How Affiliate Tracking Actually Works (And Why Some Sales Don't Credit You)

You posted a great link. Three hundred people clicked it. Five of them definitely bought because two of them texted you to say so. But your dashboard shows two conversions, not five. Where did the other three go?

Welcome to affiliate tracking — a series of invisible handoffs between four different systems, any of which can quietly drop a sale on the floor. Understanding the plumbing won't make you a better creator, but it will stop you blaming yourself when the maths doesn't add up.

The chain in plain English

When someone clicks your affiliate link and eventually buys, here's what actually happens behind the scenes:

1. Click recorded. Your link goes through a redirect on your platform (e.g. cashoy.com/go/abc123). That redirect logs the click — who clicked, what offer, your unique tracking ID.
2. Hop to the network. Your platform redirects them to the affiliate network (CJ, AWIN, Impact, etc.) with a tracking parameter that says "this click belongs to creator #abc123."
3. Hop to the advertiser. The network drops a cookie in the user's browser and forwards them to the advertiser's site with the tracking ID embedded.
4. User browses, leaves, comes back, eventually buys. The cookie sits there reminding the advertiser who sent them.
5. Sale fires. The advertiser's checkout reads the cookie, attributes the sale to your tracking ID, and tells the network "creator #abc123 just earned a commission."
6. Network postback. The network pings your platform: "creator #abc123 has a pending $14.40 commission." Your platform credits your dashboard.

That's six handoffs. Each one can fail.

Where sales actually go missing

1. The user disabled cookies or is in incognito mode. No cookie, no attribution. About 5–10% of conversions evaporate here, depending on audience. Mobile users in 2026 with iOS 14+ tracking-protection are the worst affected.

2. Cookie expiration. Most networks set a 30-day cookie. If the user clicks today and buys 35 days later, you don't get credit. Long consideration purchases (furniture, electronics, vacations) lose a lot of revenue this way.

3. Last-click attribution. Most networks credit the last affiliate clicked before purchase, not the first. If your audience finds the product through you, but then types "[brand] coupon code" into Google and clicks a coupon site before checkout, the coupon site gets the commission. This is brutal in commoditised verticals.

4. Cross-device clicks. User clicks your link on phone, opens laptop later to buy. Cookie's on the phone, not the laptop. Conversion lost. Some networks have device-graph matching to recover these; most don't.

5. Adblockers and tracking-protection extensions. Some browser extensions block the tracking redirect entirely. The user clicks but never reaches the advertiser — or reaches them without the tracking parameter. You see a click, no conversion.

6. Advertiser pixel didn't fire. Sometimes the conversion pixel on the advertiser's checkout doesn't load — JavaScript error, slow connection, user closes the tab before it fires. The sale happened but the tracking system never knew.

7. Reversed conversions. This one stings — the sale registered, then the buyer returned the product or charged back. The advertiser reverses the commission, the network reverses it on your dashboard, sometimes weeks later.

The SubID — your unique fingerprint

Every affiliate platform attaches a unique identifier to every click. On Cashoy this is a click GUID. On other networks it's called a SubID, ClickID, transaction ID, or partner reference.

This ID does the heavy lifting. It's the only way the network can tell apart "creator A drove this sale" from "creator B drove that sale" when both might be promoting the same advertiser. When you see a conversion in your dashboard, what really happened is: the network's postback sent your SubID, your platform matched it back to your click record, and credited you.

If something goes wrong with the SubID — a redirect strips the parameter, a URL shortener mangles it, the advertiser's site doesn't echo it back in the conversion pixel — you don't get credited. This is why platforms guard SubID injection carefully and why you should never manually edit your tracking links once they're generated.

Postbacks — the bit nobody explains

A postback is just a server-to-server message. After a sale fires, the network sends an HTTP request to your platform that looks something like:

GET https://your-platform.com/postback?subid=abc123&amount=14.40&status=approved

That's it. No cookies, no browsers — just two servers talking. This is why postback-based tracking is more reliable than pixel-based: there's no browser in the middle to break it.

The downside: postbacks happen on the network's schedule, not yours. Some fire instantly. Some fire in batches every few hours. Some networks (looking at you, Awin) batch overnight. If you've just had a viral post and you're refreshing your dashboard, the data may be hours behind reality.

How long until a sale becomes money

The flow from click to bank deposit usually goes:

• Click happens (day 0)
• Conversion fires (day 0–30 depending on consideration window)
• Network postback (instant–24 hours after conversion)
• Pending hold period (7–60 days, network-dependent — protects against refunds)
• Approval (after hold, sale is locked in)
• Payout schedule (net-15, net-30, or net-60 depending on network)
• Money in your account (anywhere from 30 to 120+ days from the original click)

If you're new and wondering why your "earnings" don't match your dashboard balance, this is why. Most of what you're seeing is pending — not yet payable.

Why dashboards drift

Compare three different views of the same sale and they'll all show different numbers:

• Your real-time dashboard: what happened (or appears to have happened) in the last 24 hours
• The network's official report: what they're going to actually pay you for, settled
• The advertiser's view: their version of truth, sometimes different again

These reconcile over time but rarely match on any given day. Reasons:

• Late-firing postbacks add conversions retroactively
• Reversals subtract them retroactively
• Currency conversion happens at different times
• Some platforms show "tracked" numbers (raw clicks/conversions), others show "approved" (after hold)

Don't drive yourself crazy reconciling daily. Look at the 30-day rolling number — that's what's real.

What to do when a sale you know happened doesn't show up

1. Wait 48 hours. Most "missing" sales aren't missing, they're delayed.
2. Check the cookie window. Did the buyer click your link more than 30 days before they bought? You probably lost the cookie.
3. Check the last-click chain. Did they click a coupon link or comparison site between your link and checkout? You probably lost the attribution.
4. Open a missing-conversion ticket with the network. Most networks have a process for chasing dropped commissions if you have the click ID and the order ID. Some honour them, some don't. Always worth trying for bigger amounts.
5. Stop blaming yourself. Around 5–15% of theoretical commissions just don't credit. That's the cost of running on top of someone else's tracking stack. Adjust your expectations accordingly.

Where Cashoy helps

Cashoy uses server-side postback tracking with SubID injection on every redirect, so your sales credit reliably without depending on browser cookies surviving for 30 days. We reconcile against the network's transaction reports daily, so reversals and late approvals flow back to your dashboard automatically — you see the same number the network is paying us.

You also get the click ID for every link, so when something genuinely does go missing, you have what you need to open a chase ticket with the network.

Sign up and get your first tracking link →

Bottom line

Affiliate tracking is a chain of six handoffs across four different systems, and every link can fail in ways you can't control. Cookies expire, last-click steals credit, postbacks lag, reversals subtract sales weeks later.

The two things you can control: pick networks with reliable tracking and short pending holds, and never edit a tracking link by hand. Everything else is just the normal weather of running on someone else's plumbing.