Automatic protection
Every click that passes through Trcker is automatically scored for fraud risk. No configuration needed. Trcker uses multiple layers of detection:
Layer 1: Bot filtering
Known bots, crawlers, and spiders (Googlebot, Bingbot, etc.) are identified by their user-agent string and excluded from click counts entirely. These requests are still redirected to your destination URL so they don't break anything, but they never appear in your analytics.
Layer 2: Fraud scoring
Every click receives a fraud score from 0 (clean) to 100 (definitely fraudulent). The score is based on:
- Bot patterns — Headless browsers, automation tools (Selenium, Puppeteer), and known bot signatures
- IP intelligence — Data center IPs, known proxy/VPN ranges, Tor exit nodes
- Velocity checks — Unusually high click rates from a single IP or user-agent
- Referrer analysis — Missing or suspicious referrer patterns
Clicks with a fraud score of 90+ are flagged. Any conversions tied to flagged clicks are automatically rejected.
Layer 3: Client-side detection
If you embed the Trcker tracking script on your landing page, it adds an additional layer of detection:
This script runs in the visitor's browser and detects:
- Headless Chrome and Firefox
- Selenium WebDriver
- Puppeteer and Playwright
- PhantomJS and other automation frameworks
- Browser spoofing (fake user-agent strings)
Results are sent back to Trcker and added to the click's fraud score.
Layer 4: Click deduplication
Trcker automatically deduplicates clicks from the same IP address within a configurable time window (default: 60 seconds). The user is still redirected, but only one click is recorded.
Layer 5: Conversion caps
Set daily, weekly, or monthly conversion caps on any offer. When a cap is reached:
- Soft cap — Conversions are still recorded but flagged for review
- Hard cap — Traffic is redirected but new conversions are not recorded
Reviewing fraud signals
Fraud signals are visible on the offer detail page under the activity log. Each flagged click shows which signals triggered and the overall fraud score.
Daily fraud review
Trcker runs a daily automated fraud review (2 AM UTC) that batch-rejects any conversions linked to clicks with a fraud score of 90 or higher. These conversions are marked as "rejected" and excluded from payout calculations.