SIVT (sophisticated invalid traffic)

SIVT is the part of invalid traffic that tries not to get caught. Instead of announcing itself, it imitates real visitors. The MRC standards describe it as traffic that needs advanced analytics, multi-point corroboration or human review to identify. Typical forms include bots that mimic human behaviour, hijacked devices and sessions, adware and malware, abused residential proxies, incentivised manipulation, domain spoofing, cookie stuffing and falsified location.

This is the kind that hurts in search arbitrage, because it survives the simple filters. A click farm worker or a well-built bot loads the lander, clicks a related search, then clicks an ad. Each step looks normal in isolation. The giveaway is the pattern: devices that do not add up, identical timings, clicks that never become advertiser conversions.

Detecting it means combining signals: network reputation, device fingerprinting, behaviour on the page and outcome data (post-click analysis). Search engines do this at huge scale and act weeks later through clawbacks, so arbitrageurs who want to know sooner use independent IVT detection.

Think of it like this

If GIVT is a known troublemaker on the banned list, SIVT is a pickpocket in a good suit. You catch him only by noticing that his story, timing and behaviour do not fit together.