UTM Parameters: How to Tag Traffic Without Mistakes
Open your GA4 traffic report on a Monday morning and you will often see the same mess: Facebook, facebook, FB, and fb-paid all listed as separate sources. Same channel, four buckets, and now nobody trusts the numbers. That mess almost always traces back to UTM parameters that were added by whoever happened to build the link that week.
UTMs are small tags you bolt onto a URL so analytics can tell where a visitor came from. They are simple to write and easy to get wrong, and the cost of getting them wrong is quiet: your reports look fine until you try to compare two campaigns and the data refuses to add up.
This guide covers the five parameters, a naming convention that survives contact with a real team, the mistakes that corrupt reports most often, and how to connect those tags to actual revenue instead of just clicks. Examples use placeholder values you will replace with your own.
What the five parameters actually do
A tagged link is your normal landing page URL with a ? and a set of key-value pairs after it. Each pair tells your analytics tool one fact about the visit.
There are five UTM parameters. Three are required for the data to make sense, two are optional.
utm_source(required): where the traffic came from. The platform or referrer. Examples:google,linkedin,newsletter.utm_medium(required): the type of traffic. The channel category. Examples:cpc,email,social,referral.utm_campaign(required): the specific campaign or promotion. Examples:q3-webinar,pricing-launch.utm_content(optional): which version or element of the campaign. Useful for A/B tests and multiple links in the same email. Examples:header-cta,variant-b.utm_term(optional): the paid keyword. Mostly a holdover from manual keyword tagging; auto-tagging usually handles this for you in Google Ads.
A full tagged URL looks like this:
https://yoursite.com/pricing?utm_source=linkedin&utm_medium=cpc&utm_campaign=q3-demo-push&utm_content=carousel-v2
The structure: the page URL, then ?, then key=value pairs joined by &. Order does not matter to the analytics tool, but a consistent order makes links easier to scan by eye.
One detail people miss: GA4 reads these into specific dimensions. utm_source becomes Session source, utm_medium becomes Session medium, and the two together drive the default channel grouping. If your medium is garbage, your channel report is garbage. That single field decides whether a visit lands in "Paid Social" or in "Unassigned".
Source, medium, campaign: the part everyone gets wrong
The required three look obvious. They are also where 90% of tagging errors live, because the obvious answer is often the wrong one.
Source is the platform, not the channel. A common error is writing utm_source=paid or utm_source=ppc. That describes how you paid, not where the click came from. Source should answer "which site or app sent this person." So: google, bing, linkedin, facebook, mailchimp. The how-you-paid part belongs in medium.
Medium has a short, fixed vocabulary. This is the field that maps to channel groupings, so it cannot be a free-for-all. Pick a small set and never deviate:
cpc(paid search and paid social you pay per click)emailsocial(organic social posts)referral(partner sites, directories)display(banner and programmatic)affiliate
Note that GA4 treats cpc, ppc, and paid differently in its rules. To land in the Paid channels reliably, cpc is the safest medium value. Inventing a sixth or seventh medium is how you end up with traffic in "Unassigned."
Campaign is the thing you are running, not the date. utm_campaign=2026 tells you nothing in six months. Name the initiative: spring-pricing-test, gated-report-cybersecurity, q3-retargeting. If you want a date, append it (webinar-2026-03), do not let it be the whole name.
Here is the same campaign tagged badly and tagged well:
| Field | Bad | Good |
|---|---|---|
| utm_source | paidsocial | |
| utm_medium | cpc | |
| utm_campaign | campaign1 | q3-demo-push |
| utm_content | (empty) | carousel-v2 |
The bad row tells you almost nothing and will split across multiple report rows. The good row slots cleanly into Paid Social, names the platform, and lets you compare creatives.
A naming convention that survives a real team
The technical part of UTMs takes an afternoon to learn. The hard part is getting four people, two freelancers, and an agency to tag the same way for two years. That is a governance problem, and it is solved with rules, not good intentions.
Three rules cover most of the damage.
Lowercase everything. UTM values are case-sensitive. LinkedIn, Linkedin, and linkedin are three different sources to GA4, and they will appear as three rows. Force lowercase across the board. This single rule prevents more report pollution than any other.
No spaces, ever. A space in a URL breaks or gets encoded as %20, which is ugly and error-prone. Use hyphens to separate words: q3-demo-push, not q3 demo push. Pick the hyphen and stick to it; do not mix in underscores for some fields and hyphens for others.
Lock the source and medium vocabulary. Keep a short, written list of allowed source and medium values. Source can grow as you add platforms, but medium should almost never change. Everyone tags from the same list, no exceptions, no "I'll just use socialmedia this once."
The way to enforce this is not a memo. It is a shared UTM builder: a spreadsheet with dropdown menus for source and medium, or a dedicated tool, where the person building the link picks from a list instead of typing free text. The dropdown is the rule. If someone has to type the medium by hand, the convention is already dead. This same discipline is what makes lead source tracking trustworthy downstream, because every report inherits whatever you tagged at the link.
Write the convention down in one page. Source values, the locked medium list, the campaign naming pattern, and one fully worked example. New hires and new agencies get that page before they build a single link.
The mistakes that quietly corrupt your data
Most UTM problems do not announce themselves. The link works, the page loads, the visit gets counted. The damage shows up weeks later when a report makes no sense. These are the ones to watch for.
Tagging internal links. This is the worst one. If you put UTMs on a link between two pages of your own site, you overwrite the visitor's original source. Someone arrives from a LinkedIn ad, clicks an internal banner you tagged with utm_source=homepage, and GA4 starts a brand-new session attributed to your own homepage. Your paid campaign loses the conversion. Rule: UTMs go on external links pointing to your site, never on links between your own pages. For internal click tracking, use GA4 events instead.
