Scroll to top of page

How ad fraud threatens the whole programmatic industry

Ad fraudAd fraudAd fraud is a cyber-criminal activity that refers to a wide range of techniques whose purpose is to falsify the distribution of an ad.Learn more has been around for years, but the rise of programmaticprogrammaticProgrammatic advertising refers to the automated buying and selling of ad spaces; most of the time, it takes place in real time through platforms such as ad exchanges, DSPs and SSPs.Learn more and audience targeting campaigns has made it a top concern for brand marketers. Though nobody agrees on its real impact on advertising budgets, fraud casts a shadow on the whole programmatic industry, which eventually leads marketers to re-allocate budgets to allegedly safer environments like Facebook, YouTube and Snapchat.

Ad fraudAd fraudAd fraud is a cyber-criminal activity that refers to a wide range of techniques whose purpose is to falsify the distribution of an ad.Learn more applies to a wide range of techniques that aim at nibbling at advertising budgets through bot-generated actions. Every traffic acquisition channel is exposed to ad fraud (even Google reports an estimated 5% fraudulent clicks, which however are not charged to advertisers), but programmaticprogrammaticProgrammatic advertising refers to the automated buying and selling of ad spaces; most of the time, it takes place in real time through platforms such as ad exchanges, DSPs and SSPs.Learn more is by design more exposed, as it is more decentralised than AdwordsAdwordsAdwords is Google's SEA service, linked to the web search engine and to its extensions (its partners and Google Display Network). The tool enables to buy sponsored links that are displayed among the search results, or on advertising spaces available through Google's partner network. Learn more or Facebook Ads, and therefore more difficult to control. Now that programmatic is bigger than direct Display buys according to eMarketer, ad fraud accounts for a significant share of display impressionimpressionIn the context of online advertising, an impression is the display of an advertisement on the Internet. It is also used as an indicator in the buying and selling of ad space: some publishers charge advertisers for each set of a thousand impressions (especially for CPM-based pricing models).Learn mores - how much exactly is hard to say, even for fraud detection experts like White Ops, who face backlash from publishers and sell-side players every time they release an estimate.

Ad fraud is actually a mafia-style well-organised cyber-criminal activity, not just a nerdy teenager pet project (even though computer hacking history shows that nerdy teenagers should not be overlooked). It involves massive networks of servers in the cloud or thousands of malware-infected personal computers. Once infected, flocks of computers called botnets open fake browsing sessionsessionA browsing session is the period during which a user is connected to a website or a mobile app. Learn mores, using fake cookiecookieA cookie is a text file that is stored in the memory of a web browser by a web server when a user visits a website (it can also be stored by a third-party server allowed to do so: ad network, web analytics service...). It particularly allows to gather and store data about users’ browsing behaviour, in order to reuse it during their next visits (user' log ins, for instance).Learn mores on real browsers to ensure higher CPMCPMCost Per Mille (CPM), or Cost Per Thousand (in Latin, "mille" means thousand), is an online advertising pricing model that refers to the cost an advertiser pays for one thousand impressions of an ad. Unlike other revenue models, it is well fit for a mass strategy. Some actors of the advertising ecosystem buy CPM ad space and resell it to advertisers on a CPC basis (Criteo, for instance).Learn mores. Indeed, brand X is likely to pay a higher CPM for a cookie that represents a returning visitor than for a generic user. Botnets are sophisticated enough to mimic user behaviour, like mouse movements and page scrolling, and thus to fool most ad-viewability players.

Why not just exclude domains that do not belong to a curated whitelist? It could help fighting basic botnets, which only focus on run-of-network campaigns targeting lower quality exchanges. However, modern botnets also damage Premium campaigns and direct deals with Tier 1 publishers.

To understand how it works, let’s consider the following example:
Brand X wants to run a guaranteed campaign on a high-quality News publisher’s network. It’s likely the publisher will sell not only guaranteed inventory on its own domain, but also “extended reach”, which is a way to target the publisher’s audience on remnant programmatic inventory at a cheaper cost. Such a guaranteed premium deal, which can potentially bring great results, can be affected by ad fraud in two different ways.

