The thing is, if someone really wanted to spam your adsense account, they would not even have to be on your site... All they need to do is get your adsense code, find a bot that can set a fake referral address, and click the ads.

Therefore, there is not much the publisher can do to protect themselves. I have tried requesting methods of monitoring the clicks before and got nothing but another canned response from google saying they cannot give out details about how their system works.

All in all it comes down too google. They need to:
1) Not count clicks after so many from a certain IP
2) Create some sort of API that publishers can build on to track their own clicks.

#2 is not a great solution either because if the user used a bot as I described above, it would totally bypass any script the publisher has created that takes advantage of an API that google may have made.

- Phaaze

And yes, I feel very sorry for the guy. I do not know what I would do if I lost such a lump some of money as he did.