How to Report Suspected Cookie Stuffing to an Affiliate Network

If you suspect an affiliate is stuffing cookies on your site, act fast. Collect concrete evidence with timestamps, affiliate IDs, traffic patterns, and conversion data. Then submit that evidence through the affiliate network's official fraud reporting channel. A well-documented report gives the network a clear reason to investigate and reverse fraudulent commissions.

What counts as proof of cookie stuffing?

Cookie stuffing happens when a tracking cookie is dropped on a user's browser without any real referral. Often it occurs through hidden iframes, browser extensions, or scripts that fire at checkout. The result is a commission paid to someone who never brought the customer to you.

To report it, you need evidence that a commission was claimed without a legitimate click or referral. That evidence usually includes:

• Timestamp of the conversion and the claimed click.
• The affiliate ID and click ID associated with the conversion.
• Traffic source data (e.g., UTM parameters, referrer) that contradict the affiliate claim.
• Any anomalies in session behavior—like no scrolling, no engagement, or superhuman input speed.
• A clear discrepancy between when the cookie was planted and when the user converted.

For example, if a user lands on your site from a Google ad at 10:00, then adds a product to cart and checks out at 10:15, but the affiliate network attributes the sale to an affiliate whose cookie was set at 10:14 without any user click, that's a strong signal of cookie stuffing.

Step 1: Document the evidence thoroughly

Your report is only as strong as the evidence behind it. The affiliate network needs to verify your claim, so gather every piece of data that shows the referral didn't happen.

Capture conversion details

Record the order ID, conversion timestamp, amount, and the affiliate ID that claimed the commission. Note the click ID and the cookie creation timestamp if available.

Pull traffic and session logs

Check your analytics or server logs for the user session. Look for how the user found your site, what pages they visited, and at what times. If the user arrived via a search ad or direct URL, an affiliate cookie suddenly appearing moments before checkout is suspicious.

Look for behavioral anomalies

Real users have natural browsing patterns—pauses, scrolls, mouse movements. Cookie-stuffed sessions often show little engagement. Collect data on session duration, page scroll depth, and mouse activity if your tracking captures it. BotRefund's approach uses behavioral signals, attribution path analysis, and click-to-conversion timing to catch these hidden patterns.

Save screenshots and raw data

Take screenshots of your analytics dashboard or affiliate network reports. Export raw data as CSV. Keep timestamps in a consistent time zone. This makes it easier for the network's fraud team to verify your claim quickly.

Step 2: Find the correct reporting channel

Most affiliate networks have a dedicated fraud or abuse reporting process. It is not the same as contacting general support. Look for a “Report Fraud,” “Abuse Policy,” or “Terms of Service Violation” link in the network's help center or your affiliate dashboard. If you can't find one, contact your affiliate manager directly and ask for the correct escalation path.

Some networks also allow you to submit reports via email to a fraud-specific address. Verify that the address is official and not a general support inbox. When in doubt, use the in-dashboard report feature—it creates an audit trail.

Step 3: Write a clear, structured report

Your report should be factual and easy to follow. Avoid vague language like “this affiliate seems suspicious.” Instead, present evidence step by step.

Use this template:

1. Subject line: “Suspected Cookie Stuffing – Affiliate [ID] – Order [ID]”
2. Summary: State the affiliate ID, the date, and the conversion(s) in question.
3. Evidence: List the timestamps, click IDs, traffic source, and any behavioral data.
4. Explain the discrepancy: For example, “The user arrived via a Google ad and had no interaction with the affiliate link, but a cookie from affiliate X was placed 30 seconds before checkout.”
5. Attach supporting files: CSV exports, screenshots, or logs.
6. Request action: Ask the network to reverse the commission if fraud is confirmed, and to investigate the affiliate for a pattern.

Keep it concise but complete. The network's fraud team reviews many cases; the clearer your report, the faster they can act.

Step 4: Follow up and track the case

After submitting, note the case number or ticket ID. If you don't get a response within a week, follow up with your affiliate manager. Ask for a timeline and any additional information they need. Track what the network does—whether they reverse the commission, suspend the affiliate, or require more evidence.

Remember that networks may take several weeks to complete an investigation. Patience is important, but if the response is slow, escalate to a supervisor or use the network's complaint process.

