Home > Paid Traffic Sources > Adult Traffic (NSFW)

Fraud report from the advertiser (35)


10-03-2018 10:31 AM #1 r4raaj (Member)
Fraud report from the advertiser

Hi Everyone,

Last month I was running an Adult Dating Mobile offer for UK geo. I am using TF and TJ as traffic networks. Today I have got a message from my Affiliate Network's manager and informed me that he has received fraud report from advertiser. Please find below the conversation:

AM - Hi Rajiv, you there?

AM - Just received a fraud report from the advertiser of S********* UK

AM - They found 27 instances of fraud for your ID

AM - Most are duplicate fingerprints, others are duplicate UUID, server hosting, open VPN ports etc

AM - what happened?

AM - The leads will be deducted from your invoice Rajiv

AM - If it happens again I have to put your account on inactive, so please be aware

AM - Will forward you the report

I have asked him to provide me the detailed report. Then I discussed the same with my friend. He told me that he has faced the same issue with same advertiser/Network/offer. He also suggested me that I will not get proper details in the report. He got demotivated after this incident. Please suggest how to deal with these kind of situations.

I have spent my 6 months in AM. Still fighting to get succeed. However these kind of incidents demotivates a lot.


Rajiv


10-03-2018 11:05 AM #2 twinaxe (Senior Moderator)

I believe you that you didn't do anything fraudulent.
From our many chats you really seem to be a honest guy.
So just wait for the report and check what details are in the report.
When there are not enough details ask for proof about duplicate fingerprints, duplicate UUID, server hosting, open VPN ports.
In the end try to receive the details that were claimed to be fraudulent.
Then go through your stats, search for the fraudulent details and drill down in tracker to see if you find patterns, specific placements or so that sent the traffic.
When you find something you could contact the traffic source about it.
I remember that you had quality problems before, was it with the same campaign/campaigns?

Apart from that, don't get demotivated.
Yes, this is annoying, especially when you didn't do something wrong.
But that can happen and I guess most of us had to go through such or similar situations at some point


10-03-2018 11:33 AM #3 leadcloak (Member)

Wait for the report and check stats with your tracker and traffic source. Traffic source or some website and placements can send fraudulent traffic so best advise would be wait for the report, drill down the patterns and contact your traffic source for bot traffic with proofs and don't get demotivated.




LeadCloak


10-03-2018 11:52 AM #4 stickupkid (Senior Moderator)

Could be a rotten source/widget/placement ofcourse. Although you are not guilty of fraud (I guess haha), you are responsible for the mediabuy on the particular offer. So make sure your traffic sources are solid to avoid any problems in near future. It is very normal they have to take measures towards you and your account since they can't afford losing clients because publishers are sending shit ofcourse (even without purpose).


10-03-2018 11:57 AM #5 codeflame ()

Normal mistake of 80% of all guys here. They are using forensiq and if you didnt sort out proxy/vpn AND bad browser language on your side this happens and is totaly legit since it is fraud.

The game has changed you need to prevent it on your side or get fraud reports, bad quality reports, offers stopped etc.

But most trackers can do it like Binom or keitaro tds with imported databases.


10-03-2018 12:20 PM #6 matuloo (Legendary Moderator)

Quote Originally Posted by codeflame View Post
Normal mistake of 80% of all guys here. They are using forensiq and if you didnt sort out proxy/vpn AND bad browser language on your side this happens and is totaly legit since it is fraud.

The game has changed you need to prevent it on your side or get fraud reports, bad quality reports, offers stopped etc.

But most trackers can do it like Binom or keitaro tds with imported databases.
I don't do much traffic filtering on my side either, but getting rid of the crap might make sense. Can you share more details about the topic you just raised? Are you suggesting that by blocking what you mentioned (proxy/vpn ...) we would get rid of BOTs that are able to complete the signup process ... or basically just improving the overall quality, by filtering low quality users who wouldnt signup anyways?


10-03-2018 12:31 PM #7 r4raaj (Member)

Quote Originally Posted by twinaxe View Post
I believe you that you didn't do anything fraudulent.
From our many chats you really seem to be a honest guy.
So just wait for the report and check what details are in the report.
When there are not enough details ask for proof about duplicate fingerprints, duplicate UUID, server hosting, open VPN ports.
In the end try to receive the details that were claimed to be fraudulent.
Then go through your stats, search for the fraudulent details and drill down in tracker to see if you find patterns, specific placements or so that sent the traffic.
When you find something you could contact the traffic source about it.
I remember that you had quality problems before, was it with the same campaign/campaigns?

