Law Firm Click Fraud: Protecting High-CPC Legal Google Ads

Monday morning, your intake team opens the weekend's three "consultations". One number is disconnected, one caller never mentions a case, and one is a real car accident victim. You paid a legal cost per click for all three, so which ones did the money actually buy?

What Legal PPC Click Fraud Costs: CPC vs Case Value

One bad click costs a law firm more than its price. The larger costs are intake hours spent on a fake consultation and a bidding system that learns to buy more of it.

The click price is high to begin with. The 2026 LocaliQ (WordStream) search advertising benchmarks, last updated 1 June 2026, give these figures for Attorneys and Legal Services:

That CPC is the highest of any industry in that benchmark. The next highest, Home and Home Improvement, is $8.33. Personal injury terms are widely reported as the most expensive legal keywords. We could not verify a current personal injury figure today, so we give none.

A legal click is still cheap next to a signed case, especially on contingency fee matters. So the real damage from junk traffic is a paralegal calling a dead number, a consultation no one attends, and Smart Bidding counting that form fill as a win.

Which Practice Areas See the Most Law Firm Click Fraud?

The practice areas with the highest click prices and case values, such as personal injury, mass tort and some criminal defense terms, give rivals and lead resellers the most reason to click. Broad, urgent searches like "accident lawyer near me" also pull in the widest mix of people, real and otherwise.

We reason from incentive here, not from a fraud rate. No independent dataset measures invalid traffic by practice area, and vendor figures are vendor estimates, so we don't cite them. Family and immigration firms are not safe by default: form spam, fake case inquiries and robocall operations care about volume, not case type. Attorney click fraud is a budget problem first, so measure it in your own account before you assume a rate.

In Google's words, invalid traffic "refers to traffic that doesn't represent genuine interest in your business", and "This includes competitors who manually click to increase your spend" (About invalid traffic, Google Ads Help). That covers rival firms, and also the bots and click farms behind most click fraud. Google says "You won't be charged for invalid clicks or impressions" (Invalid clicks, Google Ads Help), which only helps for the clicks it catches. The useful question is how much of your own traffic is invalid, and your intake records answer that. To see what Google already filtered, open Campaigns, click the Columns icon above the data table, search for "Invalid clicks" under "Modify columns for campaigns" and select Apply. For what it misses, your intake records are the better guide.

Map Your Intake Paths: What a Click Tool Can and Can't See

A legal ad can feed seven intake paths, and a landing-page click tool sees only those that pass through your website. The map shows where protection helps and where intake and measurement must do the work.

Two facts shape the map. Google's About call assets page says clicks on call assets "cost the same as headline clicks", and a call tap dials your number without loading your site. Local Services Ads bill per lead: Google says you "only pay when a customer gets in touch from your ad" (Getting started with Local Services Ads, United States). Lead form assets collect the submission inside the ad itself.

This table is our own summary of how each path works, built from the Google pages cited in this post.

Count how much of your volume sits in the "No" rows. For many firms running personal injury Google Ads, that share is large, and no click tool changes it.

Fake Consultations and Intake Form Spam: What Your Intake Team Sees

Your intake team sees fake legal leads before marketing does. The signs are plain enough to log without software:

• Real-looking names with dead numbers. The name passes. The phone is disconnected.
• Messages that never describe a matter. No incident, no dates, no question about a case.
• The same text across submissions. Identical wording, often minutes apart.
• Odd hours and wrong places. Submissions overnight from outside the states where the firm practices.
• Chat widgets used by bots. Scripted openers and links, no reply to follow-ups.

None of these proves fraud alone, since real people in crisis mistype numbers. What matters is the pattern and its cost: attorney and intake hours, plus a bidding signal that rewards the source.

Hypothetical example, not real data. A "car accident lawyer" ad is clicked at an odd hour. The landing page loads, and the form is submitted a few seconds later. The name looks real, the phone number is unreachable, the message never describes an accident, and the location is outside the firm's state. Here is what each layer sees:

The fix that ties these together is a disposition field on every inquiry in your legal CRM or intake software.

Hypothetical example, not client data. Invented placeholder values:

Other useful values are "Outside practice area" and "Signed". In-ad form spam has its own fixes, covered in Google Ads lead form spam, and the signals behind automated submissions are explained in our bot detection glossary entry.

Intake scripts and follow-up calls must also fit your state bar's rules on solicitation, so check your scripts against them. This is not legal advice. Ask your own counsel or your state bar about your situation.

Bought Leads and Lead Sellers: When the Traffic Isn't Yours

Bought leads and pay-per-call leads come from traffic you never see. The seller runs the ads, forms and calls, so no click tool on your site can tell how those leads were made or how often they were sold. Judge them on results:

• Ask the seller in writing where each lead came from and how recent it is.
• Track bought leads as their own source in your CRM, never merged with your ad leads.
• Compare signed-case rates between bought leads and your own ads over the same period.

