Best practices for conducting an audit of my digital advertising account

An audit is a measurement exercise. It answers one question: where is this account losing money, and how much. Everything below is how I run that measurement, in the order I run it, and what it costs when someone else runs it for you. If you are deciding whether to hire someone, the Google Ads audit service and cost breakdown covers my $2,500 read-only review, the deliverable, and when the math supports paying for it.

Principle 1: run audits on a fixed quarterly cadence

The most common failure mode is auditing the account only when performance drops. By the time the numbers slip far enough to trigger an audit, the leak has usually been running for two or three months. A quarterly cadence catches the leak inside the quarter it starts.

Four audits a year is enough on a mid-size account. Monthly is too often and produces audit fatigue without surfacing new findings. Annual is too slow and lets seasonal leaks compound. The quarterly slot also matches how most founders close their books, which makes the audit easier to schedule and easier to budget against.

Pick a fixed day. The first business day of each quarter works. Put it on the calendar a year out so the audit is never a reactive decision when traffic dips.

Principle 2: snapshot the account before changing anything

Before the first finding is written down, capture the baseline. Export the campaigns view at ninety days, the search-terms report at sixty days, the conversions table at thirty days, and the account settings page. Save the four exports in a dated folder.

The reason is simple. Three weeks after the audit, when a campaign is performing better or worse, the question that matters is what changed. Without the snapshot, the question is unanswerable. With it, the audit becomes a reference document the account gets measured against for the next quarter.

A founder who skips the snapshot loses the ability to attribute future results to the audit findings. The audit then becomes folklore instead of evidence.

Principle 3: scope the audit across all five layers

A useful audit covers settings, data, structure, creative, and measurement. Skipping a layer is the second most common failure mode after skipping cadence.

Settings means the account-level configuration. Conversion goals, attribution model, location targeting, network expansion settings, brand exclusions. Data means the integrity of the conversion column and the agreement between platform and analytics. Structure means how campaigns, ad groups, and keywords are organized. Creative means the ads themselves and the landing pages they point to. Measurement means whether the reporting answers the question the business is asking.

Most agency audits cover structure and creative because those are the visible layers. Settings and measurement get skipped because they are tedious. The largest findings usually live in the layers that get skipped. The free 25-page Setup Audit PDF is the formalized version of this five-layer scope and is structured to force coverage across all of them.

Principle 4: document findings in plain English

The audit deliverable is a written document, not a screenshot dump and not a spreadsheet. Each finding gets one paragraph that names the leak, the dollar exposure, the fix, and the expected lift. A founder reading the audit six months later should understand each finding without opening the platform.

Plain English forces clarity. A finding that cannot be written as a single paragraph is usually a finding the auditor does not fully understand. Writing the audit out also surfaces contradictions, which is where the bad findings get removed before they reach implementation.

Length is not the goal. A useful audit on a mid-size account may surface twelve to twenty observations, but the decision memo should elevate three to five structural fixes across six to twelve pages. Each fix gets the supporting evidence, recoverable-dollar estimate, and implementation sequence, with larger exhibits referenced by filename. Extra pages have to earn their place by making a decision easier.

Principle 5: enforce a hard split between audit and intervention

The single most violated principle. The audit pass and the intervention pass are two different jobs on two different days. During the audit, nothing in the account changes. Findings get written down. The account is left alone.

The reason is contamination. If the auditor starts pausing keywords and rewriting headlines during the audit, the snapshot is invalid before it is complete. The auditor also loses the ability to rank findings by severity, because half the leaks are gone before the full picture is assembled.

The clean sequence is audit, document, prioritize, then intervene. The intervention happens against the ranked list, in spend order, largest leak first.

On a high-volume DTC retail account I audited, the Meta dashboard reported one hundred fifty-eight thousand clicks at four cents each across the trailing ninety days. The temptation during discovery was to start culling campaigns because the click cost looked unreal. The discipline that mattered was waiting. Three days later the audit document showed the campaigns were optimizing for engagement and the click metric was counting post engagements rather than landing-page visits. The intervention that ranked first was not a campaign pause. It was a tracking and objective rebuild. Pausing during discovery would have buried the structural finding under noise.

