I've been suspicious of this in my own campaigns as well. Google Ads lets you drill down to specific cities where your ads were clicked. Very often, Ashburn Virginia shows up very high on the list. Ashburn is where AWS's us-east region lives, and presumably also where many VPNs operate out of.

I simply ended up excluding Ashburn from our campaigns for this reason.