You sent a newsletter, posted a WhatsApp broadcast and ran a week of Instagram ads. In GA4, though, most of the visits from that week sit under “Direct”, a channel that supposedly means people typed your address. You know they did not, and now you are not sure what any of the channel figures mean.
GA4 traffic sources are worked out from small clues each visit carries with it. When the clues are there, the reports are reasonably accurate. When they are missing, GA4 guesses, and the guess is often “direct”. Knowing how the labelling works tells you which numbers to believe and which to fix.
Source, medium and channel: three levels of the same answer
Every session GA4 records gets a source and a medium, and from those two it assigns a channel.
- Source is the specific origin: google, facebook.com, bing, a newsletter tool, another website’s name.
- Medium is the type of traffic: organic, cpc (paid clicks), referral, email, or “(none)” when there is no clue at all.
- Channel is a broader bucket GA4 builds from rules that look at source and medium together: Organic Search, Paid Search, Organic Social, Paid Social, Email, Referral, Direct and a few others.
So “google / organic” becomes Organic Search, “google / cpc” becomes Paid Search, and “(direct) / (none)” becomes Direct. Channels are convenient for a quick look. Source and medium are where you go when a channel number looks wrong.
Where to see your GA4 traffic sources
The traffic acquisition report shows sessions by channel by default. Above the table there is a dropdown for the primary dimension. Switching it to session source / medium gives you the detailed list. You can also add a secondary dimension, such as landing page, to see which page each source sends people to.
There are two versions of most acquisition fields, and the names tell you which is which:
| Field prefix | What it credits | Good for |
|---|---|---|
| Session source, session medium | Where each individual visit came from | Judging what brought visits this month |
| First user source, first user medium | Where the person first came from, on their very first visit | Seeing which channels introduce new people |
A customer who first found you through Google and later came back from your newsletter appears under organic search in the first-user view and email in the session view. Neither is wrong. They answer different questions. For a walk through the other screens owners use, see our tour of the main GA4 reports.
The default channel groups, in plain words
These are the buckets most small business sites see. Google maintains the rules and adjusts them from time to time, so treat this as a guide rather than the exact definitions.
- Organic Search: unpaid clicks from Google, Bing and other search engines.
- Paid Search: clicks on search ads, mainly Google Ads. Auto-tagging in Google Ads is what lets GA4 label these properly.
- Organic Social: visits from Facebook, Instagram, LinkedIn, YouTube and similar sites when no paid label is present.
- Paid Social: social traffic with a paid medium, which normally means your ad links carry UTM tags saying so.
- Email: visits whose source or medium says email. Without tags, many email clicks land in direct instead.
- Referral: visits from a link on another website, such as a directory, a supplier or a local news site.
- Direct: visits with no clue at all about where they came from.
- Unassigned: visits that carried a source or medium GA4 could not fit into any rule, often because of a home-made tag such as medium “whatsapp-blast”.
A small amount of unassigned traffic is normal. A lot of it usually means link labels were made up on the spot without a naming pattern.
Why direct traffic is so often wrong
Direct is not a channel so much as a “don’t know” pile. Real direct visits exist: people who type your address, use a bookmark, or tap a saved shortcut. But many visits land there simply because the clue that would have labelled them was lost. Common causes:
- Links shared in apps. WhatsApp messages, many email apps, SMS, PDFs and documents often open links without telling the browser where the click came from.
- QR codes. A scan from a printed flyer arrives with no source unless the encoded link carries one.
- Redirects that drop information. A short link or an old URL that redirects can strip the parameters added to it, depending on how the redirect is set up.
- Moving from a secure site to an insecure one. If any part of your journey sends people from HTTPS to plain HTTP, the referring site is usually hidden.
- Staff and returning visitors. Your own team opening the site from bookmarks every day can make direct look bigger than it is, unless internal traffic is filtered.
The fix for most of these is labelling the links you control. Our UTM tagging guide covers naming, and you can build tagged links with the free UTM link builder. Visits from your Google Business Profile are a common case too, covered in our post on tracking calls and WhatsApp clicks.
Referrals that are not really referrals
The referral channel should show websites that link to you. Two kinds of entries do not belong there.
Your own payment gateway or booking tool
If customers leave your site to pay on a gateway’s page and then return, the return visit can be credited to the gateway as a referral. The sale then looks like it came from the payment provider rather than from the ad or search that started it. In the web data stream’s tag settings, GA4 lets you list unwanted referrals so those domains stop taking credit. Add your gateway, and any third-party booking page that sends people back.
Spam and bot referrals
Older versions of Google Analytics suffered badly from fake referral traffic. GA4 seems less troubled by it, but odd referrers still appear: strange domains with high sessions, no engagement and no key events. They do not hurt your site. Use comparisons or a filter in your report view to set them aside, and do not visit the domains to find out what they are.
Reading the sources with key events alongside
Sessions by source tell you about volume. The question that matters is which sources bring people who get in touch. In the acquisition table, scroll right to key events, or choose a specific key event from its dropdown, such as your enquiry event.
A few patterns come up often:
- Organic search sends steady visits and a steady trickle of enquiries. Usually a healthy sign.
- Organic social sends bursts of visits that leave quickly with no enquiries. Normal for scrolling audiences, and a reason to judge social by more than clicks.
- Referral from one directory or partner site brings few visits but several enquiries. That relationship is worth keeping.
- Paid social sends lots of visits but only a few key events. Check the landing page and whether the ad promised something the page does not deliver.
Treat small numbers carefully. Three enquiries against two is not a trend. Look across a few months before deciding a source is worth more effort, a point covered more fully in our small business analytics overview.
Frequently asked questions
Why does Google Ads traffic show as organic or direct in GA4?
Usually because auto-tagging is switched off in Google Ads, the accounts are not linked, or a redirect on your site strips the click identifier from the landing page address. Check auto-tagging first, then open an ad’s final URL yourself and see whether the address keeps its parameters after the page loads.
Can I change which channel GA4 puts my traffic in?
Yes. GA4 lets property editors create custom channel groups with their own rules, for example a separate channel for WhatsApp campaigns. The default group stays as it is, so you can compare both. Keep custom rules simple and write down what each one does.
What does (not set) mean in the source column?
It means GA4 had no value for that field for those sessions or users. It often appears when consent was declined and data was limited, when a session started without a page view, or in reports that mix user and session fields. A small share is normal; a large share is worth investigating.
Why do visits from my Google Business Profile show as organic search?
Clicks from the profile’s website button usually come from a Google domain, so GA4 files them under Google organic along with normal search results. If you want them separated, add UTM tags to the website link in your profile, using a consistent source and medium.
Traffic labels are only as good as the links and settings behind them. If most of your visits look direct, or your gateway is taking credit for sales, our conversion tracking work includes sorting out sources and naming. You can see how this fits with ads, SEO and email in our digital marketing guide.
Next in this series: UTM Parameters Explained: Tag Links So Campaigns Show Up
