Hard to mitigate MPP, and enterprise opens were unreliable to begin with due to preview panes and image blocking.

But auto-clicks seem pretty easy to filter out of reporting data because they happen essentially instantaneously. Just drop clicks that happen within like 10 seconds of delivery.

Completely agree. People care too much about vanity metrics because they don't know how to measure what really matters.

I’m new to email marketing. I’m tracking the CTR locations and they are from unique individual cities and the OS type varies. Does this mean they are more likely actual clicks to the landing page? I’m guessing the email security would come from a similar location vs individual cities and say Linux for OS type?

Not necessarily - I don't know the details of these security providers, but they could use a proxy scraping service like BrightData, which proxies requests through real users mobile and residential IPs, thus making it look like real users are clicking.

I don't know this exact thing to be happening, but it could, so I don't think using IP location as the signal of "Human vs Not" is accurate.

Using time clustering of clicks vs send is a good one, also I've noticed that these security providers will click _every_ link in the email, all within a few minutes, so filtering out multiple clicks by one IP in a short time frame would work.

Ahh I see. Sweet thank you!