Creators Sue PayPal Over Honey Extension Commission Scam

On January 12, 2026, Rakuten Advertising quietly removed PayPal’s Honey from its affiliate network. It was a severe blow to a browser extension that had already hemorrhaged eight million users over the previous year. The downfall started with a single tech investigator on YouTube, but it quickly unraveled a technical manipulation scheme that shook the entire online shopping industry and triggered a major legal battle.

The Video That Broke the Extension

The controversy ignited on December 21, 2024, when New Zealand-based tech investigator MegaLag published a video titled “Exposing the Honey Influencer Scam.” Before this upload, most consumers simply viewed the tool as a helpful way to automatically test promo codes at checkout. MegaLag revealed a much darker reality, showing how the software was hijacking affiliate commissions right at the checkout screen through a practice known as last-click attribution.

Here is the original investigative video that started the entire industry reckoning:

In the traditional affiliate marketing model, an influencer shares a product link with their audience. When a fan clicks that link, a tracking cookie is stored on their browser to ensure the creator gets a percentage of the sale. However, MegaLag discovered that when a shopper clicked the Honey button to test for discounts, the extension would quietly replace the creator’s tracking code with its own. If a purchase was made, Honey took the credit and the payout.

Honey hasn’t just been scamming you, the consumer. It’s also been stealing money from influencers, including the very ones they paid to promote their product.

The financial discrepancies were stark. In one documented instance, the investigation found that Honey claimed a $35.60 commission on a single sale, but only rewarded the actual shopper with $0.89 in arbitrary reward points. The extension was not primarily hunting for the best consumer deals. Instead, it was allegedly prioritizing discount codes that maximized its own corporate revenue.

That discovery opened the floodgates for creator backlash.

Influencers who had previously accepted sponsorships from the company felt entirely betrayed. Hank Green called the platform out directly, stating they were stealing and lying at every level. Austin Evans, a tech creator with over five million subscribers, told his audience the deception was completely unacceptable. Linus Media Group even chimed in, revealing they had ended their partnership back in 2022 because the extension would override their links without actually finding users a better deal.

Selective Standdown and the Defeat Device

Just when the initial outrage began to settle, MegaLag returned with a second installment in December 2025. This follow-up investigation dug directly into the software’s source code, uncovering something far worse than standard commission sniping. The investigator found a hidden protocol labeled “Selective Standdown” buried in the extension’s files.

This code acted as a sophisticated evasion tool. It was programmed to detect if a user was an industry tester working for an affiliate network. If the software realized it was being monitored by a network compliance officer, it would temporarily disable its manipulative tracking behavior. This allowed the tool to pass standard network audits without getting banned for violating terms of service.

The revelation drew immediate comparisons to the automotive emissions scandals, where cars were programmed to run cleaner only when undergoing official testing. PayPal scrambled to control the narrative. An unnamed spokesperson for the company told the press that the code causing the behavior had been identified and neutralized, claiming it was a legacy feature implemented prior to their 2020 acquisition.

They further argued that the protocol only affected 0.1 percent of their overall traffic. The industry did not accept this defense. Following the explosive second video, Rakuten Advertising terminated the shopping tool from its network in January 2026, dealing a severe blow to the platform’s ability to generate revenue.

A Class Action Lawsuit Looms Large

The mounting evidence of deceptive practices quickly moved from YouTube comments to the federal court system. On December 29, 2024, a formal complaint was filed in the U.S. District Court for the Northern District of California. The case, Wendover Productions v. PayPal, brought together a coalition of prominent internet creators.

Spearheaded by figures like LegalEagle’s Devin Stone, the lawsuit accused the tech giant of systematic fraud. The plaintiffs are currently seeking damages for lost affiliate revenue that was covertly diverted away from their channels. For many independent publishers, affiliate links represent a crucial pillar of their business model, making the alleged theft an existential threat to their livelihoods.

The legal action centers on several specific grievances:

• Interfering with established affiliate tracking cookies
• Failing to disclose the commission override process to users
• Providing sub-optimal discount codes to maximize corporate payouts
• Using evasion code to hide these practices from network auditors

If the courts grant class-action status to the creators, the financial penalty for the tech giant could be severe. The lawsuit has also prompted smaller bloggers and independent review websites to audit their own historical affiliate data to see exactly how much revenue they lost to the checkout tool.

The Fallout for a Four Billion Dollar Bet

When PayPal acquired Honey Science Corp for $4 billion in 2020, executives hailed it as a revolutionary step for digital commerce. They envisioned a seamless bridge between finding deals and processing payments. Six years later, that premium investment has become a distinct liability for the financial brand.

The public reaction to the scandal was swift and measurable. Using historical snapshots from the Chrome Web Store, analysts tracked a steady exodus of users as the news spread across social platforms.

The controversy also forced major structural changes in how browsers handle shopping add-ons. In March 2025, Google updated its Chrome Web Store policies specifically to target these mechanics. The new rules explicitly prohibit extensions from claiming affiliate credit without providing direct user discounts, effectively killing the business model that allowed tools to hijack links while offering nothing of value to the shopper.

PayPal’s chief corporate affairs officer, Amy Bonitatibus, initially defended the tool by stating that last-click attribution is widely used across major brands. While technically true, the argument did little to quell the anger of creators who felt their direct sales were being intercepted at the final hurdle.

The ongoing fallout of the #HoneyLawsuit serves as a stark warning to the tech industry, proving that even a financial giant like #PayPal cannot afford to ignore the independent creators who drive modern digital retail. As the courts prepare to examine the source code and the exact mechanics of the defeat device, the era of unchecked browser extensions quietly scraping commissions appears to be over. The independent publishers who built the modern affiliate ecosystem are finally demanding accountability, and they have the receipts to back it up.