All articles

How to Stop Google Ads and Performance Max Spam Leads (2026)

Published Updated By GoodInbound team

Why Google Ads and Performance Max send spam leads, how fake conversions train Smart Bidding, and the settings, form checks, and conversion fixes that stop them.

Google Ads spam leads are fake form fills that come from your campaigns: bots and click farms that click your ads on Display, Search Partner, and Performance Max placements, then submit your form. They get worse over time because each one is counted as a conversion, and Smart Bidding learns to buy more of the traffic that produced it. To stop them, cut the placements that send bots, check every form fill before it counts, and only report real leads to Google Ads.

If you're dealing with Google Ads spam leads at volume, GoodInbound Lead Screen is a drop-in fix on the landing page you already run. It screens how every visitor fills in your form and stops automated list bombing, spam, and non-buyers sending unsolicited pitches from cluttering your pipeline, with five layers of protection:

  • Rules: domains you always accept or always block.
  • Behavior: how the form was filled in: typing, pasting, fill time, automation tells, and a built-in honeypot.
  • Network: data centers, VPNs, proxies, Tor, and bursts from one IP or device.
  • Identity: whether the email has a working inbox and isn't disposable or gibberish, and whether the phone number is real.
  • Message: the whole submission read for intent, so sales pitches, recruiters, and link offers are caught.

Every submission is classified into five types (lead, review, spam, junk, and bot), and only the real leads, based on your filters, are reported to Google Ads. GoodInbound takes care of the entire flow end to end for you.

Use GoodInbound for free for up to 500 screened submissions a month.

Why Google Ads and Performance Max generate spam leads

Spam leads come from placements where bots click ads, not from Google Search itself. Search ads only show to people searching Google, so most of that traffic is real. The trouble starts when your ads also run on the Google Display Network and Search Partner sites, which happens when you use Display campaigns, Performance Max, or a Search campaign with those networks left on.

Some sites on those networks exist only to earn ad revenue. Their owners send bots to click the ads, and they get a share of what you pay. To look like real visitors and avoid detection, the bots sometimes go one step further and submit a form after the click. That's conversion fraud, and the spam lead is the most common kind because it costs the fraudster nothing.

Performance Max is the campaign type most associated with spam leads because it spreads one budget across Search (including Search Partners), Display, YouTube, Discover, Gmail, and Maps, and Google decides where each impression goes. Accidental taps on in-app ads add to the junk: one tap in a mobile game counts as a click, and Google may read it as interest and show the ad there more.

The signs that your Google Ads leads are spam:

  • Form fills with fake names, gibberish, or the same generic message ("I'm interested, send more info")
  • Submissions at odd hours, in bursts, or from countries you don't target
  • High conversions from unfamiliar sites in the Where ads showed report
  • Leads that never answer, phone numbers that don't connect, emails that bounce
  • More conversions in Google Ads but no more sales

Two quick checks narrow down the source. First, look for the gclid on each suspicious lead: with auto-tagging on, a visit without one didn't come from your ad, so those submissions are form bots crawling your site, not ad fraud, and campaign settings won't fix them. Second, check for old Smart campaigns still running; they're a phased-out campaign type that serves Display ads with little visibility, and they're a common source of form spam in small accounts. Pause them and move the budget to Search.

Fake leads from people (click farm workers, competitors, freebie hunters) behave the same way and need the same fixes. Our guide to fake leads covers the Meta side too, and how to identify fake leads has the full checklist of signs.

How spam leads train Smart Bidding to buy more spam

Smart Bidding finds more of whatever you report as a conversion. If your conversion tag fires every time the form is submitted, a bot's submission looks exactly like a customer's. Google sees cheap conversions coming from a placement, shifts budget toward it, and the placement sends more bots. Your cost per lead falls, your reported conversions rise, and your sales team gets nothing.

This loop is why spam leads can appear suddenly and grow week by week, and why blocking a few IP addresses rarely ends it. Click fraud protection shows which ad visits turn into real leads and which turn into junk, campaign by campaign. Breaking the loop means changing what counts as a conversion, which is covered in the last section. GoodInbound Lead Screen breaks it at the form: bots and fake leads are labeled before the conversion fires, so Google never learns from them.

