Who it’s for
For affiliates

Affiliate fraud, caught per affiliate and sub-ID

Whether you run an affiliate program or buy the traffic yourself, fraud hides in a few affiliates, zones and sub-IDs. Find them before the payout does.

How ValidVisit works →
What you get, exactly
Valid / Invalid
An auditable verdict on every visit, with its evidence.
48 networks
Attribution across the native, push and pop channels where invalid traffic concentrates.
No cookies
No device IDs, raw IP never stored — nothing heavy for a blocker to trip.
01 / THE PROBLEM

You already know this.

  • Sources decay — a zone that converted last week quietly shifts to automation as its own supply mix changes.
  • You’re judged on lead and sale quality you can’t see upstream.
  • Affiliates paid per click, lead or sale have every reason to send volume, and some of that volume is bots.
02 / WHAT YOU GET

Every visit judged, and the source behind it.

Detect, judge and attribute — with the evidence to act. The verdict never touches your traffic and we never claim recovered dollars; you see what’s real and decide what to cut.

  • Judge every visit Valid or Invalid per affiliate, sub-ID, zone and source, worst-first — cut the leak instead of pausing the whole program or campaign.
  • Baseline new sources small and read per-source quality before you scale spend into them.
  • Privacy-first by design: no cookies, no device IDs — nothing heavy on your funnels for a blocker to trip.
03 / HOW IT FITS

How ValidVisit fits the way affiliates work.

The common types of affiliate fraud

Affiliate fraud is any way an affiliate earns a commission without sending a real customer. The common forms:

  • Bot and click-spam traffic. Automated visits that inflate clicks on per-click deals, or pad volume to hide what else is going on.
  • Fake leads and incentivized sign-ups. Form fills by bots, or by people paid to sign up with no intent, on per-lead and per-signup offers.
  • Resold traffic. Cheap pop and push traffic passed off as the affiliate’s own audience.
  • Cookie stuffing. Dropping an affiliate cookie on visitors who never chose to click, so the affiliate takes credit for sales it didn’t cause.
  • Brand bidding. Bidding on your brand in search against your terms, then claiming customers who were already looking for you.
  • Fake orders. Purchases with stolen cards, or orders refunded after the commission is paid, on per-sale offers.

High payouts in igaming, finance and lead gen raise the incentive for all of these.

What a visit check catches, and what it doesn’t

ValidVisit judges the visit each affiliate sends to your landing page.

  • It catches bot and other automated visits, traffic from data centers, VPNs and proxies, and clicks that never ran your page. Through a server-side postback it also ties each lead or sale to the visit behind it, so a conversion from an Invalid visit stands out.
  • It doesn’t catch fraud that happens away from your page. Cookie stuffing, brand bidding and stolen-card orders need your affiliate platform’s referrer and conversion reports, your search-term reports and your payment provider’s checks.

Each kind of evidence lives somewhere specific; a visit verdict is the right tool for the fraud a visit can show.

Checking each affiliate and sub-ID

Pass each affiliate’s ID and sub-ID in the landing-page URL and ValidVisit attributes every visit to them. The report then ranks affiliates and sub-IDs by their share of Invalid visits, worst-first.

Read it the way you’d read any source. A whole affiliate with a high invalid share is a conversation about their traffic; one bad sub-ID inside an otherwise clean affiliate is usually one source they bought. How to calculate an IVT rate per segment walks through the arithmetic, and fake leads covers lead offers.

If you’re the affiliate: sub-source quality is the margin

An affiliate margin lives in the gap between what a visit costs and what the offer pays. On pop, push and native traffic that gap is decided zone by zone and sub-ID by sub-ID. A source that converted last week can drift as its own supply changes, and the first sign is usually a conversion rate that sags while clicks hold steady.

Bot traffic costs you twice. There’s the spend on visits that could never convert, and there’s what happens downstream: an advertiser who sees poor lead or sale quality from your traffic can scrub conversions, cut your payout or pause you on the offer. You’re judged on quality you couldn’t see upstream.

How it fits your tracker

Keep your tracker. ValidVisit reads the tokens you already pass, zone, site, sub-ID, campaign and creative, in each network’s own macro format (tracking-token directory). Pass them through to your lander and put the script on the page you control, usually the lander or prelander. There’s no extra hop, so the path from click to lander stays exactly as it was.

