Affiliate Brand Bidding Fraud: How to Detect Unauthorized PPC and Measure Commission Cannibalization

Affiliate brand bidding happens when an affiliate buys paid-search ads containing a merchant’s brand, product names, trademarks or close variants without permission. The affiliate may send the click to the merchant’s site, a comparison page, a coupon page or an intermediate redirect before receiving credit for the resulting sale.

The commercial problem is not always that the affiliate created a new customer. In many cases, the ad intercepts a user who was already searching for the merchant. The affiliate then earns a commission for capturing demand that might otherwise have converted through the merchant’s direct search, organic result, bookmark, email, retargeting campaign or another approved partner.

This makes affiliate brand bidding both a compliance issue and an attribution problem. A suspicious keyword or ad is not automatically proof of fraud. You need to establish what the affiliate bought, whether the activity breached the agreement, whether the traffic reached the intended destination, and whether the attributed conversions were genuinely incremental.

This guide provides a practical investigation framework for unauthorized affiliate brand bidding and affiliate PPC fraud. It also explains how to estimate commission cannibalization, what evidence to preserve, and how to prevent repeat activity without treating every paid-search affiliate as abusive.

What is affiliate brand bidding fraud?

Affiliate brand bidding fraud is the use of paid-search advertising by an affiliate to target a merchant’s branded or protected search terms in a way that violates the affiliate agreement, advertising policy or applicable trademark rules. The affiliate may use the exact brand name, misspellings, product names, brand-plus-coupon terms, brand-plus-login terms or competitor combinations.

The word fraud should be used carefully. A prohibited bid can be an intentional policy violation, a misunderstanding by an affiliate’s subcontractor, an agency error, or deliberate manipulation. The evidence should determine the classification. Until the facts are established, use terms such as suspicious brand bidding, unauthorized PPC activity or a policy breach under investigation.

Common forms of unauthorized affiliate brand bidding

Exact-match brand bidding: The affiliate buys the merchant’s name as a keyword and appears above or alongside the merchant’s own ad.
Brand-plus-offer bidding: The affiliate targets searches such as brand coupon, brand discount, brand promo code or brand free shipping.
Misspelling capture: The affiliate buys common typing errors or alternate spellings that are still clearly associated with the merchant.
Product-level bidding: The affiliate targets branded product names, model numbers or proprietary service names.
Display URL or ad-copy impersonation: The ad uses the merchant’s name, official-sounding language or a misleading display path.
Direct-link interception: The ad sends a user directly to the merchant while attaching the affiliate’s tracking identifier.
Bridge-page or redirect activity: The affiliate routes the click through a comparison, coupon or tracking page before sending the visitor to the merchant.
Sub-affiliate bidding: A publisher, media buyer or traffic broker bids on the brand through another affiliate account, obscuring who purchased the traffic.

Why brand bidding creates commission cannibalization

Commission cannibalization occurs when an affiliate receives credit for a conversion that the merchant would probably have received through another channel without that affiliate’s paid-search intervention. The affiliate may report revenue and conversions, but the program has not necessarily generated equivalent incremental demand.

Consider a user who searches for a merchant by name after seeing a television advert, an email, a previous purchase confirmation or an organic result. An affiliate places a paid ad above the merchant’s listing and sends the user through an affiliate link. If the user purchases, the affiliate earns a commission. The merchant may pay for its own brand campaign, pay the affiliate, and still count the order as affiliate-acquired.

That does not mean every branded affiliate click is cannibalized. An affiliate may provide a genuine service, such as a valid comparison, a negotiated coupon, a loyalty reward or an approved shopping experience. The key question is whether the affiliate added measurable value under the agreed rules.

A simple cannibalization estimate

A practical first estimate is:

Estimated cannibalized commission = suspected non-incremental conversions × commission per conversion

If commissions vary by order value, use the actual commission amount for each conversion rather than an average. For example, if an investigation identifies 420 suspicious brand-search conversions and the mean commission paid was 18 dollars, the gross commission exposure is 7,560 dollars. This is an exposure estimate, not proof that every conversion would have occurred without the affiliate.

A more cautious range can be useful:

Low exposure = suspicious conversions × estimated non-incremental rate × average commission
High exposure = suspicious conversions × higher estimated non-incremental rate × average commission

The non-incremental rate should come from evidence, not an arbitrary benchmark. Useful evidence may include a holdout test, pre- and post-intervention channel changes, click-path analysis, new-customer rates, conversion lag, brand-search trends and comparisons with approved affiliates.

How to detect unauthorized affiliate brand bidding

1. Start with the affiliate agreement and PPC policy

Before reviewing logs, identify the actual rule that may have been breached. Some programs prohibit all trademark bidding. Others allow bidding on selected terms, require negative keywords, prohibit direct linking, require pre-approval, or allow brand-plus-coupon terms only when the affiliate provides an approved offer.

