Geo targeting affiliate offers means accepting affiliate traffic only from the countries an offer is licensed, priced and available for. The tracking platform looks up each click's country from its IP address, checks it against the campaign's allowed or blocked list, and blocks or redirects the rest, logging every blocked click so you can see which partners send out-of-market traffic.
This guide covers why country rules exist, allow-lists versus block-lists, blocking versus redirecting, what to log, how accurate IP geolocation really is, and how MassPartner applies country rules. Operators in regulated verticals can also read our overview of iGaming affiliate software.
Why country rules exist: licensing first
Margins and fraud matter, but in regulated verticals the main driver is the license.
- Gambling is licensed where the player is. Since 2014, remote gambling by consumers in Britain has been regulated on a point-of-consumption basis, and the UK government said at the time that all operators selling into the British market, whether based in Britain or abroad, need a Gambling Commission license. Other regulated markets set their own licensing rules, so a player from a market you aren't licensed in is a compliance problem, not just a wasted payout.
- Operators answer for their affiliates. The Gambling Commission's social responsibility code 1.1.2 makes licensees responsible for third parties they contract with, requires contracts that bind them to the same conditions, and requires a right to terminate promptly, including for affiliates that breach advertising codes.
- Financial products follow the same logic. The FCA's cryptoasset promotion regime applies to all firms marketing cryptoassets to UK consumers, including firms based overseas. Check where each financial product is authorized before you open a market to affiliates.
- Commercial reasons. The product may not exist in some markets, CPA rates often differ by country, and some geos consistently produce low-quality or fraudulent traffic.
In gambling and financial services, country rules also support responsible-marketing obligations: users in markets you can't serve should never see your offer presented as available to them.
Allow-lists vs block-lists
Country blocking comes in two shapes, and regulated offers should almost always use the first.
| Approach | How it works | Best for | Main risk |
|---|---|---|---|
| Allow-list | Only listed countries pass | Licensed offers: iGaming, trading, lending, crypto | Must be updated before you launch a new market |
| Block-list | Everything passes except listed countries | Unregulated offers excluding unavailable or high-fraud geos | New problem countries pass until you add them |
Keep one list per campaign rather than one per brand, because licenses, prices and payouts differ by product. A sportsbook licensed in three markets and a casino licensed in five should be separate campaigns with separate lists.
Blocking vs redirecting out-of-market clicks
What happens to the visitor after a country rule fires is a separate decision from whether the click earns a commission.
| Option | What the visitor sees | Pros | Cons |
|---|---|---|---|
| Record as blocked, no attribution | The normal landing page, without affiliate tracking | No broken experience; clean evidence; no commission | Your site must still restrict the service itself |
| Redirect to a fallback | A "not available in your country" page or another offer | Clear message; can monetize unrelated traffic | Routing to another regulated offer may itself be marketing into that market |
| Hard block | An error or blank page | Strict | Real customers on VPNs or traveling are turned away; data is often lost |
| Affiliate-side geo routing | The offer the affiliate's smartlink picks for that country | Affiliates monetize all geos | You depend on the affiliate's routing being correct |
The key principle: tracking-level blocking controls attribution and payouts, not access. A licensed operator still needs its own geolocation and verification checks at registration and deposit. Never treat a country rule on the tracking link as your licensing control.
Affiliates can stop much of the problem at the source. In Google Ads, for example, the "Presence or interest" option can reach people who have shown interest in your targeted locations without being there, while presence-only targeting avoids users in other locations. Require presence-only targeting for geo-restricted offers.
Log every blocked click
A blocked click you don't record is evidence you threw away. For each one, store:
- timestamp, affiliate, campaign and sub-ID;
- detected country and the rule that fired;
- traffic source and referrer;
- IP type, such as residential, mobile or datacenter.
The log does three jobs. It gives affiliates feedback they can act on, it reconciles their tracker's click counts with yours, and it exposes geo masking: a partner whose blocked clicks suddenly drop while datacenter or VPN traffic rises is probably routing around your rules.
