Off course traps is not the only technique. What's also checked: do you use datacenter IP or not, which country/location, does your browser footprint looks like what you send by headers and user agent, some may even validate if you move mouse like a human (check how recaptca works). And also take into account that adtech companies have a lot of statistics to analyze, so single click will not be detected, but thousands likely will be.