Click fraud protection for PPC agencies
ClickFortify protects every client’s Google Ads and Meta Ads account from one login. It scores each paid click, excludes fraud sources in Google Ads automatically once you switch on Warn or Strict, and gives you click-level evidence to show the client.
7-day free trial · No credit card required
- Every client, one login. MCC sub-accounts and a separate workspace per client.
- Google Ads and Meta Ads. IP exclusions on Google, fraud-filtered CAPI conversions on Meta.
- Evidence for every flag. Click-level CSV exports you can show the client.
When CPA rises, the agency gets the call
Invalid clicks don’t show up in a Google Ads or Meta Ads report as fraud. They show up as a higher CPA, a lower ROAS and leads that never answer the phone. The client sees the numbers, not the cause, and asks you why.
Numbers you can’t explain
CPC and CPA climb while conversions stay flat. The ad platform shows clicks, but not which ones came from a bot, a data center or the same device again.
No evidence to show the client
“It might be click fraud” isn’t an answer a client accepts. Without click-level records, the conversation turns to your bidding and your creative.
The same manual work for every client
Checking IPs, adding exclusions by hand and rebuilding the list in each account doesn’t scale past a handful of clients.
Smart Bidding learns from the junk
Fake clicks and fake conversions feed the signals Google and Meta optimize on, so the next week’s traffic gets worse, not better.
What ClickFortify does with one paid click
The same four steps run on every client account you connect.
The click lands
A visitor arrives on the client’s site from a Google Ads or Meta Ads click. ClickFortify’s async script records the visit with its GCLID or fbclid.
ClickFortify scores it
The click is scored on 100+ data points across device, network and behavior: data-center, VPN and proxy origins, repeat clicks from the same source, and how the visitor acts on the page.
The flag is logged with its reason
A flagged click goes into the client’s click log with its IP, location, campaign, keyword and the reason it was flagged.
The source loses access
On Google Ads, ClickFortify adds the IP or range to the client’s exclusions in Warn or Strict mode. On Meta, which has no IP exclusions, the CAPI proxy drops or tags flagged conversions instead.
Every client account, one login
The same scoring and exclusions on every account, organised the way an agency works: by client.
Google Ads MCC support
Connect your Google Ads manager account (MCC) once, then pick the client sub-accounts to protect. Each one gets its own exclusions.
A workspace per client
Create as many client workspaces as you need. Each has its own websites, ad accounts and billing, and you switch between them from the header.
Your whole team, on every plan
Invite unlimited team members by email on any plan, as an Administrator or an Analyst. The owner can transfer ownership when an account changes hands.
Meta Agency Business Manager
Connect your agency Business Manager to reach client ad accounts. Each ad account gets its own CAPI credential, so one client’s filtering stays separate.
Install through Google Tag Manager
Paste the async snippet, or connect the client’s Google Tag Manager and ClickFortify creates the tag for you.
CSV click exports per website
Export any client website’s paid clicks over a date range, with every click’s status and fraud reason, for reports and credit requests.
Evidence you can show a client
Every flag in ClickFortify comes with the data behind it. When a client asks why their CPA moved, you open their workspace and show the clicks, not a theory.
CSV exports
Pick a client website and a date range. ClickFortify exports summary counts plus one row per click, with 30 columns including GCLID, status, fraud reason, IP, location, campaign, ad group, keyword, placement, bot, VPN and data-center flags, and time on site. Every paid click is in the file, not only the flagged ones.
Support Google credit requests
Google reviews invalid-click claims through its Click Quality Form and issues credits, not cash refunds. The GCLIDs, IPs and fraud reasons in a ClickFortify export give that claim the click-level detail to back it up.
See it on one of your client accounts.
7-day free trial · No credit card required
Pilot it on one client first
Start with one client account. ClickFortify lets you watch what it would flag before it excludes anything, then turn protection up one step at a time.
Observe
ClickFortify scores and logs clicks. Nothing is excluded, so delivery isn’t affected. See what would be flagged on the client’s real traffic.
Warn
ClickFortify adds bad IPs to the client’s exclusion lists, so future clicks from the same source don’t reach the ads.
Strict
ClickFortify acts on threats as soon as it detects them.
