← Blog

Click fraud Mar 12, 2026 6 min read

Competitor click fraud on brand Search — a field guide

Rivals can burn brand CPC without converting. Learn the session patterns that separate angry competitors from real shoppers, and how to respond without over-blocking.

Topics

What competitor drain looks like

Competitor clicks rarely look like bots. They open your ad, bounce fast, and sometimes return from rotating networks so a single IP list never catches them all.

Brand Search is a favorite target because CPC is high and impression share is visible. A few determined rivals can distort Quality Score debates for weeks.

The pattern often clusters around office hours in cities where rivals keep teams — not weekend retail peaks where real shoppers browse. That timing alone is not proof, but it is a reason to open session timelines.

Some competitors use tools that click at human-ish intervals. You will not catch those with a bot-only filter. You need engagement, repeat fingerprints, and geo context together.

Impression share dips paired with rising CPC on exact brand terms are a classic early warning — especially when landing engagement collapses at the same time.

Do not confuse trademark complaints with click fraud response. Legal and media ops can run in parallel; one does not replace the other.

Evidence before accusations

Open session timelines: zero scroll, sub-second exits, and repeats on the same device fingerprint are stronger than guessing who it might be.

Map geo and hours against your real customer base. Office-hour traffic from rival HQ cities on brand terms deserves a closer look than weekend retail peaks.

Diagram of risk versus allow session patterns
Timelines beat lore when you brief leadership on brand drain.

Export a week of high-risk brand sessions before you escalate internally. Leadership conversations go better with timestamps than with industry lore about “competitors always click.”

Separate angry one-off clicks from sustained campaigns. A single bounce from a rival employee is noise. A fingerprint that returns daily across brand variants is a program.

Keep raw session IDs in the export. Screenshots alone age poorly when someone asks for the underlying timeline a month later.

Note device and browser mixes. Farms often cluster; real brand shoppers usually do not.

Response that does not starve demand

Block confirmed junk IPs quickly. Use Risk review plus IP exclusion export for visitors that keep clicking but never engage.

Avoid blanket geo exclusions that also remove legitimate customers in the same city. Prefer risk and engagement filters first.

Tighten match types and negatives only after you know the waste is not fraud. Pausing brand Search because CPC rose can gift impression share to the people draining you.

Document every exclusion with a one-line rationale. When CPA improves, you will know whether protection or creative changes deserve the credit.

Audience exclusion is especially useful here: the same rival identity rotating IPs still stops seeing more brand ads.

Revisit brand bid modifiers only after exclusions stabilize. Bidding into a drain is expensive theater.

Talking to stakeholders

Bring a short export to leadership: sessions flagged, IPs excluded in Google Ads, CPA before and after. Competitor fraud conversations go better with evidence than with industry lore.

Frame the ask as stewardship of brand CPC, not as a courtroom case against a named rival. You rarely need legal theater; you need fewer bad clicks next week.

Share the same packet with whoever owns brand creative. Otherwise a CPC dip after exclusions can be misread as “the new headline worked” when traffic quality was the real lever.

Offer a two-week checkpoint instead of a dramatic one-time purge. Steady reductions build more trust than a single heroic slide.

A 14-day watch before Google Ads exclusions

If the pattern is new, put suspect IPs on a watchlist for two weeks before promoting them to a hard exclusion.

Share the watchlist with whoever owns brand Search so creative and bidding changes are not mistaken for the fraud stopping on its own.

After fourteen days, promote stable zero-engagement repeats to the exclusion list and export into Google Ads. Release anything that converted or showed genuine browse behavior.

Revisit the watchlist monthly. Competitors change tools; last quarter’s ASN may be quiet while a new residential proxy cluster takes over.

If legal is involved, keep media exclusions factual and dated. Clean ops records help every parallel process.

Brand Search hygiene that helps protection

Keep brand campaigns structurally separate from non-brand so junk share is visible without averaging into prospecting noise.

Use consistent naming and labels so saved views and alerts can isolate brand drain in minutes during a spike.

When you launch a new brand variant or trademark term, expect scrapers and rivals to notice. Pre-load a risk watch for the first two weeks instead of discovering waste in the monthly report.

Label brand campaigns consistently across accounts. Saved views and alerts depend on naming you can query without tribal knowledge.

Putting it into practice this month

Pick one brand campaign, enable a risk watch view, and commit to a fourteen-day sample before Google Ads exclusions. Export three session stories that show zero engagement repeats.

Share those stories with whoever owns brand CPC. Agree on a promotion rule from watch to block so the next spike does not restart the debate from zero.

Measure junk share and brand CPA on a like-for-like window after exclusions. If both move the right way, expand the same playbook to the next brand account.

Keep the paper trail short and dated. Competitor fraud programs fail when they become folklore instead of an operating checklist anyone can run on Monday.

If you need a second layer beyond IPs, queue returning zero-engagement IPs for Google Ads exclusion. Rotation is how determined rivals stay cheap for themselves and expensive for you.

Brand Search structure that makes drain visible

Keep brand campaigns separate from non-brand so junk share is not averaged into prospecting noise.

Label consistently across accounts so alerts can isolate brand drain in minutes during a spike.

After exclusions stabilize, revisit brand CPC narratives with finance using the before-and-after export — not industry lore.

Keep the change log short enough that a buyer will actually read it on Monday morning.

Revisit the rule after one full billing cycle — not after the first scary day.

When in doubt, watch for seventy-two hours before promoting a gray case to Google Ads exclusion.

Share the watchlist with whoever owns brand creative so a CPC dip after exclusions is not misread as a headline win.

Avoid blanket city bans that also remove real customers near a rival HQ — prefer fingerprints and engagement first.

Revisit the watchlist monthly; competitors change tools, and last quarter’s ASN may go quiet while a new proxy cluster takes over.

Keep the paper trail short and dated so the next spike does not restart the debate from zero.