Nigel Batt

The mistake

The referral flow credits both the referrer and the referred account without any check that they are distinct people — no comparison of identity, payment method, device, or address between the two sides, and no cap on how many referrals one account can claim. Because the payout fires on signup rather than on the referred account doing anything of value, a single person can register endlessly against themselves and collect both halves of the bounty each time. The volume is only bounded by how fast they can fill in the form, so a script or a fast typist drains the promotional budget in minutes.