Is Someone Clicking My Google Ads on Purpose?

This is a more specific, more uncomfortable version of the general click-fraud question. It’s one thing to suspect generic bot traffic is inflating your numbers somewhere in the background. It’s another to wonder whether a specific person, a competitor, someone who knows you personally, someone with a grudge, is deliberately clicking your ads to burn through your budget. Both are real, and they look different enough in the data that you can usually tell them apart.

What deliberate, targeted clicking tends to look like

Generic bot fraud is usually indiscriminate. The same bot network clicks thousands of different advertisers’ ads across many categories, with no particular focus on you. Deliberate sabotage looks different: a small number of clicks, repeated specifically on your ads, often during your normal business hours (when the person doing it is also awake and thinking about it), sometimes clustered right after you’ve made a change to a campaign, as if someone noticed and reacted.

A genuine tell: the same device fingerprint showing up three or more times in a single day, specifically on your ads, switching IP addresses between visits but never converting, never spending more than a few seconds on the page. That combination (persistent, targeted, and clearly not a real prospect) is much more consistent with someone doing this on purpose than with generic automated traffic passing through.

What it usually isn’t

It’s worth saying plainly: most inflated click counts are not a specific person targeting you personally. They’re bots, click farms, or broad automated fraud that happens to land on your ads the same way it lands on thousands of other advertisers’ ads that day. Jumping straight to "someone I know is doing this to me" without checking the data first can send you down the wrong path, and it’s an uncomfortable place to sit without real evidence.

The honest way to know the difference is to actually look at the pattern rather than go on instinct. Is it a wide spread of IPs and devices with no repetition, or a small number of devices showing up again and again? The former looks like generic fraud. The latter looks targeted.

If it does look targeted

Once you have real evidence (not just a suspicion), the response is the same regardless of who’s doing it: block the device/IP pattern from reaching your ads again, and keep the evidence in case you want to file a Google invalid-clicks case later. Device fingerprinting matters more here than in generic fraud detection specifically because a determined individual will rotate their IP address the moment they suspect they’ve been blocked. That’s exactly the gap IP-only blocking tools miss.