iGaming Affiliate Fraud: Fake FTDs & Bonus Abuse
Key takeaways
- Most affiliate fraud exploits CPA payouts per first-time depositor.
- High FTD rate with very low player value is the classic fraud profile.
- KYC-gated qualification and hold periods stop most fake players.
- Clawback clauses should require notice and player-level evidence.
- Honest affiliates should track sub-IDs and vet sub-affiliates.
iGaming affiliate fraud is any scheme that makes an affiliate's traffic look more valuable than it is so the affiliate gets paid for players who were never genuine: fake or recycled accounts that make one qualifying deposit (fake FTDs), incentivised sign-ups, bonus abuse rings, bot clicks and cookie stuffing. Operators respond with qualification rules, KYC, clawbacks and, eventually, account termination.
The commission models explain why it persists. Casino CPA deals pay per first-time depositor, and revenue-share deals pay a slice of player losses for months or years, so a single fake player can generate a CPA payout or seed a long-tail commission stream. This guide covers the main fraud patterns, the signals operators actually use to catch them, and what honest affiliates should do so they are not caught in the crossfire. Because almost every scheme relies on accounts that would fail proper identity checks, the operator's choice among KYC providers for iGaming operators is the single biggest lever against it.
The main types of iGaming affiliate fraud
Fraud-prevention vendors and affiliate-tracking providers describe broadly the same set of patterns. They differ in who commits them and which commission model they exploit.
Fake FTDs and minimum-deposit farming
The affiliate, or people it pays, opens accounts that deposit just enough to meet the CPA qualifying threshold and then stop playing or withdraw. Sometimes identities are stolen, leaked or recycled; sometimes real people are paid a small fee to register and deposit. The operator pays a CPA for a player with no lifetime value.
Incentivised traffic
Users sign up because the affiliate rewards them (cash, crypto, gift cards or a share of the commission), not because they want to play. It is not always illegal, but most casino affiliate terms ban undisclosed incentives because the resulting players behave nothing like normal depositors.
Bonus abuse and commission cashback
The affiliate targets bonus hunters, or offers players cashback funded from its own CPA, so players take the welcome offer and leave. Operators lose the bonus cost and the CPA, and the affiliate keeps the spread. Our guide to bonus abuse prevention covers the player-side controls.
Click fraud, bots and cookie stuffing
Bots inflate clicks and can trigger volume-based tier upgrades. Cookie stuffing plants tracking cookies through hidden iframes, pop-unders or scripts so the affiliate is credited for players it never referred. Outside gambling, the eBay affiliate Shawn Hogan was convicted of wire fraud in 2014 over cookie stuffing, which shows how seriously courts can treat it.
Brand bidding and traffic laundering
Affiliates bid on the operator's brand keywords in paid search, or route traffic through intermediate sites to hide its real source, then claim players who were already looking for the brand. Most programme terms forbid brand bidding explicitly.
Self-referral and multi-accounting
The affiliate signs up itself, friends or family, or runs multiple affiliate accounts to collect CPAs or reset negative balances. Device and payment-method overlap between the affiliate and "its" players is the usual giveaway.
Warning signs operators use to detect iGaming affiliate fraud
No single signal proves fraud on its own. Risk teams look for clusters of signals at the level of one affiliate or one sub-ID, then compare them with the programme's average.
| Fraud pattern | Typical signal | Data the operator checks |
|---|---|---|
| Fake FTDs | High FTD rate with very low player lifetime value; deposits clustered at the exact CPA minimum | Deposit amounts, wagering after first deposit, 30/60/90-day player value by affiliate |
| Recycled or stolen identities | KYC failures, mismatched names and payment methods, document reuse | KYC results, document and selfie checks, payment-method ownership |
| Incentivised traffic | Players who register, deposit once and never log in again | Login frequency, session length, game diversity |
| Bonus abuse | Bonus claimed then immediate withdrawal attempts; low-risk betting patterns to clear wagering | Bonus-to-deposit ratio, bet patterns, withdrawal timing |
| Bots and click fraud | Click spikes with no matching registrations; data-centre IPs | Click-to-registration ratio, IP reputation, user agents |
| Cookie stuffing | Players "referred" with near-zero time between click and registration, or with no visible landing page visit | Click timestamps, referrer headers, landing page logs |
| Self-referral / multi-accounting | Shared devices, IPs or payment cards between players and the affiliate | Device fingerprints, IP history, card BINs and wallet IDs |
| Brand bidding | Paid-search clicks on brand terms tagged with the affiliate's ID | Search ad monitoring, referrer data, programme compliance scans |
The most reliable single comparison is FTD rate against player value by affiliate source. An affiliate with an unusually high FTD rate but player value far below the programme average is the classic profile of incentivised or farmed traffic.
How KYC and qualification rules stop fake players
Most affiliate fraud ultimately depends on accounts that would not survive proper identity checks. That is why operators increasingly tie CPA qualification to verified players rather than raw deposits. If you are evaluating vendors for this, our KYC provider comparison linked above explains document checks, liveness, database verification and per-check pricing models.
Common qualification rules in casino affiliate programmes include:
- Minimum deposit and minimum wagering before a player counts as a qualified FTD.
- KYC passed before the CPA is payable.
- Hold periods (for example, paying CPAs the month after qualification) so chargebacks and fraud flags have time to surface.
- Geo restrictions, paying only for players from licensed target markets.
- Duplicate-account exclusion, so a returning player does not count as new.
