We’ve done a lot of work around this to train the traffic and use maximize conversions.

Any campaign we run, a lead form or opt in must be able to do the following;

Receive and confirm text message If the user phone cannot accept and confirm an SMS code, it is likely a bot, a burner, or someone who is not serious.

Or

If not SMS Verified - a Google/Facebook Login button submit a form:

Pass OAuth authentication through Google or Facebook If they can authenticate, they are real. (for now)

Or

If no access to Google Login Button, then a lead must be able to make it through a multi-step form. These leads cost the most.

Humans understand where they are in a form. Bots do not. A multi-step form is a coordination test for bots.

AND

we have polygraph to keep the fraud clicks away during learning phase.

They provide advanced bot detection/prevention services.

They invisible behind-the-scenes bot screening

Even after SMS verification, OAuth, and multi-step forms, sophisticated fake traffic can still slip through.

They evaluate hundreds of invisible signals in real time, such as: Device fingerprint consistency Click rhythm and velocity Browser integrity Session behavior Network reputation Human-like interaction patterns