What is dark traffic?
Dark traffic is real visits whose source is invisible because the referrer was stripped. Where it comes from, how to estimate it, and how to shrink it.
What is dark traffic?
Dark traffic is genuine human traffic whose origin analytics cannot see, because the referrer header was stripped and no campaign tag was present. It shows up as direct traffic. The usual sources are private messaging apps, email clients, in-app browsers and privacy settings that suppress the referrer.
A worked example.
Estimating dark traffic on a content site.
| Direct sessions in the period | 4,120 |
|---|---|
| Direct sessions landing on the homepage or a short URL | 1,380 |
| Direct sessions landing on a deep article slug | 2,740 |
| Estimate | 2,740 sessions of dark traffic |
About 66% of direct traffic is dark rather than typed
Those 2,740 sessions came from somewhere real: a Slack channel, a WhatsApp group, a newsletter someone forwarded. Treating them as brand-driven direct traffic would credit the wrong thing.
Dark traffic and dark social
Dark social is the best known slice: links shared privately in messaging apps rather than posted publicly. A colleague drops your article into a Slack channel, forty people click it, and every one of those visits arrives with no referrer.
Dark traffic is the wider category. It includes dark social plus every other route that loses the referrer:
- Email clients, both desktop and mobile, which almost never send one.
- In-app browsers inside social and news apps.
- Documents: PDFs, slide decks, spreadsheets shared internally.
- Sites setting a strict Referrer-Policy, which trims the header to the origin or removes it.
- HTTPS to HTTP navigation, where the referrer is dropped by the browser.
- Private and incognito windows in some configurations.
The share has grown steadily as messaging replaced public posting and as browsers tightened referrer policies by default. For many B2B sites, private sharing now moves more traffic than any public social feed.
Making dark traffic visible
Estimate it from landing pages
Direct sessions landing on a long, hyphenated deep URL were not typed. That share of the direct bucket is your working dark-traffic estimate.
Tag everything you send
Anything you control, from newsletters to conference QR codes, should carry a UTM. That converts dark traffic into attributed traffic at the source.
Give people a taggable link to share
A copy-link button that appends a lightweight utm_source=share tag turns private sharing into a measurable channel without tracking anyone.
Ask on signup
A how did you hear about us field is the only instrument that sees a podcast mention or a recommendation from a friend. It is unfashionable and it works.
See it on real data
The live demo is a fully populated dashboard with real demo traffic. No signup and no card required.
Open the live demo
What dark traffic means for measurement
Dark traffic is not a bug in your analytics and no tool eliminates it, because the information genuinely never reaches your server. Any vendor claiming to unmask it is either fingerprinting or guessing.
The practical consequence is that channel reports systematically undercount word of mouth and overcount whatever is easy to tag. If a campaign looks flat but signups rose, dark traffic is a likely explanation, and the self-reported source field is how you confirm it.
Mrkr's position on this is deliberate: it reports direct traffic honestly as unattributed rather than inventing a source for it, and it gives you the landing-page breakdown you need to size the bucket yourself. Guessing an origin would make the report look better and the decisions worse.
Questions, answered.
Related terms.
- What is direct traffic?
Direct traffic is every visit that arrives with no referrer and no campaign parameters, so analytics has nothing to attribute it to.
- What is utm?
A UTM is a set of query parameters added to the end of a link so that analytics can tell where a click came from.
- What is attribution model?
An attribution model is the rule that decides which marketing touchpoints get credit for a conversion when a customer interacted with several before buying.
- What is referrer spam?
Referrer spam is fake traffic sent with a forged referrer header so that the spammer's domain appears in your referral report and tempts you to visit it.
- What is first-party data?
First-party data is information you collect directly from your own audience on your own properties: site behaviour, purchases, support conversations, and anything customers tell you.
Where this shows up in Mrkr
- Turn shared links into attributed traffic with Mrkr UTM tracking
The only reliable cure for dark traffic is tagging what you can control.
- Browse the full analytics glossary
Every metric, method and privacy term, defined in one place.
Your first visitor is already here.
Drop in the script and watch them land. It takes about a minute.