Conversion Tracking Audit Checklist for Google Ads and GA4
A battle-tested 25-point audit checklist used by analytics specialists to identify broken tags, duplicate conversions, signal loss, and attribution leaks.
Imran Ahmed
Google Ads & Conversion Tracking Specialist
Container Integrity
- • Script placement in head/body
- • Single container verification
- • Legacy hardcoded tags audit
Event & DataLayer
- • Form submission listeners
- • Ecommerce payload schema
- • Parameter naming standards
Ad Platform Config
- • Primary vs secondary actions
- • Enhanced Conversions status
- • Deduplication key alignment
Consent & Reporting
- • Consent Mode v2 behavior
- • GA4 referral exclusions
- • Discrepancy tolerance checks
Website tracking is not a static one-time setup. Every theme update, new marketing app, checkout tweak, or browser privacy release introduces potential friction into your measurement pipeline.
Over time, tracking suffers from silent entropy: conversion tags stop firing on mobile, third-party payment gateways create referral leaks, duplicate plugins inflate order counts, or Consent Mode v2 defaults block valid conversion hits.
When marketing algorithms optimize against corrupted data, customer acquisition costs rise while campaign scaling fails.
This master audit checklist covers 25 essential verification points across Google Tag Manager, Google Analytics 4, and Google Ads to systematically uncover and fix tracking defects.
1. Why Regular Tracking Audits Are Vital
In modern digital advertising, your tracking architecture is not merely a reporting mechanism—it is the steering wheel of automated bidding. Google's Smart Bidding models (tCPA and tROAS) rely exclusively on conversion feedback loops to decide which auctions to enter and how much to bid.
If your tracking underreports by 20%, Google underbids and misses high-value prospects. If your tracking double-counts orders, Google overbids on non-converting queries.
Conducting a comprehensive audit quarterly—or before increasing ad spend—ensures that every marketing dollar operates on verified business truth.
2. Phase 1: Container & Tag Installation
Begin with foundational site-wide code hygiene:
• GTM Placement: Verify that the primary GTM `<script>` snippet is placed as high in the `<head>` as possible, and the `<noscript>` iframe snippet immediately after the opening `<body>` tag.
• Single Container Check: Ensure only one GTM container is active across the site. Multiple containers frequently cause race conditions, trigger duplication, and severe dataLayer variable collisions.
• Legacy Tag Removal: Check page source for old hardcoded `gtag.js` snippets, deprecated Universal Analytics (`analytics.js`), or orphaned Facebook Pixel codes that may conflict with GTM tags.
3. Phase 2: GA4 Event & Property Health
Audit your core GA4 configuration parameters:
• Data Retention: Ensure GA4 Admin > Data Settings > Data Retention is set to 14 months (GA4 defaults to 2 months, which blinds historical cohort exploration).
• Google Signals: Check whether Google Signals is enabled or disabled. If your site has moderate traffic, active Google Signals can trigger GA4 reporting thresholding (orange warning icons), hiding conversion details.
• Referral Exclusions: Add third-party payment gateways (PayPal, Stripe, Klarna, Shopify checkout) to GA4 Data Streams > Configure tag settings > List unwanted referrals.
• Internal Traffic Filters: Ensure internal team IP addresses and developer staging domains are filtered out of production reporting.
4. Phase 3: Google Ads Conversion Actions
Inspect conversion action architecture in Google Ads:
• Primary vs Secondary Status: Only genuine commercial outcomes (purchases, verified qualified leads) should be marked as 'Primary' conversion actions. Micro-conversions (page views, button clicks, newsletter signups) must be marked as 'Secondary' (observation only) to prevent Smart Bidding from optimizing for vanity clicks.
• Enhanced Conversions Status: Check Goals > Conversions > Diagnostics. Ensure Enhanced Conversions status shows 'Recording conversions (enhanced)'.
• Counting Method: Verify e-commerce orders use 'Count: Every' and lead forms use 'Count: One'.
• Attribution Model: Ensure conversion actions use Data-Driven Attribution rather than outdated Last Click.
5. Phase 4: Event Validation & DataLayer
Validate event parameters and conversion values:
• Lead Form Verification: Test form submissions with invalid inputs. Verify that conversion tags DO NOT fire on validation error messages.
• E-commerce Payload: Verify that the `purchase` event passes dynamic transaction values, currency codes, tax, shipping, and item arrays according to official GA4 ecommerce schema.
• Deduplication Verification: Refresh the order confirmation page. Confirm that the purchase tag does not fire twice.