If bought leads sign far less often, the problem is the seller, not your campaigns.

Paying for leads also falls under lawyer advertising rules: ABA Model Rule 7.2 and your state's versions of Model Rules 7.1 to 7.3. Check any lead purchase arrangement with bar counsel before you sign it.

Is a Rival Law Firm Clicking Your Ads? Evidence First, Then Options

Lawyer click fraud by a rival firm leaves a pattern: repeat clicks from one area during business hours, often on your highest-value terms, with no consultation at the end. One click is not proof.

Google won't settle the question for you. It says "an investigation won't be able to confirm if specific clicks were marked as valid or invalid" (About invalid traffic, Google Ads Help). Gather your dates and the pattern first, using our guide on how to stop competitors clicking your ads.

Your options, in order:

1. Report it to Google. Google specialists "evaluate your traffic from the last 60 days" when you submit the Click Quality Form linked from the same page.
2. Speak to your own counsel. Lawsuits over competitor clicking exist but rarely recover money. We cover the real cases in is click fraud illegal.

Bar complaints are a question for your counsel, not for us. This is not legal advice.

Does Google Verify Law Firms Before They Advertise?

Google does not verify law firms before they run Search ads; lawyer screening applies only to Local Services Ads and the Google Verified badge. As of 22 October 2026, we found no legal-services verification policy for Google Search ads. Google's bail bonds policy page says "Advertising for legal services or legal representation will not be affected."

Lawyer screening belongs to Local Services Ads. Google's About Google Verified badge page says "New advertisers will need to successfully complete the Local Services screening and verification process in order to get the Google Verified badge." For professional categories, the Local Services Ads getting started page lists "License, or business registration, if you're not required to submit your license (in the US)". Its lawyer categories include personal injury, criminal, family, immigration, DUI and bankruptcy, and pre-badge ads can deliver leads before onboarding finishes. Google's screening for lawyer categories is described on its Local Services help pages, and we add nothing those pages don't state.

Local Services Ads leads are billed per lead and sit outside click protection, because they never touch your website. Check the lead credit rules in your account.

Import Signed Cases, Not Form Fills

The most reliable fix for fake consultations is to import signed cases or booked consultations into Google Ads instead of raw form fills. Send the intake stages junk cannot reach, and bidding stops chasing junk.

Google's GCLID offline conversions page says "Offline conversion import lets you see what happens in the offline world after someone clicks your ads." Steps from the CRM side:

1. Capture the click ID on every web form. Store the GCLID with the inquiry, or use enhanced conversions for leads, which Google calls "an upgraded version of offline conversion import".
2. Record a disposition for every inquiry, as in the intake log above.
3. Create offline conversion actions for "Consult booked" and "Signed case". The GCLID page starts this from "Summary within the Goals menu". It gives no upload menu path, so use the upload option your account shows.
4. Upload on time. Google's guidelines for importing offline conversions say conversions "uploaded more than 90 days after the associated last click won't be imported into Google Ads". For enhanced conversions for leads, the same page sets the limit at 63 days.
5. Set the primary goal to the stage junk cannot reach, and keep raw form submissions as secondary.

Primary actions matter because Google says they are "reported in the 'Conversions' column in your reports and used for bidding" (About primary and secondary conversion actions, Google Ads Help). Secondary actions are used for reporting, not bidding, except inside a custom goal.

Our verdict: for most firms, "consult booked" or "qualified consult" is the better primary goal, with signed cases sent as a value signal. Signed cases are the cleanest signal, but they are few and slow, and bidding needs volume. The verdict is wrong for a high-volume personal injury firm that signs enough cases to feed bidding directly. See enhanced conversions for leads and fake leads for setup.

Where ClickFortify Fits for a Law Firm

ClickFortify cannot see calls placed from the ad, Local Services Ads leads, or in-ad lead form submissions. Nor can it see how a lead seller made its leads. For many personal injury firms that is a large share of volume.

On the landing-page path, it works on Google Ads and Meta. It scores every click to your site on 200+ signals in under 50ms. In Google Ads, it excludes invalid IPs automatically, at the IP level. It sends fraud-filtered conversions to Smart Bidding and the Meta Conversions API. On Meta, there is no IP blocking.

No reliable public data shows how much legal traffic is invalid, so judge your exposure from your intake dispositions, not an industry percentage.

Our verdict: ClickFortify is worth it for a firm whose spend runs mainly through Google Search ads to its own site and forms. It is not worth it yet for a firm whose leads come mostly from Local Services Ads, call asset taps or bought leads, which should fix dispositions and imports first. See ClickFortify pricing.