Invalid Traffic (IVT)

Definition

Invalid Traffic (IVT) is any ad traffic — impressions, clicks, or other interactions — that doesn’t come from genuine human interest. It covers everything from harmless automated bots and search-engine crawlers to deliberate, malicious fraud designed to steal ad budgets. The umbrella term matters because not all invalid traffic is fraud: a legitimate crawler indexing a page generates invalid traffic without any bad intent, while a botnet faking millions of impressions is invalid traffic and fraud. IVT is the broad category; ad fraud is its malicious subset.

The Media Rating Council (MRC) splits IVT into two tiers, and the distinction is central to how the industry fights it. General Invalid Traffic (GIVT) is the easy kind — known bots, crawlers, and data-center traffic that can be filtered with published lists and simple rules. Sophisticated Invalid Traffic (SIVT) is the hard kind — deliberately deceptive traffic that mimics human behavior, using hijacked devices, botnets, domain spoofing, and other techniques that require advanced detection to catch.

Disambiguation: IVT is the widest term, and its neighbors are narrower or different. Ad fraud is the malicious portion of IVT — invalid traffic created deliberately to defraud advertisers. GIVT vs. SIVT divides IVT by sophistication (easily filtered vs. deceptive). And IVT is distinct from Made for Advertising (MFA): MFA sites often have real human visitors (the problem is low quality and arbitrage), whereas IVT is fundamentally about non-human or invalid traffic. The two overlap — MFA sites frequently carry some IVT — but they name different problems. IVT is also separate from viewability: a bot can generate a technically viewable impression, so an ad can pass viewability and still be invalid traffic.

See also: Made for Advertising (MFA) · ads.txt · Viewability · Brand Safety

Why it matters for marketing

IVT is a direct drain on advertising budgets: every impression or click served to a bot is money spent reaching no one. Beyond the wasted spend, IVT corrupts the data marketers rely on — inflating impression and click counts, distorting conversion and engagement metrics, and making campaigns look like they’re performing when they’re feeding fraud. Undetected IVT doesn’t just cost money; it makes every downstream decision based on that data unreliable.

For marketers, the practical work is detection and filtering. Verification vendors and platforms filter known GIVT automatically, but SIVT requires ongoing, sophisticated detection because fraudsters constantly adapt. IVT connects to the broader supply-chain integrity effort: ads.txt and sellers.json help close the domain-spoofing attacks that produce some SIVT, and buying through clean, transparent supply paths reduces exposure. IVT also overlaps with MFA and low-quality inventory, so tackling it is part of the same quality push that includes viewability and brand safety. The honest reality: IVT can’t be eliminated, only continuously suppressed, because it’s an adversarial problem where the fraudsters keep innovating.

How it works

IVT spans a spectrum from benign to malicious, and detection differs across it:

• General Invalid Traffic (GIVT). Non-human traffic that’s identifiable through routine means — declared bots, spiders, crawlers, and data-center traffic matched against known IP lists and the IAB/ABC International Spiders & Bots List. It’s filtered automatically and relatively easily.
• Sophisticated Invalid Traffic (SIVT). Deliberately deceptive traffic engineered to look human: hijacked residential devices, botnets simulating browsing, domain-spoofed inventory, click injection, and hidden or stacked ads. Detecting it requires behavioral analysis, machine learning, and continuous investigation.
• Detection and filtering. Verification vendors accredited by the MRC measure and filter IVT, both pre-bid (blocking suspicious impressions before buying) and post-campaign (identifying IVT that got through, for makegoods and refunds).
• The adversarial loop. Because fraud is a business for the perpetrators, SIVT techniques evolve constantly, so detection is an ongoing arms race rather than a solved problem.

How to utilize IVT awareness

• Filter pre-bid and audit post-campaign. Block known IVT before buying, and audit campaigns afterward to catch what slipped through and recover spend.
• Use accredited verification. Rely on MRC-accredited measurement vendors rather than self-reported numbers, since fraud detection needs independent rigor.
• Buy through clean supply paths. Transparent, direct paths (supported by ads.txt, sellers.json, and the SupplyChain Object) reduce exposure to the spoofing and reselling that generate SIVT.
• Watch your data for anomalies. Sudden spikes in impressions or clicks with flat conversions, or engagement patterns that don’t look human, are IVT warning signs worth investigating.