Apart from that, don't get demotivated.
Yes, this is annoying, especially when you didn't do something wrong.
But that can happen and I guess most of us had to go through such or similar situations at some point
Thanks Seb for believing in me

I have got the report and got the Voluum data against those IP's. However did not find anything different from other records in Voluum. I will share that report with TJ manager and with you through skype .

I remember that you had quality problems before, was it with the same campaign/campaigns?
Yes quality problems were reported time to time but I always get my full payouts without any deductions. Just few offers got paused out.

And campaign was different


10-03-2018 12:58 PM #8 codeflame ()

Quote Originally Posted by matuloo View Post
I don't do much traffic filtering on my side either, but getting rid of the crap might make sense. Can you share more details about the topic you just raised? Are you suggesting that by blocking what you mentioned (proxy/vpn ...) we would get rid of BOTs that are able to complete the signup process ... or basically just improving the overall quality, by filtering low quality users who wouldnt signup anyways?
Both things. Filtering out proxy/vpn stuff consist of filtering hosting providers out too. Why someone from vultr,digital ozean , hetzner etc. should sing up? Its just a bot server. Send this filtered out stuff to rev share only programs and you are safe.
Same for bad browser language if you targed germany and browser language is rus, pol, it, etc. appears its just users and automated bots that can't even read your landing pages right and sign up without any value and hold your payouts down. Send them to rev share only programs too.
If you filter something out by "mistake" the rev share program will convert. But mostly you see nothing because of the fraud shit.

That's by the way the same reason why own collected pushs working better then the buyed once because you get 30% fraud from propeller, mega and co with their "are you over 18" accept landings because they cant handle browser language targeting.


10-03-2018 01:27 PM #9 matuloo (Legendary Moderator)

Why someone from vultr,digital ozean , hetzner etc. should sing up? Its just a bot server. Send this filtered out stuff to rev share only programs and you are safe.
Yup this is clear and I know about it, digital ocean is causing a lot of trouble lately, some sources are very poluted by it

Same for bad browser language if you targed germany and browser language is rus, pol, it, etc. appears its just users and automated bots that can't even read your landing pages right and sign up without any value and hold your payouts down.
Not so sure here though, I have lang always set to english and know plenty of people who do so, thought I'm in a very distant country. But I get your point, people in germany will most likely not set their lang to russian ... english is the default internet language pretty much, so that's an exception. Plus countries with strong minorities, more official languages ... will try to look at my data to see how much the lang settings relate to CVR.


10-03-2018 01:46 PM #10 codeflame ()

This is a good example of fraud with languages in general even if the whole spot was fraud but you get the meaning: porndoe.com was sold from vxcash to some russian or hungarian company. And they started to sell pops on exoclick last month. Even with browser language set to german they found a way to go throw exoclick filtering. Took me just 2 days to let them ban in all networks to prevent others from losing money to them.

Click image for larger version. 

Name:	porndoe.JPG 
Views:	131 
Size:	258.6 KB 
ID:	19735

And this is today only mobile DE dating if you count 1 + 1 together you know who am i and why filtering is paying of, you can run RON and it doesnt matter your quality or profit in anyway.
Click image for larger version. 

Name:	de.JPG 
Views:	39 
Size:	34.3 KB 
ID:	19737


10-03-2018 04:02 PM #11 r4raaj (Member)

Quote Originally Posted by codeflame View Post
Both things. Filtering out proxy/vpn stuff consist of filtering hosting providers out too. Why someone from vultr,digital ozean , hetzner etc. should sing up? Its just a bot server. Send this filtered out stuff to rev share only programs and you are safe.
Same for bad browser language if you targed germany and browser language is rus, pol, it, etc. appears its just users and automated bots that can't even read your landing pages right and sign up without any value and hold your payouts down. Send them to rev share only programs too.
If you filter something out by "mistake" the rev share program will convert. But mostly you see nothing because of the fraud shit.