6. Phase 5: Consent Mode v2 & Privacy
Audit Consent Mode v2 signals in Tag Assistant:
• Default Consent: On initial page load prior to user consent, verify that `ad_storage`, `ad_user_data`, `ad_personalization`, and `analytics_storage` are set to `denied`.
• Dynamic Update: When the user accepts the banner, verify that an `update` event executes and transitions signals to `granted`.
• No Premature Hits: Confirm that tags requiring consent do not transmit personal identifiers before the consent update executes.
7. The Complete Master Audit Table
Use this master diagnostic matrix during your audit:
| Audit Checkpoint | How to Inspect / Test | Expected Standard | Remediation if Failed |
|---|---|---|---|
| GTM Container Placement | View page source in browser; check `<head>` and `<body>` tags. | GTM snippet in `<head>`, noscript in `<body>`, exactly one container. | Remove redundant snippets; move GTM code to top of `<head>`. |
| Auto-Tagging & GCLID | Click a test ad link or append `?gclid=test123` to landing page. | GCLID remains in URL and passes through all internal redirects. | Enable Auto-Tagging in Google Ads; fix 301/302 redirect query string stripping. |
| Lead Form Trigger Accuracy | Submit form with empty required fields; inspect Tag Assistant. | Tag DOES NOT fire on validation failure. Fires only on server confirmation. | Replace generic click triggers with custom dataLayer form-success events. |
| E-commerce Value Mapping | Complete test order; inspect `purchase` event variables in GTM Preview. | Value passes dynamic numeric subtotal (e.g., `124.50`) with valid ISO currency. | Map GTM variable to dataLayer `ecommerce.value`; fix string-to-number types. |
| Order Deduplication | Refresh thank-you page 3 times after completing purchase. | Purchase tag fires on initial load ONLY; zero fires on refresh. | Store order ID in localStorage or cookie; evaluate firing condition before tag run. |
| Payment Referral Exclusions | GA4 Admin > Data Streams > Tag Settings > List unwanted referrals. | `paypal.com`, `stripe.com`, `klarna.com` listed as unwanted referrals. | Add all third-party payment domains to referral exclusion list. |
| Primary vs Secondary Actions | Google Ads > Goals > Conversions > Summary. | Only final commercial goals are Primary. Micro-events are Secondary. | Change soft goals (page views, cart adds) to Secondary in conversion settings. |
| Enhanced Conversions Health | Google Ads > Conversion Action > Diagnostics tab; inspect DevTools `em=` hit. | Status: 'Recording conversions (enhanced)'; `em` parameter present in network hit. | Re-check User-Provided Data variable in GTM; accept customer data terms in UI. |
| Consent Mode v2 Firing | Tag Assistant timeline: inspect Consent Initialization vs Consent Update. | Default states `denied`; updates to `granted` only upon user banner acceptance. | Reconfigure CMP banner integration; ensure CMP script loads before GTM. |
8. When to Involve a Tracking Specialist
For standard marketing sites, walking through this checklist will uncover and resolve 80% of common tracking leaks.
However, you should consider engaging a measurement specialist when:
• You run a headless or custom single-page application (Next.js, Nuxt, React) with complex state management.
• You operate multiple international subdomains with localized currencies and payment gateways.
• You are scaling paid ad spend past $15,000 monthly and require resilient server-side tracking (Meta CAPI + Google Cloud GTM).
• Cross-domain attribution between marketing sites and external booking portals (Calendly, HubSpot, Mindbody) is broken.
Key Takeaways
- Conversion tracking is dynamic; theme changes, apps, and browser privacy policies cause silent tracking decay over time.
- Ensure only genuine commercial outcomes are set as Primary conversion actions in Google Ads to prevent Smart Bidding distortion.
- Eliminate duplicate purchase tracking by implementing order ID deduplication on order confirmation pages.
- Conduct a full audit quarterly or whenever major website code changes are deployed.
Need a Comprehensive Tracking Audit?
I personally audit your GTM container, GA4 properties, and Google Ads setup against this 25-point framework, providing an actionable remediation roadmap.
Related Technical Guides
Google Ads vs GA4 Conversions
A systematic framework for diagnosing discrepancy between Google Ads and Google Analytics 4. Learn what causes natural reporting variance versus genuine tracking breakage.
Debug GTM Conversion Tracking
A masterclass in using Google Tag Assistant and GTM Preview mode to inspect dataLayer events, validate trigger conditions, and verify conversion tags before going live.
Server-Side Tracking Guide
A pragmatic look at server-side tagging. Learn how it works, what it actually costs, its true benefits and limits, and a clear decision framework for when to upgrade.