- Home
- How it works
From suspicious click to blocked source in minutes.
ClickTrap checks every paid click and excludes the fake ones from your Google Ads automatically. No spreadsheets, no manual lists.
- Click rules3rd click in an hour Flagged
- Device fingerprintSame device as 2 blocked visits Failed
- NetworkData centre, not a home or phone Failed
- Bot checksHeadless browser Failed
- BehaviourLeft after 2 seconds Flagged
- Minutes to set up, about
- 10
- Between syncs to Google Ads
- 1minute
- Exclusions per campaign
- 500
- Free trial
- 30days
Three steps
Track. Check. Block.
From the moment someone clicks your ad, it all happens in the background.
-
The moment they click
1Track
One line of code records every visit from your ads the moment it lands.
- IP address and network
- Device fingerprint
- Campaign, keyword and location
-
In under a second
2Check
Each paid visit runs through several checks at once.
- Your click rules, per IP and per device
- Bots, Tor, VPNs and data centres
- The Collective Shield
-
Within a minute
3Block
Sources that break a rule are excluded from your Google Ads campaigns automatically.
- Synced to Google Ads every minute
- Only the campaigns you choose
- Managed within Google’s 500-per-campaign limit
Threat detection
What we detect
Bots and scripts
Automation and headless browsers, spotted from how the browser behaves.
Competitor clicks
Repeat clicks from the same IP address or device break your click rules.
Repeat offenders
The same device on a new IP address is recognised and caught again.
Hidden networks
Tor and data centres blocked; VPNs and proxies flagged for you to review.
Known offenders
Addresses our customers have caught are excluded the first time they click your ads, through the Collective Shield.
Behind the scenes
What happens on every paid click
Several layers of evidence, each explained in your dashboard.
- Rule
- 4 clicks from this device in an hour
- Device
- Seen on 3 IP addresses this week
- Network
- Data centre, not a home or phone
- Keyword
- “emergency locksmith”
- Action
- Excluded from 3 campaigns, 1 minute later
-
The tracker
Records each visit from an ad: IP address, browser and device signals, the page and Google’s click ID.
-
Device fingerprinting
Built on Fingerprint, a specialist device-identification service, with our own as a fallback.
-
Network intelligence
Bots, Tor, known attack sources, tampered browsers, data centres, VPNs and proxies.
-
Your rules
A level per area, or your own limits per IP and device. Test a rule on past visits first.
-
Quick leavers
A visitor who leaves within seconds is still recorded and checked.
-
Collective Shield
Addresses reported by several customers protect everyone on the network.
You stay in control
Every block explained. Every decision yours.
Flag before you block
Make any rule flag instead of block while you get comfortable, or choose a gentler level.
Allowlist anyone
Your office or a customer, for one website or all of them, is never excluded.
Undo in one click
Remove an exclusion and it comes off Google Ads at the next sync.
Spend saved, day by day
See what the protection is worth, every day.
- 09:14185.220.101.•• Tor exit node
- 09:3134.141.•••.•• Data centre
- 10:0286.14.•••.•• 5 clicks in an hour
Undo, and the exclusion comes off Google Ads at the next sync.
Why Google’s filter isn’t enough
Google protects its network. ClickTrap protects your budget.
Google judges traffic across its whole network. ClickTrap looks only at your account, with rules you control.
| Capability | Google’s built-in filter | ClickTrap |
|---|---|---|
| Who it works for | The ad network as a whole | Your account and your goals |
| Blocking speed | Often refunded weeks later, if at all | Offending sources excluded within minutes |
| Repeat offenders across IPs | Not visible to you | Tracked by device fingerprint |
| Bots, Tor and data-centre traffic | Partly filtered | Detected on every paid click |
| Threats seen by other advertisers | Not shared with you | Blocked in advance by the Collective Shield |
| Your own rules | None | Click limits per IP and device, over minutes, hours or days |
| Visibility | A single invalid-clicks column | Every paid click, and the reason for every block |
Platforms
Platform support
| Platform | What it does | Status |
|---|---|---|
| Google Ads | Full integration through the Google Ads API: automatic IP exclusions, campaign choice per website, manager (MCC) accounts. | Live |
| Microsoft Advertising | Every click on your Microsoft ads is tracked and checked, with a block list ready to paste. How it works, and its limits | Live |
| Meta and LinkedIn ads | Clicks from your Meta and LinkedIn ads are checked with the same rules, on Patrol, Garrison and Fortress. How it works, and its limits | Live |
| More networks | Tell us which ad platform you’d like next. Get in touch | On the roadmap |
Google Ads click fraud
Is Google Ads click fraud real?
Yes. Google’s filters judge its whole network, so attacks aimed at one account, like a competitor clicking every morning or a bot working through your keywords, can carry on for months.
FAQ
Frequently asked questions
- How quickly does ClickTrap start protecting my ads?
- As soon as the tracker is on your website and your Google Ads account is connected, usually within about 10 minutes. Sensible rules are on from the start, and new exclusions reach Google Ads within minutes.
- Will it block real customers?
- Only sources that break your rules are excluded, and every block shows its reason. You can make a rule flag instead of block, allow an address or range so it’s never excluded, or remove an exclusion at any time.
- How does the Google Ads IP exclusion work?
- Google Ads lets each campaign exclude up to 500 IP addresses. ClickTrap adds offending addresses to the campaigns you choose through the Google Ads API, and when a campaign is full, rotates out the oldest automatic exclusions to make room.
- What does the tracker collect?
- For visits from your ads: the IP address, a device fingerprint, the browser, the page and the ad click (campaign and keyword). It doesn’t read forms, and customers only ever see their own data.
- Do I need to change my website?
- Just add one line of code to every page, like an analytics tag. The Getting started steps walk you through it.