Strategy Lesgo Media · 2026
- 15 minutesmonthly GA4 review
- 14 monthsmax standard data retention
- 3attribution models in GA4
Almost every Malaysian SME we audit has Google Analytics 4 installed. Very few have one that answers a business question. The tag fires, numbers pile up, and the owner opens the account twice a year, looks at a line, and closes it.
The gap is not technical skill. A fresh GA4 property counts page views, and a lead-generation business does not sell page views. Until GA4 knows what an enquiry looks like on your site, every report in it is decoration.
What follows is the version that pays for itself: the events worth tracking, the two links worth making, and what to do when GA4, Meta and your sales book disagree.
Why most small business GA4 accounts get installed and then abandoned
The usual story: a web developer adds the tag during the build, ticks the task off, and moves on. Nobody marks any events. Nobody links Google Ads. Six months later the owner sees 4,300 users and an engagement rate, and closes the tab.
Default GA4 reporting is honest about traffic and silent about revenue. It will tell you TikTok sent 900 sessions last month. It will not tell you those sessions produced one WhatsApp enquiry and no quotes, because you never told it what a WhatsApp enquiry is.
Three settings deserve fixing in the first hour, before you touch events at all.
Fix these first
- Event data retention. Google’s data retention documentation gives standard properties two choices, “2 months” or “14 months”. Check which one yours sits on. The shorter setting quietly limits what you can explore later.
- Internal traffic. Your office, your staff and your developer all browse the site. Filter your own IP ranges out under the data stream settings so your team stops inflating the numbers.
- Timezone and currency. Set GMT+8 and MYR, or your month-end never matches your accounts.
The four events a lead-generation business actually needs
Forget the long tracking plans agencies hand over. A services business, contractor, clinic or supplier needs four things measured, and nothing else matters until those four work.
| Action | How it usually fires | Sensible event name | Why it matters |
|---|---|---|---|
| Contact form submit | Thank-you page view, or form_submit | generate_lead | Clearest proof of intent |
| WhatsApp click | Outbound click on a wa.me link | whatsapp_click | Often the main enquiry channel here |
| Phone tap | Click on a tel: link, mostly on mobile | phone_click | Shows demand your inbox never records |
| Quote request | Submit on the quote or booking form | request_quote | Separates buyers from browsers |
GA4 gives you a head start on two of these. Google’s enhanced measurement collects an outbound click event “each time a user clicks a link that leads away from the current domain and to another website”, which covers WhatsApp links, and it collects form_start and form_submit automatically.
Automatic form tracking breaks most often. Plenty of Malaysian sites use form plugins that never fire a real submit. Test it, and if nothing appears, fall back to a thank-you page view. First, be clear about what counts as a lead.
Marking those events as key events, the label Google changed
An event on its own is just a count. To make GA4 treat it as business-critical you mark it as a key event. Google defines one plainly: “A key event is an event that measures an action that’s particularly important to the success of your business.”
Analytics used to call these conversions. Google renamed them key events in 2024, while Ads kept the word conversions for the thing it bids towards. Same action, two names, depending on the product you are in.
- Open Admin, then Events. The event list and a key events tab sit under the data display settings. GA4 moves its labels more often than its features, so if the wording differs, look for the events area.
- Mark the event. Google’s instruction is to “click the toggle next to Mark as key event”.
- Build events you do not have yet. Use Create event to build a whatsapp_click from outbound clicks where the link contains wa.me. No developer needed.
- Register your parameters. Event parameters only appear in reports once you create custom dimensions for them.
- Verify. Use Realtime to confirm the event fires, then check reports the next morning.
Linking Google Ads and Search Console, and what each one unlocks
Both links live under Admin, in the product links section, and together they take a minute. Google states that linking Ads lets you “create consistent Google Analytics and Google Ads conversions based on your key events”.
The link puts campaign, ad group and keyword data inside GA4, so you see which keyword produced the WhatsApp click. It also lets you import key events into Ads as conversions, which is what lets smart bidding chase enquiries instead of clicks. Keep auto-tagging on. Any agency running Google Ads for you should have done this already.
The Search Console link answers a different question: what people typed before arriving. There is a catch. Google says “the Search Console collection of reports is unpublished by default. You can find the collection under Library in the left navigation and publish it from there.”
