Audit scope and deliverables

Google Ads Traffic Quality Audit: From Paid Click to Qualified Outcome

A traffic-quality audit should answer a defined business question with campaign, first-party and outcome evidence. Before commissioning one, agree the period, identifiers, qualification rule and expected decision. This guide explains the scope and deliverables; the service and audit request pages cover the commercial next step.

By Pragmatic BoxReviewed 7 October 20264 min read

Quick answer

A traffic-quality audit should answer a defined business question with campaign, first-party and outcome evidence. Before commissioning one, agree the period, identifiers, qualification rule and expected decision. This guide explains the scope and deliverables; the service and audit request pages cover the commercial next step.

For marketing, analytics, media buying and security teams reviewing paid traffic quality. This guide is technical and operational information, not a legal finding about a specific source.

What a traffic-quality audit should answer

Choose a question such as whether one source generates a repeatable concentration of fabricated leads. Specify the decision the result will support and what would be useful even if the finding is inconclusive. An audit scope should not require a predetermined fraud percentage or guaranteed savings to count as successful.

Campaign evidence

Agree the account, campaigns, ad groups or asset groups and available network or placement fields. Retain the relevant settings and change history for the period. A report should identify where the platform only exposes aggregates, since those records cannot support a claim about every individual impression or click.

Click identifiers

Establish which identifiers are captured, where they are stored and which event they identify. A missing GCLID is a joining limitation, not proof of invalidity. Require reporting of duplicate, overwritten and unmatched values so apparent precision does not conceal weak associations between media and leads.

Request/server evidence

Define the available timestamp, route, response and client fields, with access and retention limits. Server evidence can show requests absent from a JavaScript session report, but infrastructure logs may still omit traffic served elsewhere. The deliverable should name that coverage instead of treating one log as the whole website.

Session evidence

Agree how a session is constructed and what interactions are observed. Short duration or no scrolling should not be a universal fraud rule. Ask for examples of patterns, legitimate alternatives and uncertainty, so the classification can be reviewed by someone who did not build the original rule.

Conversion evidence

Require a definition of each counted action and how it connects to server acceptance. Separate observation-only events from those used for bidding, and identify duplicates or tests. An audit of lead quality is less useful if its denominator contains events that never created a lead.

CRM outcome

Define contactability, qualification, sales acceptance and any later value event. State who reviews those outcomes and how long follow-up takes. The report should preserve unknown and pending records. Comparing cohorts at different ages without adjustment can make a recent source look worse simply because sales has not finished reviewing it.

Building source/placement baselines

Specify comparison cohorts with compatible campaign mix, tracking and outcome definitions. Use an observed baseline rather than an industry-wide rate. Report relevant changes and the minimum data needed for the question; an underpowered or unmatched comparison should produce a limited finding, not an invented conclusion.

Reviewing representative suspicious sessions

Ask for a documented sampling method that includes ordinary sessions as well as flagged ones. Evidence selected only because it looks suspicious cannot establish the error rate of a detector. A reviewer should be able to trace a case from its source record through the classification and subsequent decision.

False positives and inconclusive cases

The output should state known exceptions, cases requiring review and signs that a control affects genuine prospects. Avoid a binary result that silently calls every unobserved visitor human. Confidence needs a stated basis; use unknown when identifiers, behaviour or outcomes are insufficient.

Prioritising controls

Rank changes by evidence strength, business impact, reversibility and the cost of a mistaken rejection. A measurement repair, a form check and a campaign exclusion address different problems. Ask for a verification owner and review point for each proposed intervention.

What a useful audit report contains

Expect the question, scope, data coverage, cohort definitions, reproducible examples and prioritised recommendations. Keep platform billing conclusions separate from internal lead rejection. Google requests evidence for its own investigation, but an independent report cannot guarantee a refund or disclosure of Google's per-click classifications.

  • Findings with source records and confidence limits.
  • Unmatched, pending and excluded records.
  • Legitimate alternative explanations considered.
  • Response recommendations with a measurement and rollback plan.

Sources and further verification

Platform rules, standards and detection practices change. Check the current primary source and your own measurement scope before applying a control.

Start with evidence

Request a traffic quality audit

Define the campaign, period and outcome you need to understand. Agree the available evidence and useful deliverables before measurement begins.