These seven settings reduce the traffic that produces spam, starting with the ones that matter most.

1. Turn off Search Partners and the Display Network in Search campaigns

Open the campaign, go to Settings → Networks, and untick Include Google search partners and Include Google Display Network. Your ads then show only on Google Search. If spam started after you launched a campaign with these networks on, this alone often ends it.

2. Keep ads out of mobile apps with content suitability

At the account level, open the Content suitability settings. Exclude mobile app categories and pick an inventory type: Expanded (all inventory), Standard (the default), or Limited (only the highest-quality placements). Excluding app categories removes a large share of accidental and fraudulent clicks for Display, Video, and Performance Max.

3. Exclude placements and check where your ads showed

Review the Where ads showed report for Display and Performance Max. Add sites and apps that send clicks but no customers to an account-level placement exclusion list; account-level exclusions also apply to Search Partner sites. Content exclusions can block live streams and sensitive content.

4. Add negative keywords and IP exclusions

Check your search terms weekly and add negatives such as "job", "career", "free", and "cheap". Performance Max takes campaign-level negative keyword lists too. For repeat offenders, add IP addresses to exclusions: up to 500 per Search campaign under Settings → IP exclusions, or account-level IP exclusions, which also cover Performance Max. Bots rotate addresses, so treat this as a backstop.

5. Tighten Performance Max

Most accounts can't switch off Display or Search Partners inside Performance Max (Google is piloting checkboxes for some advertisers). You can:

  • Turn off Final URL expansion so traffic only lands on the page you've protected.
  • Turn off automatically created assets that attract job seekers.
  • Add audience signals and search themes based on your real customers.
  • Run Search alongside Performance Max, or test Search alone, if spam keeps coming.

6. Add qualifying questions to Google lead form assets

If you use lead form assets, choose the option for more qualified leads, add a qualifying question, and turn on SMS verification where your account has it. Each step removes accidental and automated submissions before they reach you.

7. Consider Demand Gen instead of Display

Demand Gen campaigns run only on Google-owned properties (YouTube, Gmail, and Discover), which have tighter controls against fraudulent traffic than third-party Display sites.

Which fix to try first

What you see Likely cause Fix first
Spam concentrated in Performance Max or Display; apps in Where ads showed Low-quality placements Content suitability, placement exclusions, Final URL expansion off
Leads from countries you don't serve Location targeting reaches people "interested" in your area Location options: people in or regularly in your locations
Bursts of fast, identical, or same-IP submissions Bots reaching the form Form screening and honeypot (next section)
Real people who aren't a fit Broad keywords or a vague offer Negative keywords and a qualifying question
Conversions rising, sales flat Conversion action too easy to trigger Secondary actions and offline conversions (last section)

Landing page safeguards: honeypots, CAPTCHA, and screening

Settings reduce bad clicks. The form is where you stop the rest from becoming conversions.

Add a honeypot and a timer

A honeypot is a field people can't see and bots fill in. Pair it with a timer, since no person reads a form and types real details in two or three seconds:

HTML
1<div style="position:absolute;left:-9999px" aria-hidden="true">
2 <label for="company_site">Leave this empty</label>
3 <input type="text" id="company_site" name="company_site" tabindex="-1" autocomplete="off">
4</div>

Fire the conversion only after the checks pass

Don't let the thank-you page fire your Google Ads conversion. Push a custom event when the form passes, and fire the tag from that event in Google Tag Manager:

JavaScript
1const loadedAt = Date.now();
2form.addEventListener("submit", () => {
3 const trapped = form.querySelector('[name="company_site"]').value !== "";
4 const tooFast = Date.now() - loadedAt < 3000;
5 if (trapped || tooFast) return; // let it submit, but don't report a conversion
6 window.dataLayer = window.dataLayer || [];
7 window.dataLayer.push({ event: "qualified_form_submit" });
8});

In Tag Manager, create a Custom Event trigger for qualified_form_submit and attach your Google Ads conversion tag to it instead of the page view.

Use CAPTCHA with care

reCAPTCHA stops simple bots, but it adds friction for real leads, and modern bots solve or skip it. Click farm workers and competitors pass it by definition. Use it on forms that get hammered, not as your only check. See why reCAPTCHA isn't stopping spam.