Inconsistent casing and naming. Covered above, but it earns repeating because it is so common. Email and email, Google and google, Q3-Webinar and q3-webinar. Each pair fragments one channel into two rows. Reports built on fragmented data understate every channel.
Letting tags leak into search results. If a tagged URL gets indexed by Google, or a customer shares it, your UTMs travel with it and pollute the data. Two defenses: set a canonical tag on the clean URL so search engines index the untagged version, and consider stripping UTMs after they are captured. This matters more for email and social links that people forward.
Double tagging paid search. Google Ads has auto-tagging (the gclid parameter) that handles attribution automatically and feeds richer data into GA4. If you also add manual UTMs to your Google Ads final URLs, you can create conflicts. For Google Ads, lean on auto-tagging and skip manual UTMs unless you have a specific reason. Manual UTMs are for the channels that do not auto-tag: email, organic social, partner links, QR codes.
Forgetting the campaign name. A link with source and medium but no campaign still works, but you lose the ability to compare initiatives. Make utm_campaign non-negotiable in your builder.
A quick way to audit: open your GA4 Traffic acquisition report, switch the dimension to Session source / medium, and scan for duplicates, capitalization variants, and anything in "Unassigned." Every oddity there is a tagging rule someone broke.
From tagged clicks to revenue
UTMs tell you which campaign drove a session. On their own, that is a vanity layer: you learn that linkedin / cpc / q3-demo got 400 clicks. Clicks do not pay salaries. The value shows up when the tag follows the visitor all the way to a closed deal.
In B2B, the chain has to cross three systems. The UTM lands the visitor in analytics. The form capture passes those same UTM values into your CRM as hidden fields on the lead record. The CRM then connects that lead to a deal and a dollar amount when it closes. Now you can run the only report that matters: revenue by campaign, not clicks by campaign.
The practical setup: add hidden fields to your lead forms (source, medium, campaign, and the first-touch versions if you track multi-session journeys). A small script reads the UTMs from the URL or a cookie and writes them into those fields on submit. The lead arrives in HubSpot or Salesforce already stamped with its origin. From there, your attribution model decides how much credit each touch gets, and a closed-loop report ties the tag to bookings.
This is where the discipline pays off. If your medium field is clean and consistent, the CRM rolls up cpc traffic into one tidy number you can compare against its cost. If it is a mess of cpc, CPC, and paid-search, no amount of CRM wizardry will un-fragment it. The quality of your revenue reporting is capped by the quality of your tags. Get the tracking foundation right and UTMs become the thread that runs from first click to signed contract.
One honest caveat: UTM-based attribution sees the clicks it can tag. Dark social (a link pasted into a Slack DM or a WhatsApp group), word of mouth, and offline conversations show up as direct or organic no matter how well you tag. UTMs are a strong signal, not the whole truth. Pair them with a "how did you hear about us?" field on your form to catch what the tags miss.
Frequently asked questions
Are UTM parameters case-sensitive?
Yes, and this trips up most teams. Email and email are two different values to GA4, so they appear as separate rows and split one channel in two. Force everything to lowercase as a standing rule.
Do I need UTMs on my Google Ads?
Usually not. Google Ads auto-tagging adds a gclid parameter that handles attribution and passes more detail into GA4 than manual UTMs can. Adding your own UTMs on top can cause conflicts. Save manual tagging for channels that do not auto-tag: email, organic social, partner links, and QR codes.
Should I tag internal links on my own website?
No. Tagging a link between two pages of your own site overwrites the visitor's original source and starts a new session attributed to your own page, which destroys the real attribution. Use UTMs only on external links pointing to your site. Track internal clicks with GA4 events instead.
What is the difference between utm_medium and utm_source?
Source is the specific platform or referrer that sent the click (linkedin, google, mailchimp). Medium is the category of traffic (cpc, email, social). Source answers "where from," medium answers "what kind." Medium drives your channel groupings, so it has to come from a short, fixed list.
How many UTM parameters should I use?
The three required ones (source, medium, campaign) cover most needs. Add utm_content when you are running A/B tests or have several links in one email and want to tell them apart. utm_term is mostly legacy and rarely needed for paid search now that auto-tagging exists. More fields are not better; more consistency is.
How do I connect UTMs to actual revenue?
Capture the UTM values as hidden form fields and pass them into your CRM with the lead. When that lead becomes a deal, the CRM can attribute the revenue back to the original campaign. This turns a clicks report into a revenue report, which is the version leadership actually cares about.
A short checklist before you ship your next link
UTMs reward boring consistency. The teams with clean reports are not smarter, they just decided on rules once and held the line. Run through this before you build your next tagged URL:
- Lowercase everything, hyphens for spaces.
- Source is the platform, medium is from your locked list, campaign is named (not dated).
- External links only, never internal navigation.
- Skip manual UTMs on Google Ads; let auto-tagging do its job.
- Build the link from a shared builder with dropdowns, not by hand.
- Confirm the form captures UTMs into your CRM so the tag reaches the deal.
If your traffic reports already look like that Monday-morning mess, fixing it is a contained project: lock the convention, rebuild your active links, and clean the CRM mapping so revenue rolls up by campaign. That is exactly the kind of foundation we set for B2B clients before scaling spend. If your numbers are not adding up and you want a second pair of eyes, get in touch for a short review of your tracking setup and we will tell you where the data is leaking.