Pause a traffic source vs scrub it

Pause a traffic source vs scrub it
Invalid-traffic warning lands. Two reactions.
Pause the source (kill that referral/social campaign for 2 weeks) when you're not sure which channel is dirty — stop the bleeding, watch invalid-click rate drop, prove the source.
Scrub-and-keep when it's clearly bots from one country/referrer — block them in Cloudflare or via IP/geo, keep the legit slice of that traffic earning.
Pausing is the panic move; scrubbing keeps the good traffic. Diagnose before you nuke the whole channel.
Test the block on logs first.