Stop Click
Fraud Draining
Your Ad Budget
Track visitor IPs, detect suspicious click patterns in real time, and build your Google Ads IP exclusion list — all from your own WordPress dashboard.
Everything you need to catch fraudsters
A private admin dashboard shows click logs, device info, geo-location, and flagged IPs — updated in real time as visitors land on your pages.
Install the Plugin →
| IP Address | Device | Location | GCLID | Status |
|---|---|---|---|---|
| 185.220.101.47 | Mobile | Moscow, RU | ✓ | ⚠ Suspicious |
| 45.141.215.93 | Desktop | Frankfurt, DE | ✓ | ⚠ Suspicious |
| 142.250.80.14 | Desktop | London, GB | ✓ | ✓ OK |
| 74.125.130.27 | Mobile | New York, US | — | ✓ OK |
| 203.0.113.55 | Desktop | Sydney, AU | ✓ | ✓ OK |
Built for Google Ads protection
Every feature is designed to help you identify, log, and block the IPs draining your ad spend.
Suspicious Click Detection
Automatically flags any IP that exceeds a configurable click threshold within a rolling time window. Default: 5 clicks in 60 minutes.
Google Ads GCLID Tracking
Captures the Google Ads click ID on every paid visit so you can see exactly which ad clicks are coming from suspicious IPs.
IP Geolocation
Optional country and city lookup via ip-api.com — disabled by default. Results are cached for 24 hours so performance is never impacted.
Full Click Log
Paginated, filterable log of every visit: IP, device, browser, OS, page URL, referrer, UTM parameters, and timestamp.
Email Notifications
Get alerted by email on every click, suspicious clicks only, or only on GCLID clicks. Built-in daily cap prevents inbox flooding.
Consent-Gated by Default
No data is collected until visitors give consent. Integrates with Complianz, CookieYes, and any consent plugin via a standard WordPress filter.
From install to IP exclusion in minutes
Install & Activate
Install from the WordPress Plugin Directory. No API keys or external accounts needed.
Connect Your Consent Plugin
Add one line to your functions.php to signal consent. Works with any consent management plugin.
Watch the Dashboard
Clicks are logged as visitors arrive. Suspicious IPs are flagged automatically based on your threshold settings.
Block in Google Ads
Copy flagged IPs straight into Google Ads → Settings → IP Exclusions and stop paying for fraudulent clicks.
// Tell the tracker that consent has been given. // Replace the cookie check with your own logic, // or use __return_true to always allow tracking. add_filter( 'sfpcft_tracking_allowed', function() { return isset( $_COOKIE['analytics_consent'] ) && '1' === $_COOKIE['analytics_consent']; } ); // Or — if you manage consent server-side and // want to allow tracking for all visitors: add_filter( 'sfpcft_tracking_allowed', '__return_true' );
Consent before
every byte
The tracking script never loads until a visitor has given consent. You stay GDPR-compliant without lifting a finger.
- Tracking is off by default — zero data collected on activation
- Standard
sfpcft_tracking_allowedfilter integrates with any consent plugin - All data stored exclusively on your own server
- Auto-delete records older than N days (default: 90)
- Built-in WordPress personal data exporter & eraser (GDPR tools)
- Suggested Privacy Policy text added automatically to WP Privacy page
// Complianz — fire after analytics consent: add_filter( 'sfpcft_tracking_allowed', function() { return function_exists( 'cmplz_has_consent' ) && cmplz_has_consent( 'analytics' ); } ); // CookieYes — check consent cookie: add_filter( 'sfpcft_tracking_allowed', function() { $cookie = isset( $_COOKIE['cookieyes-consent'] ) ? $_COOKIE['cookieyes-consent'] : ''; return str_contains( $cookie, 'analytics:yes' ); } );
Stop losing money to
fake clicks today
Free. No account required. Your data stays on your server.