocks, alerts and Tripwire
Alerts where you work
Hear about a surge of suspicious clicks, or paid visits that stop because the tracking code went missing.
- Email, Slack, Microsoft Teams and the app
- A weekly summary, if you want it
Easy to run
Easy to start. Easy to live with.
Set up in minutes
One line of code, with steps for Google Tag Manager, WordPress, Wix, Squarespace and Shopify. We never touch your budgets or ads.
For agenciesOn Garrison and Fortress
Every client from one login, all on one plan, with your name and logo on their reports.
For agenciesOn your phone and desktop
Install ClickTrap like an app on Android, iPhone, iPad or your computer. No app store needed.
Microsoft Advertising
Microsoft ads are covered too, with one step by hand.
Microsoft doesn’t let any app add IP exclusions to your campaigns for you. So ClickTrap does everything up to that point, and hands you a list that takes a minute to paste. Read the guide
What’s automatic
Done for you
- Every click on your Microsoft ads is recorded and checked, like your Google ones
- The same rules, device recognition and bot checks apply
- A block list for Microsoft is kept ready and up to date
- An email when the list has changed
What you do
About a minute
- Copy the list and paste it into your Microsoft campaigns’ IP address exclusions
- One paste covers every campaign you select
- Tell us it’s done, and we show what changes from there
Microsoft’s limits
Good to know
- 100 IP exclusions per campaign (Google allows 500), so we keep the ones that matter most and merge networks into ranges
- IPv4 addresses only: Microsoft doesn’t accept IPv6
- Blocks take effect when you paste, not the moment a click is caught
- Your plan’s monthly ad spend allowance counts Google Ads spend only
Analytics
See exactly what you’re paying for.
One screen shows how much of your ad traffic is genuine, what the rest was costing you, and where it came from.
Traffic quality at a glance
Every paid click sorted into valid, suspicious or invalid, day by day.
Spend checked and spend saved
What your ads spent, and what blocking the fake sources has saved since.
Return on your plan
Spend saved set against what you pay us, so you can see it paying for itself.
Campaigns and countries
Where the most invalid clicks come from, so you know where to tighten targeting.
Threats seen
Your share of clicks from bots, AI agents, data centres, Tor and more.
Your dates, your websites
The last 7, 30 or 90 days, for one website or all of them, on every plan.
Meta and LinkedIn ads
Social ads are checked too.
Facebook, Instagram and LinkedIn ads send paid visitors to your website like Google’s do. ClickTrap recognises them, checks them with the same rules and shows you which were real, on Patrol, Garrison and Fortress. Facebook ads guide LinkedIn ads guide
What’s automatic
Done for you
Meta exclusion audience
A few minutes, once
Their limits
Good to know