Operator remedies: clawbacks, withheld commission and termination
Affiliate agreements usually give operators broad remedies once fraud is suspected. The table below shows the usual escalation path and what an honest affiliate should expect to see in writing.
| Remedy | What it means | What a fair programme should provide |
|---|---|---|
| Withholding | Commission frozen pending investigation | Written notice, the affected period and sub-IDs, a timeline for review |
| Clawback / reversal | CPAs or revenue share already paid are deducted from future earnings | Player-level evidence (anonymised IDs, reason codes) for each reversed CPA |
| Disqualification of players | Specific players removed from the affiliate's account | Clear qualification criteria in the terms, applied consistently |
| Rate change | Move from CPA to revenue share, or lower CPA | Notice period as stated in the agreement |
| Termination | Affiliate account closed, unpaid commission forfeited | Termination clause that distinguishes fraud from ordinary low-quality traffic |
Clawback and forfeiture clauses are where honest affiliates get hurt, because vague wording ("at our sole discretion", "suspicious activity") lets a programme reverse legitimate commissions. We list the clauses to negotiate in our guide to casino affiliate program terms red flags.
When the fraud runs the other way: risks for affiliates
Affiliates also worry about being underpaid by the operator, a practice the industry calls "shaving". It is hard to prove because the operator controls the tracking and player data. Patterns affiliates report include registrations that never appear in the dashboard, players reclassified as "existing customers", and revenue-share figures that move after the reporting period closes. Legitimate explanations exist for each (duplicate accounts, tracking cookie loss on mobile, bonus and chargeback adjustments), which is exactly why transparent reporting matters.
| Affiliate concern | Possible legitimate cause | What to ask the programme |
|---|---|---|
| Clicks with no registrations | Cookie blocking, app installs not attributed, cross-device journeys | Whether server-to-server (postback) tracking is available |
| Players marked as existing customers | Duplicate accounts detected by KYC or device checks | Anonymised player IDs and the duplicate-detection rule |
| Revenue share revised after month end | Chargebacks, bonus costs, admin fee deductions | A line-by-line breakdown of deductions per period |
| Sudden CPA reversals | Fraud flags, failed KYC, players from excluded markets | Reason codes per reversed player and the clause relied on |
Server-to-server postback tracking, written reason codes and clear qualification rules protect both sides: the operator can prove why it reversed a commission, and the affiliate can prove its traffic was clean.
How honest affiliates protect themselves
- Know your traffic sources. Use sub-IDs per channel and campaign so a bad source can be isolated instead of tainting your whole account.
- Vet sub-affiliates and media buyers. Fraud by a partner further down the chain is still credited to you.
- Disclose incentives. If you run cashback or rewards, get written approval from the programme first.
- Do not bid on brand terms unless the programme gives written permission.
- Monitor your own player quality. Ask programmes for anonymised player-value reports and flag anomalies before they do.
- Keep records. Save landing pages, creatives and traffic logs so you can respond with evidence if commission is withheld.
The Canadian angle: Ontario and the rest of the market
In Ontario's regulated market, the Alcohol and Gaming Commission of Ontario (AGCO) sets standards and iGaming Ontario contracts with operators. A 2022 analysis by the law firm Bennett Jones, citing Ontario Regulation 78/12 under the Gaming Control Act, 1992, noted that the AGCO treated marketing affiliates as non-gaming-related suppliers that do not need registration, while deciding edge cases individually. Even without registration, Ontario operators are responsible for the marketing done on their behalf, so they push compliance and anti-fraud obligations down to affiliates contractually. Check the AGCO's current guidance before relying on any classification. Outside Ontario, provincial lottery corporations run the legal online casinos, and affiliates working with offshore brands should expect stricter, less negotiable terms.
Gambling content and offers must target adults only (19+ in most of Canada, 18+ in Quebec, Alberta and Manitoba). Affiliates should never promote gambling as a way to make money, and should link to responsible-gambling resources such as ConnexOntario or provincial help lines.
Frequently asked questions
What is affiliate fraud in iGaming?
It is any scheme that misrepresents the value of an affiliate's traffic to earn commission, such as fake first-time depositors, incentivised sign-ups, bonus abuse, bot clicks, cookie stuffing, brand bidding or self-referral.
What is a fake FTD?
A first-time deposit made only to trigger a CPA payment, usually by a farmed, incentivised or recycled-identity account that deposits the qualifying minimum and then stops playing or withdraws.
How do casinos detect affiliate fraud?
They compare FTD rates with player lifetime value by affiliate, check KYC outcomes, look for shared devices, IPs and payment methods, and review click-to-registration timing and traffic sources.
Can a casino affiliate program claw back commission?
Most agreements allow withholding or reversing commission for fraudulent or non-qualifying players. Fair programmes give written notice and player-level evidence; vague 'sole discretion' clauses are a red flag.
Do affiliates need a licence in Ontario?
A 2022 legal analysis said the AGCO treated marketing affiliates as non-gaming-related suppliers without registration, decided case by case. Check current AGCO guidance, as operators remain responsible for affiliate marketing.
Compare independently vetted sites.
See reviews18+ only. Gambling can be addictive — please play responsibly and only bet what you can afford to lose. If gambling is affecting you or someone you know, contact a local support service. This content is informational and never a guarantee of winnings.
Written and reviewed by the iGaming Expert Hub editorial team. Facts checked against primary sources; see the reference above.