Affiliate and referral traffic: what the operator is liable for when someone else brings the visitor
The traffic that comes through someone else's page
Once the direct paid channels are closed off, a classifieds directory's traffic mix tends to fill in with partners: a blogger who writes city guides and links out for a commission, a forum moderator who gets a cut of every subscription their referral code brings in, a "best adult classifieds" roundup site that ranks the directory near the top, a cam-adjacent content creator who mentions the site to their own audience. None of this requires buying an ad anywhere, which is exactly why it survives where Google and Meta ad accounts do not. It is also, for many small directories, the first real growth channel that does not depend on winning an algorithm.
The trouble is that every one of those partners is, in the eyes of consumer protection law, making a claim about the product on the operator's behalf. A roundup blog that writes "every profile here is checked and real" is making exactly the kind of factual claim that gets scrutinized when it turns out to be untrue, and the operator did not type a word of it. It is tempting to treat that distance as protection: the operator did not write the sentence, did not host the page it appears on, and cannot be expected to police every partner's wording. Regulators do not accept that reasoning on its own, and there is a specific, decided case that explains exactly why not.
None of this is a reason to avoid affiliate or referral traffic. It is a reason to understand what running a network of paid promoters actually commits the operator to, because the rules that apply were not written with adult classifieds in mind and do not carve out an exception for it either. The same disclosure and monitoring duties that apply to a supplement company running an affiliate program apply here, word for word.
What "clear and conspicuous" actually requires
The rule at the center of this is the FTC's Endorsement Guides, a federal regulation at 16 CFR Part 255 that was substantially rewritten in 2023 for the first time since 2009. Its core requirement is simple to state and easy to get wrong in practice: whenever an endorser, which includes an affiliate marketer, a blogger, or anyone paid per signup or per sale, has a "material connection" to the business they are promoting that a reader would not otherwise expect, that connection has to be disclosed clearly and conspicuously.
"Clearly and conspicuously" is not a formality that a small line of gray text at the bottom of a page satisfies. The FTC's own published guidance walks through what actually counts: the disclosure has to sit where a reader is likely to see it, not below the fold or buried in a footer nobody scrolls to; it has to be written in plain language a reader will actually understand, not legal boilerplate; and it has to appear on every platform the claim itself appears on, not just on a linked-to page the reader may never open. A disclosure that technically exists somewhere on the site but that a normal reader would miss does not meet the standard, and the FTC evaluates this the same way whether the product being promoted is software, a supplement, or a listings site.
Commission specifically has to be called out, not folded into a generic disclaimer. The FTC's guidance gives a plain example: someone who reviews a product for free and also earns a commission on the affiliate links in that same review has two separate things to disclose, and disclosing one does not cover the other. For a referral program, that means an affiliate who writes "I get paid when you sign up through this link" close to the link itself is doing what the rule asks; an affiliate who never mentions payment at all, or who relies on a platform's built-in "paid partnership" tag and nothing else, is taking a risk the FTC has specifically flagged as insufficient on its own. Tagging the directory's brand in a post is not a disclosure of a financial connection either; the FTC's guidance says so directly, because a tag reads to most people as simple enthusiasm, not as an admission of payment.
The case that put the network operator on the hook, not just the affiliate
The reason this matters beyond a compliance checklist is a specific ruling that decided who actually pays when an affiliate's claim turns out to be false. In 2011 the FTC and the state of Connecticut sued LeanSpa, a weight-loss supplement seller, over a network of fake news websites built to look like independent journalism praising the product, when the sites were paid advertising the whole time. LeanSpa settled in 2014 and later returned money to consumers it had charged under a "free trial" that in practice billed $79.99 and renewed automatically.
What makes the case relevant here is who else got sued. The FTC amended its complaint to add LeadClick Media, the affiliate marketing network that had recruited and paid the people running those fake news sites, arguing that LeadClick itself, not just its affiliates, bore responsibility for the deception. In April 2015 a federal district court agreed and ordered LeadClick to hand over $11.9 million, the fee it had collected for running the campaign. LeadClick appealed, and in October 2016 the Second Circuit Court of Appeals upheld that finding, becoming the first federal appeals court to hold an affiliate network operator liable for deception carried out by its own third-party marketers rather than by the advertiser itself.