Example: an affiliate sends 12,000 clicks to a campaign allowed only in Germany and Austria. The report shows 1,800 blocked as country prohibited, 1,100 of them from Switzerland. The fix is a targeting change on the affiliate's side, and the brand has the numbers to request it. All figures are illustrative.
How accurate is IP geolocation?
Accurate enough at country level for most traffic, and unreliable exactly where fraud and evasion happen.
- Country level is the strong layer. MaxMind, a major geolocation provider, estimates that its products identify country with 99.8% accuracy, but only about 66% of US IPs to the correct city within 50 km.
- VPNs, proxies and hosting locate the server, not the user. MaxMind says it may locate the VPN or hosting server rather than the end user. A UK visitor on a German VPN exit looks German to every country rule.
- Mobile networks and business VPNs blur location. The user may be anywhere in a wider region.
- Privacy relays keep the country. Apple's iCloud Private Relay overview says that even with its broader "Use country and time zone" setting, relay addresses still map to the user's original country and time zone.
- Some lookups fail. You need a rule for clicks with no country: fail open and review, or fail closed and accept losing some real users.
Because of these limits, layer country rules with other checks:
- Datacenter and hosting IP detection, which catches many commercial VPN exits; residential proxies are harder.
- A fraud score per click that combines IP type, velocity and browser signals.
- Conversion-time checks: billing country, phone country, document verification.
- Approval holds, so traffic that slipped through is rejected before payout.
Our guide to affiliate fraud detection covers geo masking and the other signals in more detail.
Contract terms for geo-restricted offers
Technical rules need a contractual backstop. In the affiliate agreement, list the permitted countries per campaign, require ad targeting to match them, prohibit routing traffic through VPNs, proxies or cloaking, and state that out-of-market conversions are not paid. For licensed gambling and financial offers, add the right to terminate promptly for marketing into unlicensed markets.
How MassPartner handles country blocking
Each campaign has allowed and blocked country lists, allowed and blocked traffic sources, and an optional daily click cap. Rules are checked on every click, whether it arrives through the optional redirect link or a direct tracking link read by the JavaScript tracking script.
- Blocked clicks earn nothing. A blocked click is stored with its reason, for example "Country prohibited", and gets no click ID, so no conversion can be attributed to it. The visitor still lands on the plain landing page: the platform controls attribution and commission, while your site controls who can use the service.
- Every block is visible. Blocked clicks appear with their status in click reports and CSV exports, so you can share the evidence with the affiliate.
- Unknown countries pass. If the lookup can't determine a country, the click is not blocked by country rules; datacenter detection and fraud scoring still apply to it.
- You can test before launch. In test mode, the tracking script reports in the browser console whether a real click from that visitor would be blocked and why, without recording anything.
Keep affiliate traffic inside your markets
MassPartner applies country and traffic-source rules per campaign, logs every blocked click, and holds conversions for approval before payout. See how it works for brands or start a 7-day free trial.
FAQ
What is the difference between geo targeting and country blocking?
Geo targeting is the overall practice of matching offers to the countries they are available in. Country blocking is the enforcement step: a rule that stops clicks from disallowed countries from being attributed or forwarded.
Should I block or redirect clicks from countries I can't serve?
For regulated offers, record the click as blocked and show a neutral page or your normal site without attribution, and let your own registration checks enforce availability. Redirect to another offer only when that offer is legal in the visitor's country.
Can affiliates bypass country blocking with a VPN?
Yes. IP geolocation finds the VPN server, not the user, so combine country rules with datacenter detection, fraud scoring, conversion-time checks and approval holds.
How accurate is IP-based country detection?
Very accurate for ordinary residential and mobile traffic: MaxMind estimates 99.8% at country level. Accuracy falls for VPNs, proxies, hosting ranges and business networks.
Why log blocked clicks instead of dropping them?
Logs show affiliates which geos to exclude, explain gaps between their click counts and yours, and reveal partners who keep sending out-of-market or masked traffic.