Click injection filtering
Click injection occurs when an ad publisher sends an engagement between the start of an app download and the first session, intending to steal the attribution from another source. Click injection filtering denies attribution to engagements performed with this fraudulent intent, protecting your dataset from illegitimate attributions and maintaining the integrity of your dashboard reporting. Learn how to activate and assess Adjust’s click injection filtering below.

Note: Click injection only affects Android traffic because the Android operating system uses broadcasts to alert other apps when changes occur on the device. 

Activate click injection filtering

Click injection filtering is part of Adjust’s Fraud Prevention Suite (FPS). If you haven’t signed up for Adjust’s FPS and you want to enable Adjust’s click injection filtering, please speak to your account manager or contact support@adjust.com for more information.

Instructions

In the Adjust dashboard
  1. Navigate to your app and select your app options caret (^)
  2. Select All Settings > Fraud Prevention
  3. Switch CLICK INJECTION FILTERING to ON

View your click injection filtering statistics

Instructions

In the Adjust dashboard
  1. Navigate to your app and select your app options caret (^)
  2. Select Statistics
  3. Select the Fraud Prevention tab
Attributions rejected for click injection will appear under Rejected Install; Click Injection.

Adjust will attribute all rejected attributions to the next available source or to your Organic tracker.

Click injection filtering FAQs

What is click injection?

Click injection is when an ad publisher sends an engagement between an app download and the first session, intending to steal the attribution from another source. 

The Android broadcast system makes click injection possible. A broadcast is a message that the Android operating system sends out to the device; for instance, when a new app is downloaded. Any of the other apps on that device can use a broadcast receiver to listen to one of these broadcasts. This includes Google’s referrer broadcast, which announces when an app is being installed.

Through these broadcasts, an ad publisher with a pre-existing app on a device can learn when a new app is being installed. With this information, they can configure their app to send an ad engagement after installation of the targeted app has finished but before the first in-app session (i.e., an install within Adjust).

How does click injection filtering work?

Click injection filtering uses two timestamps to reject incoming engagements that fall between the app install completion and the first app open (an install in Adjust).

The Adjust SDK collects the first timestamp from the device:
  • An install_finished timestamp
This tells Adjust when the app install was completed.

And Adjust has its own timestamp for when an app was first opened:
  • installed_at
Adjust’s identifies any click(s) submitted between the install_finished timestamp and the installed_attimestamp and rejects attribution of the install to the source of the click. 

Engagements reported later than five minutes after the installed_at timestamp are considered valid for attribution. This is to account for the possibility that a user may install an app but not open it until encouraged to do so through a legitimate engagement source.

On this topic