The court's reasoning turned on what LeadClick actually did, not merely on the fact that it ran an affiliate program. It recruited the specific affiliates involved, had the power to approve or reject the marketing sites they built, paid them directly, bought advertising space on their behalf to place the fake news pages in front of more readers, and gave them feedback on the content of those pages before they went live. LeadClick tried to claim immunity under Section 230 of the Communications Decency Act, the same law that shields platforms from liability for what users post, arguing it was just hosting someone else's content. The court rejected that defense specifically because LeadClick had participated in developing the deceptive content itself: reviewing it, shaping it, and paying to distribute it is not the same as passively hosting a listing a stranger uploaded, which is the same distinction that separates a user's own review from a badge the operator prints above it.
The lesson for a much smaller classifieds directory is the same lesson at a different scale. Recruiting affiliates, approving what they publish about the site, or giving them notes on how to phrase a claim are the exact actions a court has already found sufficient to make the recruiter, not just the writer, liable for what gets published. A directory that simply pays a flat referral fee and never touches what a partner writes sits in a meaningfully different position than one that hands affiliates suggested copy, edits their landing pages, or tells them which words convert best, because that second version of the relationship is what turned LeadClick from a payment processor into a co-defendant.
One detail is worth being precise about rather than borrowing wholesale: a 2021 Supreme Court decision, in a different case, narrowed the specific legal tool the FTC used to make LeadClick pay that $11.9 million, so a matching dollar figure is not automatically what a similar case produces today. What survived untouched is the liability finding itself, that a network operator who recruits, approves, and directs its affiliates' content is answering for that content as its own. State consumer protection law, which does not depend on the same federal tool, and a civil suit from a defrauded advertiser or user, do not share that limit either.
What a program that will not blow up actually looks like
The FTC does not expect an operator to personally proofread every partner's website, and it has published, in plain language, what it does expect instead: a training and monitoring program sized to the actual risk. Its own guidance for advertisers running any kind of affiliate network lists the same handful of elements regardless of industry. Tell partners in writing what they can and cannot claim about the product, specifically ruling out anything the operator cannot back up, such as promising a background check that was never actually run. Give them the exact disclosure wording expected, rather than a vague instruction to "mention the partnership somewhere." Check periodically, not just once at signup, what partners are actually publishing, because a program that only reviews an affiliate's site on the day they join misses everything that gets edited afterward. And act when something is wrong: a documented request to fix or remove a false claim, kept on file, is the difference between an isolated partner problem and a pattern the operator ignored.
A second, newer rule adds weight to the review side of this specifically. In August 2024 the FTC finalized a rule, effective that October, banning fabricated reviews, reviews from people with an undisclosed financial stake in the outcome, and fake indicators of popularity such as purchased followers, with civil penalties that adjust annually and ran above fifty thousand dollars per violation at the time it took effect. An affiliate incentivized purely by signups has every reason to post a glowing, fabricated review of the directory somewhere it can be seen, and under this rule that exposure now sits with whoever benefited from the fake review, not only with whoever typed it.
None of this requires turning down a good affiliate relationship. It requires a short written agreement that says, in plain terms, what a partner can claim, that any payment relationship must be disclosed on the same page as the promotion, and that the operator reserves the right to review and remove anything that does not meet those terms, paired with an actual habit of glancing at what active partners are publishing every month or two rather than only at signup.
What to do this week
Start with a list of every partner currently earning a commission, a referral credit, or a discounted rate for sending traffic to the directory, however informal that arrangement is. For each one, open the page where they promote the site and check two things: does it disclose the payment relationship in a way a visitor would actually notice, and does it make any claim about verification, safety, or authenticity that the operator cannot substantiate. Anything that fails either check needs a message today, not at the next contract renewal.
Where there is no written agreement at all, that is the next fix, and it does not need to be long. A page of plain terms covering what can be claimed, how the payment relationship must be disclosed, and that the operator can require a correction or end the relationship for a violation, does more real protection than a longer document nobody reads. Keep a dated copy of every correction request sent, the same habit that turns a compliance conversation from "we said so" into something with a paper trail behind it.
The one habit worth changing permanently is how much the operator touches an affiliate's actual copy. Suggesting a partner mention that signups come with a free trial period is very different from writing the sentence for them, reviewing every draft before it goes live, or telling them which claim performs best, and the second version is exactly the pattern a federal appeals court has already ruled makes the recruiter liable for what gets published. Pay for traffic, set clear rules for what can be claimed, and check the results periodically, but leave the actual writing to the partner being paid for it.
