The marketing world has developed a certain weary familiarity with affiliate fraud, the way New Yorkers have learned to walk past scaffolding without looking up. Another scandal, another settlement, another promise to do better.

But the allegations against Phia, the shopping browser extension, suggest something rather more ambitious than the usual misdirection of commissions. According to testing conducted by Capital One Shopping and Benjamin Edelman, a researcher who has made something of a career studying digital advertising's shadier precincts, Phia's iOS Safari extension allegedly opens background tabs and fires affiliate tracking links without any action by the user — transforming ordinary shopping sessions into affiliate transactions where no affiliate relationship existed.

This is not, in other words, a story about who gets credit for a sale. It is a story about whether the sale required any credit at all.

The distinction matters. When PayPal's Honey extension was accused of intercepting affiliate commissions, publishers complained loudly, but advertisers could view the matter as a redistribution problem — the same commission, different pocket. The Phia allegations, if proved, describe something more direct: merchants paying commissions on sales that would have happened anyway.

(One might call this innovation, if one were feeling uncharitable.)

Mr. Edelman, who examined the extension's behavior, was unequivocal about intent. "Forcing clicks is not something that can be unintentional," he said, rejecting the possibility that the behavior resulted from a software bug.

Bloomberg has reported that Phia may have taken more than $10 million from merchants. The company has not been criminally charged, though the indictments of individuals in similar forced-click schemes — one alleging $5.3 million in compensation, another more than $15.5 million — suggest how seriously prosecutors can view such conduct.

Perhaps the more interesting question is why the behavior allegedly went undetected for as long as it did. Mobile browser extensions, it seems, receive considerably less scrutiny than their desktop counterparts. Whether Phia chose that environment deliberately or simply found it convenient remains unclear.

The affiliate marketing industry has always run on trust, which is another way of saying it has always run on the assumption that someone, somewhere, is checking.

Original story published in adweek.com: "Phia's Alleged Scheme Goes Beyond Ordinary Affiliate Fraud"