Seatext library / BotRefund evidence

BotRefund Evidence for Affiliate Commission Disputes: A Complete Guide

BotRefund provides dispute-ready PDF reports containing timestamped click logs, referrer chain screenshots, device fingerprint matches, IP reputation scores, and specific attribution rule violations. This documentation allows you to prove manipulation—such as cookie stuffing or...

Built for advertisers who need clear, refund-ready traffic evidence.

The Evidence You Need to Win Disputes

To successfully challenge a stolen commission, you must move beyond simple "suspicious" flags. Affiliate networks require concrete proof that an attribution path was manipulated. BotRefund generates granular, audit-ready reports that map the entire session journey, providing the specific data points networks need to process a rejection. This guide explains exactly what evidence you receive, how it is collected, and why it stands up to scrutiny.

Evidence Type What It Proves Takeaway
Timestamped Click Logs Sequence of events Confirms if a cookie was dropped in the final milliseconds before conversion.
Referrer Chain Screenshots Traffic origin Identifies if the traffic source was hijacked or redirected.
Device Fingerprint Matches User identity Detects if multiple "conversions" come from the same automated device.
IP Reputation Scores Network risk Flags proxy or data-center IPs that support fraud claims.
Attribution Rule Violations Policy breach Highlights specific violations like unauthorized coupon extension injections.

Each type of evidence works together to build a timeline. Networks want to see that you did not act on a hunch. The PDF report you receive arranges these data points in a logical order that matches the network's own investigation workflow.

How BotRefund Collects the Evidence

BotRefund installs a lightweight JavaScript tag on your site. It tracks every session from the initial affiliate click through to conversion. The script captures raw data—nothing is filtered or modified.

Key data points include:

  • Timestamps: Millisecond-precise records of every click, mouse movement, scroll, and field input. A cookie drop that happens 50 milliseconds before checkout is suspicious.
  • User-Agent Strings: The full browser, OS, and device details. Automated browsers often send incomplete or mismatched user agents.
  • IP Addresses: The raw IP and its reputation score. Data-center IPs and residential proxies are flagged.
  • Session Recordings: A replay of the mouse path, scroll behavior, and focus changes. The recording is not video; it is a structured log of interaction events.

BotRefund runs 106 independent checks on each session. These include behavioral signals such as superhuman input speed, robotic linear movement, lack of mouse tremor, and unnatural session durations. Each check produces one piece of evidence. The prediction AI weighs the full pattern, not a single rule.

The tracking script does not require deep platform integration. It reads UTM parameters and click IDs from your traffic. For exact payout matching, you can upload a CSV or connect your affiliate platform later.

Data is stored securely. Only the flagged sessions are extracted into a dispute report. You never send raw logs to the network; you send a curated packet.

Step-by-Step: Filing a Commission Recovery Claim

Filing a claim involves five clear steps. Each step requires attention to detail because networks look for procedural errors.

  1. Capture the Session Data: Install the BotRefund tracking script on your site. It starts monitoring immediately. You can set it up without changing your affiliate platform configuration.
  2. Reconstruct the Path: BotRefund maps UTM parameters and click IDs to conversions. You see which affiliate ID and click ID drove each sale or lead. It also shows the full attribution path, including any redirects that occurred.
  3. Review the Audit Report: Before each payout cycle, check the dashboard. Commissions are tagged as Approve, Review, Hold, or Reject.
    • Approve means clean traffic with intact attribution.
    • Review means anomalies exist—worth a manual look.
    • Hold means strong fraud signals; pause payment pending investigation.
    • Reject means clear evidence of manipulation; decline the commission.
    A "Hold" tag is not final. You may have to gather more context. A "Reject" tag is backed by the evidence packet. Do not approve a "Reject" unless the evidence is disproved.
  4. Download the Evidence Packet: Export the PDF report for each flagged commission. The report is structured to be read by a network manager. It includes the behavioral signals, IP reputation, and attribution path data. It also includes a one-page summary that explains why the commission should be reversed.
  5. Submit to the Network: Email the PDF to your affiliate network manager. Include a short note explaining that you have identified an attribution violation and want to dispute the commission. Stick to the facts. Do not accuse anyone of fraud without the evidence.

When the network asks for more details, you can open the PDF and point to specific timestamps or IP reputation scores. That level of specificity speeds up the review.

Why Standard Click-Level Tools Fail

Click-level fraud tools catch bots in the traffic. That is useful for ad spend, but affiliate fraud often happens after the click. Real users or sophisticated scripts manipulate the attribution path in the final seconds before a sale.

Consider cookie stuffing. A hidden iframe or image on your site drops an affiliate cookie without the user seeing anything. The visitor never clicked that affiliate's link. They were on your site for a different reason. The cookie claims credit anyway. Standard click tools see a valid click because the cookie was set via an HTTP response. They do not check whether the user actually landed on that affiliate's page.

BotRefund's attribution path analysis catches this. It tracks the full referrer chain and every redirect. When a cookie appears without a corresponding click in the path, the session is flagged. The evidence includes the referrer URL, the timestamp of the cookie drop, and the fact that no page from that affiliate was visited.

