Cookie Stuffing
In affiliate marketing, cookie stuffing is the unauthorized placement of affiliate tracking data without a genuine, qualifying referral interaction.
4 min read
AffiliateMarketing
Glossary
In affiliate marketing, commission hijacking is the unauthorized diversion of affiliate referral credit so that a party receives commission for a conversion they did not legitimately earn. It can occur when tracking identifiers are replaced or invalid referral events are inserted into the customer journey. A change in attribution is not automatically hijacking if it follows disclosed rules.
Keep in mind: A legitimate later touchpoint and an unauthorized inserted referral can look similar in a summary report. Review the event chain and program rules.
Where can referral credit be diverted?
An unauthorized script, redirect, or promotional method can replace a valid identifier or insert another referral near conversion. The problem is not simply that the final affiliate earned credit; it is that the accepted event failed to represent a permitted, qualifying contribution.
Launch your affiliate program today
Set up advanced tracking in minutes. No credit card required.
Hijacking versus a disclosed attribution change
| Event | How to assess it |
|---|---|
| Shopper clicks a permitted later referral | Apply the disclosed first, last, or split rule |
| Identifier changes without a qualifying interaction | Investigate unauthorized insertion or replacement |
| A supported code is entered at checkout | Apply the code-versus-link precedence policy |
| Affiliate uses prohibited brand bidding | Review the promotion rule and evidence separately |
A hypothetical commission outcome
Partner A’s recommendation leads to a $200 eligible purchase with a $20 commission. If an unauthorized event redirects the reward to Partner B, A loses that credited reward. The merchant’s report can also overstate B’s contribution and influence future budget decisions.
Do not assume the merchant paid two cash commissions unless the transaction records show that. Lost goodwill and distorted reporting are real concerns, but they are different from duplicate payment.
Join our newsletter
Be the first to know about new features and product updates.
What should a merchant do after confirming it?
Correct attribution according to the terms, document the reason, and investigate whether the same method affected other records. Review partner access and the relevant tracking control. Provide an appropriate explanation to affected affiliates and preserve evidence for subsequent review. Avoid naming a real company as culpable without verified, current evidence.
How can commission hijacking be detected in reports?
Trace traffic and referral changes
Inspect traffic sources, accepted affiliate-link events, click-to-conversion timing, and sudden changes in credited revenue. A late-stage referral spike can justify a review, but conversion rates and timestamps alone do not identify bad actors. A legitimate affiliate may run a new campaign or receive a relevant audience recommendation.
Review paid-search ads and keywords against the program’s brand-bidding rules. A permitted ad can drive genuine traffic, while a prohibited ad requires a separate terms decision. Do not treat every paid-search referral as hijacking.
A detection workflow
- Identify a transaction or pattern requiring review.
- Retrieve the original and replacement referral evidence.
- Reproduce the approved promotion path where possible.
- Compare the event with the affiliate agreement.
- Ask for relevant partner context and corroborating records.
- Correct confirmed invalid credit and monitor recurrence.
Use Post Affiliate Pro’s fraud protection guidance for configured controls. It supports review but does not prove that all accepted or rejected events are correctly classified.
How is hijacking related to cookie stuffing?
Cookie stuffing inserts referral data without a qualifying interaction. Commission hijacking describes the diversion of credit and may use that or another unauthorized method. The distinction helps managers select controls rather than treating every attribution issue as one kind of affiliate fraud.
MDN’s cookie documentation supplies the browser-storage context. Attribution evidence and affiliate agreements decide whether the observed change should earn commission.
Audit the referral chain before changing attribution
Follow the accepted referral events from the first promotion to the conversion. Compare timestamps, landing sources, redirect paths, and permitted promotional methods. Look for a new identifier inserted without the customer taking the qualifying action required by the program.
Distinguish prohibited interception from an authorized coupon partner, paid ad, or later referral. The program must state whether those touchpoints may override earlier credit. A disputed last click calls for evidence, not an assumption that all late-stage partners act improperly.
Test browser extensions and redirects used by approved partners, review brand-bidding rules, and apply suitable overwrite or split-commission policies. Record why a commission was reassigned and explain the review process to affected affiliates without disclosing unnecessary customer data.
For the corresponding Post Affiliate Pro settings, consult the filtering rules plugins documentation . Confirm the configuration and integration requirements against your program’s rules.
