Device Rotation
Workers cycle through multiple devices, each with different device IDs, accounts, and SIM cards. Some operations reset devices regularly to create fresh digital identities.
Fraud Type Guide
Not all ad fraud comes from bots. Human fraud farms employ real people to click ads, fill forms, and fake engagement at industrial scale — making their traffic harder to detect.
A human fraud farm — also known as a click farm — is a physical operation where large numbers of low-paid workers use real devices to perform fraudulent actions at scale. These workers click on ads, install and open apps, fill out lead generation forms, write fake reviews, and generate artificial social media engagement.
Unlike bot traffic, which uses automated software, human fraud farms generate traffic from real people on genuine devices. This makes them a form of Sophisticated Invalid Traffic (SIVT) that is significantly harder to detect using standard bot-detection methods.
Fraud farms range from small operations with a few dozen devices to industrial-scale facilities with thousands of smartphones and tablets arranged in racks. Some operations also use device farms — automated setups where software controls hundreds of physical devices simultaneously, combining human-like device characteristics with bot-like speed.
Understanding the mechanics of fraud farm operations helps explain why they are so effective and difficult to detect.
Workers cycle through multiple devices, each with different device IDs, accounts, and SIM cards. Some operations reset devices regularly to create fresh digital identities.
Residential proxies and VPN services make traffic appear to originate from target markets like the US or Europe, even when the farm is located in a low-cost region.
Workers receive specific instructions: which ads to click, what forms to fill out, which apps to install, and how long to interact. Tasks are distributed through internal platforms or messaging apps.
The farm earns high-value ad revenue (e.g., $2-5 per click in finance or insurance verticals) while paying workers a fraction of a cent per action. The margin is the fraud profit.
Human fraud farms are versatile operations that can target virtually any digital advertising model. Here are the most common activities.
Workers manually click on PPC ads to drain competitor budgets or generate revenue for publisher partners. Real clicks from real devices make these extremely hard to distinguish from genuine interest.
Forms are filled with plausible (but fake) information to generate leads that appear legitimate. Workers may use real-sounding names, valid phone formats, and realistic email addresses.
Workers install apps, open them, and complete onboarding flows to trigger CPI (cost-per-install) payouts. Some operations simulate in-app engagement to bypass basic install-quality checks.
Likes, comments, follows, shares, and reviews are generated at scale. Social media campaigns and influencer metrics are particularly vulnerable to this type of fraud farm activity.
Unlike bots, fraud farm traffic comes from genuine hardware with legitimate browser fingerprints, real screen resolutions, and authentic device characteristics. Standard device fingerprinting sees them as real users.
Workers produce natural mouse movements, variable scroll patterns, and realistic session durations. Behavioural analysis tools designed to catch bots often classify this traffic as human.
Residential proxy networks make the traffic appear to originate from legitimate residential IP addresses in target markets, defeating basic IP-based filtering.
Each worker generates a modest number of actions per day, staying below velocity thresholds that would trigger automated alerts. The fraud scales through the number of workers, not the speed of each one.
Opticks correlates 30+ signals per interaction — device clusters, geographic patterns, session sequences, and cross-campaign behaviour — to identify coordinated human fraud.
Pattern recognition identifies clusters of devices sharing network infrastructure, similar hardware configurations, or coordinated activity timing that reveals organised operations.
Opticks detects when the same device clusters appear across multiple advertisers' campaigns, revealing fraud farm operations that target many brands simultaneously.
Keep Exploring
Human fraud farms evade basic bot detection. Opticks uses multi-signal analysis to identify coordinated human fraud across all your campaigns.