Free affiliate fraud scan, in your browser.
Export your affiliates or sales from Rewardful, FirstPromoter, Tapfiliate or Tolt. Drop the CSV below. Our fraud rules replay your history sale by sale and show who the engine would have held, and for how much.
Runs in your browserNo signup, no uploadThe engine's own thresholds
The scan runs on your computer. Your file is not sent to us or anyone else. Close the tab and it is gone.
Your file is read in your browser. It is never uploaded.
Your scan
| Rule | Affiliate | Sales | Commission at risk | Examples |
|---|
No rule fired on this export. Either your history is clean, or the columns these rules need are missing. The skipped list below says which.
Not run on this file
The same rules that hold live sales
The scan replays your history sale by sale, using only the sales before each one, the same way the engine screens a live conversion. The thresholds are the engine's, not watered down.
Runs on a sales export
- Self-referrals. Buyer email matches the affiliate's after alias cleanup.
- Same buyers across affiliates. Two or more of an affiliate's buyers also bought via another affiliate.
- Coupon hijacking. Three or more sales on one coupon in 7 days, taking customers already tied to another affiliate.
- Sales bursts. Thirty or more sales for one affiliate in an hour.
- Odd hours. Over half of a week's sales between 00:00 and 05:59 UTC.
- Shared IPs and refund rates. IPs used by several affiliates, and refund or chargeback shares over 20%.
What a scan can't see
An export is history, not live traffic. Rules that need the click stream, like bot detection and datacenter scores, are listed as not run with the reason. The scan never looks IPs up online either.
An affiliate-list export (no sales rows) supports one rule: duplicate accounts. Ask for a referrals, commissions or conversions export for the real checks.
Why give this away?
Because the scan is the product's argument. If your program is clean, you should know that for free. If it isn't, you should know what the money rules would have caught before you paid it out.
AffiliateTracking runs these rules on every sale, holds flagged commissions before payout, and shows you the evidence to release or uphold each one. See the full engine.
What the scan shares with the engine
- The exact rule thresholds from the Go engine.
- The same replay logic: history screened forward, sale by sale.
- Parity tests run both on the same fixtures, so they agree.
What fraud might be costing you
A quick guess, on numbers you type. It stays on this page, like the scan.
The presets (2%, 5%, 10%) are round starting points for your guess, not industry figures. Nobody has honest industry numbers for this.
Scan questions
Is my file really not uploaded?
Yes. The scan is two small scripts that make no network calls. A test fails if they even try. The page also blocks outgoing connections by policy, so nothing on it can send your data anywhere.
Which export should I pick?
A sales list: referrals, commissions or conversions. That is where the real checks run. An affiliate-list export can only check for duplicate accounts, because it has no sales in it.
What does a finding mean?
It means the live engine, seeing the same history, would have put those sales on hold before payout and shown you the evidence. You decide whether to release or uphold. A finding is a lead to check, not a verdict.
Does the scan change anything?
No. It reads your file and shows results. Your tracker, your file and your data are untouched.
Why do some rules say not run?
Each rule lists what it needs, like sale timestamps or IP columns. If your export's columns don't carry that, the rule is skipped with the reason shown, never guessed at.
Found something?
Hold it before you pay it.
AffiliateTracking runs these rules on every live sale, with the evidence to decide. Self-host is $99 once, or run it in the cloud free for 14 days.