Why does GA4 show TikTok traffic as direct?

This is the single most common reason a founder concludes that short-form "does not work". The videos run, the site gets busier, and the analytics say the traffic came from nowhere.

What is actually happening

When someone taps the link in your bio, TikTok does not hand them to Safari or Chrome. It opens an in-app browser it controls. That webview frequently makes the request without a Referer header and without a document.referrer value, so by the time your page loads there is no evidence of where the visitor came from.

GA4 does not guess. Its default channel grouping needs either a referrer it recognises or campaign parameters on the URL. Given neither, the session is Direct: the same bucket as someone typing your domain from memory.

Three separate things get merged into "Direct"

• Stripped referrers. The in-app browser case above. This is usually the bulk of it.
• Brand search that skips the click. Someone watches a video, does not tap anything, and types your name into a browser two hours later. That is a real short-form conversion that no click-tracking model can see.
• Genuinely direct visits. Existing users returning. These were always going to be there, and they are the reason you cannot simply relabel Direct as TikTok.

Any fix that cannot tell these three apart replaces one wrong number with another.

What fixes it

Stop depending on a header you do not control. Put the source information into the URL, where it survives the webview:

1. Tag the bio link. At minimum utm_source=tiktok and utm_medium=social. GA4 reads campaign parameters before it looks for a referrer, so a tagged link lands in the right channel regardless of what the browser did or did not send.
2. Give each destination its own code. One tagged link tells you TikTok sent traffic. It cannot tell you which video did, because every video points at the same bio link. Distinct destinations are what separate the two.
3. Close the loop at the conversion, not the click. A click is only a claim that someone arrived. Attribution is finished when the payment or the signup reports back against the same code.

What still will not be attributable

The brand-search path is not solvable by tagging, and anyone selling you a tool that claims otherwise is modelling rather than measuring. Epoyo's answer is to grade the evidence instead of hiding the gap: a campaign only reaches its top attribution tier when a tracked link was followed or your product reported an event naming that campaign. A rise that merely lines up in time is labelled as exactly that, and never promoted.