We are facing a massive amount of fake bot clicks. They simply trick the ad platform and click away our budget. When dealing with pro fraudsters, you are almost defenseless. The real issue starts because Google doesn't protect the ads enough; their system is too easily exploited. This is the first front where the campaign bleeds out.
Sure, you can block 500+500 IPs at the campaign level, but what good is that against 10,000 attacks a day? We are being targeted from 8 different countries continuously. In reality, Google has a vested interest in letting this happen—they know about it, but they won't fix it for business reasons.
DNS protection (Cloudflare) and blocking attacker IPs (ClickGuard) can only do so much. Pro scammers jump from server to server for a few bucks. They spoof geo-locations and cause serious damage. You can try to chase down their datacenter rentals, but it turns into a never-ending game of cat and mouse. At the end of the day, you can rarely ever truly corner the actual attackers.
