Didva Click Fraud Protection Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
Your ads are clicked by bots, scrapers and competitors. Every one of those clicks is billed to you, and the ad platforms refund only a fraction of them.
Didva watches the traffic arriving on your own site from your ads, scores every click, and builds the exclusion lists that stop the worst offenders from costing you again. This plugin is the WordPress half of that: press Connect once and the tracking snippet is installed on every page for you.
What you get
- Fraud clicks caught beyond what the ad platforms filter themselves, with the money those blocked IPs would have cost you.
- A ready-to-paste IP exclusion list for Microsoft Advertising, and an invalid-click appeal report covering Google and Microsoft clicks, so the worst offenders stop costing you at the platform too.
- Conversions counted correctly: WooCommerce orders automatically, and a thank-you page you pick for form and lead sites.
- Multi-channel by default: Google, Microsoft Advertising and Meta ads are recognised from the click itself.
- A daily self-check that warns you if a caching or optimisation plugin starts stripping the snippet.
One-click connect, no API keys
You never copy a key into this plugin. Pressing Connect sends you to didva, where you approve the connection for this site, and the plugin exchanges a single-use code for its own revocable access token. You can revoke it at any time from your didva profile, or press Disconnect here.
What “stops them” means
Didva scores the traffic and builds the exclusion lists. Actually excluding an offender happens in the account you connect: Google Ads exclusions are pushed for you, Cloudflare blocks the traffic at your site, and Microsoft Advertising has no exclusions interface at all, so didva produces a list you paste. Automatic exclusion is part of the paid plans. On the free plan you get the detection, the statistics and manual blocking.
Free plan
Didva has a free plan, and this plugin works on it: tracking, detection and your statistics are all included. Some of the features above — exports, exclusion lists and appeal reports — are part of the paid plans. You need a didva account either way: this plugin displays and installs protection for that account, it is not a standalone blocker.
External services
This plugin connects to didva, the click-fraud protection service at app.didva.com. It is required: without it there is nothing to protect your ads.
When you press Connect. Your site’s domain and the WordPress admin address you return to are sent to app.didva.com so the site can be created in your account and you can be sent back. In exchange the plugin receives an access token and a site key, which it stores in your WordPress database.
On every page a visitor loads. The plugin adds didva’s hosted tracking script to the page, preceded by a one-line tag that names your site key. That script runs in your visitor’s browser and sends what didva needs to score the visit: the advertising click identifier in the address, the page address, the referrer, technical characteristics of the browser and device, a hashed device fingerprint, and the network address the request comes from. It also measures how the visit behaves — time on the page, scroll depth, and the number and timing of mouse, pointer and keyboard events — which is how automated traffic is told apart from a person; browsers asking not to be tracked, through Do Not Track or Global Privacy Control, are left out of that part. So the same ad click can still be recognised when the visitor comes back and buys, the click identifier is kept on their device for up to 90 days, in a first-party cookie named cg_click and in the browser’s local storage. Your public pages are tracked; the WordPress administration screens are not.
On your WooCommerce order-received page and your chosen thank-you page. The plugin adds didva’s hosted conversion script, which reports that a conversion happened, the order number for WooCommerce orders, and the click identifier stored earlier, so the sale can be matched to the ad click that produced it.
From your WordPress admin. The plugin asks app.didva.com for your site’s statistics (blocked addresses, fraud clicks, money saved) to show them on its settings page, and once a day it checks that the snippet is still present on your homepage.
When you press Disconnect, or when you delete the plugin. The plugin asks app.didva.com to revoke its own access token, so the credential is not left behind.
Service provided by didva: terms — privacy policy
Screenshots
The plugin settings page after connecting: the site being protected and its fraud statistics.
The one-click connect screen — no API keys to copy.
Approving the connection on didva: the plugin gets read-only access to this site’s statistics, and nothing else.
The didva dashboard the plugin feeds: every ad click scored, with the offending IPs, their networks and their conversion rates.
