What Is Invalid Traffic?

The industry's standards body, the Media Rating Council, splits invalid traffic into two tiers, and the split is about how hard the traffic is to catch. General invalid traffic (GIVT) is identified through routine filtration: list-based and parameter checks that catch known data-center traffic, declared bots, spiders and crawlers, non-browser user agents and prefetch activity. MRC-accredited measurers are required to filter it. Sophisticated invalid traffic (SIVT) is the tier above: bots mimicking human behavior, hijacked devices, incentivized clicking, forced clicks and clickjacking, domain misrepresentation and invalid proxy traffic. The MRC's standard says catching it takes advanced analytics, multi-point corroboration and significant human intervention, which is a formal way of saying no simple filter finds it. For an advertiser this means a basic bot filter handles GIVT, while the traffic that actually drains budgets tends to be SIVT, and catching that means scoring many behavioral and technical signals together.

Two numbers frame the problem from opposite ends. On the open web, Imperva's 2026 Bad Bot Report put automated traffic at 53% of everything in 2025, with bad bots alone at 40%, their seventh consecutive year of growth. In tightly policed advertising channels, the Trustworthy Accountability Group reported invalid traffic held under 1% in TAG-Certified Channels in the US for the fourth consecutive year, and its European study measured 62% less IVT in certified channels than uncertified ones. Put those two numbers together and the picture is fairly clear: the raw internet is majority bot, and disciplined filtering works. The savings are measurable too, with industry anti-fraud programs credited with saving US advertisers an estimated $10.8 billion in 2023. Your own campaigns sit somewhere between 40% and under 1%, and where they land depends on how much filtering stands between the open web and your ad budget.

Click fraud is deliberate invalid clicking: someone or something intentionally generating clicks to waste budget. Invalid traffic is the wider umbrella that also includes non-malicious bots, accidental clicks and low-quality sessions.

In other words, all click fraud is invalid traffic, but not all invalid traffic is click fraud. A complete defense has to address both.

Look beyond the click. Score each session against IP and ASN reputation, device and browser consistency, automation fingerprints, repeat behavior, timing, and on-page engagement, then connect it to whether the visit ever converted.

Reporting should let you see invalid-traffic rates by campaign, keyword, geo, device and source, so you know where the problem concentrates.

Automated bidding learns from your conversion data. When invalid traffic and fake conversions get in, the algorithm optimizes toward low-quality sources, compounding the waste over time. Filtering IVT keeps optimization anchored to real prospects.