Internet advertising is priced in impressions, and a machine can now produce an impression for almost nothing. This report follows a dollar of ad spend through what that has done to it.
The chart shows the share of requests for web pages, which is the surface advertising gets served into. Imperva measured the first three points on its own network and Cloudflare measured the last on a different one, and for 2025 the two came within a third of a percentage point of each other.
Machines took the majority at some point during 2024, and the line has steepened since then, because the eighteen months to June 2026 added more share than the two years before them. Cloudflare's chief executive had forecast the crossing for late 2027 and said it arrived around eighteen months early.
These figures cover requests for HTML, the pages that carry advertising. When Cloudflare counts every content type on its network, which brings in video, images, scripts and API calls, its Radar dashboard puts bots at 35.4% for August 2026, up from 30.3% a year earlier. Both baskets move the same way. The level depends on which one is counted, so the basket needs naming whenever the figure is used.
Meta reports these figures in its quarterly filings. Across the six quarters shown, impression volume grew about four times faster than the audience it was delivered to.
Audience growth slowed from 8% to 3% over the period. Impression growth ran between 14% and 19% for the last four quarters, price growth sat at 12% for the last two, and so the same people were absorbing more advertising at a higher price.
The industry spent 2025 and 2026 cleaning up its programmatic supply chain, and by its own measures the effort succeeded. The columns below put those measures beside what advertisers were dealing with over the same months.
When a measurement keeps improving as the thing it measures gets worse, the two have come apart. Every control in the left column still returns a passing grade, and that grade has stopped indicating that a person saw an advertisement.
An impression stands in for a moment of human attention, and for thirty years the substitution held because producing one needed a person sitting in front of a screen with a page loaded. Generative models removed that requirement inside eighteen months.
A machine can now write the page, load it, render the advertisement, hold it on screen for the required second, click through, install the app and fire a purchase event, and each of those steps passes the control that was built to catch it. AppsFlyer describes fraud operators running on-device AI agents that add items to carts and trigger small purchases. TAG found machine-generated inventory grading as premium more than 70% of the time, at a higher price than the real thing.
The damage compounds because the bidding system learns from what it buys. A model treats an install as a success and moves budget toward whichever supply path produced it. When InMobi analysed more than ten million supply paths it found roughly 5% of them generating over 65% of all detected fraudulent installs, and those same paths contributed almost no real conversions. Cost per install makes them look efficient, and the bidding model has no way to see past that.
Buying more carefully does little here, because generative models have been lowering the cost of a convincing fake impression faster than detection has been raising it, in every year since 2023.
Detected invalid traffic in measured programmatic reached 0.1% in the second quarter of 2026, its lowest recorded level. In that same quarter AI-generated inventory scored above real inventory on every quality control the industry sells.
The Association of National Advertisers reconciles impression-level log data from member marketers with TAG TrustNet and Fiducia every quarter. Its Q1 2026 sample covered 86 marketers, 20.9 billion impressions and $160 million of spend, which makes the first four steps below the closest thing to an audit that programmatic has.
Nothing in that chart accounts for whether the advertising changed anyone's behaviour. Gordon and Zettelmeyer ran fifteen large randomised trials on Facebook and compared the results against the observational methods in common industry use. In half the studies the observational estimate of purchase lift was wrong by a factor of three.
This applies the same steps to a figure of your choosing. Type an annual programmatic budget or move the slider.
Each category has its own vendors and its own denominator, so the industry rarely adds them together. The seven lines below give the headline figure for each one, and the rows beneath hold the evidence for anyone who wants to check it. Gold marks show where generative AI moved a number in the past eighteen months.
DoubleVerify took $748 million of revenue in 2025, guiding to as much as $826 million for 2026, and Novacap paid $1.9 billion to take Integral Ad Science private that December. On the platform side, Google blocked 8.3 billion ads last year, a rise of 63%, though it suspended 36% fewer accounts. Meta removed 159 million scam ads over the same period and has set itself a target of routing 90% of ad revenue through verified advertisers by the end of 2026. Cloudflare, sitting underneath all of it, now sends more than a billion payment-required responses a day to AI crawlers.
Advertisers pay for the verification layer through the 27.2 cents at the front of the dollar, so the cost of the defence sits inside the figure it exists to protect.
Some of the spending carries a conflict. Reuters reported in November 2025, from internal documents, that Meta projected around 10% of 2024 revenue would come from advertising for scams and banned goods, with a 95% certainty threshold before disabling an advertiser and a $135 million cap on revenue it would forgo to clean up. Meta calls that figure rough and overly inclusive.
Every figure here comes from a primary source that is named in the list below. Syndicated market-size estimates were excluded because published 2026 numbers for the fraud detection category span $461 million to $89.9 billion.
A widely repeated claim that Juniper Research forecasts $131 billion of ad fraud by 2030 misreads a February 2025 release about eCommerce fraud. Juniper's advertising series runs from $84 billion in 2023 to $172 billion in 2028.
A member of ero connects an account they already hold and use, which might be Spotify, Netflix, Uber, a bank or a retailer. The app then uses zkTLS to produce a cryptographic attestation on the member's own device, proving that a specific action happened inside that account without handing over the password or any of the underlying data.
Brands fund payouts against those proven actions, and because the money attaches to the action itself, impression valuation and viewability thresholds drop out of the process.
Three quarters of a Missions budget reaches a named human who did what a brand asked and can show it, against under seven cents of a programmatic dollar once attention and targeting error are applied.