A CPA campaign can generate thousands of conversions and still end in a payment dispute. The advertiser rejects leads, the network freezes the balance, and the publisher says the dashboard already confirmed the commission. The agreement must explain what earns a fee, how quality is checked and who bears each risk.
This article provides a drafting framework for international campaigns. Suggested procedures are contractual recommendations, not universal legal deadlines.
Reviewed on 14 November 2026.
- Who owes the money?
- Define the conversion before launch
- Traffic quality: prohibit conduct, not vague labels
- Payouts, holds and advertiser non-payment
- An evidence-based dispute process
- Contractual allocation does not remove regulatory duties
- Liability and termination: keep remedies proportionate
- A checklist before the first click
- Frequently asked questions
A tracked conversion, an approved conversion and a payable commission are three different stages. Define each one before buying traffic.
Who owes the money?
CPA means payment for an agreed action, such as a qualified lead, registration or sale. “Webmaster” usually means a publisher or affiliate supplying traffic; it does not necessarily mean a website developer.
The network’s role
State whether the network contracts in its own name, acts as a disclosed agent or merely supplies tracking. Identify the legal entity owing the publisher and the entity buying the advertising service. A brand name or dashboard is not a sufficient description of the debtor.
The publisher’s role
List approved websites, channels, advertising accounts and any sub-publishers. Specify whether subcontracting requires consent and which obligations must flow down. The network needs a route to identify the actual traffic source without demanding unrelated commercial secrets.
The advertiser’s approval process belongs in the contract chain. If the publisher never signs the advertiser’s terms, do not assume that unpublished advertiser rules automatically bind it. Set an order of precedence between the master agreement, offer specification and later instructions.
Define the conversion before launch
The offer specification should be saved in a version that both parties can later prove. It needs more than a price and a destination URL.
Qualifying action
Define the payable event, required customer attributes, countries, duplicate rules, existing-customer exclusions and any purchase or verification conditions. Separate poor commercial performance from a breach of an agreed quality criterion.
Attribution
Specify attribution windows, time zone, click and conversion identifiers, last-click rules, cross-device treatment and deduplication. Decide which records prevail when network, advertiser and publisher reports disagree.
Validation
Set a review period, rejection codes, evidence requirements and an objection window. Explain what happens if no decision arrives on time. There is no universal rule that silence automatically approves a conversion.
Change control
Changes to price, caps, permitted channels or qualification rules should be recorded, notified and given a clear effective time. Address in-flight traffic; avoid retroactively applying a new rule to conversions generated under the old offer.
Traffic quality: prohibit conduct, not vague labels
“Low-quality traffic” is too broad to explain every rejection. Distinguish deliberate manipulation, prohibited acquisition methods and genuine leads that simply do not convert into sales.
Bots and fabricated leads
Define automated registrations, synthetic identities, duplicate submissions, click injection, cookie stuffing and falsified conversion events. State how indicators are investigated; a shared IP address alone is not conclusive proof of fraud.
Unapproved sources
Address prohibited geographies, incentivised traffic, brand bidding, misleading domains, unsolicited messages and hidden sub-publishers. Restrictions should match the actual offer and be available before the campaign starts.
Payment abuse
Explain treatment of stolen payment details, refunds, cancellations and chargebacks. A later refund need not automatically mean publisher misconduct: specify when it reverses commission and when additional damages can be claimed.
Advertising content
Allocate approval of creatives, claims, landing pages and disclosures. Require rights to images and copy, and a rapid takedown process. Approval should not be treated as permission to publish misleading or unlawful advertising.
For creative rights, see our article on using memes, photos and music in advertising. Financial-product campaigns need a separate perimeter review; see crypto and financial advertising.
Payouts, holds and advertiser non-payment
The payment clause should connect validation to an actual due date. A dashboard balance without settlement rules leaves both parties exposed.
| Issue | What the agreement should specify |
|---|---|
| Payment cycle | Currency, rate, invoice or self-billing process, minimum threshold, due date, bank fees, FX method and applicable tax or withholding documentation. |
| Hold or reserve | Purpose, amount or calculation, affected conversions, maximum review period and release process. Distinguish a temporary investigation from final forfeiture. |
| Advertiser non-payment | Whether the network owes commission independently or payment is conditional on collecting from the advertiser. Define the condition, reporting duties and any long-stop date. |
| Reversals and set-off | Which events reverse commission, the time limit, supporting records and how corrections appear in the ledger. Avoid double recovery for the same loss. |
| Undisputed amounts | Whether clean conversions are paid while a specific batch is disputed. State the treatment of small balances and final settlement after termination. |
A pay-when-paid or pay-if-paid clause shifts credit risk; its effect depends on its wording and applicable law. Publishers should price that exposure rather than assume network approval guarantees payment. Networks should not describe an amount as finally payable while reserving unlimited discretionary cancellation.