The order to run the pass in

The five principles govern how the audit is run. This is the order the steps go in. Budget an afternoon for a self-audit, or four to six hours on a mid-size account when nothing is documented.

Step one, verify the conversion signal (45 to 60 minutes). Every number downstream is computed from the conversion column. Open Goals, then Conversions, and answer four questions. Which actions are set as primary, because primary conversions are what Smart Bidding buys toward. Is every call counted as a win, because a conversion rate above 30 to 40 percent on a lead account usually means misdials and spam are being counted. I have seen 82 percent on an account that was counting phone rings. Are the values real, meaning revenue numbers reconcile with the store or CRM inside roughly fifteen percent. Do browser and server events deduplicate against a shared event ID.

Then compare three numbers over thirty days: the Google Ads conversions table, the GA4 key events report, and the Shopify or Stripe order count. Any gap above ten percent is worth explaining. A twenty percent gap usually means double-counting or a missing event. A negative gap, where Google Ads reports fewer conversions than the platform, usually means a broken tag or a consent-mode misconfiguration eating attribution. The Tracking Stack reference covers the deduplication contract the rest of the audit depends on.

This is not a rare edge case. In the twelve home-services accounts I benchmarked in June 2026, a third had conversion tracking that was inflated or missing entirely. One logged more conversions than it had clicks. Those owners had been making budget decisions on fiction. The full data sits in the home services benchmarks. If step one fails, stop and fix the signal. The rest of the audit reads through this lens.

Step two, audit structure (45 to 60 minutes). Open the campaigns view at ninety days, sorted by spend descending, and ask whether the money is going where the strategy intends. Three patterns matter. Brand and non-brand mixed in one campaign, which inflates the apparent return on the non-brand side. A single Performance Max campaign carrying more than forty percent of spend with no audience signals, which usually means the algorithm is harvesting brand traffic and reporting it as prospecting. Ad groups holding more than twenty keywords, which means match types are competing inside the same group. Any of those on a campaign above ten percent of total spend is a finding. A clean structure has brand isolated, Performance Max bounded with audience signals and a brand exclusion list, and ad groups holding five to fifteen tightly themed keywords.

Step three, mine the search terms (60 to 90 minutes). This is the step that pays for the audit on most accounts. Pull sixty to ninety days at the account level, filter for spend above one hundred dollars, sort by cost descending, and read the top fifty terms the way a stranger would. The leaks fall into three buckets: competitor brand terms the account is paying for without intent, generic informational queries that convert at a fraction of commercial intent, and match-type drift where a broad keyword pulled in queries unrelated to the product. Any single term above five hundred dollars with zero conversions over sixty days is a finding. So is any cluster of similar terms above two thousand dollars converting below half the account average.

On an HVAC client running broad match without a negative list, ninety days of search terms hid eight thousand dollars of waste. The keyword view looked clean. The leak was one report deeper, where broad-match expansion was firing on competitor brand queries the original strategist never opened.

Step four, check audience signals and demographic skew (30 to 45 minutes). Open the audience tab on the top three campaigns by spend. Two failure modes dominate: no audience signals on Performance Max at all, and signals attached but never reviewed, where a list built eighteen months ago still feeds a campaign whose buyer has shifted. Pull the demographic breakdown. Any single segment above thirty percent of spend converting below half the account average is a finding.

Step five, read landing pages against click cost (45 to 60 minutes). Reports, Predefined Reports, Landing Page. Sort by clicks descending and read conversion rate, mobile speed score, and behavior in GA4. Any page above one hundred clicks converting below one percent is a finding. So is any page above five hundred clicks with a mobile speed score below six. Founders skip this step most often, because the fix lives outside Google Ads. The fix is also where the largest lift usually sits. On Shopify product pages I audit, moving the price above the fold, swapping a category-grid hero for a single-product hero, or rewriting the H1 to mirror the ad headline routinely moves PDP conversion rate by thirty to fifty percent inside a one-week test.

Step six, the settings that quietly leak (15 minutes). Search partners and Display expansion turned on without a decision. Location settings on presence-or-interest instead of presence. Auto-applied recommendations enabled. Bid-strategy targets that contradict the goal set in step one. And the change history, which tells you whether the account is being managed or just billed.

