How do I test click fraud protection properly?

Protect one campaign and leave a comparable one unprotected as a control. Run both for a full month, since two weeks cannot separate a real effect from normal variation. Then compare cost per conversion, not click counts. A drop in clicks alone proves only that something was blocked. A drop in cost per conversion proves the blocked traffic was worthless to you.