Lead fraud is the delivery of consumer contacts that cannot convert because the underlying data is fabricated, incentivized without real intent, or sold in violation of the consumer’s consent. For buyers of auto insurance leads and home services leads, fraud shows up in three main forms: invalid contact information, non-consenting consumers, and recycled leads passed off as real-time. The clearest early signal is a disconnect rate that climbs above 12 to 15% on a single source. If you are seeing that, the issue is the source, not the vertical.
The three types of lead fraud buyers encounter most
Invalid contact information. A lead record contains a phone number that is not in service, an email address that bounces, or a name and address combination that does not correspond to a real consumer. These leads come from bot-submitted forms, incentivized click traffic, or publishers running low-quality placements where form completions are not linked to any genuine consumer intent. The result is a pool of records that look like leads but produce no live contacts.
Consent fraud. TCPA (Telephone Consumer Protection Act) is the federal law requiring consumers to explicitly consent to receiving calls or messages from the businesses contacting them. Consent fraud occurs when a provider sells a lead without proper consent documentation, with altered consent language, or with consent collected on a different site from the one disclosed to the buyer. The risk sits with the buyer making the call, not the provider selling the lead. Federal Communications Commission penalties for non-consented calls can reach $500 to $1,500 per violation.
Recycled leads misrepresented as real-time. A real-time lead is a consumer contact delivered within seconds of form submission. A recycled lead is an aged record, sometimes days or weeks old, sold as if it were current. The consumer submitted the form long ago and has likely already spoken with other buyers. Contact rates on recycled leads run well below real-time benchmarks, and buyers who do not track age at the individual record level often attribute the underperformance to the vertical.
What fraud looks like in your CRM data
The signals below appear in your own data before you need to escalate to your provider. No single signal is conclusive. Two or three together on the same source point to a real problem.
| Signal | What it suggests | Threshold to investigate |
|---|---|---|
| Disconnect rate above 12% | Invalid numbers; fabricated or bot-submitted data | Normal is below 8% on real-time leads |
| Contact rate below 15% on real-time leads | Fraud, incentivized traffic, or recycled records | Exclusive home services: 35 to 55%; shared auto insurance: 25 to 45% |
| Leads submitted between midnight and 5am | Bot activity or offshore click farms | Should be rare on legitimate consumer forms |
| Form fill time under 5 seconds | Automated submission | Legitimate consumers average 45 seconds to 2 minutes |
| Same phone number appearing on multiple leads | Duplication fraud or list recycling | Should be near zero with proper filtering |
| IP address does not match stated state | Geographic fabrication | Some mismatch is expected; above 20% warrants investigation |
How to detect fraud before it compounds
Track disconnect rate by source, daily. Disconnect rate is the clearest early fraud indicator. A rate that doubles from 6% to 13% within a week on a single source is a data event. Pull the specific records, check submission timestamps, and ask for an explanation before buying more volume from that source.
Filter for overnight submissions. For genuine consumer-generated auto insurance or home services leads in the United States, form submissions between midnight and 5am should be a small fraction of total volume. If 10 to 15% of your leads from a source came in overnight, investigate the traffic driving that volume. Legitimate consumers filling out a form for a roofing quote or an auto insurance comparison are rarely doing it at 3am.
Run duplicate checks by phone number. Two leads with the same mobile number from the same source within a 30-day window is a flag. Multiple duplicates across a reporting period point to list recycling or insufficient deduplication on the provider’s side. Most CRM platforms can generate this report in minutes.
Request TCPA consent documentation on demand. Any provider running legitimate operations can produce the consent record for any lead, including the site where consent was collected, the language shown to the consumer, and the timestamp. If a provider cannot produce this on request, do not contact that lead pool until they can.
Compare IP addresses to stated geography. Most lead records include the IP address captured at form submission alongside the consumer’s stated address. Sources where more than 20% of leads show a geographic mismatch between IP and stated state deserve closer review of the underlying traffic.
What to do when fraud shows up
Document before you dispute. Pull the specific records with the signals you found: disconnect rates, submission timestamps, duplicate phone numbers. A dispute with data behind it is harder to dismiss than a complaint without it.
Pause the source while you investigate. Fraud compounds. A source at 14% disconnect this week may hit 25% next week if the underlying traffic problem is not corrected. Pausing buying is not a permanent exit; it is a data collection step.
Submit a formal dispute and track the response. Send the records to your provider with a request for credit or explanation. A reputable provider with real-time fraud filtering can explain what happened and credit the records or replace them. A provider that cannot explain a 20% disconnect rate is giving you information worth acting on.
Separate source problems from vertical problems. Buyers who absorb fraud without investigating often conclude the vertical does not work. Auto insurance leads and home services leads perform well when the source is clean. The issue is the source, not the category.
Set automated thresholds in your CRM. Once you have resolved a dispute, set a rule: if disconnect rate on any source exceeds 10% for three consecutive days, flag it for review or auto-pause. Manual monitoring works at low volume. Automated triggers work at scale.
TopTop Leads generates auto insurance leads and home services leads (roofing, windows, gutters, and bath remodel) through owned consumer brands, not third-party aggregators. Each lead record includes TCPA consent documentation, submission timestamp, and lead ID for tracking. Auto insurance leads from TopTop Leads are sold on a shared basis; home services leads are exclusive, meaning one contractor receives each lead. For details on delivery and verification, visit our buy leads page.
Frequently asked questions
What is lead fraud? Lead fraud is the delivery of consumer contacts that cannot produce a genuine conversation because the data is fabricated, submitted by a bot, incentivized without real intent, or collected without proper TCPA consent. For buyers of auto insurance and home services leads, it typically surfaces as high disconnect rates, very low contact rates, or consent documentation a provider cannot produce.
What is a normal disconnect rate for auto insurance leads? For real-time auto insurance leads generated through legitimate consumer-facing sites, a disconnect rate below 8% is a reasonable baseline. Rates climbing above 12 to 15% on any single source are a signal of data quality problems or fraud that warrants investigation before purchasing more volume from that source.
How can I tell if a lead was submitted by a bot? Check the submission timestamp and form fill duration. Bot-submitted leads often cluster in overnight windows (midnight to 5am) and show form fill times under 5 seconds. Legitimate consumers typically take 45 seconds to 2 minutes to complete an insurance or home services quote form. A provider with real fraud filtering can supply this metadata on request.
What does TCPA consent fraud mean for me as a buyer? If a provider sells a lead without valid consumer consent and you contact that consumer, the compliance risk sits with you as the buyer making the call. The FCC enforces TCPA rules, with fines up to $1,500 per violation. Always require consent documentation, including the site where consent was collected and the language the consumer agreed to, before adding any new lead source.
How do I dispute a bad batch of leads with my provider? Pull the specific records with supporting data: disconnect codes, submission timestamps, duplicate phone numbers, IP-to-geography mismatches. Submit the records to your account manager with a written request for credit or replacement. Track the provider’s response date and resolution. Providers who cannot explain data anomalies or who consistently deny legitimate disputes are a risk that grows with volume.
References
- Federal Communications Commission — TCPA regulations governing consent requirements, outbound call rules, and penalty ranges for non-compliant contact
- XANT (formerly InsideSales.com) — Lead Response Management research on contact rates, follow-up timing, and lead quality benchmarks
- Insurance Information Institute — auto insurance market data and consumer behavior context across United States markets
- Harvard Business Review — Oldroyd, J. et al. (2011), “The Short Life of Online Sales Leads,” foundational research on lead response timing and contact probability