Click validation

What is Click validation?

Click validation is a fraud prevention mechanism that requires ad partners to provide matching impression data alongside their click data to an MMP. By verifying that a click originated from a user who was actually served the ad, click validation exposes fraudulent clicks that lack a corresponding impression. It is one of the primary defenses MMPs use to protect advertisers from paying for illegitimate installs.

How it works

Click validation operates by creating a closed loop between ad serving, click recording, and attribution verification. The process involves three core stages.

Impression Logging

When an ad network serves an ad to a user, the MMP is notified and logs a unique impression ID tied to that specific ad delivery event. This ID is associated with the device and the timestamp of the impression.

Click Matching

When the user clicks on the ad, a postback is sent to the MMP containing an impression ID. The MMP then attempts to match this click-side impression ID against the previously logged impression record. A valid click requires that both IDs correspond to the same user, the same ad creative, and a plausible time sequence where the impression precedes the click.

Attribution Verification

Once the match is confirmed, the MMP proceeds with attribution. If no matching impression is found, the click is flagged as suspicious and excluded from attribution. This prevents ad networks from fabricating click data without having actually served an ad to a real user.

Limitations

Click validation does not catch all forms of click fraud. Modern click injection attacks have evolved beyond relying solely on install broadcasts. Attackers can now detect when a user taps the install button in an app store or when an app begins downloading, giving them a narrow window to inject a fake click before the install completes. Because these injected clicks can sometimes carry plausible impression context, they may pass basic validation checks. Click spam, which involves flooding MMPs with large volumes of low-quality clicks, can also partially evade click validation when fraudsters include recycled or loosely matched impression IDs. These limitations mean click validation works best as one layer within a broader fraud detection strategy, not as a standalone solution.

Why it matters

Without click validation, ad networks can report click data to an MMP with no obligation to prove that a corresponding ad impression occurred. This creates a straightforward opportunity for fraudulent networks to claim credit for installs they had no role in driving, diverting ad budget away from legitimate sources. Click validation closes this gap by introducing a verifiable standard for click legitimacy. Advertisers benefit directly through more accurate attribution, cleaner campaign data, and reduced exposure to install fraud. MMPs that enforce click validation as a requirement for all integrated partners create a higher barrier for bad actors, making it meaningfully harder to operate click fraud schemes at scale. For performance marketers running cost-per-install or cost-per-action campaigns, the integrity of click data is foundational. Paying for installs that were never genuinely driven by an ad undermines ROAS calculations and distorts the signals used for campaign optimization. Click validation preserves the reliability of these signals. Airbridge enforces click validation across its attribution pipeline, enabling advertisers to identify and exclude clicks that lack verified impression matches before those clicks influence attribution outcomes.

How to set up click validation with an MMP

Setting up click validation requires coordination between the advertiser, the MMP, and the ad network partners running campaigns.

1. Confirm MMP support. Verify that your MMP supports impression-level click validation and that it is enabled for your account. Some MMPs offer this as an optional fraud protection setting rather than a default.

2. Require impression tracking from ad partners. When onboarding ad networks, make impression postbacks a contractual requirement. Ad partners must be configured to send impression data to your MMP using the correct impression tracking URL or SDK integration before click data will be accepted for attribution.

3. Configure impression tracking URLs. Implement the MMP-provided impression tracking URL within the ad network's creative settings. This URL fires when an ad is rendered to a user and sends the impression event with a unique ID to the MMP.

4. Enable click-impression matching rules. In your MMP dashboard, activate the click validation or impression verification setting. This instructs the MMP to reject or flag any click that does not have a corresponding impression on record.

5. Set lookback window parameters. Define an appropriate impression-to-click lookback window. A very long window increases the risk of false positives where old impressions match unrelated clicks. A window that is too short may discard legitimate delayed clicks. Align this window with your campaign type and typical user behavior.

6. Monitor flagged clicks. Regularly review the clicks flagged or rejected by click validation. Patterns such as a high rejection rate from a specific publisher or ad network are a signal worth investigating further for click spam or click injection activity.

7. Use click validation alongside complementary tools. Pair click validation with CTIT analysis, blocklists, and device-level fraud signals for a layered defense. Click validation addresses impression-click mismatches but does not cover all fraud vectors on its own.

Related concepts