In-app fraud detection technique that includes listening to ad requests from an app, loading any ads returned, and recording on and off-screen activity to compare what is showing on screen to the actual ads loaded by the app. The sniffer does not use a proxy so the app will not know that its network activity is being monitored.