The challenge
A regional IT company with $10M in revenue was running Google Ads with no cost limits set on the account. Nobody knew they were under attack. Over 21 days a click farm hit 29 of their campaigns, cycling 5,407 IP addresses and 52,405 different user agents. 110,000 of 150,000 clicks in the period were fraudulent, at $35 a click.
What we did
ADvocate blocked the volumetric attack at the edge — 113,000 fraudulent clicks — and exported the blocked-click data so the company could claim the click credits back from Google.
The results
- 113,000 fraudulent clicks blocked at $35 CPC — $3.9M in fraud prevented
- 110K of 150K clicks were fraudulent; recovered at about $3 each
- $300K saved (the figure on our site); 3X ROAS; 73% bots
- Ad-fraud savings paid for the whole Cloudflare Enterprise licence in the first month — on track for more than 12X ROI
- Result PAYG → Cloudflare Enterprise 3-year deal after the proof of value
- They discovered afterwards they had no cost limits on Google Ads — crisis averted
What they told us
Nobody knew there were attacks. 110,000 of 150,000 clicks were fraudulent — blocked, and the data exported to get the click credits back. We can't trust Google not to send us bots; we need someone watching and protecting our ad spend.
Edward Mendoza, Sr. Director of IT — TeamLogic IT
The numbers
- fraud clicks blocked
- 113,000
- fraud prevented
- $3.9M
- defended spend, all-time
- $3,832,723
- annual ad budget
- $3.8M
- revenue
- $10M
- ROAS
- 3X
- bots
- 73%
- clicks blocked (sheet)
- 110K of 150K
- savings (sheet)
- $300K
- attack duration
- 21 days
- campaigns attacked
- 29
- IPs cycled
- 5,407
- user agents cycled
- 52,405
- CPC
- $35
- baseline paid clicks
- 20–30 a day
- attack start
- 5 September 2025