AdX Approval Services: Red Flags Before You Pay Anyone

Search for "AdX approval" and you will find marketplace listings, social media posts and direct messages offering fast access to Google Ad Exchange. Some promise approval in days. Some offer a ready-made account. Some only ask for your login and a fee. If you are an AdSense publisher trying to move up, these offers can look like a shortcut. This guide explains what is usually being sold, the five red flags to watch for, and what a legitimate onboarding through an MCM partner looks like instead. It names no companies, because the warning signs matter more than any single seller.

What is actually being sold in "AdX approval" listings

"AdX approval" is not a product Google sells, and Google publishes no public sign-up form for Ad Exchange. For many publishers, AdX access comes through Multiple Customer Management (MCM): an Ad Manager feature where a parent publisher manages your account or represents your inventory, under a direct contract with you. Our guide on how MCM works explains the two delegation types.

When a listing offers "AdX approval", it is usually one of three things:

1. A real MCM onboarding, sometimes described in marketplace slang such as "MA approval" (Manage Account) or "MI approval" (Manage Inventory). This can be legitimate if the steps below check out.
2. Access to someone else's account, sold or rented, so your site runs ads under another publisher's identity.
3. A fee for a promise, where money changes hands before anything verifiable happens.

Only the first can work within Google's rules. The red flags below help you tell them apart.

Red flag 1: guaranteed or instant approval

Any offer of "guaranteed approval" or "instant AdX" should stop you. Here is why no honest provider can make that promise:

• Google reviews your sites. In Ad Manager, sites move through statuses such as Needs attention, Getting ready and Ready, and review can take from a few days up to 2 to 4 weeks.
• Google verifies child publishers. MCM Manage Inventory children onboarded after April 3, 2024 must complete identity and address verification, and a Manage Account child verifies its identity with its own documents. Google gives 45 days to submit identity documents and can take up to 2 days to process them. Address verification uses a PIN sent by post, which typically arrives within 2 to 4 weeks and may take longer, and you have 4 months to enter it.
• Google applies its policies to every site. Child inventory is subject to the same policies and auction rules as any other inventory.

A partner can prepare your account, explain each step and send you an MCM invitation. It cannot decide the outcome of Google's checks. Wording like "eligible publishers may receive an invitation, subject to Google's policies" is honest. Wording like "100% approval" is not, and it tells you the seller either does not understand the process or is not using it.

"Instant" is a warning too. If access really appears overnight, ask what was skipped. Often the answer is that your site is being run through an account that already exists, which is red flag 2.

Red flag 2: buying or renting someone else's account

Search suggestions like "adx account buy" and "google adx reseller" show how common this offer is. The pitch is simple: an account that already has AdX enabled, sold outright or rented for a monthly fee or a share of revenue.

Do not do it. This is the clearest conflict with Google's rules, and it puts your money and your site at risk. Google's MCM Policies, part of the Ad Manager Partner Guidelines, say:

• The child publisher must own all sites in its inventory, including the root domain.
• Parent and child must have a direct contract with each other.
• Google, or its agent, may verify the relationship.
• The child is responsible to Google for all policy violations on its inventory, whoever caused them.

Under Manage Account, Google also says identity verification must be completed with the child publisher's own legal name and official identity documents. A bought or rented account is verified to someone else.

In practice, your site runs ads under a stranger's identity. The payments go to their profile. If they fail verification, get suspended, or simply decide to stop paying you, you have no account, no relationship with Google and no clear way to recover your earnings. And if the account was already in trouble before you bought it, its history comes with it. Our guide to the MCM Policies for child publishers walks through each rule in detail.

Red flag 3: being asked for passwords instead of user invitations

A legitimate partner never needs your Google password. Ad Manager has a proper way to give people access:

• Every Ad Manager user must have their own Google Account.
• An administrator adds users under Admin > Access & authorization > Users and gives each one a role.
• In MCM, the parent sends an invitation from its own network, and you approve it in your account. Under Manage Account, the parent then gets edit access to your network, except billing information.

