Phoebe Gates's Shopping App Phia Faces Deepening 'Cookie Stuffing' Scandal After Bloomberg Report

Verified key facts

• A Bloomberg investigation, with Capital One Shopping and researcher Ben Edelman, alleged that Phia overrode other affiliates' referral codes at checkout and substituted its own, taking credit for sales it did not drive.
• Bloomberg reported on 11 August that co-founders Phoebe Gates and Sophia Kianni knew about the practice for at least seven months, going back to December, per internal communications and people with knowledge of the matter.
• When first approached, the company reportedly said it was 'made aware' of the issue within the previous 24 hours; in July a spokesperson had described the behaviour as a bug.
• Bloomberg reports the mechanism was a purpose-built feature that could be switched on and off, contradicting the bug characterisation.
• Phia says any features causing misattribution were removed on 7 July and that the company will 'learn from this'; TechCrunch first reported the accusations on 10 July.

From bug to feature

The allegation that transformed a summer embarrassment into a governance crisis for Phia is a simple one: the behaviour was built on purpose. Bloomberg's investigation, conducted with Capital One Shopping and the researcher and consultant Ben Edelman, alleges that the AI shopping tool co-founded by Phoebe Gates and Sophia Kianni systematically overrode other affiliates' referral codes at checkout and inserted its own, a practice the industry calls cookie stuffing, and that the capability was a deliberately engineered feature that could be toggled on and off.

That directly contradicts the company's July position, when a spokesperson characterised the misattribution as a bug after TechCrunch first reported the accusations.

What the founders allegedly knew, and when

The most damaging element of Bloomberg's 11 August report concerns timing. When first approached, the company reportedly said it had been 'made aware' of the situation within the previous 24 hours. According to internal communications and people with knowledge of the matter cited by Bloomberg, the founders had in fact known about the practice for at least seven months, dating back to December.

TechCrunch's follow-up coverage put the discrepancy plainly in its headline: the founders reportedly knew for months. Phia has responded that any features causing misattributions were removed on 7 July and that the company would 'learn from this'.

Why cookie stuffing matters

Affiliate marketing runs on attribution: the publisher whose link produced a sale earns the commission. Cookie stuffing breaks that economy by claiming credit falsely, which means the injured parties are not abstract; they are the creators, publishers and comparison sites whose commissions were redirected, and the merchants who paid for referrals they never received.

It is also legally hazardous terrain. US prosecutions and FTC actions have treated large-scale attribution fraud as wire fraud or deceptive practice in past cases, which is why Inc.'s coverage framed the question as what happens next for a company now on notice.

A high-profile cap table watches

Phia arrived with unusual visibility for a consumer shopping startup: Gates is the daughter of Bill Gates and Melinda French Gates, Kianni built a public profile in climate advocacy, and the pair had spent months on the founder-interview circuit describing a company built without parental help. That profile cut both ways this week, as coverage from Fortune to Futurism attached the founders' names directly to the allegations.

The startup's investors and retail partners now face the standard scandal calculus: whether remediation announced in July, plus whatever governance changes follow, is enough to keep the product on their integration lists.

The company's path from here

Phia's stated position, that the offending features are gone as of 7 July and the company will learn from the episode, is the minimum viable response, and the reporting that followed has raised the bar. Independent verification of the fix, restitution for misattributed commissions and a credible account of the December-to-July gap are the obvious next steps if the company wants the story to end.

Whether regulators or affected affiliates force those steps through inquiry or litigation is the open question; none had been publicly announced as of this week.

How the scheme allegedly worked

Affiliate attribution runs on browser cookies: click a creator's link, and their tag rides to checkout, earning the commission if you buy. The investigation alleges Phia's browser extension overwrote whatever tag was present with Phia's own during checkout, regardless of whether Phia had played any role in the purchase decision, the textbook definition of cookie stuffing.

The practice's history is instructive: the most famous US prosecution, involving eBay's affiliate programme, ended in federal wire-fraud convictions more than a decade ago. The mechanics have evolved from hidden iframes to browser extensions, but the legal theory, taking payment for referrals never made, has not changed.

The verification problem for merchants

The affected parties with real leverage here are merchants and affiliate networks, which pay the commissions and set the enforcement rules. Networks routinely audit for last-click hijacking, and a public report naming a specific extension gives every programme manager cause to re-examine their attribution logs going back months.

Clawbacks, network expulsion and contractual claims are the industry's standard remedies, and they proceed regardless of any regulatory interest. For a startup whose product depends on merchant goodwill and network access, that private enforcement may bite faster than any public inquiry.

The lesson for the AI-shopping gold rush

Phia's crisis lands in the middle of a land grab for AI shopping agents, where dozens of startups race to sit between consumers and checkout pages. That position is precisely where attribution is decided, which makes the integrity question generic to the category, not specific to one founder's surname.

The episode is a warning about the category's incentives: when your business model lives at the moment credit is assigned, the temptation to assign it to yourself is structural. The companies that survive scrutiny will be the ones that can prove they resisted it.

Sources

• Bloomberg - Phia co-founders knew app took credit for sales it didn't drive
• TechCrunch - Founders reportedly knew for months
• TechCrunch - Original cookie-stuffing accusation
• Fortune - Phoebe Gates Phia report