Introduction
How to connect Google (new user registration flow)
1. Sign up for Tapper Head to the Tapper registration page and create your account. Enter your first name, last name, email, and password. Or sign up directly with your Google account for a faster start. 2. Name your workspace After registering, set a workspace name. This helps you keep accounts organised and makes tracking simple. 
1. Sign up for Tapper Head to the Tapper registration page and create your account. Enter your first name, last name, email, and password. Or sign up directly with your Google account for a faster start. 2. Name your workspace After registering, set a workspace name. This helps you keep accounts organised and makes tracking simple.  – Excludes known invalid users across theFew readersClean signal guard
Clean Signal Guard prevents Google and Meta advertising pixels from firing on traffic Tapper has identified as invalid. Why it matters Ad platforms optimise based on the signals they receive. When bots, scrapers, competitors, or other low-quality users trigger your pixels, those signals can feed back into platform optimisation and affect bidding, targeting, and conversion modelling. This can lead to: higher CPAs less stable performance distorted audience and conversion signalsFew readersMonitoring script installation
The monitoring script is essential to analyze user behavior on your website and catch all the fraudsters that come your way. | Google Tag Manager (GTM) requires previous installation of GTM script on your website in order to be able to apply changes to your domain. The installation steps are shown when you first sign up to GTM. 1. Go to protected websites From the Tapper sidebar, click Protected Websites. 
1. Go to your website From the Tapper sidebar, click one the name of your website. 2. Add another entity Click on 'Add another entity' button on the top right hand corner. 3. Connect your Meta Ads account Under “Connect Meta Ads,” click Continue with Facebook. ![]Few readersHow to connect Google (existing user registration flow)
1. Go to your website From the Tapper sidebar, click one the name of your website. 2. Add another entity Click on 'Add another entity' button on the top right hand corner. 3. Connect your Google Ads account Under “Connect Google Ads,” click Continue with Google. !Few readersStep-by-Step Implementation Process for Tapper
1. Onboarding & Account Setup Involved Parties: Marketing Manager, Account Administrator Process: During onboarding, Tapper's team will work with the client to ensure Tapper is properly integrated into their ad accounts. This includes creating an account, workspace, protection script, and defining the accounts and campaigns to be monitored and protected. 2. Ad Account Integration Involved Parties: Google Ads/Facebook Ads Account Administrators Process: Tapper connSome readersWhy use Tapper
What benefits could Tapper provide for your business? Well, we’re going to answer the most common questions that we see around the use of click and visit fraud prevention tools. Protect Your Paid Marketing Many businesses rely on paid marketing to deliver a steady stream of targeted traffic. However, it has been proven that up to 1 in 5 clicks on paid marketing , including search results or banner ads, are from non-genuine sources. One of the main reasons to use Tapper is to take backSome readersHow to Add a New Website?
To add a new website, from dashboard go to "Protected Websites" After that click on the top right hand corner on "+ Protect new website" You will see this window where you can add the name of your website and then you can press on "Create"  level. Why Am I Seeing This Error? Google Ads requires account-level permissions, even if you have administrative accSome readersWhy do I need the Google Ads tracking template?
The Google Ads tracking template provides us, tapper, some additional information regarding each click. This information includes the keyword that was triggered by the click, the campaign, device, ad placement and more. Based on this information the system decides which click is fraudulent and which is innocent. The tracking template that is placed by the system after you submitted your Google ads ID and granted us access. This is what makes the automatic IP blocking possible.Some readersWorking with HubSpot
If you're using HubSpot and it's connected to your Google Ads account, you won’t be able to use the tracking template field to link with Tapper. However, Tapper can still access your Google Ads data by utilizing the Final URL suffix field. Simply add kw={keyword}&cpn={campaignid} to the Final URL suffix field at the account level. If you're already using this field, just append &kw={keyword}&cpn={campaignid} to your existing value. **Note: Ensure that the Tapper tracking code is instalFew readersTracking Template
This guide describes how tracking template is set up initially at the account level upon connecting your Google Ads account and how to manage this template if tracking template, or URL parameters are set at lower levels (Campaign, Ad Group, or Ad) Account Level Setup Tracking template is automatically set up upon connecting your Google Ads account to Tapper. To access and verify the tracking template: Navigate to Tools and Settings -> Account Settings -> Tracking in your Google AdFew readersWhere to find your Google Ads tracking template & tracking code?
