Wednesday, April 05, 2006
The Spyware - Click-Fraud Connection -- and Yahoo's Role Revisited:
"...My August examples demonstrate what I call 'syndication fraud' -- Yahoo placing advertisers' ads into spyware programs, and charging advertisers for resulting clicks. But Yahoo's spyware problems extend beyond improper syndication. In my August syndication fraud examples, an advertiser only pays Yahoo if a user clicks the advertiser's ad. Not so for three of today's examples. Here, spyware completely fakes a click -- causing Yahoo to charge an advertiser a 'pay-per-click' fee, even though no user actually clicked on any pay-per-click link. This is 'click fraud.'...
...Note that traffic passes through Intermix's Sirsearch servers. This is not Intermix's first involvement with spyware, nor Intermix's first involvement with Yahoo in the context of spyware. During the New York Attorney General's summer 2005 investigation of Intermix for improper installation of advertising software onto users' computers, a NYAG investigator reported that more than 10% of Intermix's revenues came from Yahoo. The investigator further commented that the NYAG was "not ruling out ... going after ... Overture" for its role in funding Intermix. My findings here suggest that Intermix's relationship with Yahoo and Intermix's funding of spyware may extend beyond what was previously known.
I have tested the Qklinkserver advertising software at length. Of the links I have received from Qklinkserver, every single one ultimately passes through Yahoo Overture. As best I can tell, Yahoo Overture is the sole source of funding for Qklinkserver. (Compare: Yahoo Overture funding 31% of Claria, per Claria's 2003 SEC S1.)...
...Yahoo recently announced its support (as a founding sponsor) of TRUSTe's forthcoming Trusted Download Program. The Trusted Download program intends to certify advertising software -- so advertisers can confidently buy ads from such programs. I have a variety of concerns about the program -- including that its standards may be too lax, that it will face exceptional difficulties in performing meaningful enforcement, and that I don't know that any "adware" deserves a certification or endorsement. But even if Trusted Download were fully operational and working as expected, it would not have identified or prevented the problems described in this article. At best, Trusted Download would tell Yahoo that it may work with whatever adware vendors earn TRUSTe's certification. But Yahoo's problem isn't uncertainty about which adware vendors are good. Instead, Yahoo's problem is that, time and time again, it finds itself working with (and its advertisers defrauded by) notorious "adware" vendors -- vendors Yahoo has already resolved to avoid (e.g. 180solutions, Direct Revenue), or vendors that wouldn't come close to passing any ethics test (e.g. Qklinkserver, Look2me/Ad-w-a-r-e). Trusted Download doesn't and won't monitor advertisement syndication; Trusted Download won't and can't prevent these bad Yahoo PPC syndication relationships.
I see two basic strategies for Yahoo. Yahoo could try to limit its exposure to fraud, i.e. by scaling back its partner network, by more thoroughly vetting its partners, and by prohibiting its partners from further resyndicating Yahoo's ads. Alternatively, Yahoo could try to detect fraud more thoroughly and more quickly, i.e. by implementing aggressive and robust testing methods to find more examples like those above, and like the dozens more examples I have on file. I tend to think both strategies are appropriate; in combination, they might serve to blunt this growing problem. But merely ignoring the issue is not a reasonable option; Yahoo's advertisers pay top dollar for Yahoo PPC ads, and they deserve better.
Yahoo cannot expect these fraudulent techniques to disappear. Yahoo is an attractive target for fraudsters due to Yahoo's high advertising charges and Yahoo's high payments to partners. As spyware vendors find other revenue sources increasingly difficult (i.e. because advertisers do not want to buy spyware-delivered advertising), spyware vendors are likely to continue to turn to more complex advertising channels such as PPC, which are more amenable to fraud due to their reduced transparency and increased complexity. Yahoo, like other PPC services, needs to anticipate and block this growing problem.
Similar issues confront Google -- though, in my testing, more often through bad syndication and less often through click fraud. I'll cover Google's problems in a future piece. Meanwhile, see my prior articles about Google and spyware: 1, 2..."
