Click Farms Explained: How Click Farmers Work, What They Cost and the Law

A click farm is an operation that pays people to click ads, like and follow accounts, watch videos and write reviews by hand, so fake engagement looks like it came from real fans or customers. The people who do the work are called click farmers.

The term also gets used loosely. Many of the viral videos labelled "Chinese click farm" show walls of phones tapping away with nobody touching them. That's software doing the work, which this guide calls a phone farm, a kind of bot farm.

For anyone running paid ads, the human version is the harder one. A click farmer is a real person on a real phone, so their click on your ad looks like any other visitor's. Unless the ad platform flags it as invalid, it's billed like any other click, and the person behind it was never going to buy.

This guide covers what click farms and click farmers are, how they differ from bot farms, how they work, what they sell, what they cost, whether they're legal, where they operate, and how to spot their clicks in GA4 and your ad accounts. For bots in general, start with what bots are.

What Is a Click Farm?

A click farm is an operation that pays people to click ads, like, follow, watch and review by hand, so fake engagement looks like real interest.

The word "farm" is about scale. One person clicking a rival's ad is a nuisance. A room of people, each logged into several accounts and working through a list of tasks, can deliver thousands of likes, follows, reviews or ad clicks to order.

What sets a click farm apart is that people do the work. The phones are real, the accounts often look real, and the person tapping the screen is real. Only the interest is fake.

The platforms that bill for clicks have a name for exactly this. Google lists "manual clicks", which it describes as "clicks that increase your ad costs or inflate publisher profits", among invalid clicks, next to automated traffic from bots (Google Ads Help). Its longer page on invalid traffic describes "intentional interactions from real people who lack genuine interest in your ad", including "competitors who manually click to increase your spend" and "publishers who pay users to click ads" (Google Ads Help). Meta counts "clicks from people that don't indicate a genuine interest in the ad" as invalid, separately from clicks made through fake accounts and bots (Meta Business Help).

US law has a definition too. The FTC's rule on consumer reviews and testimonials treats followers, likes, views and comments as fake when they're generated by bots or fake accounts, "or that otherwise do not reflect a real individual's or entity's activities, opinions, findings, or experiences" (16 CFR 465.1). That last clause is the one that fits a click farm: the click is real, but the opinion behind it isn't.

Click farming is one source of click fraud, the paid clicks with no real interest behind them, and part of the wider problem of ad fraud.

How Is a Click Farm Different From a Bot Farm?

A click farm pays people to do the clicking. A bot farm runs software on phones or servers, and a botnet hijacks strangers' computers.

The terms get mixed up constantly. Here's how they line up, with the type of invalid click Google would file each one under.

The lines blur in practice. Some operations mix people and software: scripts for volume, people for anything that needs a person, such as a CAPTCHA or a review that has to read like a customer wrote it. A CAPTCHA only checks that a human is present, and a click farmer is one. Our comparison of CAPTCHA vs bot detection explains why that matters.

For the automated side, see our guides to bot farms, click bots and the main types of bots, including botnets.

What Is a Click Farmer?

A click farmer is a person paid per task to click, like, follow or review on demand, in a farm's office or from their own phone at home.

Click farmers work in three settings.

In a farm's office. This is the version in the news photos. In 2013, Channel 4's Dispatches program found a click farm in Dhaka, Bangladesh, where workers sat at screens "in dingy rooms facing a blank wall" on a three-shift system, as The Guardian reported (The Guardian).

From home, through apps. Researchers who studied "click farm platforms" in Brazil and Colombia describe platforms where people are paid to click, follow and like accounts on Instagram, TikTok and other networks. They found YouTubers who introduce newcomers to the work, and WhatsApp groups that act as an extension of the platforms (Grohmann and others, 2022).

Inside the business itself. A click farm can be a company's own staff. In 2019 the FTC charged a skincare company, Sunday Riley, whose managers posted reviews of its products on Sephora's site from fake accounts and asked employees to do the same. A manager described getting a VPN account to "hide our IP address and location when we write reviews", and staff were told to "[a]lways leave 5 stars" (FTC).

New York's attorney general has a name for one person running many identities: "sock-puppet accounts", run by "one person pretending to be many other people" (New York Attorney General). Whatever the setting, that's what a click farmer does all day.

How much do click farmers get paid?

No official figure exists. The numbers repeated online trace back to that 2013 Dispatches investigation. It found the Dhaka farm's boss charging $15 per thousand likes, while workers could be paid "as little as $120 a year" and might have to "generate 1,000 likes or follow 1,000 people on Twitter to earn a single US dollar" (The Guardian).

