You launch an affiliate program for your MailWizz platform. Within a week, you see a spike in referrals. Great, right?
Then you check the numbers more carefully. The new "customers" are signing up from throwaway email addresses. None of them are actually using your platform. And one affiliate seems to be responsible for all of them.
This is affiliate fraud. And if you don’t catch it early, it can destroy your program’s profitability and waste your time cleaning up fake accounts.
The good news? With the right tools and processes, affiliate fraud is entirely preventable.
Why Affiliate Fraud Happens
Affiliate fraud exists because there’s money on the line. When someone can earn commissions by generating fake signups, some people will try to game the system.
Common fraud methods include:
- Self-referrals — Signing up under their own affiliate link with fake accounts
- Fake traffic — Using bots or click farms to generate fake registrations
- Stolen identities — Using other people’s information to create accounts
- Cookie stuffing — Forcing referral cookies onto devices without user knowledge
- Fake email addresses — Creating disposable email accounts to qualify for commissions
These aren’t rare edge cases. Fraud is a real problem in affiliate marketing, and it costs businesses millions every year.
What Fraud Costs Your MailWizz Platform
The obvious cost is financial. You pay commissions for customers who don’t exist or won’t convert. But the hidden costs are worse:
- Wasted support time — Your team has to investigate and clean up fake accounts
- Distorted analytics — Fake signups make it impossible to measure real performance
- Platform reputation damage — Fake accounts can be used for spam or abuse
- Missed opportunities — Resources spent on fraud cleanup could go to growth
Fraud doesn’t just cost you money. It distracts you from building your business.
Built-in Fraud Detection Features in the Affiliate Extension
The Affiliate & Referral System Extension for MailWizz includes several fraud protection features designed specifically for MailWizz platforms.
1. Automatic IP Duplicate Detection
The most basic form of affiliate fraud is self-referral. Someone signs up under their own link using a different email but the same IP address.
The extension checks for duplicate IP addresses across referrals and commissions. If the same IP appears multiple times within a short period, the system flags those commissions for review.
How it works:
- Every referral is logged with the visitor’s IP address
- When a commission is created, the system checks against existing IP records
- If a match is found, the commission receives a warning indicator
- Admins can investigate and decide whether to approve or reject
2. 24-Hour Volume Alerts
Some fraud patterns involve rapid, high-volume signups. A legitimate affiliate might generate 2-3 referrals per day. A fraudulent one might generate 20 in an hour using bots.
The extension monitors commission volume within 24-hour windows. If an affiliate suddenly generates an unusually high number of commissions, the system flags the activity automatically.
How it works:
- Commissions are timestamped by creation date
- The system calculates volume per affiliate per 24-hour period
- Exceeding configurable thresholds triggers a warning
- Flagged commissions are visually marked in the admin grid
3. Visual Warning System
When fraud is detected, the system doesn’t just create a log entry. It displays clear warning badges directly in the admin commission grid.
This means you can scan your commission list and instantly see which ones need review. No digging through reports or setting up complex dashboards.
Badge types:
- Yellow warning — Possible duplicate IP detected
- Red alert — High-volume activity flagged
- Information icon — Commission needs manual review
4. HMAC-Signed Referral Cookies
Cookie tampering is a more sophisticated form of fraud. Someone manipulates their browser’s cookies to claim credit for referrals they didn’t generate.
The extension uses HMAC-SHA256 signing to protect referral cookies. Each cookie is cryptographically signed. If someone tries to modify the cookie value, the signature becomes invalid and the referral is rejected.
Why this matters:
- Prevents cookie manipulation
- Ensures commission integrity
- Protects accurate attribution
- Works with backward compatibility mode
How to Configure Fraud Detection
Setting up fraud protection in the extension is straightforward. Here’s what to configure:
Step 1: Enable Duplicate IP Detection
Navigate to the affiliate settings. Enable duplicate IP checking. Set the detection window (7-30 days is recommended).
Step 2: Set Volume Thresholds
Configure how many commissions per 24-hour period should trigger a warning. Start with a generous threshold (10-15) and adjust as you learn your platform’s normal traffic patterns.
Step 3: Configure Auto-Approval Delay
Instead of approving commissions immediately, set a delay (3-7 days). This gives you time to review flagged commissions before they’re paid out.
Step 4: Review Flagged Commissions
Check the commission grid regularly for warning badges. Investigate suspicious activity by checking:
- The affiliate’s referral history
- IP addresses associated with referrals
- Whether referred customers are actually using the platform
- Email patterns (throwaway domains are a red flag)
Best Practices for Fraud Prevention
Start with Manual Review
When your affiliate program is new, manually review commissions before approval. This slows things down slightly but helps you build a fraud detection baseline. As you learn what "normal" looks like, you can automate more.
Set a Minimum Payout Threshold
Require affiliates to reach a minimum balance before requesting a payout ($50 is common). This filters out casual fraudsters who want quick, small payouts.
Monitor Engagement
The best fraud detection metric isn’t technical — it’s engagement. A real customer signs up, uses the platform, and sticks around. A fake customer registers and never logs in again.
When reviewing suspicious commissions, check whether the referred customer has:
- Logged into the platform
- Created campaigns or lists
- Sent any emails
- Renewed their subscription
Low engagement is a major red flag.
Communicate Your Fraud Policy
Publish clear terms for your affiliate program. State that fraud will result in commission forfeiture and account termination. The knowledge that you’re actively monitoring fraud deters casual abusers.
Keep Audit Logs
The extension logs all commission activity with timestamps. Keep these records for at least 12 months. If a fraud pattern emerges later, you can investigate historical data.
What to Do When You Find Fraud
If you detect affiliate fraud, here’s a recommended workflow:
- Flag the commissions — Mark them as suspicious in the system
- Gather evidence — Collect IP data, referral history, and engagement metrics
- Review carefully — Make sure it’s actually fraud, not a legitimate surge
- Contact the affiliate — Ask for clarification if there’s any doubt
- Reject or void commissions — Remove fraudulent earnings
- Warn or suspend the affiliate — Depending on severity
- Update your fraud rules — Adjust thresholds if needed
Real Example: How Fraud Detection Saved a MailWizz Platform
One MailWizz platform owner noticed a new affiliate generating 18 commissions in 48 hours — more than any other affiliate had generated in a month. The dashboard flagged the activity automatically.
On investigation, the admin found:
- All 18 "customers" registered from the same IP range
- None of them had logged in after registration
- All used temporary email domains
- The affiliate was the same person creating fake accounts
Result: 18 fraudulent commissions were rejected, saving the platform over $500 in fake commission payouts. The affiliate was suspended. The program continued running cleanly.
Without fraud detection, that $500 would have been paid out — and similar patterns might have continued undetected.
Final Thoughts
Affiliate fraud is a reality of running a referral program. But with the right tools, it’s manageable. The key is having detection systems in place before fraud happens — not after you’ve already paid out fake commissions.
The Affiliate & Referral System Extension for MailWizz gives you professional-grade fraud protection built directly into your MailWizz platform. IP detection, volume alerts, signed cookies, and visual warnings work together to keep your program clean.
Launch your affiliate program with confidence. The fraud protection is built in.
English
Vietnamese