What is referrer spam?
Referrer spam is fake traffic sent to make a spammer's domain appear in your referral report. How ghost referrals work and how to filter them out.
What is referrer spam?
Referrer spam is fake traffic sent with a forged referrer header so that the spammer's domain appears in your referral report and tempts you to visit it. Some variants never touch your site at all, hitting the analytics endpoint directly. It inflates sessions, distorts bounce rate, and pollutes every source report.
A worked example.
A small site's referral report before filtering.
| Total sessions reported | 3,410 |
|---|---|
| Sessions from three unfamiliar .xyz domains | 820 |
| Bounce rate on those sessions | 100% |
| Engagement time on those sessions | 0 seconds |
| Sessions after filtering | 2,590 |
24% of reported traffic was spam
It is not only the session count that was wrong. Site-wide bounce rate, average engagement time and every conversion rate denominator were being computed over a quarter of traffic that never existed.
Two kinds, one symptom
Crawler spam is a bot that genuinely requests your pages with a forged Referer header. It consumes real bandwidth, it appears in your server logs, and any analytics that runs server side or fails to classify bots will record it.
Ghost spam never visits your site. The spammer sends fabricated hits straight to the analytics collection endpoint, guessing or scraping the site identifier. Nothing appears in your server logs, which is the giveaway: traffic that exists in analytics and nowhere else.
Ghost spam was rampant in tools whose collection endpoint accepted any site id from anywhere without validating the origin. Endpoints that validate the sending domain are considerably harder to poison.
How to recognise it
100% bounce rate, zero engagement
Spam sessions never interact. A referrer whose sessions are all one page and zero seconds is not a real audience.
A domain that makes no sense
SEO service pitches, adult sites, crypto offers and freshly registered domains on cheap TLDs. Nobody linked to you from those.
Traffic that is missing from server logs
The definitive test for ghost spam. If the visit is in analytics but not in your access logs, it never happened.
An impossible geographic or hostname pattern
Sudden traffic from one country you do not serve, or hits reporting a hostname that is not your site, both point at forged data.
See it on real data
The live demo is a fully populated dashboard with real demo traffic. No signup and no card required.
Open the live demo
Why it matters more than the session count
The obvious damage is inflated traffic. The expensive damage is downstream, because spam sessions land in the denominator of everything.
- Bounce rate rises, because spam sessions are always single-page.
- Average engagement time falls, because they contribute zero seconds each.
- Conversion rate falls, because they never convert but do count as opportunities.
- Channel reports mislead, because referral looks larger than it is.
A site with 24% spam is making budget decisions against a conversion rate that is understated by roughly a quarter. That is the real cost.
How Mrkr filters it
Mrkr classifies referrers at ingest against a maintained list of known referrer-spam and low-quality domains, and drops those hits rather than counting them and hoping you notice. Bot and crawler user agents are classified in the same pass.
The scale of what gets removed is easy to underestimate. Measured over 30 days on a live site running Mrkr, 12,146 bot hits were filtered against 2,946 human pageviews, which is 4.1 times the human traffic.
Filtering at ingest rather than in the dashboard matters, because a filter applied at read time still leaves the spam in every historical aggregate and in every exported report.
Questions, answered.
Related terms.
- What is direct traffic?
Direct traffic is every visit that arrives with no referrer and no campaign parameters, so analytics has nothing to attribute it to.
- What is web analytics?
Web analytics is the collection, measurement and analysis of what happens on a website: who visits, where they came from, which pages they see, and what they do before they leave.
- What is unique visitor?
A unique visitor is one person counted once within a reporting period, no matter how many times they visit or how many pages they view.
- What is session?
A session is one continuous visit to a site: a group of pageviews and events from the same visitor with no long gap between them.
- What is pageview?
A pageview is a single recorded view of a page on your site.
Where this shows up in Mrkr
- See filtered traffic sources in the live demo
Referrer spam and bot hits removed at ingest, not hidden behind a dashboard toggle.
- Browse the full analytics glossary
Every metric, method and privacy term, defined in one place.
Your first visitor is already here.
Drop in the script and watch them land. It takes about a minute.