Those figures are more than a decade old and describe one farm. The 2022 research describes people paid for each click, follow or like through apps. Treat any current pay figure you find online as an estimate, not a fact.

How Do Click Farms Work?

A client orders engagement, a broker splits it into small tasks, and workers do each one by hand from accounts made to look unrelated.

The chain has four links:

1. The order. A client buys a package: followers for a profile, likes on a post, five-star reviews for a product, installs for an app, or clicks on someone's ads.
2. The broker. A seller or reseller takes the order and splits it into tasks. Dispatches found a Dhaka-registered middleman site that called itself "a crowd-sourcing platform" and claimed 83,000 registered users.
3. The work. Click farmers complete the tasks by hand, one account at a time: open the profile, follow, like, comment, move on.
4. The delivery. The client watches the numbers rise.

Accounts are the raw material. A farmer needs many accounts that don't look connected, because platforms watch for one account doing too much. Meta's Spam policy bans engaging with content "either manually or automatically, at very high frequencies", and says Meta may restrict accounts acting at lower frequencies when other signs of spam are present (Meta Transparency Center). Spreading an order across many people and accounts keeps each one's activity low.

To hide where they are, farmers can do what Sunday Riley's staff did and route their connection through a VPN, so a worker in one place appears to be somewhere else.

The human layer is the point. A person can pass a CAPTCHA, answer a phone check or write a review that reads naturally, the jobs where a script is most likely to give itself away.

What Are Click Farms Used For?

Click farms sell followers, likes, views, reviews and app installs, and they click ads to drain a rival's budget or pay a dishonest site.

Every one of these breaks a platform rule or US law, and several break both.

Social proof. The biggest buyers want to look popular. Meta bans "selling, buying, or exchanging for engagement, such as likes, shares, views, follows, clicks" (Meta Transparency Center), and YouTube doesn't allow "anything that artificially increases the number of views, likes, comments, or other metrics" (YouTube Help). The market is large. The FTC's case against Devumi, a seller of fake social media influence, found it had filled more than 58,000 orders for fake Twitter followers, more than 32,000 for YouTube views and more than 4,000 for YouTube subscribers (FTC). Our guide to Instagram bots shows what fake followers look like from the receiving end, whether a script or a click farmer made them, and how to remove them.

Reviews. Fake reviews mislead shoppers and bury honest sellers. In 2019 the FTC brought its first case against a company that paid for fake reviews on an independent retail site: Cure Encapsulations paid a website to write and post Amazon reviews of its garcinia cambogia capsules. According to the FTC, its owner said the product "needed to have an average rating of 4.3 out of 5 stars in order to have sales". The order set a $12.8 million judgment, suspended on payment of $50,000 and certain unpaid income taxes (FTC).

Apps. App makers buy installs and ratings to climb store charts. Google Play prohibits "any manipulation of ratings, reviews, or install counts", including "paying for fake reviews" (Google Play Console Help). Apple says developers who inflate chart rankings "with paid, incentivized, filtered, or fake feedback, or engage with third-party services to do so" may be expelled from its developer program (Apple).

Ad clicks. This is where click farms cost advertisers directly. A competitor can pay people to click your ads and burn through your daily budget. A dishonest site owner can pay people to click the ads on its own pages, because it earns when they're clicked. Google names both in its description of invalid traffic, and its AdSense policies ban "repeated manual clicks or impressions" and paying users to view ads (Google AdSense Help). Our guide to Google Ads click fraud covers both motives in detail.

How Much Does Click Farming Cost?

Fake engagement is cheap to buy. For an advertiser, a farm click costs whatever the platform bills for it, unless it's found to be invalid.

What buyers pay

The Dhaka farm Dispatches visited in 2013 charged $15 per thousand likes. The best public price data since then comes from NATO's StratCom research center, which buys fake engagement on purpose to test how well platforms remove it. In 2019 its researchers paid €300 (about $335) for 3,530 comments, 25,750 likes, 20,000 views and 5,100 followers (NATO StratCom COE). Those sellers could use bots, people or both, so the figure covers fake engagement in general, not click farms alone. Our guide to bot farms has the full price table, including the 2022 round.

What a farm click costs you

On your side of the bill, the question is whether the platform catches the click.

