Attribution when UTM tags are the only source you have

You do not need a data warehouse to answer “where did this lead come from?” You need a consistent habit and an honest sentence about what you cannot see.

Many Montreal SMEs we work with start from the same place: some links have UTM tags, some do not, the analytics dashboard shows a big “direct” slice, and nobody remembers who named the campaigns. This note is about how to get something trustworthy out of that, using UTM parameters as the main source.

What UTM tags can and cannot tell you

UTM parameters are labels you add to a link: `utm_source`, `utm_medium`, `utm_campaign`, and optionally `utm_content` and `utm_term`. When someone clicks, the analytics tool and your own forms can read them.

They can tell you:

• Which tagged link a visitor clicked
• Which campaign, email, or post that link belonged to
• How many of those visitors submitted a form or called

They cannot tell you:

• How people found you through organic search, unless you tag paid only
• Who saw an ad and came back later by typing your name
• Which referral from a client or an AI assistant answer drove the visit
• Anything about people who blocked scripts or arrived on a private channel

So UTM data is a floor: what you can prove came through a link you controlled. The real number is higher. Say that in every report.

Naming rules that survive staff changes

Most attribution mess is naming mess. `Facebook`, `facebook`, `fb`, and `meta` become four sources. We write a one-page naming sheet and keep it where people actually look.

Our defaults:

• All lowercase, hyphens, no spaces. `spring-quote-offer`, not `Spring Quote Offer!`
• `utm_source` is the platform or sender: `google`, `meta`, `linkedin`, `newsletter`, `partner-name`
• `utm_medium` is the channel type: `cpc`, `paid-social`, `email`, `referral`, `print-qr`
• `utm_campaign` is the initiative with a date or quarter: `renovation-2026-q4`
• `utm_content` separates variants: `headline-a`, `button-blue`
• No personal data in any value. Never a name or email in a URL

One person owns the sheet. If a link is not on the sheet, it does not ship.

Capture once, in the CRM

The most common mistake is reading UTMs only in the analytics dashboard. The dashboard shows sessions. Your business cares about people and deals.

The fix is to capture the values at form submission and write them to the lead record:

1. On the first page view, store UTM values and the landing URL in a first-party cookie or local storage, with a sensible expiry
2. On form submit, copy those values into hidden fields
3. The form writes them to the CRM record: first-touch source, medium, campaign, and latest-touch equivalents
4. Never overwrite first-touch. Latest-touch updates; first-touch stays

Now “where did this deal come from?” is a field on the record, not an investigation.

If a visitor arrives with no UTM, store the referrer domain and mark the source as `unknown` rather than guessing. An honest `unknown` is better than a convenient wrong answer.

Consent matters here. Storing a cookie and recording marketing data falls under privacy rules, including Quebec’s Law 25. We are not your counsel; the lawful basis is yours to decide. We implement the banner, the timing, and the privacy page wording you choose, in the language of the page.

The question nobody wants on the form

Add one open field: “How did you hear about us?”

This catches the sources UTM will never see: a referral from a client, a podcast, a conversation at an event, a search that ended in a chat assistant’s answer. It is imperfect and subjective, and it is also often the most informative column in the CRM.

Rules we use:

• Open text, not a dropdown. People name things you did not think to list
• Required, but with a “not sure” escape
• Read every answer monthly. It takes ten minutes
• Compare it to the UTM field. Where they disagree, you learn something

If 40% of your leads say “a friend recommended you” and your UTM report credits “direct,” you have found a referral engine that your dashboard hides.

A simple monthly report

Keep the reporting boring. One table, five columns:

Use leads that reached qualified and won in the CRM, not only sessions or form fills. A channel that sends many weak leads should look weak. This is the same idea we describe in lead scoring ops can explain: numbers need reasons.

Where SEO and GEO fit

Organic search and AI answers are the biggest blind spot in a UTM-only setup, because you cannot tag a search result. A few honest ways to see more:

• Search Console shows queries and pages that earn impressions and clicks, not individual leads
• Landing page on the lead record. Capture the first landing URL; a lead whose first page was a blog post tells you something even without a UTM
• Self-reported source, as above
• Referrer domains, which sometimes reveal AI assistants or directories

None of this proves that a given page “caused” a sale. It gives you patterns to look at. Our view on SEO and GEO in Montreal is that quotable pages earn trust over months, and attribution should be modest about how much it can credit.

What we will not claim

We will not tell you that last click wins, or that first click wins, or that a model has assigned fractions of a sale to each touch. With UTM alone, those models would be decoration.

We will tell you:

• What the tagged links produced
• What the CRM says about lead quality by source group
• What people said when asked
• What we cannot see, listed explicitly

If a decision needs more precision, such as a large ad budget, we can discuss server-side events, call tracking, or a proper measurement plan. For many small teams, the above is enough to make the next quarter’s decision better than a guess.

A starter checklist

1. Write the UTM naming sheet and name one owner
2. Tag every paid link, every email link, every QR code
3. Capture UTMs and landing URL into hidden form fields
4. Store first-touch and latest-touch separately in the CRM
5. Add the open “How did you hear about us?” field
6. Review the five-column table monthly
7. Say “this is a floor, not the whole picture” in every report

Next step

Send us your last ten leads with whatever source information you have. We will show you what the data says, what it hides, and the smallest change that improves it. Write to hello@aervio.io or call +1 438-498-3913, weekdays 9–17 ET. See our SEO and GEO service, and how reporting fits a growth retainer.

Questions

Are UTM parameters enough for marketing attribution?

They are enough for a few honest questions, such as which campaign link a lead arrived through. They cannot see organic search, direct visits, dark social, or word of mouth. Treat UTM data as a floor of what you can prove, not a full picture.

Where should UTM values be stored?

In the CRM, on the lead record, at the moment the form is submitted. Reading them from a dashboard later loses the link between a person and a source. Store first-touch and latest-touch separately.

Should we ask leads how they heard about us?

Yes. A required but open ‘How did you hear about us?’ field catches referrals, podcasts and AI answers that no tag can see. Read the answers monthly; they often disagree with the UTM data in useful ways.