That's by the way the same reason why own collected pushs working better then the buyed once because you get 30% fraud from propeller, mega and co with their "are you over 18" accept landings because they cant handle browser language targeting.
Please find below screenshot of the fraud report that I have received from my Affiliate Network:

https://imgur.com/a/0bwQuwH

Can you please make out something from it.


10-03-2018 04:18 PM #12 codeflame ()

Duplicate Fingerprint isnt a reason. Could be new Update that prevent some Fingerprint scripts to work on mobile. You need to ask for the ips and the ips you can check for Basic fraudscore. On mobile fingerprinting isnt working like on Desktop since there arnt plugins for the browsers that make fingerprinting very unuiqe like Desktop Users. Duplicate uuid is ok its same Device since it is unquie. And here is the important fact if they detect uuid the fingerprinting detections are wrong otherwise there would be duplicate uuid warning too.
Get ips from the report and check them even maxmind fraudscore api is ok for it too and cost for your little ips maybe 5€.


10-03-2018 04:38 PM #13 r4raaj (Member)

Quote Originally Posted by codeflame View Post
Duplicate Fingerprint isnt a reason. Could be new Update that prevent some Fingerprint scripts to work on mobile. You need to ask for the ips and the ips you can check for Basic fraudscore. On mobile fingerprinting isnt working like on Desktop since there arnt plugins for the browsers that make fingerprinting very unuiqe like Desktop Users. Duplicate uuid is ok its same Device since it is unquie. And here is the important fact if they detect uuid the fingerprinting detections are wrong otherwise there would be duplicate uuid warning too.
Get ips from the report and check them even maxmind fraudscore api is ok for it too and cost for your little ips maybe 5€.
1. If you mean IP addresses, then here is the screenshot https://imgur.com/a/OfZKwHi

2. Can I filter out something from below screenshot of Binom campaign. So that I do not face this issue again.
https://imgur.com/a/Ovr18WC


10-03-2018 04:55 PM #14 codeflame ()

no more time today but for example your 213.205.194.228 is clean and 213.171.196.51 is fraud
you can check them all here for free its using frauddetection from forensiq: https://getipintel.net/free-proxy-ip.../index.php#web
all that is green must be paid otherwise they should explain what there fingerprint is and why fingerprint isnt created from the uuid because its listed seperate.


10-05-2018 07:19 PM #15 r4raaj (Member)

It would be nice if anybody can throw some light on the below query:

Can I filter out something from below screenshot of Binom campaign. So that I do not face this issue again.

https://imgur.com/a/Ovr18WC



Rajiv


10-07-2018 07:05 PM #16 matuloo (Legendary Moderator)

Quote Originally Posted by rajivwalia View Post
It would be nice if anybody can throw some light on the below query:

Can I filter out something from below screenshot of Binom campaign. So that I do not face this issue again.

https://imgur.com/a/Ovr18WC



Rajiv
Did the report also include the postbacks for conversions? If it was, you could check the data for those conversions that were deemed fraudulent and check whethere there are some visible patterns that you could block based on.

For example ... you might find out that the bad conversions had specific language, maybe ISP, were proxies ... if the trend is strong enough, that would be great base for blocking specific targets in the future.


10-08-2018 03:51 PM #17 r4raaj (Member)

Quote Originally Posted by matuloo View Post
Did the report also include the postbacks for conversions? If it was, you could check the data for those conversions that were deemed fraudulent and check whethere there are some visible patterns that you could block based on.

For example ... you might find out that the bad conversions had specific language, maybe ISP, were proxies ... if the trend is strong enough, that would be great base for blocking specific targets in the future.
Hi Matej,

Report do not include the postbacks for conversions. I tried to figure out the trends but unable to get anything.

In general, when we create campaigns, can we do anything filter out.


10-08-2018 07:59 PM #18 matuloo (Legendary Moderator)

Quote Originally Posted by rajivwalia View Post
Hi Matej,

Report do not include the postbacks for conversions. I tried to figure out the trends but unable to get anything.

In general, when we create campaigns, can we do anything filter out.
Hard to say in your particular case since we don't know what clicks caused the trouble. The logical solution would be to cut what caused the fraudulent leads ... you got the IPs, cant you trace it back to some targeting options or placements?

Honestly, I've been kicked from offers many times of course, but I never got a fraud complaint like this, and Im not doing much pre-filtering, if any


10-08-2018 08:53 PM #19 jabong82 (Member)

I am thinking this is advertiser specific?