• Google Ads doesn't charge for clicks it finds invalid. It filters them out of your campaign metrics and billing, and credits you "where appropriate and possible" if it finds them after you were billed (Google Ads Help).
• Meta says "You will not be charged for clicks that are determined to be invalid" (Meta Business Help). For the ones it misses, your ad set's charge choice decides the cost (Meta Business Help). Charged for impressions, you paid when the ad was shown to the farmer. Charged for link clicks, the farmer's click is billed.
• Every click a platform misses costs the same as a real customer's, at your normal cost per click.

Illustrative: at $3 a click, 200 farm clicks a month that Google misses cost $600, and none of them will ever buy.

Are Click Farms Illegal?

Selling fake reviews or followers can break US law, and so can buying them for a business. Google, Meta, YouTube, Apple and Google Play ban it.

Owning phones and paying people to tap them isn't illegal. What a click farm sells often is, and the FTC's 2024 rule spells out that buyers can be liable as well as sellers.

The FTC rule is the one marketers should know. It bans selling fake indicators of social media influence, and bans anyone from buying them when they "knew or should have known" they were fake and they "materially misrepresent their influence or importance for a commercial purpose" (16 CFR 465.8). It also bans writing or selling fake reviews, and businesses buying them (FTC). A brand or agency that pays a click farm for followers or five-star reviews takes on a legal risk, not just a reputational one.

New York got there first. In January 2019 its attorney general settled with Devumi and related companies, finding that selling fake followers and likes was illegal deception and that fake activity using stolen identities was illegal impersonation (New York Attorney General). The FTC settled its own case with Devumi that October.

Clicks on ads sit under the platforms' rules. Google and Meta treat paid or competitor clicks as invalid and don't bill for the ones they catch, and AdSense bans publishers from generating them. Our guide to what bots are covers the US laws that apply when software does the clicking.

This section is a summary for marketers, not legal advice.

Where Are Click Farms Located?

Investigations have found click farms in Bangladesh, Brazil and Colombia, but a farm can work from anywhere and hide its location behind a VPN.

The sources in this guide put click farmers on the map in two places: Dhaka in the 2013 Dispatches investigation, and Brazil and Colombia in the 2022 research. The Guardian summed up the model in 2013 as "cheap labour paired with low-cost connectivity to the internet".

Location is still a weak filter. A worker can route traffic through a VPN, as Sunday Riley's staff did to hide their location, and app-based click work can be done from any phone, including one in the country you target.

If one country suddenly sends a large share of your traffic, the cause isn't always a farm. Our guide to traffic from China and Singapore covers a recent automated case.

Why Is Click Farm Traffic Hard to Spot?

A farm visit is a real person on a real phone, so no single visit looks wrong, and GA4's bot filter removes only known bots, not people.

Most of the defenses built into analytics look for automation. GA4 automatically excludes "traffic from known bots and spiders", identified by Google's research and the IAB's International Spiders and Bots List, and you can't turn that off or see how much it removed (Google Analytics Help). A click farmer is a person on an ordinary phone, so their visit stays in your reports like any customer's.

The ad platforms catch some. Google's ad traffic quality team uses "automated filters, machine learning, and manual reviews" (Google Ads Help), and Meta reviews suspicious click activity by hand (Meta Business Help). Neither publishes how much farm traffic gets through.

What gives a farm away is coordination. One farmer's visit looks normal. Fifty visits from the same campaign, at the same hours, all leaving without doing anything, don't. That's why detection has to compare visits with each other rather than judge them one at a time.

How Can You Detect Click Farm Traffic?

Look across many visits: paid clicks with no engagement or sales, bursts at odd hours, and placements that send clicks but never customers.

You won't catch a click farmer from one session. You can catch the pattern a farm leaves across many.

In GA4

GA4 counts a session as engaged when it lasts longer than 10 seconds, has a key event, or has at least two page or screen views (Google Analytics Help). Go to Acquisition, Traffic acquisition, and compare the engagement rate of each paid source with your organic traffic. A paid source whose sessions are rarely engaged, and never convert, deserves a closer look.

Check where those visits land first. A click on a Google ad arrives with a GCLID and counts as Paid Search. A click on a Meta or Microsoft ad counts as paid only if your ad URLs carry UTM tags. Untagged, the referrer decides, so a Meta click lands in Organic Social, or in Direct when there's no referrer (Google Analytics Help). Tag every ad URL so farm clicks show up under the campaign that paid for them. Our guide to GCLID and other click IDs explains the difference.

In your ad platforms

• Click-through rate up, conversions flat. More clicks and no more sales is the classic sign.
• The Invalid clicks column. In Google Ads it shows the clicks Google already filtered and didn't charge you for (Google Ads Help). A sudden rise means more bad clicks are reaching your ads, even if Google caught those.
• Placements and apps. On Display, Performance Max and Meta's Audience Network, check which sites and apps send clicks without sales.

