An investigation based on internal Meta documents revealed that the company is not merely failing to stop fraudulent advertising. Instead, the social media giant is actively quantifying, projecting, and earning a significant portion of its total revenue from it.
According to the documents reviewed by the news agency Reuters, Meta internally projected in late 2024 that approximately 10% of its overall annual revenue, or roughly $16 billion, would be derived from “violating revenue,” a category that includes ads for scams and other banned goods.
Meta’s $16 Billion Fraud-Revenue Model
The scale of this operation is staggering. One December 2024 document notes that, on average, the company shows its platforms’ users an estimated 15 billion “higher risk” scam advertisements every single day. This inventory includes promotions for patently fraudulent e-commerce and investment schemes, illegal online casinos, and the sale of banned medical products.
This constant flood of fraudulent ads isn’t accidental. It drives a major revenue stream. Another internal document from late 2024 indicates that Meta generates roughly $7 billion per year from this single category of higher-risk ads alone.
When asked about these internal figures, Meta spokesman Andy Stone said the documents reviewed by Reuters “present a selective view that distorts Meta’s approach to fraud and scams.” Stone described the $16 billion projection as “rough and overly-inclusive,” claiming it captured many legitimate ads as well.
However, the company declined to provide an updated or corrected figure. This refusal to provide a real number suggests that the accurate figure, even if lower, remains politically and regulatorily toxic for the company.
Inside Meta’s Penalty Bid System: Why Fraud Thrives on the Platform
The core of this active and calculated monetization strategy lies in a penalty bid system that turns likely fraudsters into a premium-priced revenue source.
The 95% Certainty Threshold
Meta’s automated detection systems are built with a wide margin of tolerance. The platform only removes advertisers when its models estimate a minimum 95% probability of fraudulent behavior. Anything below that threshold gets classified as suspicious or “likely scammers,” leaving a broad middle zone where suspicious or likely fraudulent advertisers remain active.
Instead of removing these accounts, Meta imposes higher ad costs on them. This penalty pricing turns fraud from something to eliminate into something to monetize. By pushing these questionable advertisers to bid more, Meta ends up earning more per impression from them than from legitimate advertisers.
The rules are even more accommodating for high-spending advertisers. While a small advertiser might be blocked after getting flagged for financial fraud eight times, the documents indicate some High Value Accounts (HVAs) could accrue more than 500 strikes for fraudulent activity without being shut down. This two-tiered system protects the largest streams of violating revenue, showing a clear prioritization of income over platform integrity.
High-Value Accounts and the 500-Strike Loophole
This business model is the result of a conscious internal financial calculation. Meta’s leadership had anticipated regulatory fines of up to $1 billion for this activity. However, the company’s own documents estimated that it earns $3.5 billion in revenue every six months — a $7 billion annual rate — from just the portion of scam ads that carries higher legal risk. In other words, the revenue far exceeds any potential legal or regulatory consequences.
To ensure this profitable balance is maintained, Meta’s leadership has operationalized this policy by placing “revenue guardrails” on its own enforcement teams. A document from February 2025 states that in the first half of the year, the team responsible for vetting questionable advertisers wasn’t allowed to take actions that could cost Meta more than 0.15% of the company’s total revenue.
The Collateral Damage to Legitimate Marketers
Meta’s decision to profit from fraud generated severe consequences, creating a toxic and expensive environment for the legitimate PPC marketers and business leaders who form the bulk of its customer base.
For example, an ad auction’s price is set by competition. By allowing a massive volume of scam ads (accounting for approximately 10% of revenue) to remain in the auction and simultaneously forcing them to bid higher, Meta is artificially inflating the entire auction floor.
Legitimate marketers are forced to pay higher CPMs, not just because of normal market demand, but because they are unknowingly bidding in a corrupt auction where the platform itself is profiting from a subsidized layer of fraud. This functions as a “fraud tax” paid by every honest advertiser on the platform.
The Vortex of Fraud and Audience Pollution
The most insidious impact is on Meta’s core product: its ad-personalization system. The algorithm identifies users who click on one scam, tags them as being interested in such offers, and then floods their feeds with more scam ads. For legitimate marketers, this is a catastrophe.
Meta’s AI is actively polluting its own audience pool, behaviorally conditioning a segment of its user base to be easy clicks for too good to be true offers. When a legitimate business serves an ad with an honest value proposition to this user, it can’t compete for attention.
Brand Safety Risks and Impersonation
For business leaders, the brand safety risk has evolved beyond an ad appearing next to bad content. The new, existential threat is impersonation. The reported scams are not just from unknown entities but include sophisticated operations that impersonate trusted financial brands or use deepfake celebrity endorsements.
A case study from the Reuters report illustrates this perfectly: a legitimate, trusted Royal Canadian Air Force recruiter’s Facebook account was hacked. Scammers then used her trusted profile to run crypto scams, successfully defrauding her friends and colleagues who believed they were talking to a trusted friend. This demonstrates how Meta’s lax enforcement on both ad content and account security weaponizes the very trust that legitimate brands spend years building.
A System That Also Benefits from Click Fraud?
