Definition
Cookie stuffing, also called cookie dropping, is an affiliate fraud technique in which a user's browser is made to store an affiliate tracking cookie without the user ever clicking, or even seeing, that affiliate's link. It is done by loading the affiliate link invisibly — in a hidden iframe, a 1x1 pixel image, a pop-under, a redirect chain, or a browser extension — so that if the user later buys from or registers with the advertiser through any route, the sale is misattributed to the affiliate who stuffed the cookie.
The technique steals attribution and commission from other affiliates and from the advertiser's own direct and organic channels. It produces no incremental customers; it simply intercepts credit for purchases that would have happened anyway.
Because the fraud is in how the cookie was set rather than in the conversion itself, cookie stuffing can inflate an affiliate's numbers substantially while the traffic it "sends" has a conversion rate and quality profile indistinguishable from the advertiser's baseline — which is itself a detection signal.
In context
Advertisers and networks detect cookie stuffing through several patterns: an affiliate with enormous click or impression volume but a click-to-conversion time distribution that looks like organic traffic rather than referred traffic; a conversion rate suspiciously close to the site's overall baseline; cookies set from page loads with no corresponding outbound click event; referral headers and landing pages that do not match a real click-through; and a sudden jump in "assisted" conversions attributed to one partner. Modern last-click and multi-touch attribution with server-side validation makes classic pixel stuffing easier to catch than it once was.
Cookie stuffing is a breach of every affiliate programme's terms and has been prosecuted as fraud, most famously in a US case that resulted in a criminal conviction. It is included here as a reference term because it remains a well-known category of affiliate fraud that advertisers actively screen for.
For a legitimate affiliate the relevance is defensive: understanding the technique explains why advertisers scrutinise unusually high-volume, low-engagement partners and why transparent, verifiable click data protects an honest affiliate from being mistaken for a stuffer.
Worked example
An advertiser notices that one affiliate's account shows 900,000 clicks a month but a click-to-purchase time distribution identical to its organic traffic, and cookies being set on page loads with no outbound click in the logs. The pattern is cookie stuffing; the advertiser voids the affiliate's commission for the period and terminates the account.
Related terms
Frequently asked questions
Browse the full iGaming & affiliate glossary — hundreds of EN/RU terms with examples.
← Back to glossary