{"id":40245,"date":"2021-09-07T10:21:03","date_gmt":"2021-09-07T17:21:03","guid":{"rendered":"https:\/\/www.kochava.com\/?p=40245"},"modified":"2022-08-18T14:31:08","modified_gmt":"2022-08-18T21:31:08","slug":"get-your-ad-spend-out-of-jail","status":"publish","type":"post","link":"https:\/\/www.kochava.com\/ko\/blog\/get-your-ad-spend-out-of-jail\/","title":{"rendered":"Get Your Ad Spend Out of Jail"},"content":{"rendered":"[vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_spacing=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_shadow=”none” column_border_radius=”none” column_link_target=”_self” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” tablet_text_alignment=”default” phone_text_alignment=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\r\n

Catch Jailbroken Device Fraud<\/h2>\r\n[\/vc_column_text][divider line_type=”No Line”][image_with_animation animation=”Fade In” hover_animation=”none” alignment=”” border_radius=”none” box_shadow=”none” image_loading=”default” max_width=”100%” max_width_mobile=”default”][vc_column_text]Fraud wears many masks, and fraudsters are using jailbroken devices with no or customized operating systems on them to perform a variety of fraudulent tactics.\u00a0<\/span>\r\n\r\n\u201cJailbroken<\/a>\u201d iOS phones or \u201crooted\u201d Android ones are devices in which the operating system has been deleted, replaced, or has had restrictions removed so that the user has access to features normally prohibited. Users may jailbreak devices intentionally to have more control over their device, customize its look, and\/or download apps outside of the mainstay app stores (called \u201csideloading\u201d). However, it\u2019s no surprise that these phones are also more susceptible to fraud through malware. Fraudsters have used jailbroken devices to automate ad fraud through emulators and custom scripts that execute app installs and in-app events.<\/span>\r\n

Identifying fraud<\/h3>\r\nThe Kochava software development kit (SDK) uses proprietary processes to identify jailbroken devices. Since these devices are still able to download apps legitimately from the app store, they\u2019re not considered fraudulent by default. It\u2019s actually quite normal to have a small amount of jailbroken devices in a campaign. The <\/span>Kochava Foundry<\/span>TM<\/sup><\/span><\/a> team has observed that between 3% and 5% of normal campaign traffic may come from jailbroken devices. When jailbroken and rooted devices occupy a much larger share of total traffic, suspicion should arise.\u00a0<\/span>\r\n

How many jailbroken devices is too many?<\/h3>\r\nFraud detection tools can only go so far and are not designed to catch all anomalies because a fair amount of legitimate traffic would be omitted too. As such, identifying fraud is often a collaborative effort between an app marketer and the Kochava Foundry team. In the case of one client, their team detected several jailbroken devices on their end and asked the Foundry team to validate their findings, research further and obtain intel about the media partners involved.<\/span>\r\n\r\n\u00a0<\/span>Further analysis uncovered a small cohort of media partners, whose acquisition traffic showed 35% of iOS installs and 65% of Android installs were jailbroken or rooted. Compared to the average percentage of jailbroken\/rooted devices among other media partners and organic traffic, this was a major outlier. Drilling down further to a publisher (site ID) level, the Foundry team observed that around 18% of the media partner\u2019s sub-publishers on iOS campaigns had 100% jailbroken devices. Separately on Android, 10% of sub-publisher sites had 100% rooted devices. This intelligence enabled the marketer to collaborate directly with the media partner to root out (no pun intended) the bad publishers from the batch.<\/span>[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”40px” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_spacing=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_shadow=”none” column_border_radius=”none” column_link_target=”_self” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” tablet_text_alignment=”default” phone_text_alignment=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][image_with_animation image_url=”40360″ animation=”Fade In” hover_animation=”none” alignment=”center” border_radius=”none” box_shadow=”none” image_loading=”default” max_width=”100%” max_width_mobile=”default”][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_spacing=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_shadow=”none” column_border_radius=”none” column_link_target=”_self” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” tablet_text_alignment=”default” phone_text_alignment=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][image_with_animation image_url=”40361″ animation=”Fade In” hover_animation=”none” alignment=”center” border_radius=”none” box_shadow=”none” image_loading=”default” max_width=”100%” max_width_mobile=”default”][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_spacing=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_shadow=”none” column_border_radius=”none” column_link_target=”_self” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” tablet_text_alignment=”default” phone_text_alignment=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]The tables above represent a more typical distribution of jailbroken\/rooted devices in a campaign.<\/span>\r\n

What signs can you watch out for?<\/h3>\r\nWhile jailbroken\/rooted devices aren\u2019t behind every type of fraud, here are some signs you can be on the lookout for. If you see them, ask questions and get in touch with our team to help investigate.\u00a0<\/span>\r\n\r\nAbnormally high post-install events: <\/b>Fraudsters give marketers the success they want to see. If there is an atypically large number of your target conversion event being reported, make sure it\u2019s legitimate. The Foundry team can help and in validating, there is always a possibility of uncovering a deeper level of fraud whether jailbroken-related or other. Pay for the success you\u2019ve earned, not one that might be inflated.<\/span>\r\n\r\nGreat acquisition performance. Poor down-funnel performance:<\/b> Sometimes, the way fraudsters hide is the very thing that gives them away instead. If there is a large number of installs but poor post-install event performance, something\u2019s amiss. Evaluate the time-to-install (TTI) and time-to-event (TTE) distribution to ensure there isn\u2019t a disconnect. By mapping these two metrics, fraud may emerge as a cluster of installs with a disproportionately abysmal lack of post-install activity.\u00a0<\/span>\r\n

Takeaway: Know the signs of jailbroken device fraud<\/h3>\r\nAs a general rule, too much of anything in a campaign may be reason enough to investigate its validity. When anomalies can\u2019t be explained, that\u2019s when it\u2019s time to get experts involved.\u00a0<\/span>\r\n\r\nWant to know how the Foundry team can help you? <\/span>Request a free consultation<\/span><\/a>.\u00a0<\/span>[\/vc_column_text][\/vc_column][\/vc_row]","protected":false},"excerpt":{"rendered":"

[vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left”…<\/p>\n","protected":false},"author":55,"featured_media":40252,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,135],"tags":[],"class_list":{"0":"post-40245","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news-and-updates","8":"category-fraud-prevention"},"_links":{"self":[{"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/posts\/40245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/comments?post=40245"}],"version-history":[{"count":4,"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/posts\/40245\/revisions"}],"predecessor-version":[{"id":40362,"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/posts\/40245\/revisions\/40362"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/media\/40252"}],"wp:attachment":[{"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/media?parent=40245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/categories?post=40245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kochava.com\/ko\/wp-json\/wp\/v2\/tags?post=40245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}