Referral Fraud
If you run a referral or affiliate program, you've already met this fellow.
He takes his own referral link, opens it in a second browser tab, signs up as somebody else altogether, and collects the bounty from both ends of a transaction he conducted entirely with himself. Then he does it again. One cannot ordinarily introduce oneself to a company and charge a finder's fee for the introduction, but an automated referral program is a rare and beautiful exception — and this blister, having worked out what he thinks is an infinite money glitch, means to make a career of it.
Dregs gives you the upper hand against referral fraudsters.
The Referral Abuse Dilemma
Referral and affiliate programs can be a powerful growth channel. When they work, your happiest users bring you more users just like them. But they also attach a cash bounty to the act of signing up, and there is an entire species of chancer who reads that as a personal invitation to profit.
The referral abuser, a creature of limited imagination and unlimited free time, opens accounts on free or disposable addresses, refers them, and collects from the referrer side and the referred side both.
The less greedy may be content with two or three, but the more ambitious and enterprising of these pests run a small factory, cycling through dozens or hundreds of invented friends with the help of automation. To your referral system, every one of them looks like a legitimate new user arriving through what you thought was your very best acquisition channel.
The standard web application defenses don't hold up well against determined referral abusers.
| The Traditional Defense | Why It Often Fails |
|---|---|
| Email verification | Disposable services clear verification without difficulty, and honest free providers cost nothing either. Ten fictional friends can each have a working inbox by lunchtime. |
| Unique referral codes | The codes work exactly as designed, faithfully tracking every referral back to its source. It's the friends who are fictional. |
| Payout delays | A waiting period buys you time to catch the fraud, and costs the fraudster only patience. Patience is rarely in short supply when the reward at the end is guaranteed. |
| Manual review | Hand-checking referrals doesn't scale across a busy affiliate program, and the pattern is invisible to anyone examining one account at a time. The tenth puppet looks exactly like the first. |
| IP restrictions | VPNs, mobile networks, and the coffee shop down the road reduce IP matching to a formality. The self-referrer who trips it simply wasn't trying. |
Referral fraudsters present as ordinary signups, and each account passes validation on its own merits. The abuse only becomes visible when you connect a referrer to the friends so enthusiastically referred — and find a crowd of one.
What Referral Fraud Costs Your Business
Unlike some forms of abuse where the damage is more abstract, referral fraud hits your bottom line directly. It also compounds far beyond the amount taken by fraud, because it erodes this otherwise powerful growth channel from the inside while wasting your budget on fake users who will never generate real value.
Direct financial loss
Every fake referral pays a bonus to somebody who gamed the system. Referral credits, cash, free months, account upgrades: all of it handed to a freeloader and a cast of imaginary friends dreamed up to collect it.Program credibility
When fraudsters dilute your referral program, legitimate referrers lose trust. Payout thresholds get raised, verification gets stricter, and the people who actually bring you good users are punished for the behavior of the ones who don't.Distorted metrics
Your referral channel appears to be performing beautifully, with new signups arriving in numbers. The users are worthless. Decisions made on those figures can lead you to pour good budget into a channel that turns out to be one determined layabout and a cast of sock puppets.How Dregs Detects Referral Fraud
Dregs analyzes referral fraud from several angles at once, with custom rules and lists implemented as a pipeline of AI-assisted analyzers. A fraudster can disguise one signal. Disguising device details, identity relationships, profile quality, and behavior simultaneously is considerably harder.
Relationship Graphs
Dregs automatically maps relationships between accounts that share devices, IPs, sessions, or behavioral patterns. In a self-referral, the referrer and the referred account are linked by the device they have in common. By the third fake referral you have a clear cluster: the referrer at the center, with the puppet accounts radiating outward.
Referrer Device Matching
Self-referral is the most common form of referral fraud and the simplest to catch: the fraudster clicks the referral link and signs up from the same device. Dregs matches the device fingerprint automatically, with no cookies or IP matching required. The Uniqueness score drops for both accounts the moment the referred signup lands, incognito mode and a fresh browser notwithstanding.
Profiles Lack Authenticity
Fake referral accounts exist to trigger a bonus rather than to use your product, and they are furnished accordingly: a disposable address, a name that took all of three seconds to invent, and not one optional field filled in. The Authenticity score measures that hollowness. When every account a referrer brings you arrives with a throwaway inbox and a two-syllable name, the pattern is not a subtle one.
Shallow User Behavior
Fake referrals follow a script: sign up, perform the minimum required to trigger the bonus, and fall silent at the precise moment it clears. The Behavior score can be trained to recognize that shape, with identical onboarding steps taken in identical order and then a cliff. Real referred users carry on using the product — having come for the product.
Example: Catching a Referral Scheme
Here's what it looks like when someone tries to farm a referral link:
No manual investigation was needed... the fake referral ring is identified and flagged almost instantly once it meets the defined criteria. And because each score opens into its observations, you can see exactly why the accounts were linked before withholding a payout, keeping false positives away from your legitimate referrers.
Stopping Referral Fraud
Detection is only half the story. How you respond determines whether the fraudster keeps trying or gives up entirely. Dregs gives you the ability to automate whichever approach fits your program, or the information to take matters into your own hands.
Freeze rewards
Automatically freeze or void referrals where abuse is suspected or the referred account scores below your threshold. The referral doesn't count and the bonus doesn't accrue, so the scheme returns nothing on the investment.
Restrict fraudsters
Reduce or revoke referral privileges for accounts that show a pattern of fraudulent referrals. The referrer's link stops working or the bonus rate drops to zero. They can still use your product, but the referral vector is closed.
Require engagement
Pay referral bonuses only after the referred user demonstrates genuine engagement over time, rather than for completing a signup checklist. You can use Dregs scores to decide which referrals qualify.
Referral fraud only pays off if the payout goes through. With Dregs webhooks feeding scores and relationship data to your application the moment activity happens, fraudulent referrals can be frozen before a single bonus is issued, protecting your budget around the clock.
Referral fraud is closely related to duplicate account abuse. Anyone gaming your referral program is almost certainly creating multiple accounts too, and Dregs catches both patterns with the same integration.
Stop referral fraud before it drains your program.
Dregs links self-referrals from the first shared device. Install the tracking script, start scoring, and get control of fake referrals.
Schedule a Demo