Write every finding down with a dollar estimate beside it, rank by recoverable dollars, and fix from the top. The free Google Ads Setup Audit is a 25-page workbook version of this exact pass with scoring sheets, and it does not ask for your email. Working from the workbook instead of from memory takes about three hours instead of six, and skips no steps.

What a free analysis has to cover to be worth the word

There are a dozen free “grader” tools online. They score the account against a generic template and produce a PDF with a number on the front. The number means little because the template is generic.

What an API scan cannot see: whether conversion actions are configured against the right pages, whether enhanced conversions are firing with a hashed email payload, whether the offline-conversion uploader runs on a cadence, whether Performance Max is cannibalizing branded search inside the asset-group reports. It also cannot see the business behind the account. A 4x ROAS on a furniture brand with a six-month repeat cycle is a different number than a 4x ROAS on a one-time-purchase supplement brand. The first is underbidding. The second is barely breaking even after refunds.

A real free analysis covers four layers in order: campaign structure, conversion-tracking integrity, search-term and audience quality, and bidding-strategy fit. That last one gets skipped most. Target ROAS on a campaign with twelve conversions a month is statistically meaningless, and Maximize Conversions on a budget-capped campaign is a different campaign than the dashboard pretends it is.

Three inputs make the analysis useful. Read-only account access, because screenshots hide the diagnostic context that lives one click deeper. The KPI the business steers on, because a 3x ROAS is excellent in one vertical and bankrupt in another. And three sentences of business context: what the product is, what the AOV runs, what the margin band looks like, and whether the business runs on first-purchase profit or lifetime value.

Who runs audits, and what each tier costs

Four categories of audit exist, and each catches a different kind of leak.

Free DIY workbooks. A workbook makes the operator type the numbers in by hand, which is the moment most leaks become obvious. A tool that runs in the background while a founder ignores it does nothing. The free 25-page Setup Audit is the workbook I run before I write a single recommendation on a paid review, paired with the Wasted Spend Calculator for a directional dollar figure. Cost: zero. What it misses: live anomaly detection and account-specific quality-score history.

Automated SaaS auditors. WordStream Advisor generates a free Performance Grader that scores an account on quality score, click-through rate, account activity, impression share, and wasted spend in about a minute. It is a temperature check, not an audit. Optmyzr is the heavyweight, and its rule engine catches drift a manual review misses, from around two hundred ninety-nine a month. Adalysis is stronger on responsive search ad analysis. I use paid tooling on accounts above fifty thousand a month in spend, where the line item earns its keep. Below that, the free platform reports plus a fifteen-minute weekly cadence do the same work for nothing. What none of them catch: whether the account architecture matches the business, whether the conversion setup is double-counting, and whether the wrong campaigns are being scaled. Those are the expensive leaks.

Agency audit reports. Most performance agencies offer a free audit as the front of a sales funnel. A junior analyst spends thirty to ninety minutes in the account, fills out a templated deck, and the senior team uses the findings as a pitch hook. Quality ranges enormously. A specialist shop can flag five-figure leaks in an hour. A generalist runs the same eighteen-point checklist on every account regardless of fit. The honest read is that an agency audit is a sales tool, which makes the incentives obvious: it leans heavy on findings that argue for a retainer and light on findings a founder could fix in an afternoon. Read the deck, take the three highest-impact findings, and judge the retainer math on its own merits.

Senior-consultant manual reviews. Three to six hours in the account, a written diagnosis against the specific business model, and a prioritized fix list with no upsell attached. One to five thousand dollars for a one-time review depending on account size. The audit pricing breakdown covers what the tiers cost across the market. On the real-estate law firm I rebuilt, the senior-review pass surfaced findings no grader flagged: broad-match keywords pulled from the rep’s recommendations, conversion tracking firing on every form submit including spam, and generic ad copy fighting every other firm on the same headline. Restructuring around case type and rebuilding conversion tracking took spend down fifty percent and doubled signed-client signups inside ninety days.

