Overview
- Bloomberg, independent researcher Ben Edelman and Capital One Shopping tested Phia’s browser extension and found it opened hidden background tabs and injected Phia’s affiliate codes during checkout, a practice known as cookie stuffing that can reassign commissions to Phia without a user click.
- Phia acknowledged the problem, said the responsible code was introduced in December, and said engineers patched the bug after being alerted, with Bloomberg and other testers reporting the automatic referral-claiming stopped on retest.
- Impact.com suspended Phia’s account and launched a review of potentially affected transactions, leaving commercial, contractual and legal outcomes unresolved while retailers and affiliate networks assess losses and compliance.
- Affiliate experts say cookie stuffing violates the core rule that commissions require a real user click, and the episode recalls legal disputes over similar tools such as Honey that have led to partner disputes and class-action claims.
- Beyond the technical fix, publishers and creators who rely on affiliate links could see lost revenue and may press networks or retailers for restitution, and the case has renewed scrutiny of extension data practices after Phia’s November 2025 removal of a page-content logging feature.