How to Stop Fake Leads
From Polluting Your Pipeline

Your sales team is drowning in junk. 30-50% of inbound leads are fake—bot-generated form fills, competitor sabotage, affiliate fraud, or just spam. Every fake lead wastes hours of follow-up time, skews your metrics, and costs money.

If you're running paid ads or affiliate programs, the problem is even worse. Fraudsters know exactly how to game your system. Let's fix it.

The Fake Lead Problem: Real Numbers

Here's what bad leads actually cost you:

• Wasted sales time: Average SDR spends 15-20 minutes per lead on initial research and outreach
• Skewed analytics: Your conversion funnel looks terrible because 40% of "leads" were never real
• Ad fraud: You pay $50-200 per lead in competitive industries—bots pocket that money
• CRM bloat: Thousands of junk records make real prospects harder to find

Where Fake Leads Come From

1. Bot-Generated Form Fills

Scrapers and bots submit random data to harvest your responses or test stolen credit cards. They use disposable emails, fake names, and datacenter IPs.

2. Competitor Sabotage

Your competitors (or their unethical SEO agencies) submit fake leads to waste your time and inflate your cost-per-acquisition. This is more common than you think.

3. Affiliate Fraud

If you pay affiliates per lead, some will use bots or click farms to generate volume. They get paid, you get garbage.

4. International Spam Rings

Organized groups submit thousands of forms to scrape pricing, trigger emails, or harvest auto-responses for phishing campaigns.

Detection Methods That Actually Work

Stopping fake leads requires multiple signals combined into a trust score. Here's what to check:

1. Email Validation

Check for:

• Disposable domains: Mailinator, Guerrillamail, temp-mail.org (120,000+ known domains)
• Invalid MX records: Email address can't actually receive mail
• Role-based emails: info@, noreply@, abuse@ (rarely decision-makers)
• Typo domains: gmial.com, yahooo.com (usually bots)

2. IP Reputation Scoring

Analyze the request IP for:

• VPN/Proxy detection: Why is someone hiding their location for a demo request?
• Datacenter IPs: Real users don't submit forms from AWS or DigitalOcean
• Tor exit nodes: Automatic red flag
• Geolocation mismatches: User says "New York" but IP is from Romania
• Known spam IPs: Historical abuse records

3. Behavioral Honeypots

Add hidden fields to your forms that humans won't see but bots will fill:

<!-- Hidden field - bots will fill it, humans won't -->
<input 
  type="text" 
  name="website" 
  style="position: absolute; left: -9999px;" 
  tabindex="-1" 
  autocomplete="off"
/>

// Server-side check
if (formData.website !== '') {
  // Bot detected - reject
  return { error: 'Invalid submission' };
}

4. Submission Timing Analysis

Track how long users spend on the page before submitting. Real users take 20-60 seconds to fill a form. Bots submit in <2 seconds.

Implementation: Lead Scoring with IPASIS

Here's how to implement real-time lead validation with IP intelligence + email validation:

// Next.js API route for form submission
import { NextRequest, NextResponse } from 'next/server';

export async function POST(request: NextRequest) {
  const body = await request.json();
  const { email, name, company, message } = body;
  const ip = request.headers.get('x-forwarded-for') || request.ip;

  // Step 1: Check IP reputation
  const ipCheck = await fetch(`https://api.ipasis.com/check?ip=${ip}`, {
    headers: { 'Authorization': `Bearer ${process.env.IPASIS_API_KEY}` }
  }).then(res => res.json());

  // Step 2: Validate email
  const emailCheck = await fetch(
    `https://api.ipasis.com/email?address=${email}`,
    { headers: { 'Authorization': `Bearer ${process.env.IPASIS_API_KEY}` }}
  ).then(res => res.json());

  // Step 3: Calculate lead score
  let score = 100;

  // IP penalties
  if (ipCheck.is_vpn) score -= 20;
  if (ipCheck.is_proxy) score -= 25;
  if (ipCheck.is_datacenter) score -= 30;
  if (ipCheck.is_tor) score -= 50;

  // Email penalties
  if (emailCheck.is_disposable) score -= 40;
  if (emailCheck.is_role_based) score -= 10;
  if (!emailCheck.mx_valid) score -= 50;

  // Step 4: Decision tree
  if (score < 30) {
    // High risk - auto-reject
    return NextResponse.json(
      { error: 'Submission rejected' },
      { status: 403 }
    );
  } else if (score < 60) {
    // Medium risk - flag for manual review
    await saveLeadToCRM({ ...body, flagged: true, score });
    return NextResponse.json({ 
      success: true, 
      message: 'Under review' 
    });
  } else {
    // High quality - auto-accept
    await saveLeadToCRM({ ...body, flagged: false, score });
    await notifySalesTeam(body);
    return NextResponse.json({ success: true });
  }
}

// Example IPASIS response
{
  "ip": "45.142.120.15",
  "trust_score": 22,
  "is_vpn": false,
  "is_datacenter": true,
  "country_code": "RU",
  
  "email": "test@mailinator.com",
  "is_disposable": true,
  "is_role_based": false,
  "mx_valid": true
}

Best Practices for Lead Quality

Beyond technical checks, implement these policies:

• Require phone verification: SMS confirmation adds friction for bots
• Progressive profiling: Ask for company size/industry after initial submission
• CAPTCHA for low-score leads: Show challenge only to suspicious IPs
• Monitor affiliate traffic: Track which partners send quality vs. junk
• Double opt-in emails: Require email confirmation before sales outreach

What to Do With Flagged Leads

Don't just delete everything with a low score. Instead:

1. Auto-reject score < 30: These are 99% bots—block immediately
2. Manual review score 30-60: Could be legitimate VPN users or international prospects
3. Auto-accept score > 60: Route directly to sales
4. Track patterns: If a specific affiliate sends 80% flagged leads, investigate

Measuring Success

After implementing lead scoring, track these metrics:

• Lead-to-opportunity rate: Should increase 2-3x when junk is removed
• Sales time per lead: Drops significantly when only quality leads get follow-up
• Cost per qualified lead: More accurate than raw CPL
• Affiliate fraud rate: Identify and cut bad partners

The Bottom Line

Fake leads are a tax on growth. Every dollar you spend on ads, every hour your sales team wastes—it's all preventable with proper validation.

With tools like IPASIS providing IP reputation + email validation in a single API call, there's no excuse for accepting junk leads anymore. Implement scoring, watch your pipeline quality skyrocket, and let your sales team focus on deals that actually close.