Once published you get two reports. The useful one joins a landing page to its search performance and its on-site behaviour, so you can spot a page that ranks, earns clicks and produces nothing. That points at the page, not the ranking.
UTM conventions that keep your own campaigns out of direct traffic
Direct traffic is the bin GA4 uses when it cannot work out where someone came from. Untagged links in email blasts, WhatsApp broadcasts, Instagram bios and QR codes all end up there, which is why so many SMEs believe half their traffic arrives by magic.
Google’s campaign URL documentation says “you should always use utm_source, utm_medium, and utm_campaign”, and warns that “missing UTM parameters will result in (not set) values being present in reporting”.
| Parameter | What it holds | Example for a Malaysian SME |
|---|---|---|
| utm_source | The referrer | whatsapp, newsletter, ig_bio |
| utm_medium | Marketing medium | cpc, email, social, broadcast |
| utm_campaign | Product, promo or slogan | raya_promo_2026 |
| utm_content | Differentiates creatives | video_a, static_b |
| utm_term | Paid keyword | aircond_service_kl |
Three rules keep it clean. Write everything in lowercase, because GA4 treats Email and email as two different mediums. Agree a fixed list of medium values and never improvise a new one halfway through the year. And never tag internal links on your own site, which restarts the session and destroys the original source.
Skip manual UTMs on Google Ads. Auto-tagging already handles it, and manual tags can override the richer data behind the gclid.
The reports worth opening monthly, and the ones to ignore
GA4 ships with far more reporting than a ten-person business needs. Four reports carry almost all the value once key events are marked.
| Report | Question it answers | Worth your time |
|---|---|---|
| Traffic acquisition | Which channel produced key events, not just sessions | Every month, first |
| Landing page | Which page people arrive on and whether it converts | Every month |
| Events and key events | Whether tracking is still firing correctly | Every month, thirty seconds |
| Google Organic Search Traffic | Which queries and pages earn organic enquiries | Monthly or quarterly |
| Realtime | Whether a tag fires right now | Only when testing |
| Demographics and interests | Broad audience guesswork | Rarely actionable for SMEs |
| Tech details | Browsers and screen sizes | Only when chasing a bug |
One distinction saves confusion. User acquisition reports where a person first came from. Traffic acquisition reports where the current session came from. For judging campaigns that ran this month, use traffic acquisition.
Add key events as a comparison in every report you read. A channel with high sessions and zero key events is a cost, not a channel.
Why GA4, Meta and your own records will never agree
Every business that starts measuring properly hits this wall. GA4 says nine leads, Meta says fourteen, your sales sheet says six. Nobody is lying. They count different things.
GA4 now offers three attribution models: data-driven, paid and organic last click, and Google paid channels last click. The attribution documentation confirms “the first click, linear, time decay, and position-based attribution models are no longer available as of November 2023”, and that under data-driven attribution “conversions can be reattributed for up to 7 days”, so last month’s numbers can shift after you read them.
Meta counts differently again, including view-through conversions GA4 never sees, which is one reason your Ads Manager dashboard reads higher. Consent choices and ad blockers widen the gap.
Pick one system as the money system, and it should be your own records. Your sales sheet decides what a lead was worth. The same principle sits behind our approach to measuring social media ROI and reading ROAS honestly. Compare each platform against itself over time.
Consent and PDPA considerations for a Malaysian site
The Personal Data Protection (Amendment) Act 2024 brought data breach notification and mandatory data protection officer appointments into force on 1 June 2025. Under the guidelines summarised by DLA Piper, the Commissioner must be told within 72 hours of a breach, and affected individuals within seven days of that.
A DPO becomes mandatory once processing covers more than 20,000 data subjects, sensitive data of more than 10,000 individuals, or regular and systematic monitoring. Most SMEs sit under that, but the breach duty applies to anyone holding customer data.
- Name Analytics in your privacy notice. Say what you use, what it collects and why.
- Keep personal data out of GA4. Never pass names, emails, phone numbers or IC numbers into event parameters or page URLs. Google prohibits it, and it creates a liability you do not need.
- Use consent mode if you run a cookie banner. The analytics_storage and ad_storage signals control whether cookies are read or written, and Google says it “fills the data collection gaps with conversion modeling and behavioral modeling” when consent is refused.
