Dark social traffic explained
Dark social describes sharing that happens through private channels — messaging apps, email, copied links — where no referrer reaches your site. These visits are real but unattributed, so they inflate the direct bucket. UTM tagging on your own links is the practical way to expose some of it.
What dark social is
Dark social is the traffic that comes from sharing in places analytics cannot observe: a link pasted into a chat, forwarded in an email, or copied between apps. None of these pass a referrer, so the resulting visits cannot be attributed to a source.
Because the visits are real but sourceless, they accumulate in the direct bucket, which is why direct so often overstates type-in loyalty.
- Private shares: messaging, email, copied links
- No referrer reaches your site
- Visits inflate the direct bucket
Exposing dark social
You cannot recover attribution for links other people create, but you can tag the links you publish and encourage sharing of those tagged URLs. UTM parameters then survive re-sharing, shrinking the unexplained portion of direct. MDN documents the referrer behaviour that creates dark social in the first place.
How it appears in analytics and logs
Dark social visits arrive with no usable referrer and land in direct. A persistently large direct share frequently signals dark social rather than a surge in type-in or bookmark traffic.
Diagnostic use case
Recognise why a large direct segment is often dark social, and use UTM tags to recover attribution for links you control.
What WebmasterID can help detect
WebmasterID files referrer-less visits as direct without inventing a source, and makes UTM-tagged links the mechanism for pulling identifiable shares out of the dark-social portion of direct.
Common mistakes
- Reading all direct traffic as brand strength.
- Trying to de-anonymise sharers to 'fix' dark social.
- Leaving owned links untagged, maximising the dark portion.
Privacy and accuracy notes
Dark social is a consequence of privacy-protective referrer behaviour. WebmasterID reports it honestly and never tries to fingerprint or re-identify visitors to uncover the original sharer.
Related pages
- Direct traffic: what it really means
Direct traffic is the bucket analytics uses when no referrer is available. It includes genuine type-ins and bookmarks, but also a large share of visits whose referrer was stripped — app opens, HTTPS-to-HTTP transitions, shorteners, and privacy settings. Treating 'direct' as a single intent is the classic analytics mistake.
- Messaging app referrer (WhatsApp, Telegram, etc.)
Links shared in messaging apps such as WhatsApp, Telegram, and similar tools almost always reach your site with no web referrer. These private shares are a core form of dark social: real, often high-intent traffic that referrer reports cannot attribute. UTM tags are the only reliable measure.
- Attribution analytics
Shrink the dark-social portion of direct with UTM-tagged links.
Sources and verification notes
- MDN — Referer header
- MDN — Referrer-PolicyWhy referrers are omitted in private-sharing contexts.
Last reviewed 2026-06-24. Facts are checked against primary/official sources where available; uncertain specifics are marked “Data not yet verified” rather than guessed.