Google updates Chrome extension rules to ban affiliate link injection without user action or benefit

Google Chrome dark mode
Image Credit: TechRadar (Image credit: Future)

  • The Honey extension was recently accused of being a scam
  • Google responded by updating its extension rules
  • Some people believe the search engine giant took things too far

Earlier this week, Google updated the Chrome extension rules for affiliates, basically telling its users that without tangible benefit, or user action, affiliate links cannot be placed. Although not specifically stated, by large the community agrees that PayPal’s Honey extension forced Google’s arm here.

For those with shorter memory spans, two months ago a YouTuber named MegaLag published an in-depth investigation on how the Honey browser extension was essentially engaged in referral jacking.

Honey is an extension that was advertised as a coupon hunter, finding the best deals for people looking to shop online. However, researchers argued that it was swapping out referrals from the influencers that were promoting the extension, with its own, basically robbing the people of their commission.

Monopoly abuse, or UX protection?

Now, Google’s new extension rules clarify what is allowed, and what is not: “Affiliate links, codes, or cookies must only be included when the extension provides a direct and transparent user benefit related to the extension’s core functionality. It is not permitted to inject affiliate links without related user action and without providing a tangible benefit to users.”

“Some common violations include: Inserting affiliate links when no discount, cashback, or donation is provided," and, "An extension that continuously injects affiliate links in the background without related user action.”

This is apparently what Honey was doing. In some cases, even if it didn’t find any discount coupons, it would still swap out the referrals. Google and PayPal are yet to comment on the new development.

While consumer protection is always a good thing, not everyone agrees with Google here. In the comment section of The Verge’s article, there are people who believe Google is using its browser monopoly position to “strong-arm” Honey, and that it should not be the one deciding if someone else’s business model is viable or not. While probably a strong argument, other people pointed out that Google has the right to decide what kind of user experience it creates for its user base.

Via The Verge

You might also like

TOPICS

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Read more
Browser
The future of mobile browsers: time for a new model?
A finger touching the google chrome icon in the Windows 10 start menu
A new Chrome browser highjacking attack could affect billions of users - here's how to fight it
Fingerprint
Profit over privacy? Google gives advertisers more personal info in major ‘fingerprinting’ U-turn
Google Chrome with Christmas theme in Windows 11
I've used Edge, Firefox, and Opera, and yet after ten years in tech journalism, I still come back to Chrome
chrome firefox extensions
Google Chrome extensions hit in major attack - dozens of developers affected, so be on your guard
Woman shocked by online scam, holding her credit card outside
Google Chrome is testing a new AI tool that scans for scams to help save you from online trickery
Latest in Security
Data Breach
Thousands of healthcare records exposed online, including private patient information
China
Juniper patches security flaws which could have let hackers take over your router
Representational image depecting cybersecurity protection
GitLab has patched a host of worrying security issues
Ai tech, businessman show virtual graphic Global Internet connect Chatgpt Chat with AI, Artificial Intelligence.
AI agents can be hijacked to write and send phishing attacks
China
Volt Typhoon threat group had access to American utility networks for the best part of a year
Abstract image of cyber security in action.
MassJacker malware targets those looking for pirated software
Latest in News
Google Pixel 8a in aloe green showing
Google Pixel 9a benchmark link teases the performance of the upcoming mid-ranger
Quordle on a smartphone held in a hand
Quordle hints and answers for Monday, March 17 (game #1148)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Monday, March 17 (game #379)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Monday, March 17 (game #645)
Apple iPhone 16 Pro HANDS ON
Leaked iPhone 17 dummy units may have given us our best look yet at all four models
A super close up image of the Google Gemini app in the Play Store
It's official: Google Assistant will be retired for phones this year, with Gemini taking over