Invalid traffic & fraud · also called Cookie dropping
Cookie stuffing
Cookie stuffing is secretly placing affiliate or tracking cookies on a person's browser without a real click or referral, so a fraudster gets commission if that person later buys something.
Affiliate programs pay commission to whoever referred a buyer, usually recognised by a cookie set when the shopper clicked the affiliate's link. Cookie stuffing sets that cookie without any genuine referral. A hidden image, invisible frame or script loads the retailer's affiliate link in the background when someone visits an unrelated page. If the person later shops at the retailer on their own, the fraudster collects commission.
It inflates costs for merchants and steals credit from genuine affiliates. The MRC IVT guidelines include cookie stuffing, recycling and harvesting in their list of SIVT, because they manipulate the data used for measurement and targeting. It is closely related to attribution fraud and to click spamming in mobile.
Signs include affiliates with high commissions but very little visible traffic, conversions without matching click paths, many cookies set with zero time on the retailer's site and referrals from pages unrelated to the product. Merchants counter it with click validation, referrer checks and closer auditing of affiliate traffic sources.
Think of it like this
It is like a salesperson slipping their business card into every shopping bag in the mall, then claiming commission whenever anyone who holds one returns to buy.
An example
An online electronics store finds one affiliate credited with $1.2 million in sales a year while sending almost no measurable clicks. Audit shows hidden 1x1 images on its forum pages were setting the affiliate cookie for every visitor.
Related terms
Affiliate marketing
Affiliate marketing is a performance-based arrangement where partners, such as publishers, bloggers, coupon or cashback sites and influencers, earn commission for sales or leads they refer to a merchant.
Attribution fraud
Attribution fraud is manipulating how conversions are credited, so a fraudster claims payment for installs, sales or leads it did not actually cause, often by faking or timing clicks.
SIVT (sophisticated invalid traffic)
SIVT (sophisticated invalid traffic) is invalid traffic designed to look human or legitimate, which can only be found through advanced analytics, multi-point corroboration and often human review.
Click spamming
Click spamming, or click flooding, is sending huge numbers of fake ad clicks for devices that never saw an ad, hoping some later install organically so the spammer gets attribution credit.
Last-click attribution
Last-click attribution gives 100% of the credit for a conversion to the final ad a customer clicked before converting, ignoring every earlier ad or touchpoint.
Sources: MRC Invalid Traffic Detection and Filtration Guidelines Addendum (2020 update)