Someone is selling you traffic. Ten thousand visitors for a modest fee, "real users", "SEO safe", delivered within days. The pitch usually implies that Google will notice the activity and reward you.
The short answer is that it will not help your rankings, it can quietly wreck your ability to make good decisions, and in some forms it can cause real problems. The longer answer is more interesting, because the reasoning matters more than the verdict.
Will Buying Traffic Improve Your Rankings?
No, and the reason is structural rather than a matter of Google's policy.
Google does not have access to your analytics as a ranking input. It sees its own data: what people search, which result they click in its results, and whether they seem satisfied. A visitor arriving at your site directly, from a referral, or from a script never passed through Google's results at all, so from Google's perspective that visit did not happen.
This is why "traffic" and "rankings" are less connected than people assume. Rankings produce traffic. Traffic does not produce rankings.
The usual counter-argument is that Google uses engagement signals, so lots of engaged-looking visits must help. There is genuine debate about how much Google uses interaction data from its own results pages. There is no serious case that visits it cannot see influence anything.
What About Fake Clicks on Google Results?
This is the more sophisticated version of the pitch: not visitors to your site, but a service that searches your keyword and clicks your result, so that the activity does happen inside Google's results.
Three things to know.
It is the one variant with a theoretical mechanism, because the clicks occur where Google can observe them. That is why the idea persists.
It also does not work in practice, and has not for a long time. The patterns are trivially detectable — click sources that never convert, no plausible user journeys, timing distributions that look nothing like human behaviour, device and network fingerprints that repeat. Systems designed to find exactly this kind of manipulation have had many years and enormous volumes of data to get good at it.
And it is manipulation of search results, which is squarely the sort of thing that attracts a penalty rather than a ranking. You would be spending money for, at best, nothing and, at worst, a recovery project. Our guide to recovering from a ranking drop covers what that work looks like, and it is not fun.
The Real Damage: Your Own Decisions
Here is the cost nobody selling traffic mentions, and the one that actually hurts businesses.
Fake traffic does not sit quietly in a corner of your analytics. It contaminates the data you use to decide things.
Your conversion rate collapses. Ten thousand visitors who were never going to enquire, against the same number of enquiries, halves or quarters your conversion rate. If anyone is judging the website, a campaign or an agency on conversion rate, they are now judging it on a number you broke.
Your genuine channels look worse. Organic, paid and referral performance get compared against an inflated total. Good work starts to look like underperformance.
Your A/B tests become meaningless. Bot sessions dilute the sample with traffic that cannot respond to what you are testing. Tests stop reaching significance, or reach the wrong conclusion.
Your audience data lies to you. Location, device and behaviour reports shift towards whatever the traffic source looks like. Decisions about which markets or devices to invest in get made on fiction.
You cannot see real problems. A genuine drop in organic traffic is invisible underneath a baseline of noise. That is the dangerous one — you lose the ability to notice something going wrong.
If you are paying for traffic in order to show a number to someone, you are buying a worse version of the thing you were trying to prove.
Fake Traffic You Did Not Ask For
Most sites get some of this whether or not anyone bought it.
Referral spam — sessions appearing from sites you have no relationship with, designed to get you to visit the referrer out of curiosity.
Crawlers and scrapers — SEO tools, AI crawlers, price scrapers, security scanners. Mostly harmless, and genuinely useful to identify.
Click fraud on paid campaigns — competitors or automated scripts clicking your ads. This one costs money directly and is worth monitoring if you run paid search.
Spam form submissions — bots filling your contact form. Annoying, and a sign your forms need protecting.
None of this harms your rankings. All of it degrades your reporting, which is reason enough to deal with it.
How to Spot It
Signs that what you are looking at is not human:
- A traffic spike with no corresponding change in impressions in Search Console
- Sessions with near-zero duration and a single page view, clustered
- Unexpected geography with no plausible reason
- One referrer dominating with no engagement
- Traffic arriving in perfectly even patterns across hours — humans have a daily rhythm; scripts do not
- Enquiries flat while sessions rise substantially
The Search Console cross-check is the most useful single test. Search Console reports what happened in Google's results; analytics reports what arrived at your site. If sessions rose and impressions and clicks did not, the extra traffic did not come from search, whatever your analytics says.
What to Do About It
Stop buying it. Obviously, if someone is.
Filter the known bots. Analytics platforms offer bot filtering; have it on. It will not catch everything.
Exclude known spam referrers rather than trying to block them at source. You cannot stop a referrer spoofing a visit; you can stop counting it.
Protect your forms with a challenge that does not punish real users.
Segment your reporting so your decisions rest on qualified traffic — sessions that did something — rather than on totals. This is the habit that makes the whole class of problem much less dangerous.
Measure outcomes, not volume. Enquiries, qualified leads, revenue. Nobody can fake your invoices. A reporting approach built on business outcomes is largely immune to traffic manipulation, which is part of the wider point we make in how SEO agencies should measure success.
The Thing Worth Taking Away
If a supplier offers traffic as an SEO service, that tells you something useful about the supplier. Real search work is slow, specific and mostly invisible: fixing what stops pages being indexed, earning genuine references, answering the questions your buyers actually ask. It does not produce a visitor count within a week, which is precisely why the shortcut is saleable.
The related trap is the same shape: businesses buying reviews for the same reason they buy traffic — to move a number that is supposed to be a consequence. It carries considerably more risk, and we've written about why in fake reviews and SEO.
If you suspect something is wrong with your traffic and want a straight answer about where it comes from, our free SEO audit includes a look at your actual search performance, and our SEO audit service goes through it properly.
Frequently Asked Questions
Will fake traffic affect my website ranking?
Not positively. Google ranks on what it observes in its own results, so visits that never came through Google are invisible to it. Fake traffic cannot improve rankings, and fake clicking of search results is manipulation that risks a penalty rather than a gain.
Can bought traffic get my site penalised?
Visits to your website generally cannot, because Google is not watching your analytics. Services that fake clicks on Google's own results are a different matter: that is interference with search results and sits in penalty territory. Either way you are paying for something that does not work.
Does bot traffic hurt SEO?
Not your rankings, but it damages everything you use to manage them. It deflates conversion rates, makes genuine channels look weak, invalidates A/B tests, distorts audience data, and — most seriously — hides real traffic declines behind a floor of noise.
How do I tell if my traffic is fake?
Compare analytics sessions against Search Console impressions and clicks. If sessions rose and search impressions did not, the extra traffic did not come from search. Also look for zero-duration single-page sessions, one dominant referrer with no engagement, unexplained geography, and traffic spread evenly across all hours.
How do I stop fake traffic?
Turn on bot filtering, exclude known spam referrers from reporting, protect your forms, and segment reports so decisions rest on qualified sessions rather than totals. Most importantly, report on enquiries and revenue rather than visitor counts — outcomes cannot be faked by a traffic source.