Phia shopping extension suspended by Impact.com following cookie stuffing investigation
AI shopping app Phia has been suspended by Impact.com following a Bloomberg investigation that found the startup used browser extensions to override affiliate links and claim unauthorized commissions. The incident has raised concerns regarding technical due diligence for venture capital investors who provided $43.5 million to the company.
Key Takeaways
- Impact.com suspended Phia after confirming functionality that automatically inserted referral codes, a violation of standard affiliate marketing policies.
- A Bloomberg investigation involving tests on 50 retail sites found the extension intercepted commissions belonging to publishers like Wirecutter.
- Phia raised $43.5 million from major VC firms including Kleiner Perkins, Khosla Ventures, and Notable Capital, alongside over 30 celebrity angel investors.
- Independent researcher Ben Edelman found the 'auto_drop' code, which facilitates these simulated clicks, was present in the codebase as early as December 2025.
- Phia described the issue as a 'legacy technical issue' and corrected the extension behavior following media inquiries in early July 2026.
Why It Matters
This incident highlights a critical failure in technical due diligence, where $43.5 million in capital entered a startup utilizing one of the oldest fraudulent tactics in ad tech. For the streaming and digital media ecosystem, it underscores the fragility of 'last-click' attribution models that remain standard despite widespread vulnerability to browser-level hijacking. The suspension by Impact.com illustrates how quickly platform-dependent revenue streams can evaporate when core monetization tactics are flagged as non-compliant. Watch for whether major retailers like Nordstrom or Zara demand clawbacks of historical commissions and if other affiliate networks, beyond Impact.com, pursue similar suspensions or audits of high-profile shopping assistants.
Additional Context
The controversy surrounding Phia surfaces amid heighted scrutiny of browser extensions following a multi-year history of attribution fraud. According to reports from The Verge in early 2025, PayPal-owned Honey faced similar allegations of 'last-click' hijacking in a publisher class-action lawsuit, which claimed the tool failed to 'stand down' when other affiliate tags were present. Independent researcher Ben Edelman, who conducted the technical analysis for the Phia investigation, previously flagged similar code-based redirection in a dozen Chrome extensions throughout late 2025, demonstrating that attribution theft remains a systemic risk for the estimated $10 billion U.S. affiliate marketing industry. Institutional investors including Kleiner Perkins and Khosla Ventures led Phia’s $185.5 million valuation round in January 2026, yet the 'auto_drop' feature discovered by researchers was reportedly active during the 2025 holiday shopping season. This follows a separate November 2025 report from Fortune detailing a privacy concern where Phia’s extension was found to be transmitting HTML snapshots of non-shopping pages, including email and banking dashboards, back to company servers. In response to that earlier finding, per TechCrunch, Phia discontinued full-page logging in late 2025, though the latest affiliate suspension suggests a pattern of technical opaque-ness that continues to test investor trust. Industry monitors such as TrafficGuard noted in December 2025 that modern affiliate fraud has shifted from high-volume bot traffic toward subtle attribution hijacking that occurs at the final stage of the user journey. By mimicking real user behavior through background redirects, high-profile extensions can bypass traditional fraud detection filters. As commerce-media integrations become central to streaming platforms and AI assistants, the Phia suspension serves as a cautionary signal for B2B partners who must now weigh the traffic volume generated by these tools against the risk of non-incremental commission costs.
Read full article at startupfortune.com
Enjoy our coverage?
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source