What is bot traffic on link sites?
Bot traffic on link sites is automated, non-human traffic that makes a website selling link placements look busier than it is. A guest post site might show a buyer an analytics screenshot with 40,000 monthly visitors, when most of those sessions come from scripts hitting the homepage, not people reading articles.
An internet bot is software that runs automated tasks online, usually imitating human activity at a scale no person could match [1]. Plenty of bots are harmless, such as search engine crawlers. The problem for a link buyer is narrower: traffic that is counted in a site's figures, presented as an audience, and used to justify buying a placement on that site.
Traffic matters to buyers because it is one of the few signs that a site has real readers, earns real rankings and is not a link farm built only to sell links. That is exactly why it gets faked.
How do link sites fake their traffic?
Link sites fake traffic in two different ways, and they need different checks. One method creates fake visits. The other creates fake rankings, so third-party SEO tools estimate traffic that does not exist.
| Method | What gets inflated | Where the buyer sees it |
|---|---|---|
| Bot visits (scripts, headless browsers, traffic-exchange services) | Sessions and users in the site's own analytics | Google Analytics screenshots, visit counters |
| Paid or incentivized human visits | Sessions, sometimes engagement | Analytics screenshots |
| Ranking for worthless keywords (misspellings, irrelevant or foreign-language terms) | Estimated organic traffic in SEO tools | Traffic column in a marketplace listing |
| Short-lived ranking spikes timed for a sale | Estimated organic traffic in SEO tools | A traffic chart that jumps and then falls |
Most guides only describe the first row. Buyers in link marketplaces often see the last two, because marketplace listings usually show a third-party traffic estimate rather than anything from the site's own analytics. Those estimates are modeled from the keywords a site ranks for, not measured from visits, so bots cannot inflate them directly. Ranking for thousands of junk keywords can.
Is bot traffic on link sites the same as click fraud?
Bot traffic on link sites is closely related to click fraud but aimed at a different victim. Click fraud is when a person, script or auto clicker imitates a legitimate user clicking pay-per-click ads, to raise the publisher's ad revenue [3]. Fake traffic on a link site imitates legitimate readers, to make a link placement look worth buying.
The tools overlap. Click fraud has used scripts, botnets of compromised computers and "paid to read" sites that pay people tiny amounts to visit and click [3]. Each of those can also pad a site's visitor numbers.
Does Google Analytics filter out bot traffic?
Google Analytics 4 filters out known bots and spiders automatically, but only the known ones. Google identifies them using its own research and the International Spiders and Bots List maintained by the Interactive Advertising Bureau [2].
Two limits matter to a link buyer:
- Only declared, known bots are removed. A script built to look like a person, running through ordinary browsers and residential connections, is not on any list.
- The exclusion is invisible. Google says you cannot turn the filter off or see how much known bot traffic was excluded [2].
So a GA4 screenshot is not proof of human traffic. GA4 removes the honest bots and keeps the ones designed to be counted.
How common is bot traffic?
Bot traffic is common across the whole web, not just on link sites. A 2016 report by the security firm Incapsula, published January 24, 2017, found more than half of all internet traffic came from bots [1].
No published figure exists for how much of the traffic on sites selling links is fake. Any number quoted for that is a guess. What a buyer can measure is the individual site in front of them.
How do you spot bot traffic on a site before buying a link?
To spot bot traffic, compare the site's claimed traffic with evidence that is hard to fake and look for patterns real audiences do not produce. Ask for the Google Search Console Performance report, which shows clicks from Google Search results, impressions, click-through rate and average position, by default for the past three months [4].
Warning signs:
- The site offers GA4 screenshots but refuses Search Console. Search Console clicks come only from Google Search results [4], so they are much harder to pad with scripted visits than total sessions.
- Sessions far above organic clicks with no explanation. GA4 and Search Console never match exactly, because of privacy filtering, processing, reporting delays, time zones and JavaScript tracking [5]. A gap of several times, with no social, email or referral source that explains it, is a red flag.
- Traffic from countries that don't match the content. An English-language site about Australian gardening with most visitors from one unrelated country.
- Visits that land only on the homepage. Real search traffic lands on articles. Scripted traffic often hits one URL.
- Engagement at the extremes. Near-zero engagement time, or suspiciously identical session lengths.
- Impressions without clicks. In Search Console, large impression counts with an unusually low click-through rate can mean rankings for keywords nobody acts on.
- A sudden jump right before the listing. Real traffic grows and dips with seasons and updates. A cliff-shaped chart deserves questions.
For the full process, see Traffic Verification.
How has fake traffic changed over time?
Fake traffic began as an advertising problem and moved into SEO as traffic became a selling point for links. The dated history below comes from click fraud, the best-documented part of it.
2001: click fraud is identified
Internet expert Jessie Stricchiola is credited with first identifying instances of pay-per-click fraud in 2001 [3].
2006: Google settles a click fraud lawsuit
In July 2006, Google settled a click fraud class action for $90 million, a year after Yahoo settled a similar case [3].
2016: botnets at scale
In June 2016, an Italian citizen was extradited to the US over a botnet of about 140,000 computers used in a click fraud scheme [3]. The same kind of infrastructure that fakes ad clicks can fake page visits.
Today: traffic as a link-buying metric
Metrics like Domain Rating can be pushed up without real readers (see DR inflation), so buyers who set organic traffic minimums are trying to filter for a real audience. Once traffic is the filter, traffic becomes the number worth faking. No published data tracks how often this happens.
Does fake traffic affect the SEO value of a link?
Fake traffic does not change how Google values a link, but it hides the facts a buyer needs to judge the site. Google's rankings don't depend on how many visitors a site claims. What fake traffic hides is that a site may have no real audience, no real rankings, and may exist mainly to sell links.
That risk is separate from the policy question. Google's spam policies list buying or selling links for ranking purposes, including exchanging money for links or for posts that contain links, as link spam [6]. Google says paid links are acceptable when they carry rel="sponsored" or rel="nofollow" [6], with sponsored the preferred value [7]. A site with genuine human traffic does not make a followed paid link compliant, and a site with fake traffic adds a second problem on top.
What should you do if a site's traffic looks fake?
If a site's traffic looks fake, don't buy the placement and don't negotiate on the strength of the inflated number. Ask once for a live view of Search Console. If the seller refuses or the numbers don't line up, drop the site.
Practical rules for buyers:
- Treat analytics screenshots and listing estimates as claims, not evidence.
- Judge the specific page your link will sit on, not just the domain total.
- Keep records of what you checked and when, so you can review placements later.
- Expect paid placements to be labeled with
rel="sponsored"orrel="nofollow", as Google's policies require [6].
Search Insider does not support or suggest using private blog networks, which are a common home for inflated traffic figures.