AI-driven traffic growth has officially outpaced human internet activity, according to new research. Automated internet traffic expanded 23.51% year-over-year in 2025, while human traffic grew just 3.10%—making AI bots eight times faster than people. This shift marks a fundamental change in who and what actually uses the internet.
Key Takeaways
- Automated traffic grew 23.51% YoY in 2025, 8x faster than human traffic’s 3.10% growth
- AI-driven traffic surged 187% monthly in 2025, nearly tripling year-over-year
- OpenAI bots account for 69% of all AI traffic; Meta and Anthropic split most of the remainder
- Travel and retail sectors see highest AI adoption, with 1,700% growth in travel traffic
- Bots projected to surpass human activity entirely by 2027
The AI-driven traffic growth explosion
The numbers tell a stark story. AI-driven traffic growth accelerated dramatically throughout 2025, with monthly increases averaging 187%. This explosive expansion dwarfs organic human activity. Human Security’s 2026 State of AI Traffic & Cyberthreat Benchmark Report reveals that while people were adding just 3.10% more traffic year-over-year, automated systems were multiplying eight times faster. By 2027, bots are projected to completely surpass human activity online.
The shift extends beyond raw traffic volume. AI-driven traffic growth is changing what happens when bots connect. Early in 2025, AI agents focused on information gathering—checking prices, comparing products, scraping data. According to Stu Soloman, CEO at Human Security, the focus is now shifting: “The traffic seen in 2025 was really focused on the way people use AI tools, like going out to find information on products and prices. Now we will see these agents attempt to log in to accounts on behalf of someone”. This transition from passive browsing to active transactions represents a new threat surface.
Who controls AI-driven traffic growth
OpenAI dominates the AI bot ecosystem. ChatGPT User, OAI-SearchBot, GPTBot, and ChatGPT Agent combined account for 69% of all AI-driven traffic. Meta’s external agent handles 16%, while Anthropic’s ClaudeBot and Claude-SearchBot manage 11%. The remaining players—including emerging competitors like DeepSeek and Grok—control less than 5% each.
However, the market is shifting. ChatGPT’s share of AI traffic fell from 86.7% in January 2025 to 64.5% by January 2026. Google’s Gemini surged from 5.7% to 21.5% in the same period. This fragmentation matters because different AI platforms have different crawling behaviors, different transaction patterns, and different security implications. A site optimized to handle ChatGPT traffic may collapse under Gemini’s footprint.
AI-driven traffic growth by industry and impact
Not all sectors experience equal AI-driven traffic growth. Travel and hospitality saw the most explosive adoption, with AI traffic jumping 1,700% between July 2024 and February 2025. Retail and e-commerce followed at 1,200% growth. Financial services matched retail at 1,200%, while B2B industrial sectors saw more modest 125% increases. Publishing and media lagged at 50%.
The business impact varies wildly. Travel companies reported 80% revenue-per-visit increases from AI traffic. Retail experienced 34% gains versus non-AI traffic. Financial services saw 23% growth in app starts. Yet these figures mask a darker reality: much of this traffic is invisible. According to the Digital Bloom Gen AI Report, 70.6% of AI referrals appear as “direct” traffic in Google Analytics 4, making them invisible to standard tracking. This blind spot leaves companies unable to optimize for or defend against AI-driven traffic growth.
The scale of AI-driven traffic growth remains smaller than headlines suggest
Here’s where the narrative requires scrutiny. Despite explosive percentage growth, AI-driven traffic growth still represents a tiny slice of total internet activity. AI platforms currently drive 0.15-0.25% of global internet traffic, compared to organic search’s 48.5%. This grew from just 0.02% in 2024, a 700% increase, but the absolute numbers remain modest. Projections for 2026 estimate AI traffic reaching 0.30-1.0% of global traffic under various scenarios.
The headline “AI and bots have taken over the internet” oversells the current reality. Bots have not taken over—they are taking over. The growth rate is genuinely alarming, but the current volume is still a rounding error in global internet traffic. What matters is the trajectory and the concentration in specific sectors where adoption runs far ahead of the global average.
Security and fraud implications of AI-driven traffic growth
The rise of agentic AI—bots that create accounts, initiate sessions, and execute transactions—introduces new vulnerabilities. Scraping attack traffic approached 20% of global traffic in 2025, double the rate from 2022. This is not accidental; it is deliberate automation designed to extract data, test credentials, or manipulate systems. The shift from read-only crawling to transaction-capable agents amplifies these risks.
Conversion patterns reveal another concern. AI traffic converts sign-ups at 1.66%, compared to 0.15% for organic visitors—an 11-fold difference. This disparity suggests either that AI is extremely effective at triggering legitimate conversions or that AI agents are gaming signup systems. The reality is probably both.
What happens to AI-driven traffic growth next
The fragmentation of the AI market will likely accelerate. ChatGPT‘s declining share and Gemini’s rapid rise mean companies must prepare for multiple bot profiles, each with different behaviors and footprints. The 2027 projection that bots will surpass humans entirely assumes continued acceleration, but that assumes no regulatory intervention, no infrastructure changes, and no industry-wide adoption of bot detection and rate-limiting.
The real story is not that AI has taken over the internet. It is that AI-driven traffic growth is reshaping commerce, exposing analytics blindspots, and forcing infrastructure decisions that most companies are not yet making. Sites that treat AI traffic as noise will find themselves unprepared when bots represent 50% of their sessions and account takeovers accelerate.
Is AI traffic the same as bot traffic?
Not exactly. All AI traffic is bot traffic, but not all bot traffic is AI traffic. Traditional bots include web crawlers, monitoring services, and automation tools that have existed for decades. AI traffic specifically refers to agents powered by large language models—ChatGPT, Gemini, Claude, and others. The distinction matters because AI agents behave differently: they attempt transactions, create accounts, and interact with dynamic content in ways traditional bots do not.
How much of my website traffic is AI-driven?
Most websites have no reliable way to know. The Digital Bloom report found that 70.6% of AI traffic appears as “direct” in Google Analytics 4, invisible to standard tracking. You would need bot detection tools or server-side analysis to identify AI agents. Check your access logs for user agents like “ChatGPT-User,” “OAI-SearchBot,” or “Claude-Web” to get a rough estimate, but understand that sophisticated AI agents may mask their identity.
Will AI traffic eventually exceed human traffic?
According to Human Security’s projections, yes—by 2027. However, this assumes the current growth rate holds without regulatory constraints, infrastructure changes, or industry-wide adoption of bot defenses. If sites implement rate-limiting or bot detection at scale, the timeline could extend. If regulations restrict scraping or agentic behavior, growth could flatten. The projection reflects current momentum, not inevitability.
The internet is being reshaped by automation, and most organizations are not ready. AI-driven traffic growth is real, measurable, and accelerating. The question is not whether bots will dominate—the data suggests they will. The question is whether companies will adapt their infrastructure, analytics, and security before bots become the majority of their traffic.
Edited by the All Things Geek team.
Source: TechRadar
