PopAds click fraud: risks for advertisers

PopAds sells pop-under views, so you can be billed for a paid impression that no person ever saw. The network states that its anti-fraud system filters out proxy and bot traffic, and its own FAQ ties traffic quality directly to your bid. Both are first-party claims, so check them against your conversion data.

This page covers what PopAds traffic costs, where invalid traffic enters pop inventory, what the network says it blocks, and how to keep that traffic out of the data your other paid channels learn from. All figures come from PopAds' own advertiser pages, checked on 2 August 2026.

What is PopAds?

PopAds is an advertising network specialised in pop-unders rather than display banners, running since 2010. Its FAQ names Tomksoft S.A., a joint stock company in Costa Rica, as the owner, with support staff in Poland and the technical team in the United States.

Inventory is sold by bidding. Advertisers set a maximum bid per thousand pop-unders, and publishers earn when a pop opens. PopAds reports advertisers from more than 50 countries and at least 1,000 unique campaigns running every day.

That billing model is the thing to understand before you judge quality. You are buying the pop opening, not a click on your creative, so nobody has to interact with your ad for the spend to register.

What does PopAds cost advertisers?

Bidding starts at $1.00 per 1,000 pop-unders. The minimum deposit is $10 through PayPal or AlertPay, and wire transfers have no minimum. Whatever you do not spend stays withdrawable, because the account works as a wallet.

The line that matters most for traffic quality sits in the advertiser section of that same FAQ: "If you set your bid too low, you will get slower and lower quality traffic." Quality is priced here, not promised. A separate Minimal Quality setting restricts your campaign to publisher sites with a higher internal rating, which PopAds says costs more per pop.

So a floor-price test at $1.00 CPM measures the floor of the inventory. It does not tell you what the network can deliver when you pay for the better placements.

Where does click fraud show up on pop traffic?

Part of the exposure comes from how the format fires. PopAds says its code "opens the popunder when user clicks anything on your site" and that it "bypasses nearly all popup blockers". Any click anywhere on a publisher page can turn into a billable view for you.

On top of that, pop inventory attracts the same invalid traffic that hits display and paid social:

• Botnets and headless browsers opening pops at scale
• Proxy or VPN sessions dressed up as Tier 1 traffic
• Publisher-side inflation, where a script fires views without a real visitor session
• Junk placements that pass your country filter and never convert
• Rival advertisers pushing traffic at your offer to drain the budget

Because billing is tied to the pop opening, view volume proves very little on its own, and so does a healthy-looking CTR. Cost per qualified action is the only number that separates buyers from scripts.

There is a second-order cost too. If those visitors reach your site, they can hit the pixels and conversion postbacks you share with Google Ads, Meta or Microsoft Advertising, and then bad data starts training the bidding models on other channels.

What does PopAds claim to do about invalid traffic?

The advertiser page makes two promises: "All publishers pages are human reviewed and have our internal quality measure assigned. In addition, we have developed very advanced anti fraud system, which filters out all proxy, bot and mobile traffic."

Treat that as a vendor statement rather than an audit. PopAds links an AdScore certificate from its homepage, and when we opened that certificate on 2 August 2026 it returned an invalid hash and no traffic data at all.

The refund policy is the part advertisers most often read wrong. Asked "Can I get a refund?", the FAQ answers: "Yes, you can withdraw your unspent funds anytime you want." That is access to your remaining balance. It is not compensation for views you already paid for, so a fraudulent pop is a sunk cost, not a credit.

Network-side filters do catch crude junk. They are weaker against residential proxies and browser farms that copy human timing, which is why your own conversion quality check has to sit behind the network's.

How should you test PopAds without burning budget?

1. Start with one country and one offer. Get a baseline conversion rate before you widen targeting.
2. Bid above the $1.00 floor if the point of the test is quality. The network already told you what a low bid buys.
3. Raise the Minimal Quality setting for a second campaign and compare the two cohorts instead of guessing which placements are thin.
4. Cap frequency early. Repeat pops to the same device add views without adding buyers.
5. Judge the test on cost per qualified lead or install, and on what those leads do a week later.
6. Keep pop traffic out of the conversion feeds that train Smart Bidding or Meta's models until the quality is proven.

Campaigns are usually approved within 24 hours, so a controlled test costs you days rather than weeks. One detail to check first if your own pages carry AdSense: PopAds states plainly that its traffic is not AdSense safe, because Google does not allow AdSense inside pops.

How do you keep pop traffic out of your Google Ads data?

ClickPatrol does not sit inside the PopAds auction and does not replace its inventory filters. It protects the accounts it connects to, Google Ads, Meta and Microsoft Advertising, and it protects the signals those platforms optimise on.

Every ad visit is scored on more than 800 data points per click, including device fingerprinting and behavioural biometrics. Proxy intelligence and network consistency checks feed the same model, and no decision rests on an IP address alone, which is what keeps shared office and mobile carrier networks from being blocked wholesale. Traffic then lands in one of three layers: low risk is allowed, suspicious is monitored, high risk is blocked.

On top of that automatic classification you can add up to six Click Threshold rules of your own, for example blocking any IP that clicks more than 3 times in 10 minutes.

The setting that matters most when you buy pop traffic is the clean traffic pixel trigger. Instead of firing your Meta Pixel or LinkedIn Insight Tag on every page view, you fire it only on the ClickPatrol_Legitimate event, so a visit the tag flagged as suspicious never reaches your audiences or your optimisation models. If PopAds traffic lands on the same pages as your paid search visitors, that gate is what keeps it out of your retargeting pools.

Click fraud protection is the starting point when the job is stopping invalid clicks across your paid accounts. For the patterns behind automated traffic see bot traffic, and for clicks you were billed for that should never have counted see invalid traffic. If you also buy Google Display, bot protection for Google Display campaigns covers the same quality problem on that channel.

Is PopAds worth it for advertisers?

PopAds can work for direct-response offers that survive interrupt traffic and convert on a fast page: downloads, app installs, sweepstake entries. It is a poor fit when you need search-level intent, brand-safe placements, or clean data feeding automated bidding elsewhere.

Buy it as a walled-off test channel. Tight targeting, a bid above the floor, and conversion tracking that stays separate from your search and social feeds. The network's own filters are the first line, not the last one, and the refund policy will not reimburse a single fraudulent view.

Trusted by 1,793+ businesses, ClickPatrol is a Google Certified Click Tracker that blocks bots and invalid clicks so Smart Bidding optimises for people instead of scripts. If pop traffic is one source of noise in a wider paid stack, clean the accounts ClickPatrol covers first.