Click fraud is when a person or computer program clicks an ad (often multiple times) with the intent of charging the advertiser (usually a competitor to the person or organization committing the fraud).
Two articles on AdWords click fraud caught my attention this week. The first article, Hackers Helping Businesses Commit Click Fraud on Competitors’ AdWords, talks about companies sometimes hiring hackers to use a myriad of programs to click their competitor’s ads so many times that they max out their daily budget before the start of the business day, taking them down for the day. The second article, Google AdWords Says You Can Be Charged For Invalid Clicks When…, reveals a commonly deployed defense, banning IP addresses, may be less effective than imagined. Banning an IP address does not mean that you can prevent users from that IP from clicking on your ads:
The article explains that this situation is likely a rarity, but it makes you think if IP exclusions are not foolproof, how can we protect our AdWords accounts from such attacks?