New signals: what “would block” means
The New signals page in your dashboard runs 3 extra detection rules. They start in watch-only mode and show which paid clicks each rule would block and why; only the data-centre rule can be switched to Block, and only by you.
Step
Open New signals in your dashboard. Each rule shows its paid clicks for the last 30 days, how many it checked, how many it would block and how many are only a risk.
Tip The three rules: clicks from data centres and VPNs, visits with no mouse, touch or scroll, and one device behind 3 or more IP addresses within 6 hours.
Step
Under each rule, the evidence lists the paid clicks behind the numbers: time, masked IP, what happened and why.
Tip “Risk only” is shown but never counted as “would block”: VPNs and privacy relays, phones that didn't touch the page, pages that were never on screen, and identical phone models.
Step
If a row is a real customer, press This is a real customer. That IP is left out of “would block” for all new signals; Undo puts it back.
Tip Buyers and people who add to cart are already trusted by the main rules and are never blocked.
Switching rules off
Each rule has its own mode: Off, Observe or Flag for review. The server and VPN rule can also be set to Block: data-centre clicks then go to your Google Ads exclusion list (VPNs stay risk-only, and buyers, shoppers who add to cart, mobile networks and real customers are never blocked); switching back lifts these blocks. All new signals turns all three off at once. To stop browsers computing the device fingerprint at all, untick Device fingerprint in the WordPress plugin settings (version 1.2.0), untick it in the Click protection block in the Shopify theme editor, or add data-fp="off" to the script tag. Setup guides: WordPress, Shopify.
Why some visits have no data
The device fingerprint is only computed with marketing consent when your site uses the WP Consent API or Shopify's privacy banner. Visits recorded before 17 October 2026, visits through older versions of the WordPress plugin, and visitors who left before the first report have no behaviour or device data. Sources: WP Consent API, Shopify Customer Privacy API.
Still stuck? Email support@stopfakeclicks.com