Direct traffic is the bucket for sessions with no referrer and no campaign parameters. GA4 shows it as source (direct) and medium (none). Some of it is genuinely direct, from typed addresses and bookmarks, but a large part usually comes from links where the source information was stripped: apps, documents, some email clients, and redirects that drop the referrer.
What ends up in Direct
Read Direct as unknown rather than as typed-in. The list below covers the usual contributors.
- Typed URLs and browser autocomplete
- Bookmarks and saved links
- Links in desktop or mobile apps, including chat tools
- Links in PDFs, slide decks and documents
- Untagged email links in clients that hide the referrer
- Redirects or HTTPS to HTTP transitions that drop the referrer
How GA4 treats direct in attribution
In GA4's attribution, direct visits do not take credit from an earlier known source when the conversion path includes one. A visitor who first clicked an organic result and later typed your URL to sign up will generally have the key event credited to organic search in the attribution reports. Session-scoped reports, however, still show the direct session as direct.
Reducing misattributed direct
Tag every link you control with UTM parameters, including emails, newsletters, PDFs and in-app messages. Check redirects for referrer loss. Watch for sudden direct spikes, which often signal broken tracking or bot traffic rather than brand growth.
Example
A spike that was a newsletter
Suppose Lanternfold, a survey platform, sees direct traffic double on a Tuesday. The landing pages are all from that morning's customer newsletter, sent without UTM parameters. Tagging future sends moves that traffic into Email where it belongs.
Common mistakes
Reading direct as brand strength
Some of it is brand demand, but much of it is lost attribution. Do not use it alone as a brand metric.
Ignoring landing pages in direct
Direct sessions landing on deep blog URLs are rarely typed. They point to untracked sources.
Questions
Not necessarily, but a high share limits what you can learn. Look at its landing pages to work out which hidden sources are feeding it.