Category	Example	Cost	What it catches	What it misses
Free DIY workbook	Setup Audit PDF (this site)	Free	Structural and strategic leaks	Live anomaly detection
Automated SaaS	WordStream, Optmyzr, Adalysis	Free to $299/mo	Bid drift, match-type decay	Account architecture fit
Agency audit	Templated discovery deck	Free with sales call	Obvious leaks, retainer-friendly fixes	Findings that lose the retainer
Senior solo operator memo	One-time written diagnosis	$1K to $5K one-time	Structural calls, attribution gaps	Ongoing weekly cadence

Ongoing management is a separate purchase from the audit. Google’s own Recommendations tab is free and updates daily, and it is the worst-aligned option on the list, because the platform earns more when the account spends more. Scan it weekly, apply the two or three items a human would have flagged anyway, and decline the rest. Agency retainers run two to ten thousand a month under one hundred thousand in monthly spend and start to make math sense above seventy-five thousand. Fractional consultants run fifteen hundred to four thousand a month for senior judgment without agency overhead, and fit accounts between fifteen and seventy-five thousand a month. Below thirty thousand a month, a one-off senior memo every six months beats every retainer on the list at a fraction of the cost.

The gap between a dashboard and a diagnosis shows up fastest on accounts nobody has read. On a regional medical imaging account I audited, ninety days of Meta spend ran a little over sixty-six hundred dollars across nearly four million impressions. The surface numbers looked ordinary: half a percent click-through rate, a thirty-cent CPC, four hundred sixty thousand people reached. The finding was structural. No conversion actions were configured against the lead form, no Customer Match audiences were loaded, and the campaigns were optimizing for reach because nothing downstream gave the algorithm anything else to aim at. No grader flags that. Two paragraphs of a written memo do.

What the first thirty days with an outside operator looks like

A clean outside audit runs on a four-week shape.

Week one is access and scope. Read-only access on each platform: MCC manager-level read on Google Ads, a Business Manager partner add at analyst role on Meta, an agency link with read permission on Microsoft Advertising. Conversion access is the part most founders miss. If the operator cannot see how conversions are configured, the audit catches symptoms and never reaches the source. Week one also includes the KPI alignment call, where the founder names the metric the business is measured on at the leadership level, and an hour of business context: what the brand sells, who buys, what the AOV and margin band are, and what changed in the last ninety days.

Week two is the diagnosis pass, read-only by design. No campaign changes. The diagnosis covers structure, match-type discipline, conversion configuration, audience layering, Performance Max guardrails, attribution fit, and the cross-check between platform-reported conversions and the source of truth in Shopify or the CRM. On a Shopify baby and kids decor brand I work with, the week-two read showed three months of Meta spend just over a thousand dollars producing seven purchases at a blended 2.57x ROAS. In isolation those numbers pass the eye test. Read against the Google Performance Max campaigns on the same brand, it was clear Meta was capturing a small fraction of the buying signal while the founder had been told to scale it for a year. The waste was not inside Meta. The waste was that Meta had budget at all.

Week three is the memo. A written document, three to five findings, ranked by recoverable dollars per month, each with the report it came from, the dollar figure, the proposed fix, and a directional expected lift. The ranking matters more than the count. A founder who tries to fix fifteen things at once fixes none of them. The memo also names what was checked and found clean, because a founder who only sees problems does not know what was tested.

Week four is intervention or handoff. The operator implements, the in-house team implements, or the memo goes to the existing agency with implementation notes. All three are valid endings. A memo specific enough to name the report, the figure, the change, and the expected outcome is a memo an agency cannot argue around.

Three red flags inside those thirty days. An operator who pauses campaigns during the diagnosis week is contaminating the baseline, and the memo becomes partly a story about their own changes. An operator who pushes a retainer before the memo lands is pricing the relationship ahead of the diagnosis. An operator whose findings all happen to require their ongoing involvement is selling the next engagement.

Where this leaves you

Cadence, snapshot, scope, plain English, change control. The principles travel across Google Ads, Meta, and Microsoft Advertising because they govern how an audit gets run, not what platform it runs on. The order is fixed: tracking, structure, search terms, audiences, landing pages, settings.

Put the quarterly slot on the calendar a year out. Run the free 25-page audit against your own account first, because the diagnosis is portable and you own it at the end. The pricing breakdown covers what a paid review costs, and a diagnostic call is the right move when the ranked list runs longer than what an in-house team can absorb before the next quarterly review. The rest of the leak categories live at /wasted-ad-spend/.