<b>The goal that completed itself in the night</b>

<b>The goal that completed itself in the night</b>

A local services site saw its 'contact request' goal spiking at 3am, when the phones were off and the town was asleep. The owner thought demand was booming.

The clue was a landing-page-plus-referrer view of those completions. They came from referral-spam domains hitting the form endpoint directly, bypassing the page, and tripping the destination goal without a human ever arriving.

They moved the goal from a thank-you URL to a verified form-submit with a honeypot field and a server-side check.

Nightly fake completions dropped to zero, and the real contact-request rate corrected from an inflated 9% to an honest 5.2%.

The lesson: if a goal fires while nobody's awake, a bot is filling it. Validate the submit server-side, or spam will write you a success story you can't sell.