At what point in a paid click am I actually charged?

The charge lands when the click registers, which is before the browser requests your landing page. The order runs: auction, ad served, click registered, charge applied, then the page request arrives at your server. Anything you control on your own infrastructure sits at the end of that sequence, which is why server-side measures cannot prevent the cost.