Both Tracking Template and Tracking Code can be found in your dashboard under Protected Websites - Manage Google protection:Few readers
Meta Ads protection
Everything you need to know about Facebook ads learning phase
What is the Facebook Learning Phase, and how long does it last? The learning phase is when Facebook's delivery system is optimizing your ad set. During this period, it tests different audiences, placements, and other factors, so performance may vary. Ad sets typically exit the learning phase after receiving about 50 optimization events within a 7-day period, when performance stabilizes. For more details, checkPopularIntro to Meta (Facebook) ads:
Facebook Ads and Google Ads have a few differences when it comes to marketing and advertisements. While with Google we are counting on a high user intention, targeting by keywords and paying per ad click (CPC), with Facebook we are targeting low-intent users, mainly based on custom audiences interests and segmentations, and paying per 1000 impressions (CPM). Tapper tracks the invalid activity coming through your Facebook ads and exclude invalid users from the targeted audience. How Does ItFew readersURL Parameters
This guide explains how to add a custom URL parameter to each ad for precise tracking of advertisement clicks. Access the Tracking Section Navigate to the Ad: Go to the specific ad you wish to configure within your Meta Ads account. Open Tracking Settings: Find Tracking section of the ad setup. Add the URL Parameter Create New Parameter: Choose to add a new parameter named ad_id. Set Parameter Value: Select {{ad.id}} from the available dynamic values. This valFew readersEverything about Tapper Meta (Facebook) ads protection
Intro to Meta (Facebook) Ads: Meta (Facebook) is a leading online social media and networking platform, offering one of the most effective ways to advertise online due to its massive user base that spans all demographics. Facebook Ads differ from Google Ads in key ways. Google Ads rely on high user intent, targeting through keywords, and charging per click (CPC). In contrast, Facebook Ads target lower-intent users based on custom audience interests and segmentation, with costs calculated per 1,Few readersWhy Tapper requires the Meta page owner for setup
To activate Tapper’s invalid traffic protection on Meta (Facebook and Instagram), we require the Meta Page Owner, not just the Ad Account Admin, to connect the page. This is due to how Meta grants permissions through its API. Why Page Owner Access Is Needed Meta’s API limits certain actions to users who have full admin access to the Meta Page. These actions include: Creating and managing exclusion audiences Syncing those audiences with active ad campaigns Monitoring engagementFew readers
Monitoring Script
Where to find your monitoring script?
The Monitoring Script can be found in your dashboard under protected websites then website monitoring.Some readersWhy do I need the monitoring script?
The Monitoring Script is another layer of click fraud detection. This layer provides us more information regarding the attacker. It allows us to better monitor and block based on user behavior, fraudulent devices, site bounce and more. Based on this information the system decides which IP is innocent and which is fraudulent.Few readersHow to Manually Install Tapper's Monitoring script in Shopify?
