# UTM Parameters: A Naming Convention That Scales in 2025 **Author:** Piotr Litwa, GTM & Analytics Specialist **Published:** 2025-11-28 **URL:** https://piotrlitwa.com/articles/en/utm-parameters-guide.html **Language:** en **Keywords:** UTM parameters, UTM tagging, UTM naming convention, campaign tracking, utm_source, utm_medium, utm_campaign, GA4 attribution --- ## Key Takeaway UTM parameters are five URL suffixes (source, medium, campaign, term, content) and only the first three are worth enforcing. Case sensitivity is the biggest silent destroyer of attribution because GA4 treats Facebook and facebook as two separate sources, so lowercase everything and put the rule in a template nobody can bypass. Never UTM-tag internal links; each click resets the session and reattributes organic and direct traffic to a made-up internal channel. Google Ads auto-tagging via gclid overrides manual UTMs most of the time, so pick auto-tagging only and stop double-tagging Ads URLs. A naming convention without a written, dropdown-enforced taxonomy rots inside three months, so the operational win is a shared Google Sheet plus a short internal doc, not a fancy UTM builder. --- UTM parameters are simple. UTM implementations are almost never simple. I run GTM and GA4 audits for a living. Across the 120-plus containers I've cleaned up since 2014, the single most common finding isn't a broken tag or a missing event. It's UTM chaos. Six variations of the same campaign name in the data. `paid-social`, `Paid Social`, `paid_social`, `Paid-Social`, and `PaidSocial` all living in `utm_source`, counted as five separate channels, none of them matching the Google Ads auto-tagging that's also flowing in. This piece is not a tour of the five parameters. You can read that on the Google docs. This is what I actually do: the taxonomy I use, the mistakes that waste the most audit hours, and the places where adding a UTM makes your reporting worse, not better. ## What UTMs are and which ones actually matter A UTM parameter is a URL suffix that tells GA4 (and Universal Analytics before it) where the traffic came from. Google built them in 2005 for Urchin, kept them after the acquisition, and they've been the standard for manual campaign tracking ever since. Five parameters exist: - **`utm_source`**: the platform or site that sent the traffic. Examples: `google`, `facebook`, `newsletter`, `linkedin`. - **`utm_medium`**: the category of traffic. Examples: `cpc`, `email`, `social`, `referral`. - **`utm_campaign`**: the specific campaign name. Examples: `spring-sale-2026`, `black-friday`, `product-launch-ga4`. - **`utm_content`**: differentiator within a campaign. Examples: `banner-top`, `video-creative-a`, `cta-button-1`. - **`utm_term`**: keyword tracking for paid search (legacy, mostly replaced by auto-tagging). The first three are the only ones I require across every client. `utm_content` I use for creative-level A/B testing. `utm_term` I almost never set manually because Google Ads does it via auto-tagging and anything I put there gets overwritten or ignored. ## The five UTM mistakes I see in 80% of containers If I ran a survey of the last hundred audits, these five findings would be in nearly every report. None of them are complicated to fix. All of them are tedious, because cleanup means historic data is already messy. ### 1. Case sensitivity chaos GA4 treats `Facebook` and `facebook` as different values. Literally two separate rows in your Source report. I've seen clients with four versions of Facebook in their data because different marketers used different cases. The fix: write the rule down once, lowercase everything, enforce it in your campaign builder template. Some teams use kebab-case for campaign names (`spring-sale-2026`) and lowercase single-word values for source and medium. That's what I do. ### 2. Typos that live forever A misspelled `utm_source=fbook` becomes a permanent row in GA4 history. You can't retroactively fix it without BigQuery. Three typos over six months add up to noise that makes channel reports less reliable. The fix: predefined builder, not free-form input. A marketer typing UTMs into a spreadsheet will typo. A marketer selecting from a dropdown won't. ### 3. Spaces encoded as `%20` or `+` URL encoding converts spaces to either `%20` or `+`, depending on the tool. GA4 then stores the raw value. `Spring Sale 2026` becomes `Spring%20Sale%202026` in reports. Unreadable, uncomparable across systems. The fix: never use spaces in UTMs. Use hyphens or underscores. I prefer hyphens for campaign names because they're also URL-friendly and easier to read. ### 4. Auto-tagging conflicts with manual UTMs Google Ads auto-tagging adds `gclid` to