Prevent Affiliate Fraud & Stop Fake Conversions

// Affiliate conversion handler (Node.js example)
import axios from 'axios';

app.post('/api/track-conversion', async (req, res) => {
  const { 
    affiliateId, 
    email, 
    orderId, 
    amount 
  } = req.body;
  
  const userIP = req.ip;

  try {
    // Validate conversion with IPASIS
    const ipasisResponse = await axios.post(
      'https://api.ipasis.com/check',
      {
        ip: userIP,
        email: email
      },
      {
        headers: {
          'Authorization': `Bearer ${process.env.IPASIS_API_KEY}`,
          'Content-Type': 'application/json'
        }
      }
    );

    const { trustScore, signals } = ipasisResponse.data;

    // Determine fraud risk level
    let fraudRisk = 'low';
    let approveCommission = true;

    if (trustScore < 30) {
      fraudRisk = 'high';
      approveCommission = false;
      
      await logFraudulentConversion({
        affiliateId,
        email,
        ip: userIP,
        orderId,
        amount,
        trustScore,
        signals,
        blocked: true
      });

      // Block commission payment
      return res.status(200).json({
        tracked: true,
        commissionApproved: false
      });
    }

    if (trustScore < 60) {
      fraudRisk = 'moderate';
      approveCommission = false; // Hold for review
    }

    // Record conversion with fraud metadata
    await recordAffiliateConversion({
      affiliateId,
      email,
      orderId,
      amount,
      userIP,
      trustScore,
      fraudRisk,
      commissionApproved: approveCommission,
      ipasisSignals: signals,
      timestamp: new Date()
    });

    // Auto-approve high-quality conversions (trustScore >= 60)
    if (approveCommission) {
      const commission = calculateCommission(amount, affiliateId);
      
      await creditAffiliateCommission({
        affiliateId,
        conversionId: orderId,
        amount: commission,
        status: 'approved'
      });
    } else {
      // Queue for manual review
      await queueForReview({
        affiliateId,
        conversionId: orderId,
        reason: 'Low trust score',
        trustScore
      });
    }

    res.json({
      tracked: true,
      commissionApproved: approveCommission,
      fraudRisk
    });

  } catch (error) {
    console.error('IPASIS validation failed:', error);
    
    // Fallback: track conversion but hold commission
    await recordAffiliateConversion({
      affiliateId,
      email,
      orderId,
      amount,
      commissionApproved: false,
      flaggedForReview: true,
      error: 'IPASIS_CHECK_FAILED'
    });

    res.json({
      tracked: true,
      commissionApproved: false
    });
  }
});