Check whether the agreement covers affiliates, sub-affiliates, agencies, media buyers and traffic brokers. A clause that applies only to the named publisher may leave an enforcement gap when the publisher outsources search activity.

Record the policy version, effective date, permitted terms, prohibited terms, required ad disclosures, landing-page rules and consequences. This prevents an investigation from applying a new policy to historical traffic that was allowed at the time.

2. Capture the ad before it disappears

Search results change by location, device, time, audience, language and account history. When a suspicious ad appears, preserve evidence immediately.

Record the search query, date, time zone and approximate location.
Capture the full ad, including headline, descriptions, sitelinks, display URL and extensions.
Record the landing-page URL and every redirect in the click path.
Save the final URL, affiliate identifier, sub-ID and tracking parameters where visible.
Note whether the merchant’s own ad was also present and its relative position.
Repeat the search from more than one environment where lawful and practical.

A screenshot alone is weak evidence. It shows what appeared in one search context but does not prove which account bought the keyword or how many users clicked. Pair screenshots with redirect logs, affiliate platform records, ad-platform data and server-side request records.

3. Review search-term and keyword data

If the affiliate shares advertising data, request the actual search terms, keywords, match types, campaign names, negative keywords, geographic targeting and device splits. A campaign labelled as generic may still contain brand terms. Search-term data is more informative than a campaign name or a publisher’s written explanation.

Look for the following signals:

High volumes of brand, product and brand-plus-coupon queries.
Exact or phrase match keywords containing protected terms.
Sudden conversion increases after a brand campaign launches.
Very short click-to-conversion times combined with direct merchant landing pages.
Clicks concentrated in locations where the merchant already dominates branded search.
Repeated use of the same affiliate tracking identifier across different paid-search domains.
Conversions that rise while new-customer rate, average order value or assisted engagement falls.

These signals support investigation but do not independently establish fraud. A high brand conversion rate can also occur in an approved coupon or loyalty model.

4. Trace the click path

Use controlled test clicks only within the limits of the program rules and advertising-platform policies. Do not generate artificial conversions or repeatedly click ads in a way that could affect auction performance. The goal is to document the redirect and destination, not to inflate activity.

Inspect the sequence from ad destination to final merchant page. Record HTTP redirects, URL parameters, cookies, local storage identifiers and affiliate tracking calls where your privacy and security policies permit. Pay attention to whether the affiliate identifier is attached before the visitor reaches the merchant and whether a coupon or loyalty claim is added without a meaningful user action.

Direct linking is not automatically abusive. Some programs permit it because the affiliate’s value is the paid-search placement. Others prohibit it specifically because it makes brand interception easy. Evaluate the click path against the written terms.

5. Compare affiliate traffic with other channels

Pull a matched period of data for affiliate, paid search, organic search, direct, email and other relevant channels. Segment by brand versus non-brand intent where possible. Compare clicks, conversion rate, revenue, commission, new-customer rate, order value, conversion lag and cancellation or refund rate.

A suspicious pattern may look like this:

Affiliate conversions rise immediately after a brand-bidding campaign appears.
Merchant brand-paid-search conversions decline by a similar amount.
Affiliate conversion paths are short and contain little evidence of research or comparison.
The affiliate’s traffic has a high share of returning customers.
Total site conversions remain broadly flat while affiliate-attributed conversions increase.

This pattern is consistent with cannibalization, but it can also result from budget shifts, tracking changes, seasonality, promotions or search-auction changes. Control for those factors before making a final determination.

Evidence that helps distinguish fraud from a policy breach

Unauthorized brand bidding is a rule-based finding. Fraud is a stronger conclusion about intentional deception or manipulation. Keep the two concepts separate.

A policy breach may be supported by an ad screenshot, a prohibited keyword record and a matching affiliate account. A fraud finding may require additional evidence, such as concealment, repeated activity after notice, false reporting, use of a sub-affiliate to evade restrictions, fabricated traffic or deliberate misrepresentation of the traffic source.

Useful evidence categories

Ad evidence: Search-query records, screenshots, ad text, extensions and timestamps.
Identity evidence: Affiliate ID, sub-affiliate ID, agency account, tracking parameters and payment records.
Technical evidence: Redirect chains, referrers, server logs, click IDs and landing-page requests.
Commercial evidence: Commission amounts, order IDs, customer status, refunds and channel-level revenue.
Intent evidence: Keyword type, ad messaging, landing-page content and the presence or absence of a genuine offer.
Chronology: First observation, notification, remediation, recurrence and account changes.

Preserve original files and access logs. Write down collection methods, not just conclusions. An investigation that another analyst can reproduce is more useful for partner disputes, commission reversals and internal decisions.

