Fourteen posts. Real photos. Planted comments. Ready to ship.

Most affiliate managers can't see the closed Telegram channels their top 20 partners are running.

We just scanned 14,231 of them. Here's what we found:

1. 31% used different brand promises than approved on-site copy.
2. 18% offered cashback structures that violated the operator T&Cs.
3. 6% targeted minors in the welcome message.

If you have a top-20 affiliate programme and you only review what's on their public site, you are reviewing the marketing brochure. The campaign is happening somewhere else.

DM 'CLOSED' and we'll send the full segment breakdown by jurisdiction.

FinProm is fully in force on 8 June. Most FX brokers we speak to think the worst is behind them.

It isn't. The 30 days after a regulation lands is when enforcement starts.

Three patterns from operators who got fined in similar moments:
1. Old creative still in market because nobody told the affiliate.
2. Influencer disclaimers that 'comply' but render off-screen on mobile.
3. Sub-affiliates running the original copy two hops down.

We are scanning live. Comment 'FINPROM' and we'll send your sector heatmap.

We pulled a coupon-leakage audit on a single mid-market retailer last week.

11.4% of the programme. 12 of them were running paid search on the brand term. 6 were buying typo-domain traffic. 2 were stacking codes that didn't exist anywhere in the merchant's promotional plan.

The programme manager had been told the channel was 'clean' by their network rep three months earlier.

It wasn't. The clean report was written by the network getting paid on the leakage. That's a hard fail of any audit.

Comment 'AUDIT' and we'll send the redacted scan.

Three things that surprised me at SBC Lisbon last week. Posted from the airport, not after a press release sweep.

1. Two operators are quietly exiting Germany. Not announced. Pulled their German GGR forecasts in side conversations.

2. Affiliate fee compression is now a board topic at 4 of the top 10 networks I sat with. The age of 50% rev share is ending. The question is what replaces it.

3. Nobody is ready for AI-content audit. Everyone agrees it's coming. Nobody has a budget line.

These are observations, not predictions. Take them as that.

If any resonate, comment below. I read them all.

Your programme is smaller. Your risk isn't.

The MGA doesn't ask how many affiliates you have. They ask what they did. The FCA, the ASA, the CMA, none of them grade on a curve.

Trackback is built for the operators who pay enterprise-grade fines on SME budgets:
1. Self-serve onboarding in 10 minutes.
2. Fixed price per asset reviewed.
3. First regulator email goes to a real human, not a ticket queue.

If you have 12 affiliates and one nerve-wracking regulator email, this is the product for you.

DM 'TRACKBACK' for the demo link.

Spent the last two weeks with operators in Manila, Singapore and Tokyo.

One pattern they all share that European operators consistently miss: every affiliate has a named compliance contact on the operator side.

Not a generic compliance@ inbox. A name. A face. A direct line.

When something goes wrong, it gets fixed in hours, not weeks. The affiliates know exactly who to message. The operators know exactly who's accountable.

European operators tend to centralise compliance into a queue. The queue saves money on day one and costs you the regulator on day 90.

DM 'APAC' for the operator-side org charts I'm sharing.

Three Eastern European regulators have moved on affiliate marketing in the last 90 days. Same pattern, different language.

1. Czech MFČR pulled three affiliate licences for off-domain UGC.
2. Hungary SZTFH now requires named affiliate registration for casino brands.
3. Poland MF is consulting on a content-pre-clearance regime.

Brands operating across CEE are running three different compliance models because they think the regulators are different. The patterns are the same. The enforcement is converging.

Comment 'CEE' for the mapping doc we built for our Eastern European customers.

I started Rightlander in 2016 because I'd spent eleven years running an iGaming affiliate network and I knew exactly where the bodies were buried.

The bodies haven't moved. Closed groups. Sub-affiliates. AI-generated review pages. The hiding places change. The fact that they're hiding doesn't.

Nineteen years in this industry has taught me one thing: every brand thinks their channel is the exception. None of them are.

Scan first. Argue with the data later. Don't argue with the screenshot.

If you've never seen what your channel actually looks like, that's the project for this quarter.

Self-attestation is a coping mechanism. Not a compliance function.

Five things your IBs won't volunteer that we find in 30 minutes of scanning:
1. Their merchant relationships. Most brokers fund three layers down.
2. The PIP keywords they actually bid on.
3. The closed groups they post in.
4. The AI-generated content multiplying under different names.
5. The sub-affiliates they sub-let your brand to.

If the FCA called you tomorrow and asked 'who is doing this in your name', could you answer in 24 hours?

DM 'IB' for the audit checklist.

Sixth Trackback signup this week. Same pattern.

Operator with 14 affiliates. One regulatory letter pending. They tried to onboard with two enterprise compliance vendors. Both wanted £40k commitments and a six-week implementation.

Trackback: live in 10 minutes, £99 per month, fixed price per scan.

We will not chase enterprise budgets. We will not pretend SMEs can wait six weeks. Compliance is not a status symbol. It's a deadline.

DM 'TRACKBACK' for self-serve sign up.

Wrapped 11 customer QBRs last week. Three patterns kept showing up:

1. The compliance function is being asked to forecast risk by quarter, not just report it. Nobody trained for this. Everybody is doing it.

2. AI-generated content is now the #1 review burden. Not the #1 risk yet. Just the #1 burden. The risk follows the burden.

3. Customers who scanned weekly in 2025 are scanning daily in 2026. The ones who scanned monthly in 2025 are still scanning monthly. The gap between the two is widening.

Comment 'QBR' for the question template we used.

Three things from iGB Live worth writing down.

1. The booths are smaller. The conversations are sharper. Operators are asking specific scoping questions, not feature questions. That's a market that has decided.

2. Every other booth is 'AI compliance'. The product behind the badge is rarely a product. We saw two genuinely.

3. Sarafina judged the iGB Affiliate awards. Three of the eight winners had Rightlander reports submitted as part of the dossier. We did not pay for that. The category criteria changed.

iGB is the first event where we felt like the category we built had finally caught up to the room.

Comment 'IGB' for the photos and the booth conversations we logged.

Eight years of scanning data. One chart.

The amount of affiliate activity that happens off-domain has grown from 38% in 2020 to 71% in 2026.

Off-domain means: closed Telegram channels, dark social, Discord, off-platform UGC, AI review pages indexed under affiliate IDs you don't own.

If your compliance function is reviewing the on-site copy, you are looking at 29% of your actual exposure.

The gap is the moat. We built the scanner that closes it.

DM 'SCAN' for the chart and the underlying methodology note.

G2E. First time three of the four big US tribal operators stopped at our booth without us chasing them.

Two surprises:

1. The tribal compliance teams are running tighter scanning programmes than most European public-company operators. Quietly. Without product marketing teams selling them on it.

2. The American sportsbook is now the second-largest user of our category. Two years ago it was a footnote. Now it's the line item every analyst asks me about.

The US market does not behave like Europe with a delay. It is its own thing. We are learning, not exporting.

Comment 'G2E' for the post-show notes we sent the team.