UTM parameters — named after Urchin Tracking Module, the analytics tool Google acquired in 2005 — are query string tags appended to URLs that pass tracking information to analytics platforms. Without them, most non-search traffic shows up in analytics as generic "direct" or "referral" with no campaign context.
The five UTM parameters
- utm_source — where the traffic came from. Examples: google, facebook, newsletter, partner-name
- utm_medium — the type of channel. Examples: cpc, email, social, organic, referral, banner
- utm_campaign — the specific campaign name. Examples: spring-sale-2026, product-launch, q1-webinar
- utm_term — usually used for paid keyword tracking. Examples: msp-services-nashville
- utm_content — for distinguishing variations (e.g., A/B test creative). Examples: blue-button, headline-v1
A real UTM URL
https://example.com/services?utm_source=newsletter&utm_medium=email&utm_campaign=march-2026-update&utm_content=cta-bottom
This URL tells analytics: visitor came from the newsletter (source), via email (medium), specifically from the March 2026 update campaign, and they clicked the bottom CTA (content). The visitor sees normal site content; the analytics tool sees full attribution.
UTM best practices
- Use a consistent naming convention — "facebook" vs "Facebook" vs "FB" creates three different sources in your reporting. Pick one and stick with it.
- Always lowercase — UTM values are case-sensitive in most platforms
- Use hyphens, not spaces — "march-2026-update" not "march 2026 update"
- Don't UTM tag internal links — if a user clicks an internal link with UTM parameters, you'll reset their session attribution and lose original source data
- Document your conventions — a shared spreadsheet or naming guide prevents inconsistency across teams
- Use a UTM builder — Google's Campaign URL Builder, Terminus, UTM.io, or built-in tools in marketing platforms reduce typos
- Tag every campaign URL — email links, social posts, paid ads, partner placements, podcast show notes, QR codes
Common UTM mistakes
- Inconsistent naming creating dozens of variants of the same source
- UTM tagging organic search traffic (overwrites Google's organic source attribution)
- Forgetting to tag email links (newsletters often show up as "direct" traffic)
- Using UTMs for sensitive parameters that appear in URLs (security risk if shared)
- Stripping UTMs prematurely in URL shorteners or redirects
- Not setting UTMs at all on social posts (defaulting to "social" with no campaign context)
UTMs and the privacy era
UTMs are first-party data — they don't rely on cookies or cross-site tracking. As privacy regulations and browser changes erode third-party tracking, UTMs have become MORE important, not less. They're one of the few reliable attribution mechanisms remaining in 2026.