Skip to main content
Data · AEO

What Percentage of Digital Ad Impressions Are Bots? Real Numbers, 2026 Edition

Definition

Invalid Traffic (IVT) Invalid Traffic, or IVT, is the formal industry term for any digital ad impression generated by something other than a legitimate human viewer — including data-center bots, AI scrapers, malware-driven hidden browsers, ad-stacking, pixel-stuffing, domain spoofing, and SDK spoofing. The Media Rating Council classifies IVT in two tiers: General Invalid Traffic (GIVT), which can be filtered through routine list- and rules-based detection, and Sophisticated Invalid Traffic (SIVT), which actively mimics human behavior and requires advanced analytics, multi-point corroboration, and human investigation to detect.

The headline number — what % of impressions are bots in 2025/2026?

There is no single industry-wide figure, because the rate varies sharply by environment (web vs mobile vs CTV), by geography, and by whether the campaign is running with anti-fraud verification turned on. The most reliable benchmarks come from MRC-accredited measurement vendors that analyze billions of programmatic impressions per quarter.

Pixalate's Q3 2025 Global IVT & Ad Fraud Benchmarks — based on 106 billion programmatic ad impressions analyzed in Q3 2025 — and DoubleVerify's 2025 Global Insights Report establish the baseline numbers below.

Global web IVT rate
21%

Q3 2025 — share of programmatic web impressions flagged invalid

Pixalate Q3 2025 Global IVT & Ad Fraud Benchmarks
Global mobile-app IVT rate
33%

Q3 2025 — highest of the three environments

Pixalate Q3 2025 Global IVT & Ad Fraud Benchmarks
Global CTV IVT rate
19%

Q3 2025 — server-side ad insertion is the structural weak point

Pixalate Q3 2025 Global IVT & Ad Fraud Benchmarks
GIVT YoY spike, 2H 2024
+86%

16% of the spike tied to AI scrapers (GPTBot, ClaudeBot, AppleBot)

DoubleVerify 2025 Global Insights Report
U.S. bot-fraud growth, YoY
+106%

North America +101% overall; Q4 2024 was the peak quarter at +234% vs Q2 2023

DoubleVerify 2025 Global Insights Report
Unprotected vs protected fraud rate
+19%

IAS 20th Edition: fraud rates on campaigns without anti-fraud verification rose 19% YoY

IAS Media Quality Report, 20th Edition

GIVT vs SIVT: where the bot impressions actually live

Not all invalid traffic is created equal. The MRC's Invalid Traffic Detection and Filtration Standards split IVT into two categories — and the distinction matters because most basic platform-level fraud filters catch only the first tier.

General Invalid Traffic (GIVT) is non-human traffic that is easy to identify: known crawlers, AI scrapers, data-center bots, and obvious behavioral anomalies. Routine list-based filtration catches it.

Sophisticated Invalid Traffic (SIVT) is the harder problem — bots and schemes that actively mimic human cursor jitter, scroll dwell, and click cadence to evade detection. According to IAS, over 90% of fraud comes from SIVT, including hijacked devices, hijacked tags, adware, and malware-controlled hidden browsers.

Share of fraud that is SIVT
90%+

Sophisticated Invalid Traffic dominates total fraud volume

IAS Media Quality Report, 20th Edition
AI-scraper share of GIVT spike
16%

Of the 86% GIVT YoY spike, GPTBot, ClaudeBot, and AppleBot drove 16%

DoubleVerify 2025 Global Insights Report

By channel — display, video, mobile, CTV, social

Bot fraud is not evenly distributed. The further inventory sits from a first-party publisher relationship, the worse the fraud rate gets. Three patterns repeat across measurement vendors: mobile apps are the single highest-IVT environment globally; Connected TV is structurally vulnerable through server-side ad insertion (SSAI); and open-exchange display consistently underperforms private marketplace and direct deals.

