Coupon hijacking
A coupon site or browser extension inserts its tracking link at checkout, taking last-click credit for a sale another partner (or no partner) drove.
Signals: Referrers from known coupon or extension domains, codes that aren't approved for that partner, very short gaps between the affiliate click and the order.
Cookie stuffing
A partner drops tracking cookies on visitors who never clicked a real promotion, so later organic purchases get credited to them.
Signals: Blind referrals with no landing page context, unusually high conversion rates, many orders from one IP range in a short window.
Duplicate network claims
When a brand runs more than one network, the same order can be claimed on each, so you pay commission twice.
Signals: The same order ID appearing in claims from two or more networks or partners.
Unreversed refunds and cancellations
Not strictly fraud, but a common leak: an order is refunded yet its commission is still pending and goes on to be paid.
Signals: Refunded or cancelled orders whose network claim is still pending or approved.
Leaked or unauthorized codes
Codes meant for one creator or channel spread to coupon aggregators, and whoever posts them earns commission.
Signals: Private codes used by partners they were never issued to.