receiving, by one or more servers, a partially or fully encrypted false digital component alert indicating that a digital component presented at a client device includes false information;

decrypting, by the one or more servers, the partially or fully encrypted false digital component alert;

comparing, by the one or more servers, presentation and interaction data included in the false digital component alert with presentation and interaction data of one or more stored digitally signed and stored attestation tokens, wherein the stored attestation tokens comprise a plurality of impression attestation tokens for a plurality of presentations of the digital component, and a plurality of click attestation tokens, each click token corresponding to a particular impression attestation token of the plurality of impression attestation tokens;

determining, by the one or more servers, that the false digital component alert is responsive to an actual presentation of the digital component by comparing a public key, received from the client device, for the false digital component alert to a public key of the one or more digitally signed and stored attestation tokens;

validating, by the one or more servers, the false digital component alert based on (i) the comparison of the presentation and interaction data resulting in a match and (ii) the determination that the false digital component alert is responsive to an actual presentation of the digital component, wherein validating the false digital component alert comprises determining the false digital component alert includes a particular impression attestation token and a corresponding particular click attestation token from among the stored attestation tokens;

in response to validating the false digital component alert, adding the false digital component alert to an aggregated report for the digital component;

generating, by the one or more servers, a false alert ratio based on a number of validated false digital component alerts (i) collected from multiple different client devices and (ii) included in the aggregated report relative to a total number of presentations of the digital component;

determining, by the one or more servers based on the false alert ratio, that a magnitude of validated false digital component alerts in the aggregated report for the digital component meets a threshold; and

adjusting, by the one or more servers, distribution of the digital component to client devices based on the magnitude of the validated false digital component alerts meeting the threshold.