Fake leads from Google Ads do not arrive because the account has a spam button. Google says its invalid traffic filters do not stop invalid leads on their own.
On audits I do not start with a captcha, because it can turn real customers away. Clicks that burn the budget are a different problem, covered in the piece on Google Ads click fraud. Here the click looks normal, the lead arrives, and there is no customer. While that form submit is a primary conversion for bidding, automated bids treat it as a win and look for more of the same people.
Where spam leads come from
A fake lead arrives in three ways: a bot opens the site or the form, a real person types false details, or a smarter bot posts junk straight to the form address and skips the browser. For your bill, these are two different cases.
The first is invalid traffic: clicks and impressions with no real interest, from an accidental repeat and bots to a manual click meant to raise your cost. Google does not charge for it if it catches it before the invoice. After the invoice there is no cash back, only a credit labeled Invalid activity, under Adjustments on the Month card in Billing, on the Summary page.
The second case is an invalid lead. The click was billed, the form is junk, and either a person or a bot could have sent it. Google says lead quality is a shared job. The filters protect what you pay, and you protect the form on your site. Google’s help pages have no refund category called a spam lead.
Outside percentages are easy to mistake for the share of junk in your own leads. In the first quarter of 2026 Fraudlogix marked 53.35% of ad impressions from Ukraine in its sensor network as invalid traffic (36.40% in 2025), but by its own method, which counts VPNs, proxies, and known fraud IPs. The report does not say how many of its 26.3 billion impressions in 246 countries came from Ukraine. In a report Lunio published in January 2026, Google Search campaigns averaged 5.21% invalid traffic. Lunio sells protection against this traffic, the measurement was done on unprotected campaigns, and the collection period is not named. Google itself reported a 40% reduction in invalid traffic from deceptive or disruptive ad serving practices, by its internal data from December 2023 to October 2024. None of these figures is the share of spam in your leads.
How to find them in the account
I run five checks, in this order: four in the account, the fifth in your lead log. The menu item for placements depends on the campaign type, so I do not name it. A traffic jump can also come from a competitor stopping their ads, a seasonal trend, or a change in budget, keywords, audience or location.
- In the Campaigns menu, open Campaigns, click Columns, and search for Invalid clicks. That is what Google already removed from billing. The column does not explain the leads sitting in your CRM.
- See whether the campaign runs on Search only or also on other sites and apps. Content suitability settings let you drop places that do not fit the business.
- Open the placements report and match it to leads by day and campaign. A burst of leads that lines up with traffic from one site or app you do not know is a reason to exclude that place.
- In the Insights and reports sub-menu, open Search terms. Queries about jobs or “free” go in as negative keywords. If the junk comes from broad match, try phrase or exact match.
- Check the hour and device of the leads in your lead log or CRM, if they are saved there. The same form at night from one device type is a clue, not a verdict.
This is how I read accounts on audits, not a Google checklist.
| What you see | Likely cause | What to do |
|---|---|---|
| The phone never answers and the email does not exist (website form) | Fake contact details. The click filter does not block the form | reCAPTCHA, a server check, and a confirmation email on the website form |
| People do not remember the ad | Possibly the ad ran on unrelated sites or apps. Forgetting does not prove it | Check the leads against the placements report and exclude only the places it confirms |
| Queries about jobs and “free” | Keywords that are too broad | Negative keywords, and phrase or exact match if needed |
| Many forms, almost no bookings, and every submit is a primary conversion | Bids treat the junk as a win | Keep a Qualified lead goal and offline conversions for real customers as primary, and switch the raw form submit to secondary |
If you think Google missed invalid traffic, you can ask for a review of the last 60 days only. You will need the customer ID, the dates, campaign names, suspicious keywords, and from the site log the IP address, device, and Google click ID. For leads, Google also asks for a spreadsheet with each click ID and your view of that lead. The reply comes by email in a few business days, and it will not say whether one specific click was marked valid. The form is described in the help page on invalid traffic.
One IP address is often many people: universities, offices, cafes, and mobile carriers share addresses.
Protect the form on your site
For a form on your own site, Google names three safeguards on the page about invalid leads.
- reCAPTCHA on the web form.
- A server check before the lead reaches the CRM: the email domain has to be real, and the phone has to look like a number for your region. Bots can skip a check in the browser.
- A confirmation email with a unique link. The lead counts as real only after the click, which shows someone opens that inbox.
