All articles

How to Stop Fake Leads From Facebook and Google Ads (2026)

Published Updated By GoodInbound team

Fake leads are form fills from bots, click farms, and people with no intent. How to stop them from Facebook and Google ads, and stop them training your bidding.

Fake leads are form submissions from bots, click farms, and people who never meant to buy: made-up names, numbers that don't connect, emails that bounce, and messages that are really sales pitches. To stop fake leads from Facebook and Google ads, cut the placements that send junk, screen every submission before it reaches your CRM, and report only real leads back to Google and Meta as conversions.

If you're dealing with fake leads from your ads at volume, GoodInbound Lead Screen is a drop-in fix. It screens how every visitor fills in your form and stops automated list bombing, spam, and non-buyers sending unsolicited pitches from cluttering your pipeline, with five layers of protection:

  • Rules: domains you always accept or always block.
  • Behavior: how the form was filled in: typing, pasting, fill time, automation tells, and a built-in honeypot.
  • Network: data centers, VPNs, proxies, Tor, and bursts from one IP or device.
  • Identity: whether the email has a working inbox and isn't disposable or gibberish, and whether the phone number is real.
  • Message: the whole submission read for intent, so sales pitches, recruiters, and link offers are caught.

Every submission is classified into five types (lead, review, spam, junk, and bot), and only the real leads, based on your filters, are reported to Meta, TikTok, and Google Ads. GoodInbound takes care of the entire flow end to end for you.

Use GoodInbound for free for up to 500 screened submissions a month.

What are fake leads?

A fake lead is a form submission that doesn't come from a real person with a real interest in what you sell. It looks like a lead in your CRM, often with every field filled in, but nobody on the other end is going to buy.

Fake leads come in four kinds:

  1. Bot submissions. Scripts and automated browsers fill in forms with generated or scraped details. Some are crude (random strings, test@test.com); newer ones type at human speed, use real-looking names, and come from residential IP addresses.
  2. Click farm and incentivized fills. Real people paid to click ads and complete forms, or people filling in forms to get something unrelated, like a reward on another site.
  3. Stolen or made-up identities. Real names and phone numbers taken from data breaches, or a real person's details entered by someone else. These pass basic validation because the data exists.
  4. Junk from real people. Sales pitches, link-building offers, job seekers, and people who tapped "submit" on a prefilled form without reading it.

Fake leads vs. unqualified leads

An unqualified lead is a real person who isn't a fit: wrong budget, wrong location, wrong size, or just early. A fake lead isn't a real prospect at all. The difference decides the fix:

Fake lead Unqualified lead
Who it is A bot, a farm, a stolen identity, or a pitch A real person who isn't a fit
Contact details Often invalid, disposable, or belonging to someone else Real and reachable
Fix Screen it out before it counts Better targeting, form questions, and qualification
Should it count as a conversion? Never Usually not as a primary one

Most junk-lead complaints are a mix of both.

Why Facebook ads and Google Ads send fake leads

Facebook and Google ads attract fake leads because the platforms optimize for whatever you tell them is a conversion, and a fake form fill looks exactly like a real one unless you say otherwise. Four things make it worse:

  1. Bidding optimizes for volume. Smart Bidding on Google and Advantage+ and lowest-cost bidding on Meta look for the cheapest conversions. If bots and low-intent users convert cheaply, the system finds more of them.
  2. Broad reach includes low-quality inventory. Google's Display Network and search partners, Performance Max, and Meta's Audience Network place ads on apps and sites where accidental taps and fraudulent clicks are common. (More on that in our guide to Meta Audience Network.)
  3. Native lead forms make submitting too easy. Meta Instant Forms and Google lead form assets prefill contact details from the user's profile. One tap submits, so people send forms they didn't mean to, and bots have less to get wrong.
  4. Someone gets paid per lead. Lead sellers, affiliates, and publishers paid per form fill have every reason to inflate the count. Competitors sometimes submit forms just to waste your sales team's time.

Google and Meta credit some invalid clicks, but neither checks whether the form fill after the click is real. Our guide to ad fraud covers what each refunds, and Google Ads spam leads goes deeper on Performance Max. Spam leads separates bots, fake details, and pitches.

How to stop fake leads from Facebook and Google Ads: 6 settings

Fewer bad clicks means fewer fake leads. These six settings cut junk traffic on both platforms without touching your form.

1. Cut the placements that send junk

  • Google Ads: in Search campaigns, under Networks, untick Google search partners and Google Display Network. In Display and Performance Max, add account-level placement exclusions for apps and sites that send clicks but no customers.
  • Meta Ads: switch from Advantage+ placements to Manual placements and untick Audience Network, the placement most often linked to fake and accidental leads.

Compare lead quality after two weeks, not just volume.