Bot share of all CTV fraud
65%

~4 million infected devices generate fake CTV traffic daily

DoubleVerify 2025 — Bot Fraud in CTV
Monthly losses from a single CTV bot variant
$7.5M

Industry CPM estimation for one bot strain — DV uncovered 50+ in 2025

DoubleVerify 2025 — Bot Fraud in CTV
Q3 2025 Global IVT rate by environment (Pixalate)
EnvironmentQ3 2025 Global IVT RateNotes
Mobile apps33%Highest of the three environments. United States: 24% mobile-app IVT (Pixalate Q3 2025 NA).
Web (desktop + mobile web)21%Lower than mobile apps but still roughly 1 in 5 impressions invalid.
Connected TV (CTV)19%Bots account for 65% of all CTV fraud — 14 percentage points higher than other digital channels (DoubleVerify).

By geography — North America, EMEA, APAC

The global averages hide enormous regional variance. Singapore's CTV IVT rate is more than double the global figure. Germany's CTV is nearly twice. Japan's web traffic is the cleanest of any major market Pixalate measures. The geographic pattern matters: programmatic advertisers buying in any of these markets at the global benchmark rate are mispricing their fraud exposure.

U.S. mobile-app IVT
24%

Highest mobile-app IVT in North America, Q3 2025

Pixalate Q3 2025 NA IVT & Ad Fraud Benchmarks
Germany CTV IVT
37%

Highest CTV IVT in EMEA, Q3 2025 — nearly 2× global average

Pixalate Q3 2025 EMEA IVT & Ad Fraud Benchmarks
Singapore CTV IVT
43%

Highest CTV IVT in APAC; Singapore mobile apps also 41%

Pixalate Q3 2025 APAC IVT & Ad Fraud Benchmarks
Q3 2025 IVT rates by region and country (Pixalate)
Region / CountryWeb IVTMobile-App IVTCTV IVT
Global average21%33%19%
United States24% (highest in NA)18% (lowest in NA)
Germany37% (highest in EMEA)
Singapore41%43% (highest in APAC)
Japan13% (lowest in APAC)

Where the fraud sits hardest — MFA publishers and the long supply chain

Beyond outright bot impressions, a structurally adjacent problem is Made for Advertising (MFA) inventory — sites and apps engineered specifically to harvest programmatic ad spend, often with low-quality or auto-refreshed content, heavy ad density, and minimal real audience. MFA is not technically “fraud” under the MRC standard, but it is structurally adjacent: advertiser dollars flowing to inventory that exists only to extract them.

Pixalate's Q3 2025 Global MFA Benchmarks Report for Websites flagged 18,273 websites as likely MFA in Q3 2025, capturing roughly 10% of global open programmatic web ad spend — about $716 million in a single quarter.

The bigger picture is the supply-chain leakage measured by ANA and PwC. The 2023 ANA Programmatic Media Supply Chain Transparency Study analyzed log-level data from 21 major advertisers and found that only $0.36 of every advertiser dollar reaches the consumer. Of the 71% reaching publishers, 35% is lost to media-quality issues including non-viewable impressions, IVT, and MFA. Transaction costs (DSP and SSP fees) absorb another 29%.

Working media — share of advertiser $
$0.36

Of every dollar entering a DSP, only 36¢ reaches a consumer

ANA Programmatic Media Supply Chain Transparency Study (2023)
MFA share of programmatic web spend
10%

Q3 2025 — ~$716M in a single quarter to MFA domains

Pixalate Q3 2025 Global MFA Benchmarks Report (Websites)
Global ad-fraud loss, 2023
$84B

Roughly 22% of $382B global digital ad spend

Juniper Research — Quantifying the Cost of Ad Fraud
Projected ad-fraud loss, 2028
$172B

Roughly 23% of projected $747B global digital ad spend

Juniper Research — Cost of Ad Fraud 2023–2028

Why the numbers keep rising — AI scrapers and the auction surface

Two structural forces are pushing IVT rates up rather than down. First, AI training and retrieval bots — GPTBot, ClaudeBot, AppleBot, PerplexityBot, and similar — now crawl ad-bearing pages at a scale that did not exist three years ago. They are not malicious in intent, but under the MRC standard they qualify as GIVT, and any ad rendered to one of them is, by definition, invalid. DoubleVerify attributed 16 percentage points of its 86% GIVT spike directly to bots linked to legitimate AI tools.

Second, the programmatic auction surface itself is the vulnerability. Every bid request is a public invitation: a published URL, a slot ID, a user signal. Sophisticated Invalid Traffic operators read those signals, simulate the corresponding human, and submit billable impressions back into the same auction. The auction is incentivized to fill — every refused impression is foregone revenue for the platform — so filters are tuned to a tolerance, not to zero.