"...My August examples demonstrate what I call 'syndication fraud' -- Yahoo placing advertisers' ads into spyware programs, and charging advertisers for resulting clicks. But Yahoo's spyware problems extend beyond improper syndication. In my August syndication fraud examples, an advertiser only pays Yahoo if a user clicks the advertiser's ad. Not so for three of today's examples. Here, spyware completely fakes a click -- causing Yahoo to charge an advertiser a 'pay-per-click' fee, even though no user actually clicked on any pay-per-click link. This is 'click fraud.'...
...Note that traffic passes through Intermix's Sirsearch servers. This is not Intermix's first involvement with spyware, nor Intermix's first involvement with Yahoo in the context of spyware. During the New York Attorney General's summer 2005 investigation of Intermix for improper installation of advertising software onto users' computers, a NYAG investigator reported that more than 10% of Intermix's revenues came from Yahoo. The investigator further commented that the NYAG was "not ruling out ... going after ... Overture" for its role in funding Intermix. My findings here suggest that Intermix's relationship with Yahoo and Intermix's funding of spyware may extend beyond what was previously known.
I have tested the Qklinkserver advertising software at length. Of the links I have received from Qklinkserver, every single one ultimately passes through Yahoo Overture. As best I can tell, Yahoo Overture is the sole source of funding for Qklinkserver. (Compare: Yahoo Overture funding 31% of Claria, per Claria's 2003 SEC S1.)...
...Yahoo recently announced its support (as a founding sponsor) of TRUSTe's forthcoming Trusted Download Program. The Trusted Download program intends to certify advertising software -- so advertisers can confidently buy ads from such programs. I have a variety of concerns about the program -- including that its standards may be too lax, that it will face exceptional difficulties in performing meaningful enforcement, and that I don't know that any "adware" deserves a certification or endorsement. But even if Trusted Download were fully operational and working as expected, it would not have identified or prevented the problems described in this article. At best, Trusted Download would tell Yahoo that it may work with whatever adware vendors earn TRUSTe's certification. But Yahoo's problem isn't uncertainty about which adware vendors are good. Instead, Yahoo's problem is that, time and time again, it finds itself working with (and its advertisers defrauded by) notorious "adware" vendors -- vendors Yahoo has already resolved to avoid (e.g. 180solutions, Direct Revenue), or vendors that wouldn't come close to passing any ethics test (e.g. Qklinkserver, Look2me/Ad-w-a-r-e). Trusted Download doesn't and won't monitor advertisement syndication; Trusted Download won't and can't prevent these bad Yahoo PPC syndication relationships.
I see two basic strategies for Yahoo. Yahoo could try to limit its exposure to fraud, i.e. by scaling back its partner network, by more thoroughly vetting its partners, and by prohibiting its partners from further resyndicating Yahoo's ads. Alternatively, Yahoo could try to detect fraud more thoroughly and more quickly, i.e. by implementing aggressive and robust testing methods to find more examples like those above, and like the dozens more examples I have on file. I tend to think both strategies are appropriate; in combination, they might serve to blunt this growing problem. But merely ignoring the issue is not a reasonable option; Yahoo's advertisers pay top dollar for Yahoo PPC ads, and they deserve better.
Yahoo cannot expect these fraudulent techniques to disappear. Yahoo is an attractive target for fraudsters due to Yahoo's high advertising charges and Yahoo's high payments to partners. As spyware vendors find other revenue sources increasingly difficult (i.e. because advertisers do not want to buy spyware-delivered advertising), spyware vendors are likely to continue to turn to more complex advertising channels such as PPC, which are more amenable to fraud due to their reduced transparency and increased complexity. Yahoo, like other PPC services, needs to anticipate and block this growing problem.
Similar issues confront Google -- though, in my testing, more often through bad syndication and less often through click fraud. I'll cover Google's problems in a future piece. Meanwhile, see my prior articles about Google and spyware: 1, 2..."
Comments:
Post a Comment
