How to Stop Competitors Clicking Your Ads (7-Step Plan)

Every advertiser eventually stares at a click report and thinks it: someone is doing this on purpose. Sometimes the suspicion is wrong; bots and low-quality placements produce the same symptoms. Sometimes it's exactly right: in surveys and support forums, competitor clicking is one of the most commonly reported forms of click fraud, precisely because the motive is built into the auction. Every click a rival lands on your ad burns your budget, and in a shared auction, your waste is their discount.

This is the complete playbook. For the deep dives it builds on, see how to prove competitor click fraud, blocking competitors from draining your budget, and, for a different problem people often confuse with this one, competitors bidding on your brand name.

Why Competitors Click Your Ads

Understanding the motive helps you read the pattern. Competitor clicking concentrates where the incentive is strongest:

The damage is bigger than the click price. A drained budget means your ads vanish for the rest of the day, invisible during the hours real buyers search. Polluted conversion signals compound inside automated bidding, a dynamic we break down in how invalid clicks inflate your CPA and what "Limited by budget" really costs you.

Seven Signs It's Actually a Competitor

Before you act, check whether the pattern fits. One anomaly is noise; a cluster is a case:

• Repeat clicks from one IP or a tight range. The classic office-network signature: the same source hitting your ads day after day.
• Concentration on your most expensive keywords. Random bots spread out; a rival aims where clicks hurt most.
• Business-hours clustering. Human sabotage happens 9-to-5, often in your shared local market's time zone.
• Seconds-long sessions with zero engagement. Click, land, leave. No scrolling, no second page, ever.
• Timing that matches competitive events. Spikes right after you outbid someone, launch a campaign, or take the top spot.
• Geographic mismatch. Clicks clustered in one city or region where a specific rival operates. This is distinct from the wrong-country click problem, which has different causes.
• CTR up, conversions flat. The arithmetic signature of paid-for clicks that were never customers.

If several of these line up, move to the plan. If none do, you may still have an invalid traffic problem, just not a rival with a grudge. Bots produce similar symptoms at larger scale, and the response overlaps heavily, so nothing below is wasted either way.

The 7-Step Response Plan

Step 1: Confirm the pattern before you blame anyone

Work through the segments Google already gives you: clicks by hour of day, by geography, by device, by network, and the search terms report. Cross-check against analytics: billed clicks versus real sessions and engagement. What you're looking for is repetition tied to a source, not a bad week. This discipline matters because the most expensive mistake in this whole area is blocking real customers based on a hunch. Our evidence guide shows exactly what a strong review looks like.

Step 2: Build the evidence file as you go

Start a running log from day one: dates and timestamps, campaigns and keywords hit, IPs and patterns where you can see them, screenshots of the reports, and the spend affected. You'll use this same file three times: for Google's review team, for your own exclusion decisions, and (rarely) for lawyers. Cases and credit claims fail on vague suspicion; they succeed on documentation. Everything Google counts as invalid activity is defined in its invalid clicks documentation.

Step 3: Exclude what you can prove

Google Ads supports excluding IP addresses, with a limit of 500 addresses or ranges per campaign. That's more than enough to remove an identified office network, and it's the right tool for a persistent, static-IP offender. Apply it with two eyes open. First, precision: block the addresses you have evidence for, not whole regions of shared infrastructure, because one IP rarely equals one person. Second, reach: manual IP lists can't follow the offender home, onto mobile data, or behind a VPN. Rotating residential proxies defeat static lists entirely. IP exclusions stop the lazy competitor. They inconvenience the determined one.

Step 4: Shrink the attack surface with targeting

Every targeting setting that tightens who can see your ads reduces what a hostile clicker can reach:

• Location options: target "Presence" rather than "Presence or interest," so people merely searching about your area don't trigger ads.
• Ad scheduling: if the hostile clicks cluster at known hours, bid down or pause those windows while you gather evidence.
• Negative keywords: cut the low-intent queries where junk clicks concentrate.
• Exclusion lists: apply your IP and placement exclusions account-wide through shared exclusion lists so a new campaign never launches unprotected.