How to quantify the financial impact

Separate gross commission from true incremental loss

Start with gross exposure: the commission paid on conversions associated with the suspected activity. Then estimate the portion that was probably non-incremental. Finally, include related costs such as merchant brand-search spend, agency fees, refunds, incentives and investigation time only when they can be supported by records.

For each affected order, consider:

Was the customer new or returning?
Was there a prior direct, organic, email or paid-search touch?
Did the affiliate provide a coupon, comparison, content or other qualifying service?
Was the order within the approved attribution window?
Was the affiliate click the first meaningful commercial interaction or only the final tracked touch?
Would the customer likely have reached the merchant without the affiliate ad?

Do not automatically reverse every commission connected to a brand term. If the policy allows a particular term or the affiliate provided documented incremental value, the correct action may be to retain the commission, change the rate or classify the traffic separately.

Use a cohort or holdout where possible

The strongest measurement approach is a controlled comparison. For example, temporarily exclude an approved affiliate from brand bidding in selected regions while maintaining the restriction in comparable regions. Compare total conversions, affiliate conversions, direct and paid-search conversions, revenue and profit during the test.

Holdout designs are difficult when several campaigns change at once. Document the test population, time period, exclusions, seasonality, promotions and tracking changes. A simple before-and-after chart can be useful for triage, but it is not a causal estimate by itself.

Prevention and control measures

Write rules that can be enforced

Define protected terms by category: brand, product, trademarked service, misspelling, brand-plus-coupon and brand-plus-login. State whether bidding is prohibited, allowed with approval, or allowed only under specific conditions. Explain whether the rule applies to sub-affiliates, agencies and other traffic sources.

Include requirements for negative keywords, ad copy, display URLs, landing pages, direct linking, geo-targeting, device targeting and trademark complaints. State what records the affiliate must retain and how quickly it must respond to an investigation.

Monitor continuously, not only after a complaint

Schedule searches across important markets and devices, but treat manual checks as detection rather than complete monitoring. Combine them with affiliate-level data, paid-search auction information, redirect observations, brand-query trends and anomaly alerts.

Prioritize affiliates with sudden volume changes, unusually high brand conversion rates, large returning-customer shares, multiple domains, opaque sub-affiliate relationships or repeated tracking anomalies. Risk-based monitoring is more practical than treating every partner identically.

Use prevention, blocking and validation correctly

Detection identifies a signal that may require investigation. Prevention reduces the chance of prohibited activity through contracts, approvals, negative keywords, access controls and partner education. Blocking stops or limits traffic, such as rejecting a tracking ID, pausing a partner or blocking a domain. Traffic validation assesses whether clicks, sessions and conversions appear technically and commercially credible.

These controls are not interchangeable. A traffic-validation tool may identify abnormal clicks but cannot determine whether a keyword violated a trademark policy. Blocking an affiliate may stop future attribution but does not prove that historical conversions were fraudulent. A contract may prohibit brand bidding but cannot detect a hidden sub-affiliate by itself.

How to handle an investigation with an affiliate

Open a case: Assign an owner, case ID, scope and evidence location.
Preserve evidence: Save ads, URLs, logs, platform exports and policy versions.
Limit further exposure: Consider a temporary hold or traffic restriction when the risk is material and the program terms allow it.
Ask specific questions: Request keyword lists, account IDs, sub-affiliate details, agency involvement and landing-page explanations.
Reconcile records: Compare the affiliate’s response with merchant logs, ad-platform data and order data.
Classify the result: Use categories such as permitted, inconclusive, policy breach, repeated breach or suspected intentional manipulation.
Apply proportionate action: Options may include education, removal of terms, commission adjustment, clawback, suspension or termination.
Document closure: Record the rationale, affected orders, financial estimate and monitoring plan.

A clear process reduces disputes. It also helps avoid false positives where a legitimate comparison site, approved coupon partner or internal campaign is mistaken for unauthorized bidding.

Practical investigation example

Suppose an affiliate’s conversions increase from 80 to 310 in one month. The affiliate says the growth came from improved content, but a search reveals an ad using the merchant’s exact brand name and a brand-plus-discount term. The ad sends users through a tracking URL directly to the merchant’s product page.

The first finding is an apparent policy breach if those terms are prohibited. The next steps are to identify the ad account, determine whether a sub-affiliate placed the ads, export the affected orders, and compare the change with the merchant’s brand-paid-search and organic conversions.

If 190 of the 230 additional conversions match the suspicious campaign and the commissions total 4,560 dollars, that is the gross commission exposure associated with the activity. The final recoverable amount depends on the agreement, the evidence of incremental value, customer history, prior touchpoints and whether the affiliate continued after notice.

