One of the best ways to secure your postback tracking from partner fraud is to use the offer whitelist feature. Using this feature, you can predefine a list of IP addresses for each offer to allow postbacks. Then if a postback is fired from an IP address outside this list, the conversion is rejected automatically.
To use this feature, ask your advertiser or IT team for a list of IP addresses they plan to fire postbacks from. Once you have this prepared, follow the instructions below to set up your offer whitelist.
Note: API whitelisting is a separate topic that uses the same term. For that, see our developer documentation on whitelisting for API authentication.
Enabling an Offer Whitelist
First, enable the offer whitelisting feature for your network. Go to Company > Customize Application > Settings > Tracking. On the page that appears, set the Offer Whitelisting setting to “Enabled” and click Save. Now you can turn on this feature for any offer in your network.
To turn on the whitelist feature for a specific offer, go to that offer’s page and find the Tracking panel. Click Edit, and set Offer Whitelist to “Enabled”. Once you save the setting, the Offer Whitelist panel will appear on the offer’s page:
Adding IPs to an Offer Whitelist
To whitelist an IP address for an offer, click Add in the Offer Whitelist panel. On the page that appears, select the Type of IP address you want to enter. Then enter the IP address to add to your whitelist. Click Save once you’re finished. Your newly added IP address then appears in the Offer Whitelist panel on the offer’s page:
To edit or delete whitelisted addresses, click Manage at the top of the panel. On the page that appears, use the Edit and Delete links in each row of the table to edit or delete that record.
IP Address Types
For offers using server postback conversion tracking, you can enter an individual IP address (like “192.0.2.0”), an IP range (like “192.0.2.0-255”) or a subnet IP (like “192.0.2.0/24”). For IP addresses, you can use commas to separate and enter multiple values at a time. The number of IP addresses to whitelist varies and typically ranges from 1 to 20. The offer whitelist features does not support IPv6 addresses.
For offers using pixel-based conversion tracking, you can add referrer domains to your whitelist. To do so, set the IP address Type to “Domain” when adding a new entry to the whitelist. Whitelisted domains are listed alongside whitelisted IP addresses on the offer’s page. For example, if you know an offer’s conversion pixel should fire from the example.com server, enter that domain in your whitelist:
Note: If your advertiser uses dynamic or constantly changing IP addresses for postbacks, we recommend setting up an advertiser security token instead.
TUNE IPs for Whitelisting
If your partners or partners want to whitelist TUNE for postbacks sent to their tracking systems, they can use the IP addresses below.