When FTDs Look Too Good: How to Spot CPA Fraud

As an affiliate manager, you speak with many, many people every day. You meet new affiliates, talk to existing partners, try to reactivate old ones, negotiate deals and build relationships. And honestly, that is one of the most interesting parts of the job.

But not every affiliate you meet is looking to build a long-term relationship with your brand.

Some are looking for something very different.

And in this article, we are going to talk about one of the more common examples: CPA fraud.

The usual negotiation between an affiliate manager and an affiliate is pretty straightforward. You discuss the commercial model, negotiate the terms, agree on something that works for both sides, and the relationship begins. In the case of this article, however, we are not talking about a relationship.

We are talking about a relationshit.

Affiliates in our industry work on different commercial models depending on their business, their market, their traffic source and their strategy. Some prefer Revenue Share, some work purely on CPA, and others prefer hybrid deals. There is absolutely nothing wrong with any of those models. It all comes down to negotiation, communication and finding an agreement that makes commercial sense for both sides.

However, there is a certain type of “affiliate” whose negotiation style can immediately make you pay a little more attention. They strongly insist on CPA. They are reluctant to negotiate the CPA down, show little interest in Revenue Share, and if they agree to a hybrid deal, they may try to keep the RS portion as low as possible while pushing the CPA as high as they can.

Now, this is important:

Preferring CPA is not a red flag on its own.

There are plenty of legitimate and highly successful affiliates who work predominantly or exclusively on CPA. What can become suspicious is the behaviour around the negotiation, especially when it is combined with a lack of transparency around the traffic source. A legitimate CPA-focused affiliate can usually explain their business model, tell you how they promote brands and have a normal commercial discussion around the deal. The concern starts when the entire negotiation appears focused on maximising the CPA payment and lowering the qualifying requirements, while long-term player value seems completely irrelevant.

But what about the traffic source?

Surely you can simply check whether the affiliate is legitimate before launching? Sometimes. Unfortunately, not always. A fraudulent affiliate may have a perfectly legitimate-looking website or landing page. The existence of a real domain does not necessarily prove that the players you receive actually came from that source. You may check tools such as Ahrefs or Semrush and see very little visible organic traffic, but there can still be perfectly reasonable explanations.

The affiliate may tell you that:

• they are funding the traffic through PPC;

• the traffic comes from social media;

• they receive visibility through AI platforms;

• they rank on other search engines;

And all of those can be completely legitimate. This is exactly why identifying CPA fraud during the negotiation stage can be difficult.

Then the traffic starts

The deal is live, traffic begins coming in and suddenly the numbers look fantastic.

• You have a healthy number of clicks.

• Sign-ups are coming.

• CTD looks incredible.

• NDCs are appearing.

You start thinking that you may have just landed a fantastic new affiliate who is going to help you smash your monthly target. There is only one small problem - the revenue is barely moving. It is not necessarily negative. It is just strangely low compared with the number of NDCs you are seeing. At first, it is very easy to tell yourself:

“It is a new campaign. Revenue will pick up.”

Maybe it will, but sometimes, it will not. And that is where you need to stop celebrating the conversion rate for a moment and look deeper. A CTD above 50% can look amazing, but an unusually high CTD on its own is not proof of fraud.

Neither is low NGR.

Neither is a preference for CPA.

The concern comes when several unusual patterns appear together. Because fraudulent CPA traffic can look perfectly healthy on the dashboard while looking completely unnatural once you examine the player behaviour.

Look at the player report

This is where the picture can change very quickly.

You may see something like:

• clicks that look completely normal;

• an unusually high number of registrations compared with those clicks;

• an extremely high NDC conversion rate;

• multiple players depositing the same amount, or almost the same amount;

• those deposits sitting conveniently around the exact minimum required to trigger the CPA;

• little or no bonus usage;

• no meaningful turnover;

• no second deposits;

• and no further player activity.

Suddenly, the low NGR makes a lot more sense.

And this is where an important distinction can be made:

Poor traffic looks disappointing. Fraudulent traffic looks engineered.

A legitimate campaign can perform badly. Players can register and decide not to deposit. They can deposit and lose quickly. They can dislike the product. They can behave unpredictably because, well, they are real people. What should make you investigate is when the behaviour starts looking repetitive, mechanical and designed around one specific objective: triggering the CPA payment.

Good KPIs can sometimes hide bad traffic

One of the reasons this type of fraud can be missed is actually quite simple. Your headline KPIs look good, you see NDCs, you see strong conversion, your monthly target suddenly looks much healthier and when you are under pressure to hit those targets, it can be tempting to think:

Great. Finally something is working.

That excitement can delay the moment when somebody actually opens the player report.

But:

A dashboard shows conversion. A player report shows behaviour.

Once something feels unusual, stop looking at isolated KPIs and inspect the entire player journey. Look at:

• The deposits.

• The turnover.

• The  bonus usage.

• The repeat deposits.

• the activity.

• the revenue.

• Look at everything together.

• One strange player means very little.

A repeated, unnatural pattern across multiple players means you need to start asking questions.

And when you do confront a fraudulent affiliate, there is a good chance they will either produce an excuse or simply disappear.

So, should affiliate managers avoid CPA?

Absolutely not.

Negotiate freely.

Affiliates have different business models, traffic sources and commercial preferences, and there is nothing inherently suspicious about choosing CPA. Do not stereotype an affiliate because of the deal model they prefer. But also never stop monitoring your numbers simply because the first KPIs look fantastic.

• A high CPA is not automatically suspicious.

• A high CTD is not automatically suspicious.

• Low NGR is not automatically suspicious.

What matters is the behaviour behind those numbers.

And never forget your affiliate programme T&Cs.

They exist not only to define the commercial relationship but also to protect the operator and the brand when there is evidence of fraudulent or manipulated traffic. Affiliate managers sometimes feel trapped once traffic has already been delivered, but properly structured programme terms will often contain provisions covering fraudulent activity, invalid traffic and commission adjustments.

Know your T&Cs before you need them.

And finally: ask

Never stop communicating with your affiliates. If something is unclear, ask. If you want to understand where the traffic comes from, ask. If the numbers do not make sense, ask. If player behaviour looks strange, ask. Do not automatically assume fraud. Do not avoid CPA affiliates. Do not approach every new partner with distrust.

Just stay curious.

Because good affiliate management is not about distrusting your partners, it is about knowing your numbers well enough to recognise when something does not make sense. 

Ask. Verify. Understand.