If the merchant immediately blocks the affiliate, future conversions may stop, but the historical question remains. Blocking is a containment action. It is not a substitute for evidence review, commission reconciliation or root-cause analysis.

Frequently asked questions

What is affiliate brand bidding?

It is paid-search advertising by an affiliate that targets a merchant’s brand, product names, trademarks or close variants. It becomes unauthorized when it violates the program’s written rules or approval requirements.

Is all affiliate brand bidding fraudulent?

No. Some programs permit it under controlled conditions. Even prohibited bidding is not automatically proof of fraud; it may be an accidental or outsourced policy breach.

What is affiliate PPC fraud?

Affiliate PPC fraud is deceptive or prohibited paid-search activity used to obtain affiliate credit, including unauthorized brand bidding, misleading ads, hidden sub-affiliates or manipulated attribution.

What keywords should be protected?

Protect the core brand, misspellings, product names, trademarks, brand-plus-coupon terms and other searches that clearly identify the merchant. The exact list should reflect the business and legal policy.

Can affiliates bid on generic product terms?

Often they can, but the answer depends on the agreement. Generic terms may still be restricted when they contain a proprietary product name or create a misleading association with the merchant.

How do I prove an affiliate placed the ad?

Connect the ad to an affiliate through keyword or campaign data, tracking parameters, redirect records, account information, sub-affiliate disclosures and conversion-level evidence. A screenshot alone usually cannot establish responsibility.

Why are screenshots not enough?

A screenshot records one search result in one context. It does not show volume, account ownership, clicks, conversions or whether the ad was placed by the affiliate rather than another party.

What is commission cannibalization?

It is the payment of affiliate commission for demand that the merchant likely would have captured through another channel without the affiliate’s intervention.

How can cannibalization be estimated?

Multiply suspected non-incremental conversions by the commission paid per conversion, preferably using order-level commission data and a documented range for the non-incremental rate.

Should all brand-term commissions be reversed?

No. Review the program rules, the affiliate’s contribution, customer history, prior touchpoints and evidence of intent. Broad reversals can create unnecessary disputes and penalize legitimate partners.

Does direct linking prove fraud?

No. Direct linking is a technical behavior. It may be allowed, restricted or prohibited by the program. Its significance depends on the agreement and the surrounding evidence.

Can a sub-affiliate hide brand bidding?

Yes. A publisher may outsource media buying to an agency or traffic broker. Require sub-affiliate disclosure and retain identifiers that let you trace traffic beyond the top-level affiliate.

What should a PPC policy include?

Define protected terms, bidding permissions, negative keywords, ad-copy rules, landing-page requirements, direct-linking rules, sub-affiliate responsibility, record retention and enforcement options.

How often should brand searches be checked?

Check frequently enough to reflect campaign volume, market risk and partner count. High-risk programs may need scheduled monitoring, while smaller programs can combine periodic searches with anomaly reviews.

Can traffic validation detect brand bidding?

Traffic validation can identify technical and behavioral anomalies, but it generally cannot determine whether a keyword violated a brand-bidding policy without search and partner evidence.

What is the difference between blocking and prevention?

Blocking limits an identified source or tracking path. Prevention uses rules, approvals, negative keywords, monitoring and partner controls to reduce the likelihood of prohibited activity before it occurs.

What should happen after an affiliate is notified?

Preserve the notice, set a remediation deadline, monitor for recurrence, reconcile affected conversions and apply the documented consequence if the activity continues.

How can false positives be reduced?

Use multiple evidence sources, account for approved terms and promotions, distinguish returning from new customers, check tracking changes and give the affiliate a specific opportunity to explain the activity.

Semantic map

The subject areas below connect the main concepts in this guide and can be used to structure related investigations and content.

Affiliate brand bidding is a form of affiliate PPC activity.
Unauthorized affiliate brand bidding violates an affiliate advertising policy.
Brand bidding can intercept existing merchant demand.
Demand interception can create commission cannibalization.
Commission cannibalization affects affiliate program profitability.
Search-term data helps identify protected keyword usage.
Redirect logs help connect paid-search clicks to affiliate identifiers.
Affiliate identifiers connect traffic to publishers and sub-affiliates.
Conversion-level data helps quantify commission exposure.
Holdout tests help estimate incremental affiliate value.
Detection identifies suspicious activity for review.
Prevention reduces the likelihood of prohibited bidding.
Blocking limits future traffic or attribution after a risk is identified.
Traffic validation assesses whether traffic appears technically credible.
Evidence quality determines whether suspicious activity can be classified as a policy breach or suspected fraud.

Related resources

For broader work on traffic quality and affiliate investigations, start with the Traffic Fraud Lab home page. This guide can also be used as a reference when reviewing affiliate fraud and unauthorized PPC cases across paid search, attribution and commission reporting.