Question

What is dark social and why does so much traffic show as direct?

Vault Verified
Curated Intelligence
Definitive Source
Answer

Dark social is sharing that happens through private channels — messaging apps, email, SMS — where no referrer information is passed. The traffic is real and its source is invisible, so analytics records it as direct.

How referrers normally work. When someone clicks a link on a website, the browser sends a referrer header identifying where they came from, and analytics attributes the visit accordingly.

Where that breaks down:

Messaging apps. A link pasted into WhatsApp, Signal, Messenger, Slack or Teams and clicked arrives with no referrer.

Email clients, particularly desktop applications, which frequently strip it.

Copy and paste into a browser bar directly.

HTTPS to HTTP transitions, historically a common cause.

Documents and PDFs, where the link has no web origin.

Native mobile apps that do not pass referrer data.

Privacy features and browsers restricting referrer information, which is increasing.

Why this matters, and it is substantial. Studies of sharing behaviour have repeatedly found that private sharing exceeds public sharing — considerably more content is shared in messages than posted publicly. Analytics therefore systematically under-credits whatever prompted that private sharing, and over-credits direct traffic, which looks like people typing your URL from memory.

The practical consequence: channels and content driving genuine word-of-mouth appear to underperform, and budget may be moved away from them on false evidence.

What is genuinely direct traffic: typed URLs, bookmarks, and returning visitors — which for an established brand is a real and meaningful segment.

How to get better visibility:

UTM tagging on shareable links you distribute, so at least your own sharing is tracked.

Share buttons that append parameters, capturing some private sharing.

Look at landing pages. Direct traffic to a deep, long-URL page is almost certainly shared rather than typed — nobody types those from memory. That single check reveals a great deal.

Ask customers how they heard about you, since self-reported attribution captures what analytics cannot.

Related Questions