A fake lead is a form submission or call that no real customer made. Bots and form-filling scripts submit forms, people are paid to click ads and fill them in, and some real visitors type fake details. For a lawyer, a locksmith or a clinic, every one costs a click, a follow-up call that goes nowhere and, if the form counts as a conversion, a lesson for your bidding.

Why a fake lead costs more than a wasted click

A bot that clicks and leaves wastes one click. A bot that submits your form is recorded as a conversion. Smart Bidding then looks for more traffic like the traffic that converted, so the fake lead teaches your campaign to find more fake leads. The waste grows, and the campaign's reports look like it is working.

What Google covers, and what it leaves to you

Google filters invalid clicks before it bills you and credits some it finds later. But its own help page is plain about the limit: these filters cannot block traffic from your site because they run after an ad serves. What a visitor does on your site, including your forms, is outside what Google can see or stop. Google calls lead quality "a shared effort", and its advice for your side is:

  • Optimize for lead goals. Choose Leads as the campaign objective, and goals such as "qualified lead", "converted lead", "book appointment" or "request quote". Google says these trigger invalid traffic protections built for lead generation.
  • Protect the forms. reCAPTCHA, server-side validation, and double opt-in, where the lead confirms their email address through a link.
  • Connect first-party data. The Google tag and enhanced conversions, so Google measures the actions that matter.
  • Control placements. Content suitability settings and placement exclusions decide where your ads appear outside Search.

Sources: Google Ads Help, About invalid traffic (the section on invalid leads) and Best practices for generating high-quality leads.

Feed bidding the leads you qualified

The strongest fix is in what you count. If you can tell good leads from bad, by a call, a booked appointment or a sale, send those outcomes back to Google Ads as your conversion goal instead of the raw form submission. Bidding then learns from people who turned into customers, and a fake lead that never qualifies teaches it nothing. Google's lead guidance covers both routes: enhanced conversions for leads, and offline conversion imports uploaded regularly, ideally daily.

Where the form submission has to stay a conversion, because you have no qualification step yet, the next best thing is to keep the submissions you know are fake out of what you send.

When to ask Google for a review

If fake leads arrive in volume, Google will investigate activity from the last 60 days. For invalid leads it asks for a spreadsheet with each lead's GCLID and your assessment of it, such as what happened when you emailed or called. Our guide to Google Ads refunds for invalid clicks covers the rest of the evidence and where to send it.

A captcha doesn't fix your data

reCAPTCHA stops many scripts, but not a person paid to fill in your form. And it doesn't tell Google Ads or Meta which of last month's leads were fake: those conversions are already in the data their bidding learned from.

Where AdProtektor fits

AdProtektor works on your site, the part Google says its filters can't reach. It scores every visit for bots, competitors and click farms, and then:

  • Shows which leads came from fraud. The dashboard counts the form submissions and phone clicks made by visitors it flagged, so a fake lead shows up as one, next to the visit that sent it.
  • Keeps them out of your bidding. With ConversionOS and fraud protection on, a conversion from a visitor AdProtektor has blocked is withheld instead of being sent to Google Ads, Meta or GA4, and the dashboard records what was withheld.
  • Catches form submissions on WordPress. The plugin captures WPForms, Gravity Forms, Contact Form 7 and Elementor Pro submissions server-side for ConversionOS.
  • Keeps the source away. With Google Ads connected, blocked sources are added to your IP exclusions. Website blocking, when you turn it on, can also refuse a blocked visitor before the page loads, depending on why they were blocked and how they arrive.
  • Supports your review request. The Google Ads Refund Report exports each flagged click with its GCLID, the identifier Google uses to match your evidence.

Withholding is not a certificate: it keeps conversions from blocked visitors out, but it doesn't prove that every other lead is a real customer. Qualifying your leads is still the best signal you can give your bidding.

Your bidding learns from every lead you count. Count the ones that were people.

To see which of your leads came from flagged visitors, start a free trial and add the tracking script or the WordPress plugin.