Phia is a shopping plugin, not the health-benefits startup described in the original version of this article. On July 9, 2026, researcher Ben Edelman published an investigation alleging forced clicks and stand-down violations in Phia’s affiliate behavior. The report describes hands-on tests and code review. These are attributed research findings, not an independently established court judgment.
What the report describes
Edelman reports automatic invocation of affiliate links in tested iOS behavior and a separate test involving an existing publisher referral. He also describes differences between desktop and iOS testing. Those observations are tied to the versions, configuration and sessions he examined; they do not establish how every current installation behaves.
Keep the response and current status separate
The report discusses public explanations attributed to Phia, but this review has not independently established a current company response, remediation status or court finding. Readers should consult the dated original research and seek current information from the company and their network before relying on an operational conclusion.
Test your own program’s exposure
If a software partner is active in your program, review the rules that govern intentional clicks and competing publisher referrals. An authorized test should preserve the referral sequence, timestamps, device and product version. Ask your network which records are available and how it evaluates the specific behavior. A high conversion rate or a direct session alone cannot prove cookie stuffing.
Document decisions without arbitrary thresholds
Use the actual agreement and substantiated evidence when deciding whether corrective action is needed. Give the partner a clear opportunity to explain, and record the reasons for any decision. The previous dollar-volume and direct-traffic thresholds were unsupported and should not be used as automatic enforcement rules.