Scroll to top of page

How ad fraud threatens the whole programmatic industry

Ad fraudAd fraudFreemium (a combination of the words "free" and "premium") is a monetisation model whereby the same product or service is offered in two different versions: one that is free but contains a limited number of features, and another one that is comprehensive but for which users have to pay.Learn more has been around for years, but the rise of programmaticprogrammaticProgrammatic advertising refers to the automated buying and selling of ad space. Most of the time, it takes place in real time through platforms such as ad exchanges, DSPs and SSPs.Learn more and audience targeting campaigns has made it a top concern for brand marketers. Though nobody agrees on its real impact on advertising budgets, fraud casts a shadow on the whole programmatic industry, which eventually leads marketers to re-allocate budgets to allegedly safer environments like Facebook, YouTube and Snapchat.

Ad fraudAd fraudFreemium (a combination of the words "free" and "premium") is a monetisation model whereby the same product or service is offered in two different versions: one that is free but contains a limited number of features, and another one that is comprehensive but for which users have to pay.Learn more applies to a wide range of techniques that aim at nibbling at advertising budgets through bot-generated actions. Every traffic acquisition channel is exposed to ad fraud (even Google reports an estimated 5% fraudulent clicks, which however are not charged to advertisers), but programmaticprogrammaticProgrammatic advertising refers to the automated buying and selling of ad space. Most of the time, it takes place in real time through platforms such as ad exchanges, DSPs and SSPs.Learn more is by design more exposed, as it is more decentralised than AdwordsAdwordsAdWords is Google's SEA platform. It is connected to the search engine and its extensions (advertising partners and the Google Display Network). It allows brands to buy sponsored links that are displayed among search results, or on dedicated advertising spaces available across Google's partner network.Learn more or Facebook Ads, and therefore more difficult to control. Now that programmatic is bigger than direct Display buys according to eMarketer, ad fraud accounts for a significant share of display impressions - how much exactly is hard to say, even for fraud detection experts like White Ops, who face backlash from publishers and sell-side players every time they release an estimate.

Ad fraud is actually a mafia-style well-organised cyber-criminal activity, not just a nerdy teenager pet project (even though computer hacking history shows that nerdy teenagers should not be overlooked). It involves massive networks of servers in the cloud or thousands of malware-infected personal computers. Once infected, flocks of computers called botnets open fake browsing sessionsessionA browsing session is the period during which a user is connected to a website or a mobile app. It starts when the user reaches the website (interpretations of this tend to differ depending on the measuring tool) and ends when he leaves it (this is recorded after a certain period of inactivity, the standard duration being 30 minutes).Learn mores, using fake cookiecookieA cookie is a text file that is stored in the memory of the web browser by the server when a user visits a website (it can also be stored by a third-party server that is allowed to do so - ad network, web analytics service...). Cookies make it possible to gather and store data about users’ browsing behaviour, which can later be reused during these users’ subsequent visits (user log ins, for instance).Learn mores on real browsers to ensure higher CPMCPMCost Per Mille (CPM), or Cost Per Thousand (in Latin, "mille" means “thousand”), is an online advertising pricing model that refers to the cost an advertiser has to pay for one thousand impressions of an ad. Unlike other pricing models, it is suitable for mass strategies. Some players of the advertising ecosystem buy CPM ad space which they then resell to advertisers on a CPC basis (Criteo, for instance).Learn mores. Indeed, brand X is likely to pay a higher CPM for a cookie that represents a returning visitor than for a generic user. Botnets are sophisticated enough to mimic user behaviour, like mouse movements and page scrolling, and thus to fool most ad-viewability players.

Why not just exclude domains that do not belong to a curated whitelist? It could help fighting basic botnets, which only focus on run-of-network campaigns targeting lower quality exchanges. However, modern botnets also damage Premium campaigns and direct deals with Tier 1 publishers.

To understand how it works, let’s consider the following example:
Brand X wants to run a guaranteed campaign on a high-quality News publisher’s network. It’s likely the publisher will sell not only guaranteed inventory on its own domain, but also “extended reach”, which is a way to target the publisher’s audience on remnant programmatic inventory at a cheaper cost. Such a guaranteed premium deal, which can potentially bring great results, can be affected by ad fraud in two different ways.

