Most businesses assume that when their analytics show more website traffic, things are going in the right direction. More sessions, more users, numbers going up — that must mean the marketing is working. But what if a big chunk of that traffic isn’t real?
This is something we run into more often than you’d think. And it’s one of the biggest reasons we tell clients that auditing your data is just as important as growing it.
The Case of the Disappearing Performance
We recently started working with a retail business that had been running a digital marketing program for some time. On the surface, the reports looked solid. Traffic was up significantly. Direct traffic in particular had jumped nearly 200% year over year. The agency managing their account was pointing to that growth as a win.
When we dug in, the story was different.
What Direct Traffic Actually Is
Direct traffic in Google Analytics refers to sessions with no referral source — someone typed your URL directly into the browser, clicked a bookmark, or arrived through a channel that couldn’t be tracked. For most businesses, direct traffic is a healthy and natural part of the mix.
The problem is that bots show up in direct traffic too.
Automated tools and headless browsers — the kind used for scraping, monitoring, and sometimes competitive snooping — hit websites constantly. And because they don’t come through a search engine or a referral link, Google Analytics logs them as direct traffic. Unless you know what to look for, they blend right in.
How We Found It
The diagnostic is actually pretty straightforward once you know where to look. We filtered the direct traffic in Google Analytics by screen resolution.
Real people use all kinds of screen sizes. Laptops, desktops, phones, tablets — the resolution data is spread across dozens of variations. Bot traffic is different. Headless browsers almost always run at a default resolution of 1024×768 because they’re not actually rendering a screen for anyone to look at.
When we applied that filter, one resolution dominated the direct traffic. The bounce rate for those sessions was close to 100%. Every single session landed on the homepage and left immediately. There was no scrolling, no clicking, no engagement of any kind.
That’s not a person. That’s a bot.
Why It Matters
Here’s where it gets important for your marketing program. Inflated traffic numbers don’t just make your reports look better than they are. They actively affect decisions.
If your agency is using traffic growth as evidence that the strategy is working, and a meaningful portion of that traffic is bots, you’re making decisions based on bad information. Budget allocation, campaign adjustments, content priorities — all of it gets skewed.
In some cases, it can also affect your ad campaigns. If bot traffic is triggering conversion events in Google Analytics, and those events are being used to optimize your Google Ads campaigns, the algorithm is learning from garbage data. It will spend your budget trying to find more “users” that behave like bots.
What to Do About It
If you suspect bot traffic is inflating your numbers, start by filtering your direct traffic by device resolution in GA4. Look for an outsized concentration at 1024×768 with a high bounce rate and no engagement. If you see it, that’s your signal.
From there, the right move is to contact your hosting provider and ask them to pull server logs for the high-volume IPs hitting your site. Cross-reference those IPs against known cloud hosting providers and data centers. Once you’ve identified the sources, you can block them at the server level — before they ever reach your site.
Plugins can help in a pinch, but handling it at the hosting level is cleaner and more effective.
The Bigger Point
Good marketing decisions require good data. That sounds obvious, but it gets overlooked constantly — especially when the numbers are trending in the right direction, and nobody wants to ask hard questions.
Auditing your analytics isn’t a one-time task. It’s something that should happen regularly. Traffic sources change, tracking breaks, bots evolve. Staying on top of it means you can trust what you’re looking at when it’s time to make a call.
If your traffic numbers have jumped recently and you’re not sure why, it’s worth a closer look. We’re happy to help you figure out what’s real and what isn’t.