2. Target where your buyers actually are

  • Google Ads: under Locations → Location options, choose Presence: People in or regularly in your included locations. The default also reaches people who only show interest in those places.
  • Meta Ads: exclude countries you don't serve, and check Breakdown → Placement and Region in Ads Manager to see where junk leads come from.

3. Exclude junk searches and repeat offenders

Check the Google Ads search terms report weekly and add negative keywords like "free", "jobs", "salary", "template", and "DIY". Each campaign also takes up to 500 IP exclusions under Settings → IP exclusions, useful for repeat offenders even though bots rotate IPs.

4. Make native lead forms harder to submit by accident

  • Google lead form assets: choose More qualified, which adds a confirmation step before submitting.
  • Meta Instant Forms: choose the Higher intent form type, which adds a review screen, and turn on work email validation for B2B forms.

5. Add a question a bot can't answer well

A short-answer question ("What do you need help with?") or a multiple-choice qualifier slows bots down and filters out people who tapped by mistake. It works on your landing page, Instant Forms, and lead form assets alike.

6. Optimize for qualified leads, not form fills

Meta's conversion leads performance goal optimizes for people who become qualified leads in your CRM. Google Ads does the same when you bid on a qualified-lead conversion instead of raw form submits. Both need clean conversion data, which the next two sections set up.

Settings like these cut the obvious junk. They won't stop a bot from submitting your landing page form, a stolen identity from passing your field checks, or a pitch from a real person. That needs a check on the submission itself.

How to verify leads before they reach your CRM

Verify every lead at the moment it's submitted, before it creates a contact, alerts your sales team, or fires a conversion. A verified lead passes checks on four things: how the form was filled in, where it came from, who it says it is, and what it says. GoodInbound Lead Screen runs all four in under a second and labels the submission with the reason.

The signals that give fake leads away

Signal What a fake lead looks like
Fill behavior Fields filled in under a second, pasted values, no mouse or keyboard activity, instant submits
Network Data center IPs, VPNs, proxies, Tor; an IP country that doesn't match the phone or the ad's targeting
Ad click A click ID reused across many submissions, or many submissions from one IP in a short window
Email Disposable domains, addresses that don't accept mail, random strings, role addresses like info@ on B2B forms
Phone Invalid numbers, numbers in the wrong country, VoIP and burner lines, repeated digits
Message Sales pitches, SEO and link offers, gibberish, copy-pasted text across submissions
Duplicates The same person, email, or phone submitting again and again

You can check some of these by hand. Our free fake email checker and phone number validator handle one lead at a time. At ad volume, it has to be automatic, which is what fake lead detection software does; that guide compares the main tools.

Why CAPTCHA and honeypots aren't enough

reCAPTCHA and honeypots only ask whether a bot filled in the form. Modern bots get past both, and click farms, stolen identities, and pitches come from real people who pass by definition. See why reCAPTCHA isn't stopping spam.

Set up screening on your landing page

With GoodInbound Lead Screen, screening takes one script tag:

  1. Create a project and copy your public key from Settings → Lead Screen.

  2. Add the script to every landing page with a form, before </body>:

    HTML
    1<script src="https://cdn.goodinbound.com/leadscreen.js" data-key="pk_live_your_key" async></script>

    Where to paste it: in Webflow, Site settings → Custom code → Footer code; in WordPress, your theme's footer or a header-and-footer plugin; in Unbounce, Javascripts with placement Before Body End Tag; anywhere else, a Custom HTML tag in Google Tag Manager firing on all pages. It works on plain HTML forms and on HubSpot, Marketo, Webflow, WordPress, and Typeform forms.

  3. Choose what happens to each label. Leads go through. spam, junk, and bot can be blocked at the form or let through and kept out of your CRM and ad reporting. review waits in your inbox for a decision.

  4. Send leads where they need to go. Real leads go to Slack, email, a webhook, Zapier, or Make, and on to your CRM. The script also writes the label into hidden fields (gi_label, gi_reason) so your form tool can store it with the submission.

Each submission is screened in under a second, so the form doesn't feel slower.

Fake leads usually land in a CRM. For step-by-step fixes there, see how to stop HubSpot spam form submissions and how to stop Salesforce Web-to-Lead spam. For the full list of red flags, see how to identify fake leads.

If you use Facebook Instant Forms or Google lead form assets

Instant Forms and lead form assets run inside Facebook and Google, so no script on your site can watch them being filled in. You can still screen them: send each new lead to GoodInbound through Zapier or Make, and it's labeled on its email, phone, and message before it reaches your CRM. Behavior and network checks need the form on your own page, which is one reason many advertisers send ad traffic to a landing page form instead.

Stop sending fake leads back to the ad algorithm

Fake leads cost you twice: once in the ad spend that bought them, and again when they're counted as conversions and your bidding learns to find more people like them. To break the loop, report only real leads to Google and Meta.