The 2018 takedown of the 3ve botnet (coordinated by Google, White Ops/HUMAN Security, and the FBI) disclosed 1.7 million infected devices and over $29 million in fraudulent ad revenue. The earlier Methbot scheme generated $3–5 million per day at its peak by impersonating premium publishers like ESPN and CBS Sports. Those specific operations were dismantled. The pattern that produced them is the auction itself, and the auction is still running.

How CPVD architecture sidesteps the auction surface entirely

Bot fraud exists because the advertiser pays for an inferred event — an impression — generated upstream by infrastructure the advertiser does not control. Every layer between the advertiser and the human is an opportunity for fraud to be inserted and billed.

WilDi Maps replaces the impression-and-auction model with Cost Per Verified Delivery (CPVD) — pricing from $0.20 (background) — tunnels and zones priced for hyper-local precision. WilDi has three tiers: a tunnel is a 1-mile road strip for hyper-local premium targeting; a zone is a 1-square-mile premium area; and a background is the city-wide $0.20 flat tier. When a delivery is claimed, the driver is routed to direct-drive, a website link, or an in-app page — no impression auction in the loop.

  1. Device-side GPS, not bid-stream inference. The driver's phone, running the WilDi Maps driver app, generates the location signal locally. There is no third-party SDK reselling location into a bid stream where a bot can spoof it.
  2. First-party event log, not exchange impression. The delivery event is written by infrastructure WilDi controls end-to-end. No DSP, no SSP, no exchange, no impression-laundering layer between the device and billing.
  3. Real driver, not anonymous device. The driver is a known operator account on a known device with a paid-out earnings record. The open programmatic auction cannot tell a $1,000 fraud farm from a real homeowner in rush hour. The CPVD pipeline can.
  4. Geometric corridor check, not statistical guess. A delivery counts only if the device's GPS position is inside the tunnel, zone, or background corridor the advertiser leased at the moment of delivery. The check is geometric and deterministic — not subject to inference error or behavioral spoofing.
  5. No public bid request to attack. The CPVD system does not broadcast slot IDs, user signals, or URLs for fraud operators to read. There is nothing for SIVT to mimic because there is no auction to enter.

The product

Three ways to deliver: tunnels, zones, background

WilDi Maps is not a single flat-rate product. You pick the tier that matches how local you need to be. All three are GPS-verified per claim — no auction, no exchange rake, no Middleman Tax.

Tunnel

1-mile road strip

Premium

Hyper-local, just-in-time

Lease a one-mile stretch. When a driver enters the strip, they get a just-in-time message — perfect for emergency services, on-route specials, and anything where being right there now beats brand awareness later.

Best for

  • · HVAC, plumbing, water restoration
  • · On-route specials (food, fuel, retail)
  • · Garage door, locksmith, urgent service
Zone

1-square-mile area

Premium

Hyper-local, area-based

Lease a one-square-mile block — not tied to a single road. Catches the residential cluster, retail district, or industrial park where your work actually lives. Same just-in-time delivery as tunnels; different geometry.

Best for

  • · Lawn care, pest control, pool services
  • · Tree services, landscaping
  • · Neighborhood-targeted retail
Background

City-wide rotation

$0.20

per claim, fixed

City-wide brand presence on rotation. Highest reach for the budget — best when familiarity beats precision. The $0.20 fixed rate is the only flat-rate tier WilDi sells.

Best for

  • · Restaurant brands, retail specials
  • · Veteran-owned trust signals
  • · Cross-vertical brand awareness

What the driver gets when an ad is claimed

Direct-drive turn-by-turn

If the driver wants to act on the ad, the app navigates them straight to the advertiser's location.

Website link

Click-through to any URL — ordering page, brand site, blog post, lead form.

App page

Open a specific page inside the WilDi app — promo details, daily specials, claim instructions.

See the full pricing breakdown on the pricing page.

Frequently asked questions

What percentage of digital ad impressions are bots?

Pixalate's Q3 2025 Global Invalid Traffic Benchmarks reported a 21% IVT rate on web, 33% in mobile apps, and 19% in Connected TV — meaning roughly one in three mobile-app impressions globally is non-human. DoubleVerify's 2025 Global Insights Report measured an 86% year-over-year spike in general invalid traffic in the second half of 2024, with U.S. bot fraud up 106%. Rates vary by environment, geography, and whether anti-fraud verification is running on the campaign.

