Skip to content

How ClickFortify protects every paid click

A visitor clicks your Google or Meta ad. ClickFortify scores the click on your site, acts on fraud in your ad account, and logs the reason. Here is each step.

Start My Free TrialBook a demo
One click, start to finish

Follow a single click from ad to action

Every paid click goes through the same five stops.

  1. Someone clicks your ad

    On Google Search, Display, Shopping, YouTube, Performance Max, Facebook or Instagram.

  2. ClickFortify’s script reads the visit

    Device, browser, network and on-page behavior are collected the moment the visitor lands.

  3. ClickFortify scores the click

    100+ data points become a score, with the reasons that raised it.

  4. Your ad account acts

    Google Ads: the fraud IP is excluded. Meta: with the CAPI proxy on, the flagged conversion is dropped or tagged.

  5. ClickFortify logs it with its reasons

    IP, device, signals, score and the rule that fired, ready to review or export.

Setup

Three steps to get started

No code rebuild and no agency needed.

Add the tracking script

Paste one async script into your site’s head, or deploy it through Google Tag Manager. It works on WordPress, Shopify, Wix, Squarespace or any site where you can edit the head.

Connect your ad accounts

Link Google Ads or Meta Ads with secure OAuth. Google manager accounts (MCC) are supported.

Google AdsMeta Ads

Choose how ClickFortify acts

Start in observe mode to see what would be flagged, then move to warn and strict when the calls look right.

ClickFortify’s script loads asynchronously, so it doesn’t block your page from rendering.

Scoring

What decides if a click is fraud

No single signal decides. ClickFortify judges a click on all four together, and every flag keeps its reasons.

Device and browser

Is this a real browser on a real device?

  • Bot user agents
  • Automation tells
  • Stable device ID

Network

Where is the click really coming from?

  • VPN, proxy and Tor
  • Data centers
  • IP reputation

Behavior

Does the visitor act like a person?

  • Time on page
  • Scrolling and clicks
  • Form interaction

Patterns

Has this source clicked before?

  • Repeat clicks per IP or device
  • Clicks across campaigns
  • Out-of-area clicks
You stay in control

Observe first, act when you’re ready

Worried about blocking real customers? Start by watching, then turn protection up one step at a time.

ObserveLog only

ClickFortify scores and logs clicks. Nothing is excluded, so delivery isn’t affected.

Your first 1 to 3 days, to see what would be flagged.

WarnBuild exclusion lists

ClickFortify adds bad IPs to your exclusion lists, so future clicks from the same source don’t reach your ads.

Most teams, from the first week onward.

StrictFull enforcement

ClickFortify blocks threats as soon as it detects them.

After a week or two of watching, once the calls look right.

You can also tune detection sensitivity from 1 to 5, and visitors who convert are trusted for 14 days.

Google Ads and Meta Ads

Two platforms, two different fixes

Google Ads accepts IP exclusions. Meta doesn’t, so ClickFortify protects what Meta learns from instead.

Google AdsThe source is excluded
  • Campaign or account levelClickFortify adds fraud IPs and ranges to your exclusions. Performance Max and other campaign types without campaign-level IP lists use account-level exclusions.
  • The 500-IP limitGoogle allows 500 IP exclusions per campaign. ClickFortify rotates the list automatically when it fills up.
  • Placements and audiencesClickFortify can exclude junk placements, and with audience exclusions on, it uploads flagged visitors in batches to a Google Ads exclusion audience.
Meta AdsThe signal stays clean
  • CAPI proxyWhen enabled, ClickFortify’s CAPI proxy drops or tags conversion events from fraudulent sessions before Meta receives them.
  • Audience Network controlsFraudulent publishers go to your block list, and Audience Network can switch off on ad sets where fraud is detected (opt-in).
  • Suspicious conversionsClickFortify flags conversions within 2 seconds of the click, bots that converted, and devices with 3 or more conversions.
Evidence

See why every click was flagged

Platform filters give you totals. ClickFortify gives you the click.

Click log with reasonsEvery click with its IP, device, signals, score and the rule that fired.
Exclusion recordsEvery exclusion recorded with its status, active or removed.
CSV exportExport your click data, with each click’s status, to support an invalid-click investigation request to Google.
Honest limits

What click fraud protection can’t do

Knowing the limits helps you set it up right.

IP exclusions aren’t everything

Rotating bots change IPs, which is why device, behavior and pattern signals matter as much as the IP.

Meta can’t block IPs

On Meta, protection works on conversions and placements, not on who sees the ad.

Only pages with the script

ClickFortify scores clicks when they land on a page that carries its script.

Google Ads and Meta Ads only

Microsoft Ads and TikTok Ads are not supported.

Free 30-minute demo

Watch ClickFortify work on your own campaigns

  • Live product demo. How each click is scored and why it gets flagged.
  • Protection walkthrough. Google Ads exclusions, and Meta protection for conversions and placements.
  • Setup plan. A step-by-step plan to set up tracking and protection on your account.

Talk to the team

Pick a time that suits you. Google Ads and Meta Ads, no commitment.

Book a demoStart My Free Trial
7-day free trial · No credit card required