every click, which feeds Google Ads attribution into GA4 automatically. Meta does the same with `fbclid`. If you also add manual UTMs to these clicks, GA4 has two sources of truth and picks one. Usually the gclid wins for Google Ads, but the manual UTM can override it if auto-tagging fails. I saw this on a Polish DTC brand last spring. They added manual UTMs to Google Ads "for consistency." Result: 12% of Google Ads clicks showed up in GA4 with `utm_source=google-ads` instead of the auto-tagged `google / cpc` channel. Their ROAS reports were 12% off for two months before anyone noticed. The fix: pick one. For Google Ads, I always recommend auto-tagging only. For Meta, it depends on the setup. If you have a working Conversions API pipeline, auto-tagging via fbclid works. If not, manual UTMs are a fallback. ### 5. Tagging internal links This is the mistake that hurts reporting the most. Someone sees a "big email signup" CTA on the blog and thinks they should UTM-tag the link, so they can see how many blog readers click it. That UTM-tagged click resets the session. The user who arrived from organic search is now attributed to `blog / internal`. All their subsequent events belong to that fake source. Multiply this across every CTA on the site and your organic and direct numbers collapse. Your paid campaigns look amazing because they're the only ones not self-sabotaging. The fix: never UTM-tag internal links. For internal click tracking, use GTM click events or GA4 enhanced measurement outbound click detection. Both give you the behavioral data without destroying session attribution. ## The naming convention I use across 120+ clients A naming convention is a taxonomy plus enforcement. Without both, it rots in a month. Here's mine. Lowercase everywhere, hyphens for multi-word values, no exceptions. **`utm_source`**: where the click came from. Platform or site name. Allowed values (for most clients): - `google`, `bing`, `duckduckgo` (search engines, auto-tagged when possible) - `facebook`, `instagram`, `linkedin`, `twitter`, `tiktok`, `youtube` - `newsletter`, `crm`, `partner-[name]` - `email` (for transactional, not campaigns) **`utm_medium`**: category of traffic. Short list, strictly enforced: - `cpc` (paid search) - `paid-social` (paid social ads) - `email` (newsletter or CRM) - `referral` (partnership links) - `affiliate` - `organic-social` (unpaid posts) - `display` (banner / programmatic) I never use `medium=social` by itself. Too ambiguous. Is it paid or organic? The distinction matters. **`utm_campaign`**: specific campaign name. Format: `topic-audience-year` or `topic-season-year`. Examples: - `black-friday-2026` - `product-launch-ga4-monitoring` - `retargeting-cart-abandon-q1` - `webinar-consent-mode-march` Keep it short enough to fit in reports (GA4 truncates long names in charts). Long enough to be unique across the year. **`utm_content`**: creative differentiator when you need A/B analysis: - `banner-top`, `banner-bottom`, `sidebar` - `creative-a`, `creative-b` for media tests - `cta-primary`, `cta-secondary` **`utm_term`**: I don't set it manually. Google Ads handles it via auto-tagging. If I do use it, it's only for highly custom non-Ads cases, like affiliate link tracking at the keyword level. ## Where UTMs hurt your reporting Three scenarios where the "correct" move is to not use UTMs at all. ### Internal links Covered above. Zero UTMs on anything that goes from your site to your site. ### Organic search Do not UTM-tag links in your own content that point to other pages on your site. Do not UTM-tag the canonical URLs you submit to Google Search Console. Organic search attribution is handled by the `google / organic` channel automatically. A manual UTM on an organic link tells GA4 the traffic came from a different source, which is wrong. ### Email signatures Linking your website in your email signature with `?utm_source=email-signature&utm_medium=email` sounds helpful. It's not. Signature clicks are usually people who already know you (direct traffic) being misattributed to email. If you want to measure signature CTR, use a URL shortener with its own analytics, not GA4 UTMs. ## How UTMs interact with GA4 channel grouping This is the interaction nobody explains clearly, and it's where "report doesn't match expectation" starts. GA4 has a default channel grouping. It uses your UTM parameters (specifically `utm_medium` and sometimes `utm_source`) to bucket traffic into channels like Organic Search, Paid Search, Paid Social, Email, Referral. The bucketing rules are specific. For example, `utm_medium=cpc` maps to Paid Search. But `utm_medium=cost-per-click` does not. It falls into Unassigned. `utm_medium=email` maps