- Set defaults by region. Google advises setting “a default state to apply to particular regions instead of to all visitors”.
A 15-minute monthly review that keeps the account alive
An analytics setup dies from neglect, not bad configuration. Put a recurring slot in the calendar on the first working day of each month and hold to this order.
- Two minutes: check tracking is alive. Open the key events report. If a familiar event dropped to zero, something broke on the site. Fix that first.
- Four minutes: traffic acquisition by key events. Which channels produced enquiries, and how does that compare with last month?
- Three minutes: landing pages. Which pages received the arrivals, and did the busy ones produce anything?
- Three minutes: search queries. Skim the organic search traffic report for pages gaining or losing clicks.
- Three minutes: write two lines. One thing that worked, one thing to change, in the same document each month.
The short version
- Mark form submit, WhatsApp click, phone tap and quote request as key events, or GA4 says nothing about money.
- Link Google Ads for keyword data and conversion import, link Search Console and remember to publish the collection.
- Tag every non-Google campaign with lowercase UTMs so your own traffic stops appearing as direct.
- Reconcile against your own sales records, never between platforms.
Nak tahu angka sebenar untuk business anda?
Hantar detail ringkas. Kami semak akaun atau website anda, pastu tunjuk di mana duit bocor dan apa langkah paling berbaloi seterusnya.
Frequently asked questions about GA4 setup in Malaysia
Are conversions and key events the same thing in GA4?
They are the same action under different names. Google renamed conversions to key events in Analytics in 2024, while Google Ads still calls the imported action a conversion. If a tutorial tells you to look for conversions inside Analytics, look for key events instead.
Can I track WhatsApp clicks in GA4 without a developer?
Yes. Enhanced measurement already records clicks that lead away from your domain, and a wa.me link is one of those. Use Create event in the admin area to build a whatsapp_click event filtered to links containing wa.me, then mark it as a key event.
Why does GA4 show fewer leads than my Meta Ads Manager?
Meta counts view-through conversions and uses its own attribution window, while GA4 credits the last non-direct click within its own model. Consent choices and ad blockers widen the gap further. Expect a permanent difference and reconcile both against your actual enquiry records.
Do I need Google Tag Manager to set up GA4 properly?
Not for the basics. Enhanced measurement plus the Create event tool covers outbound clicks, form submits and thank-you page tracking on most sites. Tag Manager earns its keep when you need custom triggers, several platforms firing together, or a value passed with each lead.
How long does GA4 keep my data?
Standard properties offer two months or 14 months of event data retention, set under the admin data settings. The choice affects exploration reports rather than the standard ones. Pick the longer option unless you have a reason not to, because you cannot recover it later.
Is Google Analytics allowed under Malaysian PDPA rules?
Yes, with sensible practice. Disclose the use of Analytics in your privacy notice, avoid passing personal data such as names or phone numbers into events, and honour consent choices if you run a cookie banner. The 2024 amendment added breach and DPO duties, not a ban.
Why is so much of my traffic showing as direct?
Direct is where GA4 puts visits it cannot attribute. Untagged email links, WhatsApp broadcasts, PDF links, QR codes and in-app browsers all land there. Adding utm_source, utm_medium and utm_campaign to every campaign link moves most of that traffic into the right channel.
How often should a small business actually look at GA4?
Once a month is enough for most Malaysian SMEs, plus a quick check whenever a campaign launches. Daily checking on small traffic volumes produces noise rather than insight, because a handful of enquiries either way swings a percentage wildly on a small base.
Conclusion: GA4 that reports money, not page views
A useful GA4 account is a little work done once and a small habit kept afterwards. Mark the four lead events as key events. Link Google Ads and Search Console, and publish the Search Console collection so the reports appear. Tag campaigns in lowercase so nothing hides in direct traffic. Then read four reports for 15 minutes a month.
Versi Bahasa Melayu di sini: Google Analytics 4 untuk business.
If you would rather have someone check the setup before you trust the numbers, talk to the Lesgo Media team.
Baca lagi
- Digital Marketing Agency di Penang: Panduan Pilih & Kos
- Digital Marketing Agency in Shah Alam: A Local Business Guide
- Branding Agency in Malaysia: What It Delivers and When to Buy