None of this is fraud-specific. It's just good account hygiene that happens to starve bad actors of opportunities.

Step 5: Report it to Google and claim your credits

Google filters obvious invalid clicks automatically and credits them before billing. For what slipped through, request a review, generally within 60 days of the suspicious traffic, through the invalid traffic guidance and its invalid clicks contact form. Approved claims arrive as account credits, not cash. Your Step 2 evidence file is what separates an approved claim from a form rejection; the full process, including what reviewers look for, is in our invalid click credits guide. Set expectations accordingly: credits recover some past damage. They don't stop tomorrow's clicks; that's what Steps 3, 4, and 7 are for.

Step 6: Keep the legal option in its lane

Can you sue? Sometimes. Should you? The track record urges caution: civil cases against small-scale competitor clicking have repeatedly failed on attribution (proving who clicked) and damages (proving quantifiable loss). We walk through the real cases, including a $2.3M jury verdict destroyed on appeal, in is click fraud illegal?. The practical posture: build the evidence file as if you'll need it in court, treat legal action as the last resort for large, provable, persistent damage, and let a demand letter do the work a lawsuit usually can't justify.

Step 7: Automate the detection and the blocking

Everything above is manual: you notice, you investigate, you block, you re-notice next month. The structural fix is protection that watches every click in real time, scoring behavior, fingerprinting devices so offenders are recognized even when their IP changes, and pushing exclusions to your campaigns automatically the moment a source crosses the threshold. That closes the two gaps manual defense always leaves: speed (blocking happens before the tenth click, not after the hundredth) and memory (the offender who returns on a new IP is still the same device). This is exactly what ClickFortify's real-time blocking and evidence trail were built for. See how ClickFortify works, and run your suspected waste through the ad fraud calculator to size the problem first.

What NOT to Do

Four tempting responses that make things worse:

• Don't click their ads back. You'd be committing the thing you're documenting, handing them the same evidence you're collecting, and risking your own account standing.
• Don't blanket-block regions you actually serve. Punishing a whole city to stop one office throws away real customers; surgical beats sweeping.
• Don't pause everything in a panic. Going dark hands the auction to the exact rival you suspect; tighten instead of retreating.
• Don't accuse anyone publicly without proof. Attribution is genuinely hard; a public accusation you can't back becomes their legal claim against you.

Competitor Clicks vs. Brand Bidding: Different Problem, Different Fix

Advertisers often discover both at once and conflate them. A competitor bidding on your brand name is legal, and Google policy explicitly allows it. The responses there are trademark rules on ad text, brand campaigns, and auction pressure, covered in competitors bidding on your brand name. A competitor clicking your ads is invalid activity you can document, block, and claim credits for. Mixing them up leads to firing the wrong response at each. The two do compound, though: brand-term CPCs inflated by a bidding war make every fraudulent click on those terms more expensive, which is one more reason traffic quality and brand defense belong in the same weekly review.

When It Isn't a Competitor After All

A final calibration point, because honest diagnosis beats satisfying blame: in mixed real-world accounts, a large share of "my competitor is clicking my ads" cases turn out to be automated traffic: bot farms, scrapers, and AI agents that hit high-CPC keywords for their own reasons and leave competitor-shaped fingerprints. The good news: the response plan is the same. Evidence, exclusions, tighter targeting, credit claims, and automated blocking work identically whether the clicker is a rival's intern or a botnet. The only step that changes is whether there's anyone to send the demand letter to.

The Bottom Line

Competitors clicking your ads is real, common enough that Google built refund machinery for it, and impossible to prevent outright, but entirely possible to neutralize. Confirm the pattern before acting. Document as you go. Block what you can prove, tighten what you can control, claim what you're owed, and keep lawyers for the rare case that earns them. Then automate the whole loop, because the difference between a competitor who keeps clicking and one who gives up is simple: whether it still works. Make it stop working.