to Email. But `utm_medium=e-mail` does not. Google's [default channel group definitions](https://support.google.com/analytics/answer/9756891) are the source of truth. Cross-check your `utm_medium` values against that list before rolling out any naming convention. If your `utm_medium` doesn't match a default channel grouping rule, your traffic shows up as "Unassigned" in the Acquisition report, which is a pain to debug. If you want custom channel groupings. Say, you want to split Paid Social into Paid Meta and Paid LinkedIn. Build a custom channel group in GA4 Admin. Don't try to hack it with non-standard `utm_medium` values. ## Tools I actually use (and why most UTM builders are bad) Most online UTM builders are worse than a spreadsheet. They let you freely enter anything, don't enforce your naming convention, and produce a URL that's already wrong. What I recommend: - **A Google Sheet** with dropdowns (data validation) for `utm_source` and `utm_medium`, free text for `utm_campaign` following a documented pattern. Everyone on the team uses the same sheet. Tracked changes visible. - **GA4 + Google Sheets Report Builder** to validate tagged URLs are flowing into GA4 as expected within 24 hours of launch. - **A short internal doc** pinned somewhere visible (Notion, Confluence, README) with the allowed `source` and `medium` values, campaign naming pattern, and examples. Dedicated UTM builders (there are dozens) can work if your team needs a friendlier UI, but they're worth it only when you're at the scale of 100+ campaigns a month with rotating marketers. Below that, a sheet is better because it's editable and auditable. ## Frequently asked questions ### Are UTM parameters case sensitive? Yes. GA4 treats `Facebook` and `facebook` as two different sources. This is the most common cause of messy Source reports. Lowercase everything, write the rule down, enforce it in your template. ### Do UTM parameters work with Google Ads auto-tagging? They coexist but conflict. Auto-tagging (gclid) is on by default for Google Ads and feeds data into GA4 automatically as the `google / cpc` channel. If you also add manual UTMs, GA4 picks one source of truth. Usually the gclid, but not always. For Google Ads, use auto-tagging only. Don't manually tag Ads URLs. ### What's the difference between utm_medium=social and utm_medium=paid-social? `social` is too ambiguous. It doesn't tell you whether the traffic is organic or paid. Use `paid-social` for ads and `organic-social` for unpaid posts. This is critical for any ROAS conversation. ### How long can a UTM campaign name be? GA4 stores up to 255 characters per UTM parameter, but reports truncate visual display at around 30-40 characters. Keep campaign names short enough to read in charts. If you need more detail, put it in `utm_content`, not `utm_campaign`. ### Should I UTM-tag my email signature? No. Most signature clicks are from people who already know you (direct traffic) getting misattributed to email. If you want to measure signature clicks specifically, use a URL shortener with its own click analytics, not GA4 UTMs. ### Can I retroactively fix wrong UTM data in GA4? Not in the GA4 interface. Historical data is frozen. You can clean the current and future data by fixing your tagging going forward and building custom channel groupings that remap old messy values. For full retroactive cleanup, export to BigQuery and rewrite the data layer there. See my [GA4 + BigQuery setup guide](https://piotrlitwa.com/articles/en/ga4-bigquery-setup.html) for the query patterns. ## Next step UTM hygiene is the easiest attribution fix and the hardest one to sustain. The naming convention above takes a week to roll out. Keeping it clean across a marketing team with turnover takes monthly review. That monthly review is the GA4 Monitoring service I run. Every container I audit includes a UTM taxonomy pass, checking for case chaos, auto-tagging conflicts, and internal-link pollution. Fix once, then catch drift before it compounds. Start with the [free automated GTM audit](https://piotrlitwa.com/checkGTM/) if you want a quick scan of the tracking stack. For full GA4 monitoring with monthly written reports, [GA4 Monitoring & Config](https://piotrlitwa.com/services.html#ga4) is 150 EUR per month. If your agency built the current UTM scheme and you want an independent opinion on whether it matches what they're reporting, [Agency Audit](https://piotrlitwa.com/services.html#agency) is 3% of monthly ad spend, minimum 200 EUR. UTMs are five parameters. The problem is never the parameters. It's the discipline. --- *Written by [Piotr Litwa](https://piotrlitwa.com/about.html), independent GTM & Analytics specialist.*