If someone asks for your email and password "to set things up", or asks you to read out a sign-in code, refuse. With your password they can reach far more than Ad Manager: your email, your AdSense account and your payments profile. It also blurs who did what, which matters because you remain responsible for what happens on your inventory.

The reverse is a red flag too. If a seller offers you the login details of an account they control, you are being offered red flag 2 in another form.

Red flag 4: upfront fees with no contract

The MCM Policies require a direct contractual relationship between parent and child. So a missing contract is not just bad business practice; it means the relationship is not set up the way Google expects.

Be careful if you see any of these:

• A one-time "approval fee" paid before any invitation arrives.
• Payment requested through untraceable methods, or to a personal account.
• No company name, address or registration details you can look up.
• A revenue share that is promised in chat but not written down.

Under Manage Account, the revenue share you agree is part of the MCM invitation itself, as an auto-payment percentage between 0% and 100% that Google routes to the parent. Google notes that the share cannot be changed inside an existing agreement; the parent must end the agreement and send a new invitation. That makes the invitation a useful check: the number on screen should match the number in your contract.

Red flag 5: no ads.txt or sellers.json trail

Real programmatic selling leaves a public trail. ads.txt, an IAB Tech Lab standard, lets you declare publicly who is authorized to sell your inventory, marking each seller as DIRECT or RESELLER. Google describes ads.txt as not mandatory but highly recommended. Google also publishes a sellers.json file, where MCM parents typically appear as intermediaries. Whether their name and domain are shown depends on their transparency setting.

So ask the provider:

• Which lines will I add to my ads.txt file, and why?
• Will my own publisher ID appear, or only yours?

If the answer is "you don't need ads.txt" or "just add our line, nothing else", ask more questions. Under Manage Account, for example, Google tells child publishers to update ads.txt with their own Ad Exchange code after enabling AdX. Our guide to ads.txt and sellers.json explains what a healthy file looks like.

What a legitimate onboarding looks like

Set the red flags aside and the honest path is fairly plain. It usually looks like this:

1. You have your own accounts. An AdSense account, and an Ad Manager network created from it, in your own name or your company's name.
2. You sign a written agreement with the company that will be your MCM parent, covering the delegation type, the revenue share, support and how either side can end it.
3. You receive an MCM invitation in your own Ad Manager account and accept it. Invitations expire after 90 days if you do nothing.
4. You complete Google's checks yourself: identity verification with your own documents, address verification by PIN, and site review for each site you want to monetize.
5. Tags and ads.txt are updated according to the delegation type, and AdX is switched on only after your sites are approved.

At no point does anyone need your password, and at no point are you asked to run your site through someone else's account. If a company also says it is a Google Certified Publishing Partner, you can check that claim in Google's own directory; our guide to Google Certified Publishing Partners shows how.

We hold ourselves to the same list. AdXApproval.org will not promise approval, will not ask for your password and will not offer you anyone else's account.

How to remove access later

Keep these steps in mind, whether a relationship ends well or badly.

Remove individual users. Go to Admin > Access & authorization > Users, open the person's entry and deactivate them. Google says deactivation revokes their access to your network immediately, and any scheduled reports they created stop delivering.

Check who has the Administrator role. Administrators can manage users, roles and teams. Make sure at least one administrator is you, on a Google Account you control, with a strong password and two-step verification.

Know how the MCM agreement ends. Ending a partnership is a separate step from removing users, and your contract should explain how either side does it. Be aware of the knock-on effects: for a child that set up its own Ad Exchange account under Manage Account, Google says that ending the agreement disables Ad Exchange on the child network and removes the associated sites. Plan for that before you end things, so your pages are not left empty.

Clean up ads.txt. Remove seller lines for partners you no longer work with, so your file only lists sellers you have authorized.

Protect the Google Accounts behind your network. Google notes that an Ad Manager account may be suspended if all of the Google Accounts associated with it are disabled. Keeping your own account in good order is part of keeping your network running.

Next step

The safest route to AdX is also the slowest-looking one: your own account, your own sites, a written agreement and Google's checks done in your name. Before you talk to any provider, run through the requirements so you know where you stand. If your account and sites meet them, you can request a review through our MCM partner network: Get AdX access.