Maybe try the same campaign set-up on a different offer/advertiser and see how you do.


10-21-2018 11:22 AM #20 r4raaj (Member)

Please see this screenshot. How it is possible that many Device brands are associated with 1 IP address? This is an example of one of my campaigns for which offer got paused out and I am trying to figure out the reason. I have dozens of IP addresses in this campaign which are associated with different Device brands.

Please suggest, do I need to filter out these IP addresses in Binom tracker?

https://imgur.com/a/mQmv8Xe


10-22-2018 06:18 PM #21 matuloo (Legendary Moderator)

Quote Originally Posted by rajivwalia View Post
Please see this screenshot. How it is possible that many Device brands are associated with 1 IP address? This is an example of one of my campaigns for which offer got paused out and I am trying to figure out the reason. I have dozens of IP addresses in this campaign which are associated with different Device brands.

Please suggest, do I need to filter out these IP addresses in Binom tracker?

https://imgur.com/a/mQmv8Xe
A/ This is some BOT, using certain IP and emulating various devices ... could be some spider, maybe some fraudulent BOT .. hard to say really. But it's safe to block such IP, you don't want it in rotation anyways.

B/ Another option would be that there are many users who are connected through the same connection ... could be a public wifi, company-wide connection etc ...

To be honest, I really don't know if its A or B, but I would likely block it myself.


10-22-2018 06:26 PM #22 twinaxe (Senior Moderator)

I would say it depends.
These IPs can also be dynamic residential IPs.
Here in Germany many providers use dynamic IPs instead of fixed IPs.
Instead of just blocking them I would rather first trace the IPs to check if these are datacenter IPs or residential IPs.
But sure, when a majority of the traffic would come from only few IPs it looks suspicious.


10-22-2018 06:54 PM #23 jack_l (Veteran Member)

I don't know anything about the bots/fraud stuff that's helpful, but hang in there!

Whenever I hit a big obstacle like that I just try to shift my thinking from "I'm attempting to master this business for x,y,z result" to "I'm attempting to master this business because whether or not I succeed, attempting to do so is the right thing to do".

Easier said than done when you hit those demotivating roadblocks, but helps to keep yourself going until the next 'positive reinforcement' event

Keep up the hard work man!


10-23-2018 02:54 PM #24 r4raaj (Member)

Thanks Matej and Seb

I have created 3 rules in Binom.

Rule 1 - Normal Traffic - Revenue $26
Rule 2 - Other countries (FYI Although I have selected DE geo in TF, still I am getting traffic from other countries) - Revenue $5
Rule 3 - Repeated IP's - Revenue $7

If I block Rule 2 and Rule 3 then my ROI will be impacted.

Is there any way to check datacenter IPs or residential IPs.


10-23-2018 03:13 PM #25 HenryW (Member)

Quote Originally Posted by matuloo View Post
A/ This is some BOT, using certain IP and emulating various devices ... could be some spider, maybe some fraudulent BOT .. hard to say really. But it's safe to block such IP, you don't want it in rotation anyways.

B/ Another option would be that there are many users who are connected through the same connection ... could be a public wifi, company-wide connection etc ...

To be honest, I really don't know if its A or B, but I would likely block it myself.
If in doubt, block it out.


10-30-2018 10:36 AM #26 brokerbabe (Member)

Quote Originally Posted by codeflame View Post
Send them to rev share only programs too.
If you filter something out by "mistake" the rev share program will convert. But mostly you see nothing because of the fraud shit.
We have in Brokerbabe in the meantime Revshare only Smartlinks with tons of approved offers from all main Geos. Contains mostly Dating and Cam offers that are inHouse (Xcash, Nexocams, etc)

If you wanna try Codeflames suggestion, drop me a line


10-30-2018 12:45 PM #27 matuloo (Legendary Moderator)

Quote Originally Posted by rajivwalia View Post
Thanks Matej and Seb

I have created 3 rules in Binom.

Rule 1 - Normal Traffic - Revenue $26
Rule 2 - Other countries (FYI Although I have selected DE geo in TF, still I am getting traffic from other countries) - Revenue $5
Rule 3 - Repeated IP's - Revenue $7

If I block Rule 2 and Rule 3 then my ROI will be impacted.

