Dramatic spikes in traffic, site visits originating from unusual sources, or unexplained budget loss can all be indicators of a potential phone farm attack.