Back to resources
AttributionApr 20268 min read

UTM and Attribution Audit: Find Lost Campaign Credit in GA4

A practical guide to UTM governance, internal UTM misuse, payment gateway referrals, direct traffic risk, and source/medium naming quality.

Audience: Performance marketers, lifecycle teams, and analytics teams.

Key takeaways

  • Attribution issues often understate paid performance rather than breaking tracking visibly.
  • UTM governance should define source, medium, campaign, case, and allowed values.
  • Payment gateway and cross-domain checkout flows need special QA.

Audit UTM naming consistency

Mixed source and medium values split reports. For example, email, Email, and EMAIL can appear as separate values in downstream analysis.

Define allowed values and use campaign builders or QA checks before launch.

Watch for internal UTMs

Internal links should not use campaign UTMs because they can overwrite the original acquisition source. Use non-campaign parameters or click tracking instead.

If UTMs are lost during navigation, paid sessions may appear as Direct or Unassigned depending on the journey and reporting context.

Check payment gateway referrals

When users leave for payment and return, GA4 may classify the returning session as Referral or Direct if cross-domain and unwanted referral settings are incomplete.

Measure Copilot flags gateway referral risk when acquisition data or crawl signals show evidence, but it avoids confirming checkout behavior without the relevant data.

How to use Measure Copilot for this audit

Run a URL audit first, then upload the relevant evidence files. The report separates confirmed findings from high-risk signals and missing-data gaps, so you can decide what to fix now and what needs more proof.

Run a trust audit

FAQ

Why is Direct traffic high in GA4?

Direct can include real direct visits, untagged campaigns, app traffic, blocked referrers, lost UTMs, and cross-domain return sessions.

Can an attribution audit prove paid ROAS accuracy?

Not by itself. It can find risk and evidence gaps, but paid ROAS should be validated against platform spend, backend revenue, and GA4 conversion data.