Invalid-traffic detection for media buyers, affiliates, agencies, ecommerce, lead gen

Every paid visit, scored 0–100 attributed to the source that sent it.

You buy clicks; what arrives are visits. ValidVisit scores each one against 100+ data points and pins it to the campaign, source and publisher that sent it — so you can prove which traffic was never real.

Just your email · no card · unsubscribe anytime · privacy policy

  • Every visit scored 0–100 — attributed per source, campaign & publisher
  • No fingerprinting, no cookies — raw IP never stored
  • One script, ~10 KB gzipped — live in minutes

See a scored verdict ↓

  • TaboolaTaboola34Invalid
  • PropellerAdsPropellerAds84Valid
  • AdsterraAdsterra33Invalid
  • OutbrainOutbrain88Valid
Weighed
100+
data points on every visit
Footprint
~10 KB
gzipped · one script, 15 KB budget — no funnel changes
Verdict
0–100
a quality score per visit — evidence in your dashboard
Coverage
74
ad networks — source & publisher attributed

We catch the fraud. We don’t fingerprint your customers.

Most fraud tools identify every visitor to flag a few — cookies, device fingerprints, raw IPs on file. ValidVisit reads the click’s origin, the device class and the behaviour instead, so nothing personal is ever stored.

the usual approachidentity on file

Identify everyone to catch a few

device fingerprintfp · a3f9c1e8b2d4
ip address192.0.2.47
cookie / cross-site id_vv=8c2a4f91b7
on-page tagfp-sdk.js · 42 KB

Powerful — but it turns your tag into a privacy liability and a long legal review.

validvisitno identity stored

Detect the fraud, touch no identity

device fingerprintnever built
ip addresshashed · discarded
cookie / cross-site idnone set
on-page tagp.js · under 15 KB

Passes security review. No cookie banner to add.

reads insteadthe click’s origin·the device class·the behaviourscored 0–100, identity untouched
01 / COST

The invalid clicks you’re funding, counted.

Averages hide the leak. Move the sliders and see how many of your monthly clicks were likely never real — then trace them to the source in the console, where verdicts feed the cut-lists and postbacks you act on.

validvisit · consoleestimate · your inputs
10% invalid90% real · one tick = 1%
$10,000

a month spent on clicks that were probably never real.

25,000 of 250,000 clicks · at your $0.40 CPC

Monthly paid clicks250,000
Estimated invalid rate10%

benchmarks put it above 10%

$

stays in your browser

An estimate from your numbers, not a measurement. Your real figure comes from your own traffic, scored 0–100 per source. Why your own rate is the only benchmark that matters →

— industry benchmarks put invalid traffic above 10% of paid clicks · see the benchmarks

02 / EVIDENCE

Every visit gets a clear verdict — and the source behind it.

A caught bot, a borderline visitor and a real human — scored side by side on one 0–100 scale, with the source and the signals behind each verdict. The model doing the work stays ours.

115896
0100
11
INVALID · bot
Source
pop-net-11 · zone 4419
Why
  • Datacenter IP — not a consumer line
  • No mouse or scroll — no human input
  • Automation signature in the browser
58
SUSPECT · review
Source
Criteo · site news-roundup.example
Why
  • Short visit, thin engagement
  • One weak signal off — not conclusive
  • But no datacenter or automation tell
96
VALID · human
Source
Outbrain · publisher daily-briefing.example
Why
  • Consumer ISP — not a datacenter line
  • Natural mouse and scroll — real human input
  • Signals all consistent — nothing anomalous
A few of 100+ signals · scored 0–100 · example data — see yours
03 / CAUGHT

We catch it. We don’t publish the test.

Every verdict in your dashboard names the exact checks a click failed. Publicly, the checklist stays sealed — so bots can’t study for the test, and neither can our competitors.

Catalogue · what we flag
Categories6 on file
  1. 01

    Datacenter & proxy clicks

    Traffic bought from servers and anonymizers, not from people.

  2. 02

    Bots & automation

    Machine-driven browsers and sessions posing as visitors.

  3. 03

    Fake engagement

    Clicks and scrolls no human hand produced.

  4. 04

    Crawlers & scrapers

    Pages fetched by software that never renders them.

  5. 05

    Identity mismatches

    Connections that contradict their own story — clock, location, device.

  6. 06

    Repeat-offender sources

    Zones and publishers whose clicks keep failing the same checks.

Each category resolves to the exact checks a click failed — named in your dashboard.

Case file · visit #48211
Evidenceruleset v26
07verdict: INVALID
What we saw
pupush-net-04 · zone 77source
Vietnamlocation
Mobiledevice
Chrome 119browser
Android 10os
hosting — not a consumer lineconnection

A phone-shaped visitor on a datacenter line, no human input — a real browser with no real person behind it.

Illustrative case — every failed check is named in your dashboard, weighed from 100+ data points. Here, the checklist stays sealed.

04 / SOURCES

Which sources send customers — and which send bots.

“14% invalid” sounds fine — until you see which sources the average is hiding. Scored down to the publisher and zone you actually buy at, worst first.

Campaign average
14%invalid — looks fine
Two sources are mostly bots. A third reads clean — until you open it.

