Your probably reading this article because you use Google Adwords to bring traffic to your website, or your a click fraudster yourself, wanting to see what kind of information I have for you. Most of you click fraudsters will think that I have no idea what I am talking about, and that I do not know your methods. Well, trust me buddy, I KNOW ALL ABOUT YOU AND WHAT YOU DO.

If you are new to the click fraud scene, here is an example:

1. Scumbag puts Google Adsense ads on his website.

2. The scumbag then proceeds to cheat Google Adsense by creating false clickthroughs and impressions, in return earning him a pretty nice profit, because he isn't even working on his website, just generating false traffic.

All of you people that run campaigns through Google Adwords are thinking, "This guy has no idea what he is talking about, Google has everything under control and they even state so publicly!"

WOW! What kind of pay per Click Company would admit that they DO NOT have click fraud under control? I wonder what would happen to their business immediately following that statement.

Estimates say that nearly 20% of all clicks for Adsense are illegitimate. In my honest opinion I believe this number to be around 30-35% from some of the things I have seen.

Aerate, now the big question, how are they doing it?

There are a number of ways that people are cheating, including the 'click groups' from India that click on your ads for you and create big pay checks as long as you pay them their $0.50 an hour so they can buy bread for their family.

But I'm going to show you the technical way that Google Adsense is cheated, not poor people clicking ads. I'm talking about extremely smart programmers that create hitbots to cheat Adsense. And, NO, I'm not talking about that piece of garbage 'CACA' or Clicking Agent that you find on Google. I am talking about PRIVATE programs and scripts that are only used by private groups.

How do these scripts get away undetected you ask?

Simple, let's actually take a look at Google's click fraud protection (This is what I have summed up, I seriously don't believe they have anything other protection because people are still cheating using these methods as you read this article.)

If you actually take a look at Google's Adsense code when it is on your webpage you will find the URL that is used to retrieve ads. (Right-Click your ad IFrames and click 'View Page Information' or something similar.)

Your client code, this tells Google who to assign the click-through money to.

This shows you the number of milliseconds since midnite January 1, 1970. This is what seems to be Google's biggest automated proxy clicker fraud prevention. Doesn't seem too hard to generate with 2 lines of code now does it?

There are some other variables that are sometimes in the URL such as 'u_his=' this means how many pages you have visited since you started up your browser. There's also some MIME type checks and how many plugins you have installed, but these variables come up very rarely. I think they are only meant for Netscape/Firefox browsers.

Now that we have 'decoded' the supposed unbeatable Google Adsense code, what do you think about click fraud? You still think it is rare?

After randomizing all the data and sending an automated query to their Adsense URL, all the scumbag has to do is parse out all of Google's click URL's and click one of them, giving him a click through. This can all be easily faked with even a Visual Basic program. A newbie programmer could in-fact cheat Google Adsense without much knowledge.

Alrite you say, they beat the javascript code detection but doesn't Google use cookies so they can't do this?

No, Google does not use cookies for Adsense.

Well what about IP-tracking? Someone can't have that many proxies!

There are click groups that leave these programs running on their computer. They each randomly click each other's URL's automatically. The person running the program doesn't even have to do anything, but he is still contributing to the success of their group and himself.

Does that sound too far-fetched? I am telling you that there are click groups that do this now and have been since the old Linkshare PPC days in 1999. Yes, if you were an advertiser on Linkshare back around 1999-2002, you got RAPED.

And that isn't all. I have read on the internet that there is currently over 100,000 people infected in the United States alone with trojan proxy servers. These proxy servers run on random ports so that Google can't just do a simple port 8080 or 80 check on it to see if it's a proxy. The majority of these proxy servers are used for credit card fraud, but a lot of them are also used to cheat Google Adsense and other pay per click programs. These proxies are at-home users that look like normal dial-up, cable, and dsl users from all across the world, but mainly United States. There is NO WAY to prove that they are a proxy.

Random User-Agent strings are another tactic that is often used by click fraudsters. This makes Google think that a lot of different browsers are clicking the links, just keeping them further from finding out the truth.