Is there any way to check datacenter IPs or residential IPs.
When you block it, the revenue will go down for sure ... as some bots are able to finish the signup process too, so you'd be missing leads ... though fraudulent ones. In the end it's about finding the balance ... lose something VS gaining something through higher payouts and more stable performance. I'd suggest to go slowly at it and use my favorite "cut the worst" approach. Focus on blocking BOTs and the most known datacenters first.


11-03-2018 07:58 PM #28 r4raaj (Member)

Quote Originally Posted by matuloo View Post
When you block it, the revenue will go down for sure ... as some bots are able to finish the signup process too, so you'd be missing leads ... though fraudulent ones. In the end it's about finding the balance ... lose something VS gaining something through higher payouts and more stable performance. I'd suggest to go slowly at it and use my favorite "cut the worst" approach. Focus on blocking BOTs and the most known datacenters first.
Thanks Matej

Few more queries please

a. As per your suggestion, I will cut down Rule 1 and Rule 2 from my above post campaign.
Query: As per my understanding we can not stop bad traffic. Do I need to divert that traffic to some other offers. But in that case also other offers will get affected. Please suggest how to tackle this traffic.

b. I do not understand "datacenters" from your last line. It would be nice if you can enlighten me on this please

BTW just wanted to thank you (Matej), my dear friend twinaxe (Seb), and Vortex (Amy). Finally I have made some profit . However, that offer got paused out now. But I have got decent profit with ROI of 50% to 100%. Please find below the screenshot from Binom tracker:

https://imgur.com/a/8z1vVUi


12-19-2018 04:27 PM #29 r4raaj (Member)

I can be bit slow...but slowly trying to achieve... Binom results are proof for the same

Click image for larger version. 

Name:	<nobr><a href='https://binom.org/signup?from=stmforum' rel=Binom.png  Views: 43  Size: 27.6 KB  ID: 20235" class="thumbnail" style="float:CONFIG" />


12-19-2018 06:51 PM #30 matuloo (Legendary Moderator)

Nice, what does the ROI look like? Congrats on the profits !!!

Somehow I missed your previous post, so let me answer now, though a bit late

As per my understanding we can not stop bad traffic. Do I need to divert that traffic to some other offers. But in that case also other offers will get affected. Please suggest how to tackle this traffic.
You can send it to some other offer that is not so important for you, so if you lose it, no biggie. If it's just bots and other crap, the best is to simply block it or send it to some revshare offer so if some real user happens to be in the mix, you could still make some $$$ from them.

b. I do not understand "datacenters" from your last line. It would be nice if you can enlighten me on this please
I mean hosting services and thelikes ... so digitalocean, vultr etc ... real users do not browse through these guys, so its usually some kind of bot.


12-19-2018 09:23 PM #31 twinaxe (Senior Moderator)

Hey Raj, message me on Skype then I will help you with the datacenter and bot stuff.


12-20-2018 02:56 PM #32 r4raaj (Member)

Thanks Matej, I will take care of that


12-20-2018 02:57 PM #33 r4raaj (Member)

Quote Originally Posted by twinaxe View Post
Hey Raj, message me on Skype then I will help you with the datacenter and bot stuff.
Thanks Seb


01-21-2019 07:26 PM #34 r4raaj (Member)

Thanks Matej
My biggest problem is I am still unable to create account with Exoclick. I created the account on exoclick twice but got rejected again and again. I have also emailed them many times but got no response from their side. Currently I am using TJ and TF. Can you please suggest any other Traffic network where I can filter the traffic like exoclick.


01-21-2019 08:42 PM #35 matuloo (Legendary Moderator)

Quote Originally Posted by rajivwalia View Post
Thanks Matej
My biggest problem is I am still unable to create account with Exoclick. I created the account on exoclick twice but got rejected again and again. I have also emailed them many times but got no response from their side. Currently I am using TJ and TF. Can you please suggest any other Traffic network where I can filter the traffic like exoclick.
Do not worry about exo to much at this point, give it a few months, then try again... or talk to them at some conference, that would be the best.

TJ and TF are actually the two best networks for dating, but there is also trafficstars (also great but rules that make it complicated to run there), trafficforce, ero-advertising, juicy-ads, traffichaus ...


Home > Paid Traffic Sources > Adult Traffic (NSFW)