Which Traffic Sources Should Be Commissionable? A Decision Guide for Affiliate Programs

Only traffic that comes from an affiliate's own tracked link or code should be commissionable. If someone arrives through organic search, direct navigation, a paid ad, a social post, or an email that was not sent through the affiliate's tracking, that visit is not an affiliate referral. Paying for it means paying for traffic you already earned yourself.

The challenge is that browser extensions and coupon sites can quietly inject their own affiliate IDs at checkout, turning non-affiliate traffic into a fake referral. That is why defining commissionable traffic is only half of the job. You also need to verify where the referral came from and block last-second overrides.

What makes a traffic source commissionable?

A traffic source earns a commission only when it meets these three criteria:

• The visitor clicked a link or entered a code that is unique to that affiliate.
• The affiliate's identity was recorded before the checkout event.
• The visit can be verified in your click logs with a timestamp that makes sense.

If any one is missing, it is not a commissionable source. This definition keeps your program fair and prevents you from paying for traffic you already generated.

Traffic sources you should explicitly exclude

Use this list as your baseline for non-commissionable traffic:

• Organic search from Google, Bing, or other search engines
• Direct visits, including typed URLs and bookmarks
• Paid search ads that do not use the affiliate's tracking link
• Email campaigns that do not use the affiliate's tracking link
• Social media posts that do not use the affiliate's tracking link
• Referral links from websites that are not registered affiliates
• Coupon extensions and cashback tools, unless they are your approved partners and use the affiliate link

Why exclude them? None of them was introduced by an affiliate. Paying for them gives away margin without bringing a new customer.

The coupon-extension problem: last-click hijacking

Browser extensions such as Honey or Capital One Shopping can append their own affiliate parameters at checkout. The sequence is common:

1. A user adds products to the cart and reaches checkout.
2. The extension detects a coupon box or the checkout path.
3. It shows an overlay and runs its affiliate redirect in the background.
4. That background call overwrites your current tracking cookie.
5. The merchant pays a commission on top of the discount.

In other words, you pay twice: you give the customer a discount and you pay a commission to the extension that did not bring the customer. This is double-dipping. The fix is to treat any cookie that appears after the customer reached the payment page as an override, not a valid referral.

Key facts about affiliate commission tracking

The table shows the practical reasons to verify who really referred the sale.

Why this matters: the cost of paying for wrong sources

If you ignore these rules, you will regularly pay commissions to tools that did not send you a customer. Each overpayment shrinks your margin. Over a year, this can add up to thousands of dollars in payouts with no new revenue attached. The problem becomes worse at scale because coupon extensions and bots do not need human intent to trigger a sale sequence.

How to define commissionable sources in your program terms

Put your rules in writing. Include these points:

• Only approved affiliate links or discount codes count.
• The affiliate's cookie must be set before the cart is created or at least before checkout is loaded.
• Traffic that arrives via a non-affiliate source and later gets rewritten by a browser extension is invalid.
• Affiliates cannot bid on your branded keywords in paid search unless you approve it in advance.
• Affiliates cannot use coupon extensions, cashback sites, or toolbar apps without a separate written agreement.

Being explicit stops disputes and gives you a basis for declining a payout.

How to audit a traffic source before paying

Follow these steps when a sale looks suspicious:

1. Pull the click logs for the session.
2. Look at the referral timestamp.
3. Compare it with the time the visitor added items to the cart.
4. If the cookie was set after cart items existed, treat it as an override.
5. Check for extension overlays using client-side telemetry.
6. Generate a dispute report with evidence.

You do not need to audit every sale, but you should audit a sample and always audit any payout that looks like it came from a coupon extension.

Common mistakes and limitations

Mistakes to avoid:

• Assuming the affiliate network's report shows the true source.
• Forgetting to block coupon boxes from being auto-read.
• Not setting a cookie window.
• Paying on refunded or canceled orders.
• Allowing affiliates to run self-referring purchases.

Limitations to remember:

• Cookies can be deleted by the user or blocked by privacy tools.
• Server-side tracking is more reliable than client-side tracking alone.
• If you sell through a marketplace or physical store, the affiliate attribution model may not apply.
• The "only affiliate links count" rule works well for online, direct purchases. For offline sales you need point-of-sale integration.

Decision framework for program managers

Use this simple decision rule for any source:

1. Did the visitor click the affiliate's unique link or use their unique code?
   • No → do not pay.
   • Yes → go to step 2.
2. Is the affiliate's cookie present at checkout, and was it set before the cart existed?
   • No → do not pay.
   • Yes → go to step 3.
3. Is there any evidence of a browser extension overriding the cookie after step 2?
   • Yes → do not pay.
   • No → pay the commission.

This rule requires reliable tracking. Without logs and telemetry, you are guessing.

Two practical scenarios

Scenario 1: A shopper searches Google, finds your site, adds a product to the cart, then opens a coupon extension. The extension applies a code and triggers its affiliate redirect. The affiliate cookie appears after the cart already exists. Under the rule above, this is not commissionable.

Scenario 2: A shopper clicks an affiliate's YouTube link, explores your site, leaves, and returns directly a day later to buy. Because the affiliate's cookie is still within the window, the affiliate gets credit. The direct return does not cancel the referral. This is a commissionable sale.

Terminology you should know

• Affiliate link: a URL with a unique identifier that tells your system which affiliate should get credit.
• Cookie window: the period after a click during which the affiliate can still get credit for a sale.
• Last-click attribution: giving credit to the final link clicked before purchase.
• Content Security Policy (CSP): a browser-level rule that can block unauthorized scripts from running on your checkout page.
• Client-side telemetry: code that runs in the visitor's browser and captures events like cookie changes with precise timestamps.

FAQ

If a customer visits organically and then clicks an affiliate link later, who gets credit?

The affiliate gets credit, because the final click before purchase came from their tracked link. This is the standard last-click rule unless you choose first-click attribution.

Should paid search clicks be commissionable for affiliates?

Only if the paid ad is set up through a tracked affiliate link and your program allows it. Otherwise, exclude paid search entirely.

How long should the affiliate cookie window be?

Set one that matches your average sales cycle. Common windows range from 24 hours to 30 days, but the exact length is a business decision you should document.

Can I block coupon extensions from overriding my affiliate tracking?

Yes. Use Content Security Policies, restrict automatic reads of coupon fields, and track referral timelines. Client-side telemetry can also detect the override.

Do I have to pay commission on sales that are later refunded?

No. Most programs subtract refunds from the affiliate's balance. Your terms should say so.

What does "double-dipping" mean?

It means you give the customer a coupon discount and still pay an affiliate commission to the tool that applied that discount. You pay twice.