In your leads

If your campaigns count form fills as conversions, click farmers can fill them in with details that look real, because a person types them. Watch for leads that never answer, the same details repeated, and bursts of form fills from one campaign. A CAPTCHA alone won't stop them. Google's advice for lead generation also includes double opt-in, server-side checks of submissions and goals such as Qualified lead (Google Ads Help).

On social accounts and creator deals

If you pay creators by audience size, their followers matter. Look for sudden follower spikes, generic comments and accounts that fail the usual bot checks. Our guide to Instagram bots walks through those checks, including Instagram's About this account. A follower made by a click farmer looks more real than one made by a script, so judge creators by the visits and sales their UTM-tagged links bring, not by follower counts.

For the full method across all bot traffic, see how to detect bot traffic.

Farm and bot clicks make good campaigns look worse than they are. Run the free GA4 check for a directional read on how much of your paid traffic is real. Read-only, no signup required.

What Does Click Farming Do to Your Ad Results?

Farm clicks are billed, never buy and pull your conversion rate down. Campaigns that optimize for page views or leads can count them as results.

A click farmer is paid to click, not to shop. Here's what that does to your numbers.

• Your conversion rate falls and your CPA rises. Every farm visit is a session with no purchase. The clicks cost money and add nothing to sales, so your cost per purchase goes up by what they cost.
• Early-step goals can count them. A farmer's phone runs your tags like any visitor's, so a farm visit fires a page view, and it can fire a ViewContent event, an add to cart or a form fill if the task asks for it. If one of those is a campaign's goal, the platform counts the farm visit as a result and bids for more traffic like it. Smart Bidding optimizes "for conversions or conversion value in every auction" (Google Ads Help), so a campaign bidding on purchases gets nothing from farm visits to learn from.
• Your tests get noisier. If farm clicks reach one ad more than another, an A/B test compares polluted samples.
• Your social numbers inflate. Bought likes and follows make a post or a creator look more popular than they are.

For the checks inside Ads Manager, see Facebook and Meta ad fraud. For the industry's terms, see what invalid traffic is.

How Can You Protect Your Ad Budget From Click Farms?

Target by location presence, cut placements that never sell, optimize on purchases, tag every ad URL, and ask Google to investigate within 60 days.

No setting stops a person who is paid to click. These limit how many reach you and what they cost.

Target People in Your Locations

In Google Ads, the Presence option reaches "people in or regularly in your targeted locations". The default, Presence or Interest, also reaches people elsewhere who've shown interest in those locations (Google Ads Help). Presence narrows who sees the ad. It won't stop a farmer who appears local through a VPN.

Exclude Placements That Never Sell

Review placement and app reports every month and exclude the sites and apps that send clicks with no sales. Account-level placement exclusions apply to every campaign in the account, including Performance Max (Google Ads Help).

Treat IP Exclusions as a Patch

You can exclude up to 500 IP addresses per campaign, and account-level IP exclusions also reach Performance Max (Google Ads Help). Use them for a repeat offender. A farm that changes connections gets past them.

Optimize on Purchases

Bid on purchases or qualified leads, not page views or raw form fills, and farm visits stop counting as results. You still pay for their clicks, but they stop steering the bidding.

Tag Every Ad URL

Use UTM tags on Meta, Microsoft and creator links so every paid visit lands under its campaign in GA4. Pay creators on the tracked visits and sales their links bring.

Ask Google to Investigate

If you think invalid clicks got through, Google accepts investigation requests for activity in the last 60 days through its Click Quality Form, and decides any credit. Google also says it "cannot evaluate third-party reports" (Google Ads Help), so bring dates, campaigns and your own records. Our guide to Google Ads click fraud walks through the form.

Never Buy Engagement or Reviews

The cheapest protection is on your own side. Buying followers, likes or reviews breaks every major platform's rules, can break the FTC rule, and leaves you with an audience that never buys.

Use Detection That Compares Visits

A farm's weak point is coordination, so the layer that matters is detection that scores every visit and compares visits with each other. When you evaluate tools, ask whether they show results by source and campaign, so you know what to cut. Our guide to click fraud software compares the kinds of tool.

Cut the sources that send clicks no customer is behind, and put that budget into campaigns that really sell. Hyperguard scores every visit while it happens and shows bot share by source and campaign. Run the free GA4 check first, then see how Hyperguard works.