  1. Stop firing the conversion on form submit. A pixel that fires on the thank-you page counts every fill, bots included. Move the conversion to an event that only fires for accepted leads. Google Ads spam conversions walks through the Tag Manager setup and how to retract spam already counted.
  2. Fire conversions from the screening result.
    • Meta: in GoodInbound, open Settings → Integrations → Meta Conversions API and paste your Pixel ID and a Conversions API access token from Events Manager. Accepted leads are sent as Lead events with hashed email and phone, the click ID, and the same event ID your pixel uses, so Meta counts each lead once. TikTok works the same way.
    • Google Ads: the script pushes a goodinbound_lead event to Google Tag Manager whenever a lead is accepted. In GTM, create a Custom Event trigger named goodinbound_lead and fire your Google Ads conversion tag from it instead of the thank-you page view.
  3. Demote the raw form fill. In Google Ads, set any "form submit" conversion action to Secondary so it's reported but not used for bidding, and keep the qualified-lead action as Primary.
  4. Send lead quality back over time. Upload qualified and won leads to Google Ads as offline conversions, and send lead stages to Meta through the Conversions API, so both platforms learn which leads turn into customers.
  5. Give it two to four weeks. Bidding needs time to relearn. Expect fewer reported conversions and a higher cost per lead at first, while the cost per real lead drops.

In the US, the Telephone Consumer Protection Act (TCPA) sets damages of $500 per unwanted call or text, and up to $1,500 if it's willful. A form filled in with someone else's phone number is not consent from that person, so dialing stolen identities can bring claims from people who never filled in the form.

GoodInbound Lead Screen checks every phone number at submit time (is it real, does it match the region, is it a VoIP line) and keeps a record of how each lead was screened, which gives your team a reason to slow down before dialing. If you buy leads from third parties, consent certificates like TrustedForm are the standard way to prove a lead was really submitted.

For forms outside your ad campaigns, see contact form spam and stopping sales pitches. If click fraud is the bigger worry, see click fraud protection.

FAQ

What is the difference between a fake lead and an unqualified lead?

A fake lead isn't a real prospect: it's a bot, a click farm, a stolen identity, or a sales pitch. An unqualified lead is a real person who isn't a fit for what you sell. Fake leads should be screened out before they count; unqualified leads are a targeting and qualification problem. Screening keeps them apart: GoodInbound Lead Screen labels a fake lead spam, junk, or bot, and a real one lead, whether or not it's a good fit.

Why am I getting fake leads on Facebook?

Meta optimizes for the leads you report, and Instant Forms prefill contact details, so one accidental tap submits a form. Audience Network placements add bot and fraudulent fills. If every submission counts as a conversion, delivery finds more of the same.

How do I avoid fake leads on Facebook?

Remove Audience Network, use the Higher intent Instant Form type, add a qualifying question, and turn on work email validation for B2B. Then screen each lead with GoodInbound Lead Screen, which checks the email, phone, and message before it reaches your CRM and sends only accepted leads back to Meta through the Conversions API.

Are Facebook leads fake?

Some are, not most. Accidental submissions from prefilled Instant Forms and fraudulent fills from Audience Network are the usual sources. The fixes above cut both.

Why does Google Ads send fake leads?

Broad settings: search partners, the Display Network, Performance Max placements, and location targeting that includes people only "interested" in your area. Smart Bidding then optimizes toward whatever converts cheaply, bots included, if every form fill counts as a conversion.

How can I prevent fake form fills without hurting conversion rates?

Screen submissions in the background instead of adding friction. GoodInbound Lead Screen runs behavior, network, email, and phone checks without the visitor seeing anything, so real leads aren't asked to solve a CAPTCHA or confirm a code. Save extra steps like phone verification for the submissions that look suspicious.

Does reporting fake leads as conversions make ad spend worse?

Yes. Google's Smart Bidding and Meta's delivery system learn from the conversions you report. Fake leads counted as conversions teach them to find more people who behave like bots and junk submitters. Fire conversions only for leads that pass screening (GoodInbound Lead Screen does this for Meta, TikTok, and Google Ads), and send qualified and won leads back as offline conversions.

How do I set up offline conversion tracking to stop spam leads?

Capture the Google click ID (gclid) or Meta click ID (fbclid) with each form fill, screen the lead, and only send accepted leads to the platforms: Google Ads through offline conversion uploads or a Tag Manager event, and Meta through the Conversions API. Lead Screen stores click IDs with every session and sends accepted leads for you.

Can a click fraud tool stop fake leads?

Partly. Click fraud tools block repeat clicks and known bad IPs before they reach your site, which reduces junk traffic. They don't look at what's submitted, so stolen identities, click farm fills, and sales pitches still get through. You need a check on the form submission as well, which is why GoodInbound Lead Screen records ad visits and flags repeat clicks but also screens every form fill.

Switch in 5 minutes

Setup with your agents