Google Ads Traffic Quality Audit: From Paid Click to Qualified Outcome
A traffic-quality audit should answer a defined business question with campaign, first-party and outcome evidence. Before commissioning one, agree the period, identifiers, qualification rule and expected decision. This guide explains the scope and deliverables; the service and audit request pages cover the commercial next step.
Quick answer
A traffic-quality audit should answer a defined business question with campaign, first-party and outcome evidence. Before commissioning one, agree the period, identifiers, qualification rule and expected decision. This guide explains the scope and deliverables; the service and audit request pages cover the commercial next step.
For marketing, analytics, media buying and security teams reviewing paid traffic quality. This guide is technical and operational information, not a legal finding about a specific source.
What a traffic-quality audit should answer
Choose a question such as whether one source generates a repeatable concentration of fabricated leads. Specify the decision the result will support and what would be useful even if the finding is inconclusive. An audit scope should not require a predetermined fraud percentage or guaranteed savings to count as successful.
Campaign evidence
Agree the account, campaigns, ad groups or asset groups and available network or placement fields. Retain the relevant settings and change history for the period. A report should identify where the platform only exposes aggregates, since those records cannot support a claim about every individual impression or click.
Click identifiers
Establish which identifiers are captured, where they are stored and which event they identify. A missing GCLID is a joining limitation, not proof of invalidity. Require reporting of duplicate, overwritten and unmatched values so apparent precision does not conceal weak associations between media and leads.
Request/server evidence
Define the available timestamp, route, response and client fields, with access and retention limits. Server evidence can show requests absent from a JavaScript session report, but infrastructure logs may still omit traffic served elsewhere. The deliverable should name that coverage instead of treating one log as the whole website.
Session evidence
Agree how a session is constructed and what interactions are observed. Short duration or no scrolling should not be a universal fraud rule. Ask for examples of patterns, legitimate alternatives and uncertainty, so the classification can be reviewed by someone who did not build the original rule.
Conversion evidence
Require a definition of each counted action and how it connects to server acceptance. Separate observation-only events from those used for bidding, and identify duplicates or tests. An audit of lead quality is less useful if its denominator contains events that never created a lead.
CRM outcome
Define contactability, qualification, sales acceptance and any later value event. State who reviews those outcomes and how long follow-up takes. The report should preserve unknown and pending records. Comparing cohorts at different ages without adjustment can make a recent source look worse simply because sales has not finished reviewing it.
Building source/placement baselines
Specify comparison cohorts with compatible campaign mix, tracking and outcome definitions. Use an observed baseline rather than an industry-wide rate. Report relevant changes and the minimum data needed for the question; an underpowered or unmatched comparison should produce a limited finding, not an invented conclusion.
Reviewing representative suspicious sessions
Ask for a documented sampling method that includes ordinary sessions as well as flagged ones. Evidence selected only because it looks suspicious cannot establish the error rate of a detector. A reviewer should be able to trace a case from its source record through the classification and subsequent decision.
False positives and inconclusive cases
The output should state known exceptions, cases requiring review and signs that a control affects genuine prospects. Avoid a binary result that silently calls every unobserved visitor human. Confidence needs a stated basis; use unknown when identifiers, behaviour or outcomes are insufficient.
Prioritising controls
Rank changes by evidence strength, business impact, reversibility and the cost of a mistaken rejection. A measurement repair, a form check and a campaign exclusion address different problems. Ask for a verification owner and review point for each proposed intervention.
Follow the practical workflow for collecting and joining evidenceEvaluate a proposed tool against evidence and review requirements
What a useful audit report contains
Expect the question, scope, data coverage, cohort definitions, reproducible examples and prioritised recommendations. Keep platform billing conclusions separate from internal lead rejection. Google requests evidence for its own investigation, but an independent report cannot guarantee a refund or disclosure of Google's per-click classifications.
- Findings with source records and confidence limits.
- Unmatched, pending and excluded records.
- Legitimate alternative explanations considered.
- Response recommendations with a measurement and rollback plan.
Related reading
Sources and further verification
Platform rules, standards and detection practices change. Check the current primary source and your own measurement scope before applying a control.