If Meta is deliberately tolerant toward ad fraud because it generates revenue, what guarantees it isn’t equally tolerant of click fraud? When fraud becomes profitable, incentives shift. Click fraud increases total click volume, and because Meta charges advertisers per click, every invalid interaction becomes revenue. Bots don’t complain, ask for refunds, or stop spending. And inflated engagement signals can make campaigns look “performant,” encouraging advertisers to scale budgets.
In other words, the platform financially benefits from inflated metrics and the additional chargeable interactions, even when those interactions aren’t coming from real customers.
Meta vs. Google: Diverging Fraud Enforcement Strategies
The problems exposed in the Meta documents aren’t an unavoidable cost of doing business in PPC advertising. A direct comparison with its main competitor, Google, reveals an important difference in enforcement philosophy, effectiveness, and platform integrity.
The most damning piece of evidence comes from Meta’s own engineers. An April 2025 internal Meta review, created to analyze online communities where fraudsters trade, came to a blunt conclusion: “It is easier to advertise scams on Meta platforms than Google.” The quantitative data reinforce this internal admission:
- In Google’s 2023 Ads Safety Report, released in the following year, the company stated it blocked or removed 5.5 billion bad ads. More significantly, it suspended 12.7 million advertiser accounts, nearly double the previous year.
- By contrast, Meta’s spokesman claimed to have removed 134 million pieces of scam ad content in 2025.
This comparison highlights a fundamental difference. Google’s strategy is account-centric, focusing on removing the bad actor from the ecosystem entirely. Meta’s strategy is revenue-centric and content-focused, allowing bad actors (especially High Value Accounts) to remain on the platform, managing their violating content with a 500-strike leeway and revenue guardrails.
The Verification Gap Between Platforms
This divide extends to advertiser verification. According to Wordstream, Google has a more mature, centralized advertiser verification program that requires advertisers to submit legal documentation with their name and location.
On the other hand, Meta is still rolling this out, and evidence suggests it is only doing so piecemeal and under direct regulatory duress. For example, Meta is only now implementing a verification process for financial advertisers in Australia, a move that directly follows intense government pressure.
The Meta Audience Network: A Subprime Inventory Crisis
A significant part of Meta’s fraud problem is concentrated in one specific, high-risk product: the Meta Audience Network, which places ads on third-party apps and websites and is a primary source of high-volume, low-quality, and fraudulent traffic.
In one online discussion, when a former Meta employee was asked how to stop bot traffic, their immediate response was, “have you tried removing audience network?”
The fact that Meta defaults advertisers into this high-fraud inventory, especially through its Advantage+ automated campaigns, is a core vulnerability.
How PPC Marketers Can Protect Their Budget and Data
Given the platform’s financial incentive to tolerate fraud, advertisers can’t rely on Meta for protection. A defense strategy is necessary to protect PPC budgets and, more importantly, keep the integrity of campaign data. Let’s see some minimum viable actions every marketer must take immediately within their Meta Ads Manager:
- Remove the Audience Network: This is the single most important native action. In the Ad Set settings, under “Placements,” manually edit the placements and deselect “Audience Network” and “Messenger.” The fact that this is a universal “best practice” recommendation is an admission of the platform’s failure to clean its own inventory.
- Deploy all native brand safety Controls: Navigate to the “Brand Safety and Suitability” section in Business Settings. Apply “Limited” inventory to prevent ads from appearing next to the most sensitive content. Create and upload block lists of specific publishers, pages, or profiles you have identified as low-quality or fraudulent. Exclude sensitive topics like, news, politics, gaming, and religion to avoid having in-stream video ads appear in high-controversy, low-relevance content.
- Use dedicated click fraud protection: Relying on platform-level safeguards isn’t enough when platforms profit from bots, click farms, and other types of invalid clicks. A third-party solution gives you an independent source of truth, looking at IP patterns, device fingerprints, click frequency, geo anomalies, and user behavior to identify non-human or low-intent activity. When suspicious traffic is detected, the protection system automatically blocks it, keeping your campaigns from being drained and your reporting data clean.
This is where ClickGuard provides a definitive solution, extending protection directly to Meta’s platforms, including Facebook, Instagram, Messenger, and the high-risk Meta Audience Network.
When suspicious traffic is detected, ClickGuard automatically blocks it before it can drain your budget and, just as importantly, before it can feed bad data to Meta’s algorithm. This ensures your campaign’s optimization is based on clean data from genuine users, helping you optimize your campaigns and maximize your true ROAS.
Conclusion: The Future of Meta’s Ad Platform Amid Regulatory Pressure
The data exposed in the internal documents provides a clear, data-driven prognosis for advertisers: Meta is not incentivized to solve this problem, and regulators are years behind.
Meta’s own internal strategy documents don’t outline a zero-tolerance policy or a rapid crackdown on fraud. Instead, they show a plan for a “managed decline” of illicit revenue. The company’s goal, per the memo, is to slowly reduce the share of violating revenue from 10.1% in 2024 to 7.3% by the end of 2025, with a longer-term target of 5.8% by 2027.
This is a business plan that explicitly budgets for billions of dollars in fraud revenue for years to come. This approach is being pursued even as the company faces active investigations from the U.S. Securities and Exchange Commission for running financial scam ads and damning findings from UK regulators.
For advertisers, the takeaway is simple: waiting for Meta to fix this problem is not a strategy. Marketers must assume responsibility for protecting their own campaigns. The most effective path forward is a combination of diligent native controls.