An evidence-based dispute process
A workable procedure should let the parties test a rejection without exposing unnecessary personal data or the entire advertising account.
1. Identify the disputed batch
Record the offer version, date range, conversion IDs, rejection reasons and amounts. Preserve relevant logs, creative approvals, postbacks and correspondence. Set access and retention rules consistent with privacy duties.
2. Allow a meaningful challenge
Provide enough information to understand and challenge the allegation. Protect confidential anti-fraud methods through controlled disclosure or an independent reviewer where appropriate. State who decides, within what period, and who pays review costs.
3. Resolve the balance
Issue a reasoned decision, ledger correction and payment or release instruction. Define escalation, mediation, court or arbitration arrangements and applicable law. Selecting governing law does not necessarily displace mandatory rules.
Hypothetical example: 1,000 conversions are tracked, 120 are rejected as duplicates and 880 remain undisputed. The procedure should identify the 120 records and permit a challenge, while the payment clause determines when the 880 are due. The example does not prescribe a statutory payment rule.
Contractual allocation does not remove regulatory duties
A clause making the publisher “solely responsible for all advertising” is not a universal defence for the advertiser or network. Public-law responsibility and contractual reimbursement are different questions.
| Area | Practical contract implication |
|---|---|
| UK affiliate advertising | ASA/CAP guidance treats brands and affiliates as accountable for affiliate advertising under its rules. Allocate disclosure, approval and monitoring duties; outsourcing promotion does not simply erase responsibility. |
| US endorsements | FTC guidance requires material connections to be clearly disclosed where applicable. Address affiliate disclosures, substantiation, training and monitoring; exposure depends on each participant’s role and the facts. |
| EU personal data | Determine whether parties are independent controllers, joint controllers or processors from their actual functions. GDPR Articles 26 and 28 require the appropriate arrangements where those roles apply. |
| Tracking technologies | For UK cookies and similar device-access technologies, assess PECR consent requirements and applicable exceptions. Server-side tracking is not a general exemption from privacy law. |
Keep an inventory of pixels, identifiers and lead fields, document who provides notices and collects required consent, and allocate security and incident cooperation. Never promise blanket ownership of personal data or assume every network is a processor. For the wider campaign review, see legal checks before a digital marketing launch.
Liability and termination: keep remedies proportionate
Define recoverable losses
Address unpaid commission, wasted media spend, third-party claims and investigation costs separately. State causation, mitigation, evidence and exclusions. Distinguish a contractual penalty from compensation; enforceability varies by governing law.
Set caps and exceptions
Negotiate an ordinary liability cap and any exceptions for fraud, intentional misconduct, confidentiality, IP or data breaches. An unlimited indemnity should not silently override every negotiated cap.
Control third-party claims
Specify notice, defence control, settlement approval and cooperation. Regulatory penalties are not automatically recoverable or transferable simply because the contract says so.
Close the campaign properly
Provide emergency suspension for credible fraud or unlawful content, ordinary termination notice and treatment of accrued fees. Record the cutoff time, in-flight conversions, continued validation, reserve release and lawful data retention.
A checklist before the first click
Check the counterparty
Verify entity details, authority to sign and the identity of the payment debtor.
Freeze the offer terms
Save price, caps, conversion criteria, channels, attribution and version history.
Test measurement
Check tracking, postbacks, duplicate handling and reporting access before scaling.
Agree the dispute workflow
Specify reasons, evidence, deadlines, appeal and treatment of undisputed sums.
Read the cash-flow risk
Calculate the effect of holds, advertiser default, deductions and termination on the publisher’s payment timetable.
Frequently asked questions
Can a network reject all traffic because the advertiser did not pay?
Not automatically. Distinguish failure to meet agreed conversion criteria from advertiser credit risk. Whether payment is conditional must be assessed under the actual agreement and governing law.
Is a dashboard balance proof of a debt?
It can be evidence, but its meaning depends on whether the balance is tracked, provisional, approved or payable. Preserve reports and contract versions rather than relying on a screenshot alone.
May a network keep all commission after detecting fraud?
The legal basis and scope must be assessed. Specify which conversions are affected, the evidence, contractual remedies and any applicable limits; a fraud allegation does not by itself answer every payment question.
Does the network need two agreements?
Often there is an advertiser–network agreement and a network–publisher agreement. They should align on qualification, review and payment without assuming every upstream risk can silently be passed downstream.
This topic is our service
We help advertisers, CPA networks and publishers structure agreements, payment terms and advertising compliance.
See also: Legal risks in digital marketing; Third-party content in advertising; Crypto and financial advertising.
This material is general information and is not legal advice. Reviewed on 14 November 2026. Requirements depend on applicable law, target markets and the actual operating model. Before launch, check official rules and obtain advice on the terms for your project.