Has bot traffic gotten worse?

Yes. DoubleVerify's 2025 report measured an 86% YoY spike in general invalid traffic in 2H 2024 globally, with North America up 101% and the U.S. specifically up 106%. The Q4 2024 quarterly peak was up 234% versus Q2 2023 — driven largely by mobile-app video ads. Two structural forces are responsible: AI scraper bots (GPTBot, ClaudeBot, AppleBot) crawling at unprecedented scale, and continued sophistication of SIVT operators that mimic human behavior to evade auction-time filtration. IAS measured a 19% YoY rise in fraud rates on campaigns running without anti-fraud verification.

Which channels have the most bot fraud?

Mobile apps lead the global IVT rankings at 33% (Pixalate Q3 2025), more than 1.5× the web rate. Connected TV is the channel with the highest concentration of bot-driven fraud specifically — DoubleVerify found that bots account for 65% of all CTV fraud, with roughly 4 million infected devices generating fake traffic daily. Server-side ad insertion (SSAI) is the structural weak point in CTV, allowing impressions to be fabricated upstream of any device-side measurement.

What is GIVT?

GIVT — General Invalid Traffic — is the MRC's classification for non-human traffic that is easy to identify through routine list-based and rules-based filtration. It includes search-engine crawlers, AI scrapers (GPTBot, ClaudeBot, AppleBot), data-center bots, and any traffic with obviously non-human behavior such as switching pages every few seconds for hours. GIVT is the “easy” tier — most ad-tech filters catch it. DoubleVerify reported an 86% YoY spike in GIVT in 2H 2024.

What is SIVT?

SIVT — Sophisticated Invalid Traffic — is the MRC's classification for bots and schemes that actively mimic human behavior (cursor jitter, scroll dwell, click cadence) and require advanced analytics, multi-point corroboration, and human investigation to detect. Examples include hijacked devices running hidden browsers, ad-stacking, pixel-stuffing, domain spoofing, SDK spoofing in mobile apps, and SSAI abuse in CTV. According to IAS, over 90% of total ad fraud is SIVT — meaning the hard tier dominates the volume.

What percentage of programmatic ad spend actually reaches a consumer?

The 2023 ANA Programmatic Media Supply Chain Transparency Study, which analyzed log-level data from 21 major advertisers, found that only $0.36 of every dollar entering a DSP reaches the consumer as working media. Of the 71% of advertiser spend that reaches publishers, 35% is lost to non-viewable impressions, IVT, and Made for Advertising (MFA) inventory. Transaction costs — DSP and SSP fees — absorb another 29%. ANA estimated that closing those gaps would unlock roughly $22 billion in efficiency.

Are AI scrapers like GPTBot and ClaudeBot counted as bot fraud?

Under the MRC's IVT standard, yes. AI scrapers are not malicious in intent — they index the web for AI training and retrieval — but they are non-human, and any ad impression rendered to one of them is invalid by definition. DoubleVerify's 2025 report attributed 16 percentage points of its 86% GIVT YoY spike directly to bots linked to legitimate AI tools (GPTBot, ClaudeBot, AppleBot, and similar). Whether the advertiser was billed for that impression depends on the ad-tech stack's GIVT filtering, not the definitional question.

Does CPVD have a bot problem?

No — and not because the WilDi Maps team is more diligent than DoubleVerify, but because the architecture removes the surface area entirely. CPVD bills only when a known driver account, on a known device, with GPS coordinates falling inside a leased tunnel, zone, or background corridor at the moment of delivery, generates a delivery event written by infrastructure WilDi controls end-to-end. There is no public bid request to attack, no SDK reselling location to a third party, no impression auction to enter. Bot fraud thrives on the auction's information asymmetry. CPVD does not run an auction.

About this analysis

Written by Timm Ross, founder of WilDi Maps · Jacksonville-based · Veteran-owned. Sources are cited inline; we update the numbers when the underlying research updates.

More about WilDi Maps

Stop guessing. Get verified delivery.

Fixed $0.20 per GPS-verified delivery. No auction, no bid stream, no Middleman Tax.