Coupon overwrites are another example. Browser extensions inject affiliate cookies at the point of purchase. The user thinks they are using a coupon code; the extension replaces the original affiliate cookie. Standard tools only see the final cookie. BotRefund sees the change in cookie ownership. The report shows the original affiliate ID, the injection timestamp, and the IP address from which the injection occurred. That is hard evidence.

Last-click hijacking follows a similar pattern. An affiliate fires a redirect in the final milliseconds before a conversion. The user may have typed the URL directly, but the redirect gives credit elsewhere. BotRefund's click logs show the redirect sequence. The report includes the exact URL of the redirect and the timestamp difference between the last click and the conversion.

These patterns do not look like bot traffic. They pass traditional fraud filters. Only attribution path analysis reveals the manipulation.

How the Evidence Is Packaged into a Dispute-Ready PDF

The PDF report follows a specific structure. It starts with a one-page executive summary. This summary states the affiliate ID, the transaction ID, the commission amount, and the reason for rejection. It lists the violation type—cookie stuffing, last-click hijacking, coupon extension, or other.

The next section presents the timing evidence. Timestamped click logs are shown as a timeline. Each event is listed with a millisecond timestamp, the URL, and the action. Networks can see exactly when the suspicious cookie drop occurred relative to the conversion.

Then come the referrer chain screenshots. These are static images of the redirect path, captured from the session recording. They show every URL visited, including any that were hidden or triggered by script.

Device fingerprint matches are displayed in a table. If multiple conversions share the same fingerprint but different user accounts, the table highlights that. The fingerprint includes browser details, installed fonts, canvas rendering, and hardware specs.

IP reputation scores appear next. The score ranges from 0 to 100. A score below 30 indicates high risk. The report shows the ISP, the country, and whether the IP is from a data center or residential proxy.

The final section lists the specific attribution rule violations. BotRefund compares the session against the network's published policies. If the network prohibits hidden iframes or unauthorized redirects, the report points to that policy and shows the evidence.

The PDF is designed to be a complete package. You do not need to attach any other files. Networks typically accept it as the starting point for a dispute review.

Trade-Offs and Limitations of Behavioral Evidence

Behavioral evidence is powerful, but it is not perfect. Legitimate users can trigger false positives. A person with a motor disability may move the mouse in an unusual pattern. A privacy tool may block session recording or alter the user-agent. A corporate network might use a shared IP that has a poor reputation.

BotRefund cross-checks signals to reduce errors. A single anomaly is never a verdict. For example, superhuman input speed alone does not flag a session. The AI also checks whether the user typed in a way that matches a human. If a session shows no mouse movement but does show natural scrolling and realistic pauses, it may be a keyboard-only user. BotRefund treats that as human.

Similarly, IP reputation is a risk factor, not proof. A data-center IP may be used by a legitimate remote worker. BotRefund confirms the fraud claim by looking for other patterns, like a session duration that is too short or too uniform. The report states the IP score but also shows the corroborating signals.

Networks have their own policies. Some may require additional data from their own tracking systems. Your BotRefund report is a starting point, not a guarantee. You may need to explain the evidence or answer follow-up questions. That is normal.

Another limitation is timing. Behavioral evidence is only useful if you capture it before the payout. BotRefund runs continuously, so you get flags in real time. If you discover a problem after paying, the evidence is still there, but the recovery process becomes a negotiation rather than a pre-payment hold.

Finally, not all networks are cooperative. Some may reject the evidence because they have their own fraud detection and want to avoid reversing commissions. In that case, you may need to escalate to a senior manager or use arbitration clauses in your contract. The PDF gives you a formal record to fall back on.

FAQ: Common Questions About Commission Disputes

How long does a dispute take?

Most networks respond within 5 to 10 business days. Complex cases may take longer. If you pre-emptively flag a commission with a "Hold" tag, you can avoid a dispute altogether. The network simply delays payment until you investigate.

What if the network rejects the evidence?

Ask for a specific reason. Sometimes the network wants a different format or additional data. You can request that they review the case with a senior fraud analyst. If they still reject, you can file a formal appeal using the PDF as your documentation. Keep records of all communication.

Can I use the evidence for multiple commissions?

Yes. If several conversions share the same fingerprint or IP reputation, you can group them in one report. BotRefund allows you to select multiple transactions and generate a combined PDF. That simplifies the process and strengthens your case.

Do I need to show the evidence to the affiliate?

No. The dispute is between you and the network. The affiliate does not see the evidence unless the network shares it. In most cases, the network handles the communication directly. You should avoid contacting the affiliate yourself, as that can lead to retaliation.

Is BotRefund a replacement for network-level fraud detection?

No. Networks have their own systems. Your evidence complements theirs. When you present a BotRefund report, you demonstrate that you have independently verified the issue. That gives you more negotiating power. Some networks encourage advertisers to use third-party verification.

How far back can I go with the evidence?

BotRefund keeps session data for your account. There is no automatic deletion. You can generate reports for any past period. However, networks may have time limits on disputes, usually 30 to 90 days. Check your contract.

If you need a sample dispute packet to see exactly what you will receive, download a free annotated PDF from BotRefund. It shows every section with explanations of what the network looks for.

Further reading and comparison sources

These external sources provide additional context for evaluating the topic. Their inclusion is not an endorsement.

Learn more

Visit the website for more information.

Learn more