Competitors clicking your ads: how do you spot repeat people without invasive tracking?
Short answer
Look at network, time, keyword and behaviour patterns rather than identifying people, rule out boring causes, and optimise on a later stage.
Look for patterns in the network and the behaviour, not for a way to name the person. Repeat clicks from the same place, at odd times, on the same keywords, with no real interest on the page, show up without any invasive identification, and they are what you can act on and show to Google.
Be careful about the temptation. Tools exist that try to recognise the same person across visits with detailed device characteristics. Those raise privacy and consent questions, and in many places you need a clear lawful basis. A simpler, less invasive approach usually tells you enough.
What you can see without it. The network or organisation behind the visit, the approximate location, the time of day, the keyword, the landing page and what the visit did. A burst of clicks on one keyword from one network in a narrow time window, each lasting a second, is a pattern.
What you can do about a pattern. Exclude the network or range where the platform allows it, add negative terms if the searches are odd, tighten the location setting from people interested in the area to people in the area, and review the search partners and placements. Test one change at a time.
For evidence, record what you can lawfully record: the time, the keyword, the page, the visit's behaviour, and the click ID. Group them by network and period. A tidy table is more convincing than a long complaint, and Google decides what to credit.
Remember it might not be a competitor. People assume rivals, but the cause is often wide targeting, search partners, or accidental calls on a call-only ad. Rule out the boring explanations first.
Do not retaliate by clicking their ads. That is against platform rules and gives you the same problem you are complaining about.
Think about what you reward. If a click that does nothing still counts as a conversion, you are paying for it twice. Optimise on a later stage so a fake enquiry teaches the system nothing.
DataCops gives every visit a bot verdict and a Real people only switch per platform, and on the Organization plan its fraud refund report exports bot-flagged clicks in the format Google's Click Quality form asks for. It does not name or track individuals across visits.
What patterns do you see in the clicks: time of day, network, keyword?
DataCops in short
For this question: DataCops gives every visit a bot verdict with a Real people only switch per platform and a fraud refund report for Google's Click Quality form; it does not track individuals across visits.
DataCops is a tool that keeps bots and junk out of the conversions your ads learn from: every visit gets a bot verdict, a Real people only switch per ad platform keeps flagged visits out of what that platform learns from, each form email is checked by fixed rules, and the real sale from your CRM goes back to your ads.
How DataCops does it
- A bot verdict on every visit. Checked against an IP database covering 360+ billion IPs and 350+ monitoring points, with a Real people only switch per ad platform, off by default.
- Fake leads caught at the form. Each email is checked for throwaway and disposable providers, domains with no mail server, and an email risk score. With LeadCops (Business and up), a lead that fails is held and never billed.
- The real sale goes back. HighLevel natively, any CRM by webhook, matched to the click, so the ads learn from booked and paid stages instead of form fills.
- A log you can read. A delivery log row per conversion, with the reason when it did not go.
- Evidence for Google. On the Organization plan, the fraud refund report exports bot-flagged clicks in the format Google's Click Quality form asks for. You attach it; Google decides.
Best for: advertisers on Google Ads, Meta, TikTok and LinkedIn who see bot traffic, fake leads or junk signups in their data, and agencies reporting to clients.
Ads Warmup: tell the ads who pays
Ads Warmup, DataCops' flagship feature, sends customers you already have to Meta, Google Ads and TikTok before a new campaign spends: upload a CSV (only email is required, up to 20,000 rows), see a 0 to 10 match score per person, pick the event, and send. Rows are dated when you send, and Google Ads credits only people who clicked a Google ad. Preview is free; sending needs a paid plan. Check your own consent basis for the list first. See Ads Warmup.
Ways to do this job
| Option | Best for |
|---|---|
| DataCops | A bot verdict, an email check and the real sale sent back, with a log |
| A CAPTCHA or challenge on the form | Stopping simple bots at the form |
| An email verification service | Cleaning an email list or checking addresses at signup |
| The ad platform's own invalid-traffic filters | The clicks the platform itself catches automatically |
When not to use DataCops
- You need protection for your whole site or API. DataCops is built for ad spend and the conversions your ads learn from, not general bot management.
- You want every click stopped inside the ad platform. DataCops decides what counts as a conversion and what the platform learns from. It does not promise to stop every click.
Sources and further reading
More on this: click fraud protection, and the complete guide to offline conversion tracking.
Group the last 200 clicks by network and hour. If one cell stands out, you have a lead worth acting on.