Step 5: If the network doesn't respond

Sometimes an affiliate network may be unresponsive or unwilling to act. In that case, consider these options:

• Reach out to another merchant who uses the same network. If multiple merchants report the same affiliate, it strengthens the case.
• Escalate to the network's legal or compliance team, if it exists.
• Use a third-party fraud detection tool to build a more detailed evidence report. Tools like BotRefund analyze behavioral signals and attribution paths to show exactly how a conversion was manipulated.
• If you have a direct contract with the affiliate, you might send a cease-and-desist letter or pursue legal action, but that's a last resort.

Don't simply stop paying the commission if the network doesn't enforce it—that could break your affiliate agreement. Instead, document everything and decide whether to terminate the affiliate relationship.

Key facts about reporting cookie stuffing

Fact	Details
What makes a report strong	Timestamps, affiliate IDs, traffic source, and behavior anomalies.
How networks typically detect it	They look for mismatches between click time and conversion time, and for conversions without a real click.
What can happen after a report	The affiliate may be suspended, the commission reversed, or the case closed if evidence is insufficient.
What does BotRefund provide?	BotRefund audits every affiliate conversion using behavioral signals, attribution path analysis, and click-to-conversion timing—then tells you which commissions to approve, hold, or reject before payout.
How cookie stuffing works	Tracking cookies placed silently via hidden images or iframes, no user interaction, no real referral, yet commission claimed.

Limitations and when this advice doesn't apply

Reporting cookie stuffing works only if you have access to the evidence. If you use a basic affiliate network dashboard that hides click timestamps or traffic source data, you may need to upgrade to a platform that provides that depth. Also, if your own tracking is inaccurate (e.g., you don't capture session-level behavioral data), you may not be able to prove fraud convincingly.

This guidance is for merchants who have a direct relationship with an affiliate network. If you're an affiliate yourself and suspect another affiliate is stuffing cookies, the process is similar—but you'll need access to the same evidence, which may be limited. In that case, report your suspicion to the network with whatever data you can see.

Some networks may have policies that require multiple reports before taking action. Don't be discouraged; each report helps the network build a pattern.

Frequently asked questions

What if I don't have exact timestamps for the cookie drop?

Without timing evidence, it's harder to prove cookie stuffing, but you can still look for other signals—like an affiliate ID that appears in many conversions where the referrer is direct or from a search engine. Gather whatever data you can, and mention the lack of timing data if relevant.

How long does an affiliate network investigation take?

It varies. Simple cases with clear evidence might be resolved in a few days. Complex, multi-account fraud can take weeks. Stay in touch with your affiliate manager for a timeline.

Will the network tell me the outcome?

Usually yes, especially if you ask. Some networks will confirm that a commission was reversed but won't share details about actions taken against the affiliate for privacy reasons.

Can I report multiple affiliates at once?

Yes, but it's better to report each one separately with its own evidence. Mixing multiple cases can make your report harder to process.

What if the network denies the fraud even with evidence?

Ask for their reasoning. Sometimes they have a different view of how cookies are attributed. If you have strong proof, escalate to a supervisor or consider switching networks. You can also share your findings with other merchants to warn them.

Do I need a fraud detection tool to report cookie stuffing?

No, but it helps. Manual evidence is enough for obvious cases, but sophisticated cookie stuffing that mimics real behavior needs behavioral analysis. Tools like BotRefund can give you the exact proof a network will accept.

Further reading and comparison sources

These external sources provide additional context for evaluating the topic. Their inclusion is not an endorsement.

• Cookie stuffing
• Cookie Stuffing: Hidden Affiliate Fraud That Drains Your Budget
• Affiliate Cookie Stuffing: Detection & Prevention (2024)| Spider ...

How BotRefund helps you report cookie stuffing

BotRefund's Affiliate Payout Protection gives you the evidence you need to file a convincing report. It audits every conversion with behavioral signals, attribution path analysis, and click-to-conversion timing. You get a report that tags each commission as Approve, Review, Hold, or Reject—with clear, granular evidence to support your case.

Start without platform integrations: BotRefund reads UTM and click IDs from your traffic. For exact commission matching, upload your payout CSV or connect your affiliate platform later. You'll have proof that holds up when you submit it to the network.