Businesses should look for unusual activity like rapid clicking or many repeat visits coming from specific IPs, and block those IPs if the activities seem potentially fraudulent. Specific locations can also be excluded from ads if they tend to bring in fake traffic. However, these actions are time-consuming and can produce false positives - so GTMSec is also recommended.