How to Stop Getting Your CPA Shaved: Attribution and Tracking Protection
Most "CPA shaving" is actually cookie expiry and misconfigured tracking, not fraud. Here's how to build an attribution setup that resists both.
Also known as: Goal Tracking, Conversion Attribution
Conversion Tracking is the method of detecting when a referred user completes a desired action—clicking an affiliate link, opening a demo, verifying KYC, or funding a live account—and attributing that action back to the exact campaign, ad, or content that drove it. It turns raw clicks into accountable outcomes.
In retail brokerage the meaningful conversions sit deep in the funnel: a registration is cheap, but a KYC-verified, funded, trading account is what pays an IB. Conversion tracking stitches the click on your side to that funded event on the broker's side, so you can say with confidence "this keyword produced three funded traders" rather than "this keyword produced clicks."
The plumbing is usually a server-to-server postback (S2S) URL or a tracking pixel. When you send a click, your tracker attaches a unique click ID; the broker stores it, and the moment the user funds, the broker fires the postback back to your tracker with that same ID and the event type. Because the signal travels server to server, it survives ad-blockers and browser privacy changes far better than a pixel alone.
A worked example: you spend $500 on search ads and record 250 clicks, 40 registrations, and 8 funded accounts. Conversion tracking lets you compute a 3.2% click-to-funded rate, attribute all 8 fundings to specific ads, and see that one ad drove 6 of the 8 while another drove none—so you reallocate budget on evidence, not guesswork.
The flow starts when a user clicks your tracking link. Your tracking platform logs the click and assigns a unique click ID, which it passes to the broker as a URL parameter (often called sub_id, click_id, or aff_click).
The broker stores that click ID against the new lead. When the user later hits a tracked milestone—registration, KYC approval, first deposit—the broker's server sends a postback: an HTTP request to your tracker's endpoint carrying the same click ID plus the event name and, where allowed, a value. Your tracker matches the ID, marks the conversion, and credits it to the originating ad or placement.
Because the postback is server-to-server, no code runs in the user's browser at the moment of conversion, so it is resilient to ad-blockers, cookie deletion, and Safari/iOS restrictions. A browser pixel is the fallback when S2S is unavailable, but it is more fragile.
Create your affiliate link with a unique click-ID parameter so every visit can be told apart and later matched to an outcome.
Agree with the broker which milestones fire—registration, KYC, first deposit—and which one counts as the payable conversion.
Paste the broker's postback URL into your tracker (or place their pixel) so conversions can flow back keyed to the click ID.
Run a controlled test signup and confirm the event arrives with the right click ID and event type before spending real budget.
Read conversions by ad, keyword, and placement; pause what produces clicks but no funded accounts and scale what converts.
Why it matters for partnership: Without conversion tracking, performance marketing is blind: you cannot tell which ads or keywords produce funded accounts versus empty clicks. Brokers supply postback URLs and pixels so IBs can attribute revenue, cut losing spend, and scale what actually converts.
You run Google Ads to an Exness review page and pass a click ID into your tracker. Exness fires an S2S postback on each first-time deposit. After $500 of spend you see 250 clicks and 8 FTDs (a 3.2% funded rate), with one ad group producing 6 of the 8. You pause the zero-conversion ad group and redirect its budget to the winner.
| Aspect | S2S postback | Browser pixel |
|---|---|---|
| Where it fires | Broker server → your tracker | User's browser |
| Ad-blocker resistant | Yes | Often blocked |
| iOS/Safari privacy impact | Minimal | Significant |
| Needs click ID | Yes | Cookie or ID |
| Reliability | High | Lower |
Track every funnel step, not just the final goal—if 80% register but only 10% clear KYC, the leak is in your onboarding message, and you would never see it from end-goal tracking alone.
Placing the same conversion pixel on more than one page double-counts fundings and inflates your reported conversion rate, leading you to scale spend on ads that are not really working.
It is a server-to-server callback the broker fires when a tracked event happens, sending your click ID and the event name back to your tracker so the conversion is credited to the right campaign.
Discrepancies are normal—caused by blocked pixels, cross-device journeys, attribution-window differences, and fraud filtering. Reconcile against the broker's back office and investigate large gaps.
They mainly break cookie- and pixel-based tracking. Server-to-server postbacks keyed to a click ID are far more resilient and are now the standard for brokerage affiliates.
Track both, but treat the first funded deposit as your payable conversion, since that is what generates broker revenue and, in turn, your commission.
It varies widely by traffic source, geo, and offer, so there is no guaranteed number. Establish your own baseline, then optimise relative to it rather than to someone else's figure.
Only up to your own site's actions. The funded-account event lives on the broker's servers, so you need their postback or pixel to attribute real revenue.
Most "CPA shaving" is actually cookie expiry and misconfigured tracking, not fraud. Here's how to build an attribution setup that resists both.
Sub-ID tracking attaches a custom identifier to every affiliate link so you can see exactly which channel, campaign, or piece of content drove each conversion.
A practical guide to how postback URLs and server-to-server tracking report conversions reliably, the parameters that must match for them to fire, and how to test …
A practical, evidence-based method for verifying that a broker's IB reporting dashboard reflects real clicks, conversions, and commissions — not just plausible-looking totals.
CPL deals pay you the moment a prospect submits a form, no deposit required. That upfront certainty comes with lower per-unit value and heavier quality scrutiny …