Google Ads lead form and qualification
A Google Ads lead form opens inside the ad, not on your site, so your site’s reCAPTCHA never sees it. It is not open to everyone: you need a supported country and a good history of policy compliance. The format where a click on the headline opens the form straight away also needs advertiser verification and spend of more than $1,000 USD per account (or more than $15,000 USD across all accounts). The conditions are in the piece on the Google Ads lead form webhook.
You can switch the form type at any time; it is a setting on the lead form asset itself. More volume is the default: fewer steps, possibly more leads, some of them less interested. More qualified means more steps, possibly fewer leads, and usually stronger interest. Both are described in the help page on lead forms in search ads.
Qualifying responses exist only on Search campaigns. The question is multiple choice and required, and sometimes it means a new form. An answer you marked as qualifying tags the lead as qualified, and the Qualified lead goal gets a conversion action for a qualified response on the Google-hosted form. The CSV, webhook, and API then carry a Lead stage field; how to get it into the CRM is in the same webhook piece.
How to stop bids learning from spam
On audits the larger loss is not the evening spent on empty calls. While every form submit is a primary conversion, the strategy buys more of that traffic. Closing the form and leaving the same goal means you still pay to train on junk.
Google suggests lead-specific goals such as Qualified lead, Converted lead, Book appointment, and Request quote. On a Search lead form, Qualified lead appears once the qualifying question is live. On a website, Google also advises connecting first-party data: set up the Google tag and use enhanced conversions to measure actions accurately. Sending people who booked or paid back to Google Ads is the job of offline conversions.
Next, take the raw form submit out of what the bids learn from. Primary conversion actions feed the Conversions column and bidding; secondary ones are for observation only (the exception is actions in a custom goal). So switch the raw website form submit to secondary and leave Qualified lead or an offline conversion for a real customer as primary. In the Goals menu, open Conversions, choose Summary, find the goal with the action, click Edit goal, and under Conversion action optimization choose Secondary (observe only). Google warns that Smart Bidding needs a learning phase of 7 to 14 days, so do not change goals often. More in the piece on primary and secondary conversion actions. Spam does not vanish after that, but a fake lead stops being a signal to buy more.
Spam leads and invalid clicks
Google removes an invalid click from reports and from billing. The Invalid clicks column shows what was removed before the invoice. Third-party tools often count traffic Google has already filtered, and Google cannot give you a click-by-click comparison with those reports. There is no industry standard for a “normal” share of invalid clicks, so a high number in such a report is not a verdict.
A spam lead can sit on a click Google still treats as valid. In rare cases the report shows more conversions than clicks: Google removed the click as invalid, but the conversion from it stayed. That is what the help says. Google may also remove some invalid conversions, if they came from invalid traffic or stay invalid for more than 13 months, which can show up as a small drop in conversions. The column and the credits are covered in the piece on invalid clicks in Google Ads.
If spam leads keep coming after these steps, I put how I trace the source and check what the bids learn from into a short e-book on Google Ads for business owners.
My e-book “19 Google Ads Secrets”: how to get the most out of Google Ads without draining your budget, drawn from real campaigns and tests.
See the book →When this does not apply
If the Invalid clicks column is full but the leads in your CRM are fine, there is nothing to fix: Google already removed those clicks from billing.
The leads are real but for the wrong job or the wrong town. Fix that with negative keywords and location settings. If clicks come from outside your target places, Google’s help says to change location from “Presence or interest” to “Presence”, or to exclude the areas that send them.
If you only get a handful of real leads a week, More qualified and a confirmation email can hide the last real customer. I then keep the form short and clean the junk with negative keywords; the conversion goal only changes the signal the bids learn from.
If you set bids by hand and the form is not a conversion, the bids are not learning from spam, but you still pay for clicks Google counts as valid, and the manager still spends time.
Questions and answers
Why do fake leads come from Google Ads?
The filters run after the ad is shown and remove some clicks from billing. They do not stop the form from being sent.
How do I see which campaign sends them?
Start with the Invalid clicks column, then placements, content suitability, and the search terms report. A night-time spike on its own proves nothing.
How do I protect the form and the bids?
On the site, use reCAPTCHA, a server check, and a confirmation email. On a Search lead form, use More qualified and a required question. Report the people who became customers back to Google Ads as conversions, and switch the raw form submit to secondary.