A PPC manager sets up click fraud monitoring and then discovers, weeks later, that a meaningful chunk of their traffic — Safari users on iOS, users on Firefox with strict mode enabled, or corporate browsers with custom security policies — was never being tracked at all. The tool was silently missing data, and they had no idea.

This problem persists structurally because most click fraud vendors instrument traffic using JavaScript snippets that depend on browser APIs that privacy-focused and non-mainstream browsers have quietly restricted or blocked. Fixing this properly requires server-side tracking infrastructure, which is architecturally much heavier to build and support than a client-side script. Incumbent vendors have no incentive to retrofit this because the buyers who notice — agency technical leads, in-house PPC analysts at companies with privacy-conscious user bases — aren't loud enough to move the roadmap.

Users complained directly that 'it doesn't work with all browsers, just the main ones.' That means every fraud report from these tools has an invisible asterisk: the numbers only reflect what the script could capture, which in some verticals (B2B SaaS, healthcare, finance) can exclude a large share of actual visitors who use hardened browser configurations.

This is a business because anyone running paid ads needs accurate data on every click they're paying for, not just the ones a JavaScript snippet happened to catch. An agency that relies on incomplete fraud data and passes it to a client as a full audit is exposed to a credibility problem the moment the gap is discovered. The need recurs because every new campaign means new clicks, new browsers, new gaps.

What to build

Build a server-side click validation layer that sits between the ad network's click URL and the landing page, logs every redirect at the server level regardless of browser, and produces per-click fraud scores without relying on any client-side JavaScript execution.

Where to start

Start with B2B SaaS companies running LinkedIn Ads, where a high proportion of clickers are on managed corporate browsers that routinely break JavaScript-based tracking — this is a well-documented pain in that community and a natural first reference case.

The hard part

Convincing buyers to route their click URLs through a third-party redirect requires real trust — especially for agencies whose clients own the domains — so the first sale requires either a white-label option or a very short proof-of-concept deployment with a friendly client.

How it makes money

Usage-based pricing per thousand clicks validated, with a free tier covering up to 5,000 clicks per month so buyers can verify it actually captures what their current tool misses before committing.

See the evidence. The complaints behind this idea, the products they came from, and similar ideas in Click Fraud.

More ideas in Click Fraud