Comparison: IVT and related quality problems

Term	Scope	Traffic type	Intent
Invalid Traffic (IVT)	Umbrella term	Non-human / invalid	Ranges benign to malicious
GIVT	Subset of IVT	Known bots, crawlers, data centers	Usually non-malicious
SIVT	Subset of IVT	Deceptive, human-mimicking	Malicious
Ad Fraud	Malicious IVT	Fraudulent	Deliberate deception
MFA	Low-quality sites	Often real humans	Arbitrage, not fake traffic

IVT is the broad category of invalid traffic; GIVT and SIVT split it by sophistication; ad fraud is its malicious core. MFA is a separate quality problem that overlaps but involves real human traffic.

Best practices

• Treat IVT as continuous, not one-time. Fraud adapts constantly, so IVT suppression is ongoing. Set up persistent detection rather than a single audit.
• Address both GIVT and SIVT. Filtering known bots is table stakes; the real budget protection is in catching SIVT, which needs sophisticated, adaptive detection.
• Combine detection with clean supply. Verification plus transparent supply paths (ads.txt, sellers.json, SupplyChain Object) attacks IVT from both the detection and the prevention side.
• Recover spend post-campaign. Post-campaign IVT audits can support makegoods or refunds. Don’t just measure IVT — act on it commercially.
• Don’t confuse IVT with MFA. They need different responses — IVT is a detection-and-filtering problem; MFA is a quality-and-curation problem. Address each appropriately.

Future trends

The IVT arms race is intensifying as generative AI gives fraudsters new tools to make invalid traffic look more human, and as connected environments create new attack surfaces. CTV in particular has become a fraud target — high CPMs and less mature measurement make it attractive to perpetrators — so IVT detection is racing to keep up in streaming and app environments, not just the web.

On the defensive side, machine learning and better cross-industry data sharing are improving SIVT detection, and the supply-chain transparency standards continue to close off spoofing-based fraud. The structural fix the industry keeps returning to is buying through clean, transparent, direct supply — reducing the murky intermediary chains where IVT thrives. IVT will never be fully eliminated, because it’s adversarial and profitable for the bad actors, but the combination of adaptive detection and cleaner supply paths keeps suppressing it. For marketers, the durable takeaway is that some vigilance against invalid traffic is a permanent cost of doing programmatic business.

FAQs

What is invalid traffic? Any ad traffic — impressions, clicks, or interactions — that doesn’t come from genuine human interest. It ranges from harmless bots and crawlers to deliberate, malicious fraud. IVT is the umbrella term; ad fraud is its malicious subset.

What’s the difference between GIVT and SIVT? General Invalid Traffic (GIVT) is easily identified non-human traffic like known bots and crawlers, filtered with published lists. Sophisticated Invalid Traffic (SIVT) is deliberately deceptive traffic that mimics humans and requires advanced detection.

Is all invalid traffic fraud? No. Some IVT is benign — a legitimate search crawler generates invalid traffic without bad intent. Ad fraud is specifically the malicious portion of IVT, created deliberately to defraud advertisers.

How is IVT different from MFA? MFA sites often have real human visitors — the problem is low quality and arbitrage. IVT is about non-human or invalid traffic. They overlap but name different problems and need different responses.

How is invalid traffic detected? Through verification vendors (ideally MRC-accredited) that filter known GIVT with published lists and detect SIVT with behavioral analysis and machine learning, both pre-bid (blocking before buying) and post-campaign (catching what got through).

Why does IVT matter beyond wasted spend? Because it corrupts data — inflating impressions and clicks and distorting conversion and engagement metrics — which makes campaign decisions based on that data unreliable, not just wasteful.

Can invalid traffic be eliminated? No, only suppressed. IVT is adversarial and profitable for fraudsters, who constantly adapt, so detection is an ongoing arms race rather than a problem that gets permanently solved.

How do transparency standards help against IVT? ads.txt, sellers.json, and the SupplyChain Object close off domain spoofing and unauthorized reselling — sources of sophisticated invalid traffic — by making the supply chain auditable.

Related Terms

1. Made for Advertising (MFA)
2. ads.txt
3. Viewability
4. Brand Safety
5. sellers.json
6. Programmatic Advertising
7. Cost Per Mille (CPM)
8. Connected TV (CTV)
9. Supply Path Optimization (SPO)
10. Ad Verification (no dedicated entry yet — internal-link candidate)

---

Sources

• Media Rating Council (MRC) — Invalid Traffic Detection and Filtration Guidelines: https://mediaratingcouncil.org/
• IAB / TAG — Invalid traffic and fraud resources: https://www.tagtoday.net/
• Interactive Advertising Bureau — Ad fraud and IVT: https://www.iab.com/