2 of 5 sources flagged·8,254 invalid clicks surfaced·example data — see yours

Source / publisher
PropellerAds · zone 3391PropellerAds · zone 3391

3,400 clicks · 66% invalid

16Invalid
Taboola · site deals-hub.exampleTaboola · site deals-hub.example

4,500 clicks · 58% invalid

27Invalid
Zeropark · source 88201Zeropark · source 88201

7,000 clicks · 24% invalid

58Suspect
ExoClickExoClick

16,000 clicks · 7% invalid·

81Valid

sportstream.example · zone 4419

2,000 clicks · 45% invalid

38Invalid

sportstream.example · zone 7781

4,000 clicks · 4% invalid

82Valid

newsloop.example · zone 2204

10,000 clicks · 1% invalid

89Valid
Outbrain · publisher morning-brief.exampleOutbrain · publisher morning-brief.example

30,000 clicks · 2% invalid

92Valid
┈ blended average 76 — the number a dashboard would show yousourceits own placements, scored separately

Drop the placements that only send bots. Keep the ones sending customers.

Install once. No tag manager, no maintenance.

100+ data points per visit → one 0–100 quality score, attributed per campaign, source and publisher — with a postback you can act on.

  1. visit · taboola · siteunscored
    a visit lands

    Your one tag sees it

    A single ~10 KB gzipped script catches every arriving visit. Campaigns keep running exactly as they are — nothing in your funnel changes.

  2. visit · taboola · site100+
    weighed vs 100+

    Every visit gets scored

    Each visit is weighed against 100+ data points and reduced to one 0–100 quality score — the more that look wrong, the lower it scores.

  3. visit · taboola · site87Valid
    a clear verdict

    See what’s real, act on what isn’t

    Valid, suspect or invalid by source, campaign and publisher — with a postback. Cut what wastes budget, keep what converts.

paste once in your <head>
~10 KB · no dependencies
<script defer src="https://cdn.validvisit.io/p.js" data-site="YOUR_SITE_ID"></script>

No tag manager, no funnel changes — see the full install & pipeline

Scored down to the publisher, zone and placement you actually buy.

Native, pop & push, referral and ecommerce — each scored at the unit of inventory your channel leaks at.

05 / DOSSIER

Fraud leaves fingerprints. We never take yours.

Detection built on scored signals — not on profiling your visitors. The paper trail is for the fraud, never for the humans.

Evidence sheetsubject: visitor privacybasis: GDPR legitimate interest

raw IP203.0.113.47a1f9…7c2non-reversible token, hashed on arrival — never written to disk

How most fraud tools work

  • Browser fingerprinting of every visitor
  • Raw IP retention and profiling
  • Verdicts from a black box

How ValidVisit works

  • Signals scored the moment they arrive, hashed on arrival
  • No consent-banner dependency — fraud-prevention footing
  • Every verdict is backed by evidence in your dashboard

One mode, minimized by design — no cookies, no raw IPs, no fingerprint identities — and one ~8 KB script inside a 15 KB budget. Read the security overview →

Simple, per-site pricing.

Start with a free trial at launch — every tier gets the full scoring engine; tiers differ by volume, sites and depth. Join the waitlist to be first in.

Starter

$59/mo

For a single site getting started

Monthly capacity
100Kvisits
  • 1 site
  • 6-month retention
  • 0–100 quality score on every visit
  • 100+ data points per visit
  • Suspect-traffic reports
Recommended

Pro

$99/mo

For teams running paid traffic

Monthly capacity
1Mvisits
  • Everything in Starter, plus
  • 10 sites
  • 12-month retention
  • Source / campaign / publisher fraud breakdown
  • Report + blocklist exports
  • Conversions + server-side postbacks
  • UTM + 74-network attribution

Scale

from$299/mo

For agencies & high volume

Monthly capacity
10Mvisits
  • Everything in Pro, plus
  • Unlimited sites
  • 18-month retention
  • Full 74-network token directory
  • Priority support

7-day trial at launch (card required) · cancel anytime · billed on visits inspected · no silent plan upgrades

Questions, answered.

How accurate is it — will it flag my real customers?+
We weigh 100+ data points rather than one rule, so a genuine human rarely trips enough of them to be flagged. And ValidVisit reports and scores — it doesn’t silently block your real traffic; you decide what to act on.
How does ValidVisit detect invalid clicks?+
Every visit is scored against 100+ data points and reduced to a single 0–100 quality score. Detection happens around the visit, so your site stays exactly as fast as you built it. The specific model is proprietary — what you get is the verdict and the source behind it.
What does the 0–100 quality score mean?+
A single rating of how likely a visit is to be real, aggregated from every signal we evaluate. Higher is more trustworthy — 80 and up reads as valid, 50 to 79 as suspect, and below 50 as likely invalid.
0–49 invalid50–79 suspect80–100 valid
Does it work with native, push and pop networks?+
Yes. Attribution spans UTM plus a directory of 74 ad-network tracking tokens, including Taboola, Outbrain, Google Ads, Meta, TikTok, Microsoft and native/push/pop/search — exactly where invalid traffic concentrates.
How do I handle privacy and visitor IPs?+
Raw IPs are never stored — they’re hashed at the edge. IP-derived intelligence is used strictly to detect fraud under a legitimate-interest basis.
Do you block bad clicks?+
Today we detect, score, flag and attribute — and hand you postbacks and export-ready lists to act on. Automated ad-platform exclusion is on our roadmap; we won’t pretend it’s shipped.
How is this different from the ad platform’s built-in filtering?+
Platforms grade their own homework — refunds depend on what their filters admit to. ValidVisit scores independently, backs every verdict with evidence in your dashboard, and pins it to the exact source, so you have counts you can defend rather than a black-box adjustment.

Put the console on your own traffic.

Every visit scored 0–100 across 100+ data points, attributed to the source that sent it — across 74 ad networks.

Just your email · no card · unsubscribe anytime · privacy policy

One script · raw IP never stored · GDPR legitimate-interest basis

Understand the fraud, then see it scored.

Guides, per-network breakdowns and benchmarks — a curated on-ramp; the footer has the full map.