Each visit gets a Valid or Invalid verdict, with its evidence, attributed to the sub-ID that sent it. Reports roll up by zone, sub-ID and source, worst-first, so the rows at the top are the ones costing you.

The setup guides for Voluum, RedTrack, Binom, BeMob and Keitaro cover each one.

Test small, then scale

  1. Launch a new source on a small budget: enough visits per zone to read a pattern, not enough to hurt.
  2. Read quality per zone and sub-ID before reading ROI. A zone with no conversions yet but clean visits needs time; a zone full of Invalid visits doesn’t.
  3. Cut the worst zones by pasting the Cut list into the network’s blacklist. Where each network lets you block.
  4. Whitelist what holds up and move it into its own campaign before you raise bids.
  5. Keep reading after you scale. Sources decay; a weekly look at the worst-first report catches drift before it shows up in your payout.

Conversions from visits that weren’t real

Send conversions to ValidVisit by server-side postback and the conversions report shows which ones came from Invalid visits. That’s the number to look at before the advertiser does: a sub-ID converting on bot traffic is a conversion that may be rejected later, and on networks that optimize toward your conversion events it gets scaled, not cut.

Push deserves a special look, because a real subscription doesn’t mean a real person is behind each click. How invalid visits enter a push campaign.

For affiliates

Find affiliate fraud per affiliate, zone and sub-ID, worst-first.

  • Judge every visit Valid or Invalid per affiliate, sub-ID, zone and source, worst-first — cut the leak instead of pausing the whole program or campaign.
  • Baseline new sources small and read per-source quality before you scale spend into them.
  • Privacy-first by design: no cookies, no device IDs — nothing heavy on your funnels for a blocker to trip.

Just your email · no card · unsubscribe anytime · privacy policy

How it works →
deal-alerts.example71% invalid
zone 447123% invalid
premium-news.example2% invalid

Questions, answered.

What is affiliate fraud?+
Any way an affiliate earns a commission without sending a real customer: bot or click-spam traffic, fake leads and incentivized sign-ups, resold traffic passed off as their own, cookie stuffing, brand bidding and fake orders.
How do you detect affiliate fraud?+
Match each type to where its evidence lives. Visit checks per affiliate and sub-ID catch bot traffic and the fake leads and sales that come from it; your affiliate platform’s referrer and conversion reports catch cookie stuffing; search-term reports catch brand bidding; payment checks catch fake orders. Then compare each affiliate with your own baseline.
Can ValidVisit catch cookie stuffing?+
Not reliably. Cookie stuffing drops a cookie without a real click, and much of it never sends a visit to your landing page. Your affiliate platform’s referrer and conversion-path reports are the place to look.
Can I see quality per sub-source, not just per campaign?+
Yes — that’s the point. Every visit is attributed down to the zone, widget, placement and sub-ID through the network’s own tracking tokens, so an Invalid verdict has an address.
Does it slow my landing pages or add an extra hop?+
No. Judging happens around the visit, after it arrives — one lightweight script, nothing added to your click path.
Do I have to replace my tracker?+
No. Your tracker keeps doing its job. Pass the network’s zone and sub-ID tokens through to the lander URL and ValidVisit reads them there; conversions can come in by server-side postback, so each one is tied back to the visit behind it.
Does it work on direct-linked offers?+
Only on pages where you can add the script. With direct linking the visitor lands on the advertiser’s page, which ValidVisit can’t see. Most setups run it on the affiliate’s own lander or prelander.
Will a network refund the invalid traffic I find?+
Some networks credit invalid traffic and some don’t, each with its own terms and deadlines. ValidVisit gives you the zone IDs, visit counts and verdicts to make the request; what each network’s terms say. The request, and the outcome, are between you and the network.
deal-alerts.example71% invalid
zone 447123% invalid
premium-news.example2% invalid

Judge your paid traffic for affiliates.

Every visit judged Valid or Invalid across 100+ data points, attributed to the source that sent it.

Just your email · no card · unsubscribe anytime · privacy policy

Join the waitlist with just your email · 7-day trial at launch

One script · no cookies · no device IDs · raw IP never stored