To install the tracking script in Shopify you should place it within your Shopify theme. Shopify Plus? If you have Shopify Plus reach out to your Merchant Success Manager for instructions to install the monitoring script during checkout! To install the script login to your Shopify store and follow these steps to set it up in a matter of minutes: Step 1 - Visit your store Within the dashboard, click on Online Store: , and ad creative assets (images, video, headlines, descripFew readers
Manage Detection Rules
Click fraud threshold
Click fraud can be committed by bots, fake users, or malicious humans clicking on your ads with no intention to purchase. The Click Fraud Threshold means how many times are we allowing an IP to click on our ads before blocking them. Each IP that meets the threshold criteria will be detected as a suspicious IP and also will be blocked. The power to decide how many times an individual IP can click on your paid ads before being automatically blocked is in your hands - but how can we find that fineSome readersBlock VPN & proxy clicks
Tapper gives you the ability to automatically block fraudsters that are hiding behind a VPN network. Fraudsters will often times use VPN networks to hide their real location and circumvent Google's geo-targeting. Block VPN & Proxy ClicksSome readersBlock JavaScript disabled browsers
JavaScript is an online scripting language used extensively by websites and a lot of essential site functions are based on JavaScript code. In order to save resources, some automation tools or low quality users may disable JavaScript. This action will also block different elements on the website that include tracking cookies and the user experience will be affected. Depending on how your website is built, a user that disabled JavaScript usually will not be able to view much of your website orSome readersBehavior analysis feature
Behavior analysis is a powerful feature that records the user behavior of your traffic. When this feature is enabled, Tapper will record the screen session and look at all the information behind each click - mouse movements, scrolling tendencies, click patterns, and length of each session. That is to better understand and identify a fraudulent behavior. Behavioral analysis  Ads. For example, when a certain user's IP is detected as fraudulent after clicking on one of your Facebook Ads, that IP will automatically be blocked from your Google Ads campaigns as well, and vice versa. When filtering for Google/Facebook Ads, you will see the cross-platform blocks on the other platFew readersProtected campaigns & excluded campaigns
To apply Tapper's protection selectively across campaigns, exclude specific ones from protection in your dashboard. A protected campaign automatically blocks all detected fraud, while an excluded campaign is only monitored without blocking. Though it's advised to protect all campaigns, the choice is yours. Protected Campaigns & Excluded Campaigns To include or exclude a campaign from protection, log in to your dashboard and go to Protected Websites then Manage Auto IPFew readersTypes of honeypots
Types of honeypots, traps embedded in a website’s code or form that real users don’t see or interact with, but bots might. When bots trigger them, Tapper flags or blocks them as likely invalid traffic. Here’s a breakdown of each: 🕳️ Honeypot Types (What They Are & Why They're Useful) HIDDEN_FORM_SUBMISSION = 0 A full form that is visually hidden. Bots may autofill and submit it. Legitimate users never see it. HIDDEN_TEXT_INPUT = 1 A hidden text field (e.g., fake "Few readersHow Tapper uses browser fingerprints to detect invalid traffic
Tapper uses advanced browser fingerprinting technology—built on top of tools like CreepJS—to help identify bots, spoofed devices, and other forms of invalid traffic. This guide explains how fingerprint data is used in our system and why it's important for protecting your ad budget. 1. Detecting Inconsistencies Between Browser APIs Modern browsers expose a range of APIs that provide information about the user's environment, including the device, browser, language, screen resolution, and morFew readersWhitelist Converted IPs
By installing the conversion script on your "Thank You" pages, you can now whitelist any IPs associated with completed conversions. Once a user completes a purchase and lands on your Thank You page, their IP address will be automatically whitelisted. This ensures that they won't be blocked in the future, reducing any minimal risk of false positives and allowing genuine customers to engage with your ads more freely in subsequent interactions.Few readersASN-based blocking & machine learning model
Overview Tapper has implemented an advanced ASN-based blocking system that combines real-time data analysis and machine learning to differentiate between good and bad Autonomous System Numbers (ASNs). This ensures that ad fraud and bot-driven traffic are blocked while maintaining access for legitimate users. This guide explains how the system works, the factors influencing ASN classification, and how you can fine-tune the settings based on your needs. How Tapper Blocks Data Center TraFew readersAborted Ad Click Prevention
Tapper’s Aborted Ad Click Prevention feature detects and blocks suspicious click patterns caused by aborted ad clicks. These occur when an ad click is registered, but the page does not fully load, and no user activity (e.g., scrolls, clicks) is recorded. Why It Matters Aborted clicks can stem from: Ad Fraud: Bots mimicking human behavior without meaningful engageFew readersSuspicious Ad Click Prevention
Tapper’s Suspicious Ad Click Prevention feature identifies and flags ad clicks where the script successfully loads, but no subsequent user interactions or events are recorded. This behavior often indicates low-quality traffic, potential fraud, or technical issues. ** How It Works Detection: The system monitors ad clicks and identifies sessions where no interactions (e.g., page views, scrolls, or cFew readers
