Phia Cookie Stuffing Claims Trigger Affiliate Crackdown

Phia cookie stuffing allegations have turned a shopping app marketed as a smarter way to save money into a test of whether affiliate commerce can still tell the difference between influence and opportunistic attribution.

Phia, co-founded by Phoebe Gates and Sophia Kianni, has been accused of using “cookie stuffing” to claim credit for purchases it did not drive, according to TechCrunch, citing a Bloomberg investigation. The fallout was immediate: Impact.com suspended Phia from its affiliate and influencer platform after reports about behavior it found “inconsistent with our platform policies.”

That’s the real story beneath the founder pedigree. If attribution can be quietly hijacked at checkout, merchants may pay commissions for sales they already earned, publishers can lose payouts they generated, and shoppers may never see the system that turned their browser session into revenue.

Phia cookie stuffing accusations hit the weakest point in affiliate marketing

Affiliate marketing depends on a simple bargain: a retailer pays a partner when that partner helps produce a sale. The partner might be a publisher, coupon tool, newsletter, influencer, or shopping app. A tracking link or code connects the referral to the eventual purchase.

Cookie stuffing breaks that bargain. In this case, Bloomberg, an independent consultant, and competitor Capital One Shopping found that Phia’s browser extension could open a new tab in the background during checkout and inject Phia’s own referral code, even if the user reached the retailer independently or through another affiliate such as Wirecutter.

That matters because affiliate systems don’t pay for being nearby. They pay for influence.

“The most fundamental requirement in affiliate marketing is that commission is only paid if a user clicks,” said Ben Edelman, an independent researcher and consultant who studies affiliate marketing. “The rules don’t allow fake clicks, simulated clicks, imaginary clicks or hypothetical clicks. Only a real click will do.”

Phia told Bloomberg the issue had been fixed after it was flagged. Bloomberg retested the extension and found the behavior had stopped in the cases where it previously appeared.

A routine purchase can become commission revenue without a visible prompt

The alleged mechanism is technical, but the business effect is easy to understand.

A legitimate affiliate path looks like this:

• User action: A shopper clicks a product link, discount prompt, or recommendation.
• Attribution: The affiliate’s code is attached to the retailer visit.
• Sale: The retailer records the purchase.
• Payment: The affiliate receives commission because it sent the shopper there.

The alleged Phia behavior changed the middle of that chain. According to the Bloomberg findings summarized by TechCrunch and related reporting, Phia could insert or replace attribution during checkout without a fresh user click.

The difference is not cosmetic. Last-click systems can turn a small technical insertion into a commercial claim over the whole transaction.

The Phia numbers make the attribution dispute harder to dismiss

Phia is not a side project. TechCrunch reported that the company, founded in 2025, has raised more than $40 million and has investors including Kim Kardashian and Hailey Bieber. Additional Bloomberg-linked reporting cited $43.5 million raised from investors including Notable Capital, Kleiner Perkins, Khosla Ventures, Sydney Sweeney, Khloe Kardashian, Hailey Bieber, and former Meta COO Sheryl Sandberg.

The app has also reportedly been downloaded more than 1.2 million times in the past 12 months, according to Appfigures estimates cited in Bloomberg-linked reporting. Bloomberg tested the Phia mobile browser extension across more than 50 websites.

Those figures sharpen the incentive problem. XOOMAR analysis: a shopping assistant with a large install base does not need to redirect every purchase to build meaningful attributed volume. If it sits close to checkout and wins credit on even a subset of transactions, the revenue optics can look stronger than the underlying influence.

That is what merchants and investors now have to separate:

• Attributed sales: Sales credited to Phia.
• Incremental sales: Sales Phia actually helped create.
• Take rate: Commission captured through affiliate programs.
• Compliance flags: Network or retailer findings about invalid clicks.
• Revenue durability: Whether commissions survive audits, reversals, or tighter network rules.

The source material does not disclose Phia’s commission rates, gross merchandise value, refund adjustments, or revenue mix. That absence matters. Without those numbers, outsiders can’t quantify the financial exposure.

Merchants, publishers, users, and investors each see a different problem

Retailers pay affiliate commissions because they want performance marketing. If the Phia cookie stuffing allegations hold across partner reviews, the merchant-side concern is blunt: performance spend becomes a tax on sales that may have happened anyway.

Publishers and creators face a different injury. If a review site, newsletter, influencer, or deal page sends a shopper to a retailer, then a browser extension replaces that referrer at checkout, the original source can lose the payout. Capital One Shopping said in an email seen by Bloomberg:

“Publishers like us are having material revenue taken. And advertisers like you are losing money to fake clicks.”

Consumers may see only the front-end product: a browser extension that finds lower prices and discount codes. The monetization layer is less obvious. This is a familiar consumer-tech tension: free tools often sit between the user and the transaction. We’ve seen related questions around interface design and user control in Netflix Always-On Channels Expose Streaming's Choice Trap, and around purchase incentives in $30 Samsung Galaxy Credit Dangles Before Foldable Reveal.

Investors have the narrowest question and the least patience for ambiguity. XOOMAR analysis: Phia’s funding story now depends less on celebrity backing and more on clean attribution evidence. If partner audits show misattribution was limited and fixed, the damage may be contained. If retailers find broader commission leakage, reported growth metrics become harder to trust.

Honey shows why this won’t stay a Phia-only story

TechCrunch noted that other startups have been sued over cookie stuffing, including Honey, owned by PayPal, which remains the subject of an ongoing class action lawsuit. PayPal disputes the allegations, according to Bloomberg-linked reporting.

That comparison matters because browser-based shopping tools share the same structural temptation: they often appear late in the purchase journey, near the moment when attribution is most valuable. A coupon prompt or price-checking extension can be useful. It can also sit close enough to checkout to overwrite credit that another source earned.

Phia’s spokesperson told Bloomberg:

“Within the last 24 hours, we were made aware that in a recent release our codebase was causing misattributions from a subset of users. As soon as we were notified, our team worked overnight to identify, mitigate, and has since resolved the issue.”

The company also said it is audited regularly by affiliate network partners and has “always maintained compliance.” Bloomberg reported that the code enabling the auto-click was introduced in December.

Retailers now have a reason to audit every shopping extension

The practical response is not complicated, but it requires discipline. Retailers and affiliate networks need to verify whether clicks are real, whether browser extensions act only after user action, and whether last-click credit is being won through visible referral behavior.

Cleaner affiliate controls would focus on:

• Click validity: Was there a real user click before the attribution event?
• Extension behavior: Did the tool open tabs or inject codes without user interaction?
• Path auditing: Which source first influenced the shopper, and which source claimed the last click?
• Commission reversals: Can merchants claw back payouts tied to invalid attribution?
• Publisher transparency: Can partners inspect suspicious traffic patterns quickly?

For shopping startups, the standard is going to rise. They will need to prove they create incremental sales, not merely appear at checkout with a referral code.

Phia’s next test is evidence. Technical logs, partner reviews, revised code, and independent audits would support its claim that the issue was limited and resolved. More suspensions, retailer clawbacks, or findings that misattribution was broader would weaken that defense. The companies that win in shopping tech will be the ones that can show clean attribution, not just the ones that capture the last click.

Impact Analysis

• The allegations challenge whether affiliate platforms can reliably identify who actually influenced a sale.
• Merchants may pay commissions on purchases they would have received without any referral.
• Publishers and legitimate affiliates risk losing revenue if attribution is overwritten at checkout.