Last updated: November 21, 2025
If you're running ecommerce ads and tracking your funnel, you've likely seen it: a surge in users adding products to their carts - only to vanish before checkout. On the surface, it looks like buyer hesitation. But in many cases, there's something far more deceptive happening.
Welcome to one of the more sophisticated tactics in modern click fraud: bots simulating “interested shoppers” by adding items to carts, then abandoning them.
In this article, we’ll explore why fraudsters use this trick, how it manipulates advertisers, and why most ad fraud tools don’t detect it - while Polygraph does.
The behavior: bots that mimic real shoppers
When most people think of click fraud, they picture simple bots repeatedly clicking ads to drain budgets. But the reality has evolved.
Sophisticated bots today simulate user journeys. They don’t just click an ad - they load landing pages, scroll, click through to product pages, and even add items to shopping carts. Then, they drop off - never completing the purchase.
To the average analytics dashboard, this looks like genuine user interest. You might even conclude your ad targeting is working, and you just need to improve your checkout page.
But that’s exactly what the fraudster wants you to think.
Why fraudsters use this tactic
Bots that abandon carts serve a purpose: to make fake traffic appear legitimate.
Here’s how it works:
-
Step 1: A fraudster runs ads on their fake website
They typically send bots to a site they control, rather than buying real traffic. In some cases, they may mix in a small amount of paid traffic to make it look more genuine, but the vast majority is fake.
-
Step 2: They send bots to click on ads
These bots are programmed to behave like real users – scrolling, clicking, and engaging with the content on the advertiser’s page after clicking on the ad.
-
Step 3: To pass fraud filters, bots mimic “conversion intent”
Adding products to a cart is a high-value signal of purchase intent. If bots merely bounce or linger passively, fraud filters might catch on. But if they mimic real customer behavior, they pass most detection systems.
-
Step 4: The advertiser is misled
You see people interested in your product, seemingly just shy of converting. So you keep spending money, thinking your ads are working.
This isn’t just about vanity metrics. It’s a calculated move to make the bots look real - generating fake conversions so the traffic is never flagged as low quality.
Why this hurts advertisers
Cart abandonments are a normal part of ecommerce - but when driven by bots, they warp your understanding of performance.
The consequences:
- You waste budget on fraudulent placements that deliver no actual buyers.
- Your remarketing campaigns get polluted, targeting bots instead of real people.
- You optimize toward the wrong signals, thinking certain traffic sources or audiences are working.
- Your conversion funnel becomes meaningless, because the data is fake.
Over time, this damages your ROAS, misguides your team, and wastes marketing resources.
Why traditional fraud tools miss this
Most click fraud detection systems work on outdated models. They look for:
- IP addresses clicking too often.
- Fast bounce rates.
- Obvious patterns of non-human behavior.
But these new bots don’t behave like that. They:
- Rotate IPs.
- Simulate mouse movement and scrolling.
- Spend realistic amounts of time on page.
- Add products to cart with randomized delays.
Because most fraud tools rely on basic thresholds and rule sets, they’re easily fooled by this kind of behavior.
The result: advertisers keep spending, and fraudsters keep earning.
How Polygraph stops it
Polygraph goes far beyond surface-level signals. We don’t just look at clicks - we analyze behavioral patterns, network structures, and technical signals that reveal what’s really going on.
Polygraph detects:
- Objective proof that a visitor is fraudulent — not just suspicious behaviour.
- The bugs in bot frameworks, automation signals, and technical lies bots use to appear human.
- Fraudulent activity at the packet-data level, giving definitive evidence of non-human traffic
Once detected, Polygraph disables the bots in real time - without ever blocking legitimate human visitors. This automatically stops bots from adding to cart or abandoning checkout, so only real people can take those actions. Meta is re-trained to send you humans instead of bots, your retargeting campaigns are protected, and your revenue increases - all without you lifting a finger.
In summary
Bots that add products to carts and abandon checkouts are part of a sophisticated fraud tactic designed to mimic real shopper behavior. This tricks advertisers into thinking their campaigns are working, when in reality, they're wasting money on fake traffic. Traditional fraud tools often miss this activity, but Polygraph detects and blocks it using advanced, objective detection methods.