  • First, extended reach is guaranteed against an audience (well… a pool of cookies) but the selection of inventory is up to the publisher, unless Brand X asks for transparency and strict whitelisting. The publisher then acts as a Trading Desk and buys inventory on run-of-network campaigns, which makes it easy for a botnet impersonating the publisher-cookie to get decent CPMs on fraudulent websites.
  • Second, the publisher has to make sure it can honour a guaranteed buy on its own inventory with enough traffic on a specific day or week. It is no secret that a quick and dirty fix for this potential issue is to mandate third-party networks, which are paid on a click basis to drive additional traffic when needed. The problem is that such ‘traffic boost’ deals are hard to control and incentivised click networks often work with fraudulent websites and provide ghost traffic. An advertiser running a Premium deal on a Premium guaranteed inventory can then accrue many impressions from bots, even if the publisher website is not a fraudulent website.

Again, nobody really knows how much money we are talking about. White Ops estimates that the sole Methbot operation generates 3 to 5 million dollars per day, but sell-side companies like AppNexus answer it may be 100 times less. Notwithstanding this vague estimate, brand marketers are now aware that programmatic, whether guaranteed or auction-based, is a potentially risky and opaque place in which to invest advertising budgets. Meanwhile, Silicon Valley giant Facebook claims to have stopped investing in a proprietary DSPDSPA DSP (Demand Side Platform) is a platform that allows advertisers and agencies to automatically manage and optimise their media-buy on one or several ad exchanges through a single platform. It is mainly used to buy display advertising space through RTB (Real Time Bidding).Learn more because of ad fraud, and pitches advertisers for fraud-free campaigns on the Facebook/Instagram apps, putting the whole programmatic ecosystem at risk and highlighting the need for publishers’ networks to provide full transparency to buyers. A long way to go for sure, but a necessary next step.

Want to learn more? Get in touch!

23-03-2017

close legal

À propos

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec a venenatis dolor, non ornare ligula. Nam ultricies elementum tellus, sed pulvinar libero egestas nec. Fusce facilisis nulla vestibulum, commodo neque eget, dapibus lacus. Aliquam neque felis, sagittis nec consequat sed, commodo ac ipsum. Sed neque tortor, semper quis viverra et, malesuada et eros. Donec at dui ut ligula pharetra aliquet. Etiam dapibus semper orci. Integer efficitur dolor tortor, nec mattis elit placerat vel. Ut nulla enim, lacinia in pharetra id, convallis vitae massa. Donec neque est, tincidunt non ullamcorper commodo, tincidunt non turpis. Pellentesque viverra enim a sapien placerat, ut volutpat mauris condimentum. Proin tincidunt sollicitudin dui, sit amet condimentum ante commodo a. Aenean posuere aliquam purus, sed aliquam magna sagittis finibus. Morbi molestie feugiat feugiat. Phasellus tempus in dolor vel maximus. Cras efficitur sagittis lorem porta iaculis. Maecenas sed hendrerit urna. In mattis posuere purus, sit amet placerat arcu posuere quis. Etiam nec arcu nec magna interdum maximus. Integer sit amet lacus neque. Curabitur interdum molestie magna, in scelerisque tellus iaculis sed. Sed nec metus ut purus efficitur laoreet a quis eros. Proin dui dui, dignissim eget risus sit amet, bibendum condimentum velit. Maecenas in justo eu elit eleifend consectetur. Aenean scelerisque fringilla sollicitudin. Nam sem nibh, pharetra nec lacus non, mollis interdum odio. Aliquam sollicitudin posuere nibh sed eleifend.

Édition

55 SAS, 5 — 7 rue d'Athènes

75009 Paris

+33 1 76 21 91 37

Hébergement

OVH SAS

2, rue Kellermann

59100 Roubaix

+33 8 20 69 87 65

Publication

Lan Anh Vu Hong

Crédits photo

Mats Carduner, Adobe Stock & Unsplash

Vous avez aimé nos nouvelles fraîches sur l'état du marché brandtech ? Inscrivez vous à notre newsletter