Shared IPs and false positives. Offices, mobile carriers and public Wi-Fi put many real people behind one IP. Observe mode lets you review those calls before anything is excluded, and sensitivity from 1 to 5 sets how hard ClickFortify flags. Each client is set up on its own, so one client’s setting never changes another’s.
Google Ads and Meta Ads need different fixes
Google Ads accepts IP exclusions. Meta doesn’t, so ClickFortify doesn’t block IPs on Meta. It protects what Meta learns from instead.
Google Ads: the source is excluded
- Automatic IP and range exclusionsIn Warn or Strict mode, ClickFortify adds flagged IPs and IP ranges to the client’s exclusions at campaign or account level.
- Performance Max coveredPerformance Max takes account-level IP exclusions, so ClickFortify adds them there.
- MCC sub-accountsEach client account under your MCC gets its own exclusions. Google caps IP exclusions at 500 per campaign, so lists fill faster on busy accounts.
Meta Ads: the signal is protected
- Fraud-filtered CAPI conversionsOn Standard and Premium plans, when the CAPI proxy is enabled, ClickFortify drops or tags flagged conversions before Meta receives them.
- Audience Network removalWhen you switch it on, ClickFortify removes the Audience Network placement from the client’s active ad sets that use manual placements.
- Publisher block listThe publishers you block are sent to Meta’s block list.
Your week, without and with ClickFortify
Without ClickFortify
- A client asks why CPA rose, and your reports show clicks but not which were invalid.
- Someone checks server logs and adds IP exclusions by hand, one account at a time.
- Meta keeps optimizing on conversions from bots and repeat devices.
- A Google credit claim goes in with little click-level detail behind it.
- The renewal call is about your bidding, because nothing else is on the table.
With ClickFortify
- You open the client’s workspace and show the flagged clicks with their reasons.
- ClickFortify adds exclusions in each Google Ads account automatically.
- With the CAPI proxy on, flagged conversions are dropped or tagged before Meta receives them.
- The claim goes in with a CSV of GCLIDs, IPs and fraud reasons.
- The renewal call has click-level data in it.
Start with one client. Add the rest when the calls look right.
7-day free trial · No credit card required
Agency questions
How ClickFortify works across many client accounts.
No. An MCC is for managing many Google Ads accounts from one login; it doesn’t score clicks or add exclusions for you. Google filters some invalid clicks on its side without showing which ones. ClickFortify connects to your MCC, lets you pick the client sub-accounts to protect and scores every paid click on the client’s site. In Warn or Strict mode, it adds IP exclusions in each account automatically.
ClickFortify manages exclusions per client account. For each account you connect, directly or through your MCC, it adds flagged IPs and IP ranges at campaign or account level, including account level for Performance Max. Each account keeps its own list, so one client’s traffic never decides another client’s exclusions. Google caps IP exclusions at 500 per campaign; our guide to the 500-IP limit explains how that plays out.
Show them the record, not a headline. ClickFortify logs every flagged click with its IP, location, campaign, keyword and the reason it was flagged, and the CSV export includes every paid click, not only the flagged ones. That lets you show the share of traffic that was flagged next to the traffic that was clean, and what ClickFortify did about it. You decide what to share; ClickFortify never contacts your clients.
Google reviews claims through its Click Quality Form and issues credits against future spend, not cash refunds. Export the client website’s clicks for the affected dates from ClickFortify: the file includes GCLIDs, IPs, fraud reasons, campaigns and keywords. Our dispute template shows how to put that detail into the form.
Each client workspace has its own subscription and billing. Plans are priced by that workspace’s monthly ad spend, from $10/mo, and quarterly and yearly terms cost less than monthly. Every workspace starts with a 7-day free trial. Team members are unlimited on every plan. See pricing for the plan that fits each client’s spend and number of ad accounts.
See ClickFortify on your client accounts
- One client, live. How ClickFortify scores a click, why it gets flagged and what lands in the click log and CSV export.
- Your account setup. Connecting your MCC and agency Business Manager, client workspaces and team roles.
- A pilot plan. Which client to start with, and when to move from Observe to Warn or Strict.
Talk to the team
Pick a time that suits you. Google Ads and Meta Ads, no commitment.
7-day free trial · No credit card required