As we move through 2026, Connected TV (CTV) has solidified its position as one of the most valuable channels in digital advertising. With cord-cutting largely complete, the living room is now a major programmatic ad channel. However, the high price tag of CTV inventory — often several times higher than standard display CPMs — has made it an attractive target for sophisticated ad fraud.
Much of CTV fraud today goes beyond simply faking a click. Because CTV ads are often inserted server-side rather than tracked client-side like a typical web browser, the fraud tactics look different — and so does what you need to check for.
The Problem: Server-Side Insertion Makes Verification Harder
Traditional fraud detection relies heavily on client-side signals — things like browser headers and JavaScript-based tracking pixels. In CTV, the ad is frequently "stitched" into the video stream by a server before it ever reaches the viewer's device, a process called Server-Side Ad Insertion (SSAI). That server-side step is exactly what makes CTV fraud different: a malicious or compromised server in the supply chain can report an ad impression, and even a completed view, without any real device or viewer ever being involved.
Fraud patterns commonly seen in CTV today:
- SSAI spoofing: Servers that misrepresent themselves as legitimate ad-stitching services, reporting impressions or completions for ads that were never actually rendered to a real viewer.
- Device ID churning: Automated systems that cycle through large numbers of fabricated or reused device identifiers (the kind used to represent Roku, Apple TV, Fire TV, and similar devices) to appear as many unique households rather than one source.
- App spoofing: Ad requests from a low-quality or unrelated app misrepresenting themselves as coming from a premium streaming app, to command a higher CPM than the actual inventory deserves.
What Standards Actually Exist to Fight This
You don't have to rely purely on trust with CTV ad partners — there are real industry standards worth knowing and asking about:
- VAST (Video Ad Serving Template): The IAB's standard for structuring and serving video ad requests, now on version 4.x, which includes support for more rigorous verification signals than earlier versions.
- app-ads.txt: The mobile/CTV equivalent of ads.txt — a file publishers host to declare which companies are authorized to sell their ad inventory. A publisher without a current, correctly configured app-ads.txt file is a meaningfully higher fraud risk, since it's much easier to spoof their inventory.
If a CTV ad partner can't clearly explain their VAST version support or point you to a valid app-ads.txt file for their inventory, that's worth treating as a red flag before committing budget.
Deep Dive: What to Ask Before You Spend on CTV
Rather than assuming any CTV partner or SSP has fraud detection handled, here's what's worth asking directly:
1. How they verify the supply path
Ask how they confirm that an ad request claiming to come from a specific streaming app or device actually originated there, rather than from a generic server. Vague answers here are a signal to dig further.
2. How "viewability" is actually measured
In CTV, because the ad is stitched directly into the stream, the player will often report an ad as "viewable" essentially by default — it doesn't mean a human watched it. Ask what engagement or completion data, beyond basic viewability, they can provide.
3. Reach and frequency consistency
Ask whether they monitor for implausible household behavior — for example, a single reported household appearing to stream continuously across an unusually large number of devices. This kind of pattern is one of the more visible signs of device ID fraud, even without specialized tooling.
Key Benefits of Scrutinizing CTV Partners
- Protect High-Value Budgets: With CTV CPMs often running well above standard display, every fraudulent impression avoided has an outsized impact on your budget.
- Accurate Reach and Frequency: Reduce the risk of fabricated device activity inflating your reported unique reach.
- Better Programmatic Bidding: Cleaner inventory data helps your bidding algorithm learn to favor genuinely premium placements rather than spoofed ones.
Common Mistakes: Relying on "Viewability" Alone for Video
In CTV, "viewability" is a weaker signal than it is in standard display advertising, precisely because server-stitched ads tend to report as viewable regardless of whether a real viewer was present. Where possible, look at interactive engagement — did the viewer interact with the remote, adjust volume, or engage with a QR code or click-to-phone element — since bots are far less able to fake this kind of interaction than a static "view."
Pro Tips for the CTV Media Buyer
- Demand app-ads.txt compliance: Only buy from publishers with a fully current, verifiable app-ads.txt file — it's one of the simplest and most effective first checks against domain and app spoofing.
- Use interactive ad units where possible: Formats with a QR code or click-to-phone element are meaningfully harder for automated systems to fake convincingly.
- Watch for off-hours volume spikes: Fraudulent "streaming" activity often clusters in overnight hours when genuine human viewership is at its lowest — a disproportionate share of impressions landing at 2-4 AM local time is worth investigating.
How AdPurity Fits In
AdPurity's current detection focuses on traffic and click-level fraud across channels like Google, Meta, and TikTok — including where a CTV or video campaign drives traffic back to a landing page, store, or app. We don't currently offer CTV-specific supply-path verification, device ID auditing, or SSAI-level detection. For evaluating CTV ad partners and SSPs directly, the questions above are your best tools today.
Learn how AdPurity tracks and validates ad campaigns
Frequently Asked Questions
Is CTV fraud a bigger problem than fraud on standard web display ads? It's a different problem more than strictly a bigger one. The server-side insertion model used in CTV removes some of the client-side signals that web fraud detection typically relies on, which is why supply-path and publisher verification matter more in this channel specifically.
What is SSAI, and why does it matter for fraud? Server-Side Ad Insertion is the process of stitching an ad directly into a video stream on the server before it reaches the viewer's device. It's what makes CTV advertising technically possible at scale, but it also means fraud can occur upstream of anything a client-side pixel would ever see.
What's the single easiest check before buying CTV inventory? Verify the publisher has a current, correctly configured app-ads.txt file. It's not a complete fraud solution on its own, but it's a fast, meaningful first filter.
Does AdPurity offer CTV-specific fraud detection? Not currently. AdPurity's detection applies to click and traffic-level fraud across standard ad platforms. For CTV supply-path and device verification, work directly with your SSPs and ask the vendor-evaluation questions covered above.
Your Audience Is Real. Your Ads Should Be Too.
The living room remains one of the most valuable spaces in advertising, but that value is exactly why it attracts sophisticated fraud. Ask the right questions of your CTV supply partners, verify app-ads.txt compliance, and look past surface-level viewability metrics before committing significant budget.
Running campaigns that drive traffic from CTV or video to your site or store? See how AdPurity validates that downstream traffic and helps make sure your budget is reaching real people.