For bookmakers · Theme 02 of 04

Do you know where your affiliates are really promoting you?

Most operators check that affiliate content meets responsible gambling and advertising rules. Far fewer check how the traffic is actually generated, or which sites their ads really run on. That is where the fraud is.

  1. Q-07Question

    Do you know every channel where your affiliates promote you?

    You agreed to pay for traffic from particular websites, apps, social accounts or Telegram channels. Without a declared and checked list of channels for each affiliate, you can’t tell a genuine comparison site from a network of hidden iframes.

    You also won’t notice when an affiliate quietly adds a channel you would never have approved.

    Red flagYour affiliate records hold a sign-up URL and payment details, and not much else.
    What we checkDeclared channels against what we actually find, including sub-affiliates, redirect domains and placements nobody told you about.
  2. Q-08Question

    Do some affiliates refuse to declare channels, saying they’re “just media buyers”?

    Media buying can be a legitimate way to send traffic. But many “media buyers” put your ads on websites you would never approve directly: small, low-quality, often fraudulent sites with no responsible gambling messaging at all.

    That is why they don’t declare their sources. If they showed you the placements, you would turn them down. Instead you pay lifetime revenue share on traffic you can’t see, and your brand carries the regulatory and reputational risk of ads you never approved.

    Red flagA large share of your FTDs comes from affiliates who won’t name the sites your ads appear on.
    What we checkWhere your ads actually appear: the sites, apps, pop-unders and resold traffic behind “media buyer” volume, and whether any of it carries responsible gambling messaging.
  3. Q-09Question

    Do you vet affiliates before you work with them?

    Fraudulent affiliates move from operator to operator, often under new names. Checking identity, ownership of the sites they declare, history and traffic sources before activation is far cheaper than recovering revenue share later.

    And a good reputation elsewhere proves little. An affiliate with a clean record on big UK brands may be exactly the one running fraud on smaller brands, where it expects nobody to look.

    Red flagApproval is automatic, based on the affiliate’s own description of their traffic, or waved through because they’re trusted on another brand.
    What we checkPre-activation due diligence: site ownership, linked entities, past behaviour and a test of the traffic they say they’ll send.
  4. Q-10Question

    Do you audit every affiliate you pay?

    If you only look at affiliates that complain or look odd, you only catch the clumsy ones. Every affiliate earning commission is a payment you should be able to justify.

    Red flagSome affiliates are being paid every month and have never been looked at.
    What we checkEvery paying affiliate, prioritised by how much you pay them and how risky their traffic profile looks.
  5. Q-11Question

    Do you audit your largest affiliates by revenue?

    Big affiliates are often treated as too important to question. But fraud scales: an affiliate claiming your organic players will quickly become one of your biggest.

    Your top earners deserve the most scrutiny, not the least. Rank them brand by brand too: an affiliate that looks mid-sized across the group can be the biggest earner on a small brand.

    Red flagYour top ten affiliates by commission have never had an independent audit.
    What we checkA deep audit of your highest-earning partners on each brand, reconciled against their FTDs, deposits and revenue share.
  6. Q-12Question

    How often do you audit where and how your affiliates promote you?

    Fraud techniques change, and an affiliate that was clean at sign-up can change its traffic next month. One-off checks just give fraudsters a schedule to work around.

    Red flagThe last audit was at onboarding, or there has never been one.
    What we checkOngoing monitoring on a schedule fraudsters can’t predict, with alerts when an affiliate’s behaviour changes.
  7. Q-13Question

    Do you audit your affiliates on different browsers, devices and countries?

    Fraud is targeted. It shows a clean page to your office IP address, a desktop browser and your compliance team, and runs the real technique only for certain players: mobile users, a particular browser, traffic from a certain referrer.

    Above all, fraudsters choose which brands to target. The same affiliate can run a spotless campaign for your UK brand and a fraudulent one for your brand in Africa. If you check one brand, from one place, on one device, you see exactly what they want you to see.

    Red flagAudits run from head office on a work laptop, against your main brand only.
    What we checkEvery brand the affiliate promotes, from each market, on mobile and desktop, across browsers, times of day and realistic referrers.
  8. Q-14Question

    Are you only auditing responsible gambling compliance?

    Responsible gambling and advertising checks matter. But they only look at what the affiliate chooses to show you: whether a page carries the right warnings and bonus terms.

    They don’t tell you whether that page sets cookies in a hidden frame, or whether the affiliate is bidding on your brand. And they never see a media buyer’s undeclared placements, which are often the sites with no responsible gambling messaging at all. Responsible gambling auditing on its own is not enough.

    Red flagYour only affiliate audit is a compliance checklist.
    What we checkThe techniques behind the traffic, alongside the compliance work you already do.

Brands, not just countries

Fraud goes where nobody is watching.

A fraudulent affiliate doesn’t want to lose a high-value market. So it stays clean where scrutiny is high, and saves the fraud for weaker brands with small affiliate teams.

Clean in the UK is not clean everywhere.

  • /01

    Why smaller brands get picked

    Lean affiliate teams, less tooling, newer markets and brands too young for anyone to notice hijacked brand traffic. Fraudsters know which teams can’t check everything.

  • /02

    Reputation is the cover

    A clean record on your flagship brand is what gets an affiliate approved on your others without questions.

  • /03

    Audit per brand, not per affiliate

    Good behaviour on one brand is no evidence about another. Give smaller brands at least the same scrutiny as the flagship.

  • /04

    Share what you find across the group

    Fraud found on one brand should trigger a check of that affiliate on every other brand it promotes.

Two different audits

Compliance tells you what’s on the page. Forensics tells you how the player got there.

You need both. Most operators only run the first.

Responsible gambling & ad complianceUsually done

What the affiliate shows you.

  • ✓Age and safer-gambling messaging
  • ✓Bonus wording and significant terms
  • ✓Market and licence restrictions
  • ✓Tone, targeting and imagery
Traffic forensicsUsually missing

What the affiliate actually does.

  • F-01How and when the cookie was set, and whether anyone clicked
  • F-02Redirect chains and hidden frames between the affiliate and you
  • F-03Brand-term bidding and lookalike domains in each market
  • F-04Extensions and link rewriting that overwrite last-click
  • F-05Cloaking by country, device, browser and referrer
  • F-06Declared vs real placements, including sub-affiliates

Next step

Audit your affiliates the way a player meets them.

Every market, every device, every redirect. Start with your biggest earners and the “media buyers” who won’t tell you where their traffic comes from.