How to Spot Fake or Bot Traffic Before Buying

Fake traffic inflates the price

Since a site's value follows its traffic, a dishonest seller can inflate the price by padding visitor numbers with bots or undisclosed paid traffic. As a buyer, your job in due diligence is to confirm the traffic is real, human, and durable — because paying a multiple on fake traffic means buying earnings that will evaporate. A few checks reliably separate genuine audiences from manufactured ones.

Check engagement, not just totals

Bot traffic tends to betray itself in engagement metrics: near-zero time on page, extreme bounce rates, no scroll depth, and traffic that doesn't convert despite high numbers. Real human visitors behave in patterns bots struggle to fake at scale. If the totals look great but engagement is robotic and revenue-per-visitor is implausibly low, treat the traffic as suspect until proven otherwise.

Scrutinize sources and geography

Look hard at where traffic comes from. Sudden spikes, huge volumes from unexpected countries, traffic from unknown referrers, or a big share from paid sources presented as 'organic' are all red flags. Cross-reference Google Analytics with Search Console — real organic search traffic shows up as clicks and impressions there, and a mismatch between claimed organic traffic and actual Search Console data is a strong signal of manipulation.

Cross-check with independent tools

Finally, run the domain through third-party estimators like Ahrefs or Semrush. They won't match analytics exactly, but if a seller claims huge organic traffic and independent tools show almost none, something is wrong. Consistency across the site's own analytics, Search Console, and third-party tools is what confirms traffic is genuine — and any large, unexplained gap is your cue to walk or renegotiate hard.

Compare at least three independent sources

No single source proves traffic is real, but disagreement between sources is highly informative. Put the seller's analytics next to Search Console, next to any ad network's own session counts, next to a third-party estimate. Real traffic produces figures that are in the same range across all four. Fabricated or purchased traffic almost always shows a pattern that only one source supports.

The behavioural signals

Purchased traffic behaves differently from real visitors. Look for sessions with implausibly uniform duration, bounce rates that are either near zero or near total, no scroll depth, traffic arriving in flat hourly blocks rather than following a daily curve, and a geographic distribution that does not match the content's language or subject. Any one of these can be innocent; three together rarely are.

Check the search side specifically

Search Console data is difficult to fake because it comes from the search engine rather than from the site. Compare its clicks against analytics sessions from organic: a large gap needs explaining. Then look at branded search volume, since a site with real readership accumulates people searching for it by name. A site claiming substantial authority with essentially no branded queries has an audience problem.

Referral and direct traffic are where it hides

Fabricated traffic is usually attributed to direct or to referral sources, because those are the hardest to verify externally. Scrutinise any site with an unusual share of direct traffic and no obvious reason for it, such as an app or a large email list. Check referral domains actually exist and actually link to the site, which takes minutes and is skipped surprisingly often.

What to do when it does not add up

Ask the seller to explain the specific discrepancy rather than accusing them, since misconfigured analytics, filtered views and migration artefacts produce genuine anomalies. If the explanation is checkable, check it. If it is not, structure around it with a holdback measured in your own analytics after transfer, or walk away. Traffic you cannot verify is the one thing not worth taking on faith.