Screen every submission

Honeypots and timers catch crude bots. Spam leads that use real browsers, residential IPs, or stolen identities need checks on the data itself: is this email deliverable, is this phone number real and in the right country, did this IP come from a data center, has this gclid already been used for another lead. The email and phone checks are also available on their own through our email validation API and phone validation API.

GoodInbound Lead Screen runs those checks on every submission with one script tag on your landing page:

HTML
1<script src="https://cdn.goodinbound.com/leadscreen.js" data-key="pk_live_your_key" async></script>

It works on plain HTML forms and on HubSpot, Marketo, Webflow, WordPress, and Typeform forms, labels each submission in under a second, and pushes goodinbound_lead to the Tag Manager data layer only when a submission is accepted. Fire your Google Ads conversion tag from a Custom Event trigger on goodinbound_lead, and bots never count as conversions again.

Fix the algorithm: offline conversions and Secondary actions

Blocking spam at the form stops new damage. To retrain Smart Bidding, change what Google optimizes for.

Make the raw form fill a Secondary action

  1. In Google Ads, go to Goals → Summary and open the form-submit conversion action.
  2. Click Edit settings, then Action optimization, and choose Secondary.
  3. Make your screened-lead conversion (the one fired from goodinbound_lead or qualified_form_submit) the Primary action.

Secondary actions still show in your reports but no longer drive bidding. Do the same for other easy conversions bots can trigger, like email and phone clicks.

Upload qualified leads as offline conversions

Offline conversion tracking tells Google which leads became real opportunities:

  1. Capture the gclid from the landing page URL with each form fill. Lead Screen stores it, along with gbraid, wbraid, and UTMs, on every session.
  2. Pass it to your CRM with the lead, through a webhook, Zapier, or Make.
  3. When a lead is qualified or closes, upload it to Google Ads as an offline conversion, using your CRM's Google Ads integration or a scheduled upload.
  4. Bid toward the qualified-lead conversion once you have enough volume.

Google then learns from leads your sales team accepted, which is the strongest signal you can give it. Expect two to four weeks of relearning, with fewer reported conversions while real lead volume holds or grows. Judge the change on qualified leads per dollar, not on the conversion count in Google Ads. To remove spam conversions Google already counted, see Google Ads spam conversions, which covers retractions.

FAQ

Performance Max shows ads across Search Partners, Display, YouTube, Discover, Gmail, and Maps, and you can't switch those channels off. Display and partner sites include placements built to earn ad revenue from bot clicks, and those bots sometimes submit forms. Search campaigns with partners and Display turned off only show on Google Search.

How does Smart Bidding get stuck in a spam loop?

Smart Bidding optimizes toward whatever you report as a conversion. When bot form fills count as conversions, Google sees cheap results from the placements that sent them and spends more there, which brings more bots. Fire conversions only for screened leads, and make raw form fills a Secondary action.

What's the difference between an unqualified lead and a fake lead?

An unqualified lead is a real person who isn't a fit, like a job seeker or someone outside your budget range. A fake lead is a bot, a click farm, or a stolen identity, with no real prospect behind it. GoodInbound Lead Screen labels fake leads bot, spam, or junk; unqualified leads are a targeting and qualification problem.

How do I stop bots without hurting my conversion rate?

Screen in the background instead of adding a puzzle. Honeypots, fill timers, and checks on the network, email, and phone run without the visitor seeing anything. GoodInbound Lead Screen does all of these without a CAPTCHA, so real leads submit the same way they always did.

Can you exclude Display and Search Partners in Performance Max?

Not in most accounts; Google is piloting checkboxes for a limited group of advertisers. Otherwise, use content suitability to exclude mobile apps, account-level placement exclusions (which also cover Search Partner sites), campaign-level negative keywords, and Final URL expansion off, and keep bot submissions from counting as conversions. In Search campaigns you can untick both networks under Settings → Networks.

How does offline conversion tracking stop spam leads?

It changes what Google learns from. You capture the gclid with each form fill, qualify the lead in your CRM, and upload only real opportunities as conversions. Smart Bidding then optimizes toward people who became qualified leads instead of anyone, or anything, that submitted the form.

Switch in 5 minutes

Setup with your agents