Recently, we encountered a situation in which one of our partners sent us traffic that turned out to be fraudulent. We’re currently preparing a full breakdown of this case, and we’ll be sharing all the details soon.
But before we dive into the specifics, it’s time for a reminder: what exactly is fraud traffic, how do we detect it, and why is this such a serious issue for everyone involved?
At Rocks Partners, we care about long-term relationships and transparent collaboration. That’s why we’re sharing this — to protect the ecosystem, our partners, and your future profits.
What Is Fraud Traffic?
Fraud traffic refers to any leads, signups, deposits, or conversions that are not made by real, active users. In short, it is a fake activity designed to trigger commissions without driving real value.
Common Types of Fraud:
Bot Traffic
Automated clicks, registrations, or even fake gameplay. Easily identified by short sessions, outdated devices, high bounce rates, and no actual deposits.
Click Fraud (Popunders, Clickunders)
Ads that force or trick users into clicking. These inflate traffic stats, but real players? Rare. Conversions from these clicks are virtually nonexistent.
Multi-Accounting
One person creates multiple accounts using various IPs and devices to imitate different users. Usually used to abuse CPA contracts or welcome bonuses.
Install Farms
Many installs or signups are performed by real people or emulated devices, often orchestrated in bulk. Most of the time, there’s zero retention.
Incentive Traffic
Users receive rewards (cash, crypto, etc.) for signing up or depositing. If not disclosed and properly marked, this traffic is considered fraudulent.
Stolen or Fake User Data
Some affiliates simulate real users using leaked or fake data. It might pass initial checks but get flagged later by KYC or behavioral analysis.
What Are the Red Flags?
Rocks Partners’ fraud prevention systems analyze hundreds of signals across all campaigns. Below are the most common signs that trigger an investigation:
Behavioral Patterns
- Suspicious timing: Deposits and registrations were made within the exact timeframe.
- Identical deposit amounts: Bots typically use non-rounded values (e.g., $23.42 instead of $20 or $50).
- No gameplay after deposit: Real players don’t usually deposit and disappear.
- Deposit via crypto only (BTC or ETH): High-value deposits in crypto can be used to mask tracking. Not a red flag alone — but in combination with others, it raises concerns.
- Same IP accessing multiple accounts: Classic indicator of multi-account setups.
GEO & Device Issues
- Traffic from non-targeted GEOs: Example — Canadian offer, but traffic comes from Australia.
- Outdated devices or OS: Fraud traffic often originates from old browsers or emulators.
- Mismatch in GEO, currency, or language preferences: Players usually act like locals. Bots do not.
Engagement Signals
- Ultra-short session durations: Pages open and close too fast.
- High bounce rates with no depth: Users leave instantly or don’t interact at all.
- No clickstream variation: Every user behaves the same. That’s not natural.
Affiliate Behavior
- Immediate volume from new partners: We welcome growth, but big spikes from unknown affiliates will always be verified.
- Unwillingness to disclose traffic sources: If you’re clean, there’s nothing to hide.
Final Word from the Team
Soon, we’ll share the full story of what happened — how a partner tried to game the system, how we caught it, and what you should learn from it.
Until then, consider this your reminder: fraud always leaves a trace. And when it does, it breaks deals, burns bridges, and shuts doors.
At Rocks Partners, we play long-term. If you’re with us, play clean.
If you ever have questions about traffic quality, sources, or compliance, just reach out to your manager. We’re here to help you grow — the right way.