  • First, extended reach is guaranteed against an audience (well… a pool of cookies) but the selection of inventory is up to the publisher, unless Brand X asks for transparency and strict whitelisting. The publisher then acts as a Trading Desk and buys inventory on run-of-network campaigns, which makes it easy for a botnet impersonating the publisher-cookie to get decent CPMs on fraudulent websites.
  • Second, the publisher has to make sure it can honour a guaranteed buy on its own inventory with enough traffic on a specific day or week. It is no secret that a quick and dirty fix for this potential issue is to mandate third-party networks, which are paid on a click basis to drive additional traffic when needed. The problem is that such ‘traffic boost’ deals are hard to control and incentivised click networks often work with fraudulent websites and provide ghost traffic. An advertiser running a Premium deal on a Premium guaranteed inventory can then accrue many impressions from bots, even if the publisher website is not a fraudulent website.

Again, nobody really knows how much money we are talking about. White Ops estimates that the sole Methbot operation generates 3 to 5 million dollars per day, but sell-side companies like AppNexus answer it may be 100 times less. Notwithstanding this vague estimate, brand marketers are now aware that programmatic, whether guaranteed or auction-based, is a potentially risky and opaque place in which to invest advertising budgets. Meanwhile, Silicon Valley giant Facebook claims to have stopped investing in a proprietary DSPDSPA DSP (Demand Side Platform) is a platform that allows advertisers and agencies to automatically manage their media-buy on multiple ad exchanges through a unique platform; it is mainly used to buy display advertising space through RTB (Real Time Bidding).

Learn more
because of ad fraud, and pitches advertisers for fraud-free campaigns on the Facebook/Instagram apps, putting the whole programmatic ecosystem at risk and highlighting the need for publishers’ networks to provide full transparency to buyers. A long way to go for sure, but a necessary next step.

Want to learn more? Get in touch!


close legal

À propos

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec a venenatis dolor, non ornare ligula. Nam ultricies elementum tellus, sed pulvinar libero egestas nec. Fusce facilisis nulla vestibulum, commodo neque eget, dapibus lacus. Aliquam neque felis, sagittis nec consequat sed, commodo ac ipsum. Sed neque tortor, semper quis viverra et, malesuada et eros. Donec at dui ut ligula pharetra aliquet. Etiam dapibus semper orci. Integer efficitur dolor tortor, nec mattis elit placerat vel. Ut nulla enim, lacinia in pharetra id, convallis vitae massa. Donec neque est, tincidunt non ullamcorper commodo, tincidunt non turpis. Pellentesque viverra enim a sapien placerat, ut volutpat mauris condimentum. Proin tincidunt sollicitudin dui, sit amet condimentum ante commodo a. Aenean posuere aliquam purus, sed aliquam magna sagittis finibus. Morbi molestie feugiat feugiat. Phasellus tempus in dolor vel maximus. Cras efficitur sagittis lorem porta iaculis. Maecenas sed hendrerit urna. In mattis posuere purus, sit amet placerat arcu posuere quis. Etiam nec arcu nec magna interdum maximus. Integer sit amet lacus neque. Curabitur interdum molestie magna, in scelerisque tellus iaculis sed. Sed nec metus ut purus efficitur laoreet a quis eros. Proin dui dui, dignissim eget risus sit amet, bibendum condimentum velit. Maecenas in justo eu elit eleifend consectetur. Aenean scelerisque fringilla sollicitudin. Nam sem nibh, pharetra nec lacus non, mollis interdum odio. Aliquam sollicitudin posuere nibh sed eleifend.


55 SAS, 5 — 7 rue d'Athènes

75009 Paris

+33 1 76 21 91 37



2, rue Kellermann

59100 Roubaix

+33 8 20 69 87 65


Lan Anh Vu Hong

Crédits photo

Mats Carduner, Adobe Stock & Unsplash

Vous avez aimé nos nouvelles fraîches sur l'état du marché brandtech ? Inscrivez vous à notre newsletter