Phia, the AI-powered shopping browser extension co-founded by Phoebe Gates and Sophia Kianni, is back in the headlines — and this time the story isn't just about what the startup did, but about what its founders knew and when they knew it. According to new reporting, internal Slack messages and multiple sources indicate that Gates and Kianni were aware of alleged cookie-stuffing practices at Phia for months before the company publicly acknowledged any wrongdoing.
The revelation adds a new and more uncomfortable layer to a controversy that has already cost Phia its standing with a major affiliate platform, drawn scrutiny from independent researchers, and put a spotlight on the ethics of fast-scaling shopping-tech startups built on affiliate commission models.
What Happened: A Quick Recap of the Phia Cookie-Stuffing Saga
Phia launched as a free browser extension that promises to help shoppers find the best price across hundreds of thousands of retail websites, automatically applying discount codes and comparing deals in real time. Founded in 2025 by Phoebe Gates — daughter of Microsoft co-founder Bill Gates — and Sophia Kianni, the startup quickly built buzz thanks to a high-profile investor list, a popular companion podcast, and heavy media coverage of its young, ambitious founders.
That buzz turned into scrutiny in mid-2026. Phia was accused of a practice known as "cookie stuffing," which may have helped the product receive commissions and credit for sales it did not actually generate, according to a Bloomberg investigation. The fallout was immediate: the report sparked controversy and led to Phia's suspension from Impact.com, a leading affiliate and influencer platform.
Independent testing appeared to back up the claims. Recent independent testing by Bloomberg, Capital One Shopping, and researcher and consultant Ben Edelman found that Phia generated affiliate clicks on retail websites without meaningful user interaction. Investigators described a pattern in which, during the checkout process, Phia allegedly opened a background tab and inserted its own referral code, sometimes even overriding legitimate referrals from other publishers.
What Exactly Is Cookie Stuffing?
For readers unfamiliar with affiliate marketing mechanics, cookie stuffing (sometimes called cookie dropping) is a deceptive tactic that lets a company claim credit — and commission — for a sale it didn't actually influence.
- How it normally works: A shopper clicks a legitimate affiliate link, a tracking cookie is dropped in their browser, and if they buy something, the referring publisher earns a commission.
- How cookie stuffing works: A tool or script silently drops an affiliate cookie in the background — without any real click from the user — so that when a purchase happens, the stuffer collects the commission instead of the party that actually earned it.
- Why it matters: It diverts revenue away from the creators, bloggers, and publishers who did the actual work of driving a sale, and it violates the terms of service of essentially every major affiliate network.
This isn't a niche issue limited to Phia. Other companies have faced similar accusations in the past, most notably PayPal-owned Honey, which drew a wave of creator backlash and legal action over comparable claims involving last-click commission overrides at checkout.
The New Allegations: Founders Knew for Months
When the cookie-stuffing story first broke, Phia's public position was that the company had no idea anything was wrong until journalists came calling. That narrative has now fallen apart, according to follow-up reporting.
New reporting indicates that Gates and Kianni were aware their startup was engaging in cookie stuffing as far back as December — months before the practice became public — based on leaked internal Slack messages and multiple sources familiar with the matter.
That timeline directly contradicts Phia's earlier explanation. When the cookie-stuffing story first broke, a Phia spokesperson told the publication that the company was only made aware of the issue when reporters reached out to them. The newer account paints a very different picture, alleging that Gates and Kianni knew their startup was cookie stuffing as far back as December, based on leaked Slack messages and sources familiar with internal discussions at the company.
Perhaps more damaging than the timeline itself is the characterization of the underlying mechanism. Phia initially described the issue as an unintentional glitch. But according to the latest reporting, this was described as a purposefully built feature that could be switched on and off, with leaked Slack messages showing Gates and Kianni discussing cookie-stuffing practices with other executives and engineers. That distinction — a bug versus a deliberately engineered, toggleable feature — is the crux of why this story has re-ignited scrutiny rather than fading away.
Timeline of the Phia Cookie-Stuffing Controversy
| Timeframe | Development |
|---|---|
| Late 2025 / Early 2026 | Internal Slack conversations allegedly begin referencing cookie-stuffing behavior within Phia's tooling, with founders reportedly among those discussing it. |
| July 2026 | Bloomberg publishes its initial investigation. Phia is suspended from Impact.com while the platform reviews the claims. A Phia spokesperson calls the behavior an unintentional bug. |
| Early July 2026 | Phia says the feature causing misattributed commissions was removed, and states it began reviewing transactions and issuing refunds where warranted. |
| August 2026 | Follow-up reporting alleges Gates and Kianni knew about the practice for months prior, based on leaked Slack messages, contradicting the company's original "we only just learned" explanation. |
Phia's Response
Phia has not stayed silent through any of this. Company representatives have repeatedly pushed back on parts of the reporting while also acknowledging that changes were made to the product.
In response to the newest round of allegations, a Phia spokesperson pushed back on some of the claims, while saying the company would learn from the situation. Separately, in a statement to another outlet, a spokesperson said the features responsible for the misattributed commissions had already been pulled from the product and that the company was auditing past transactions and issuing refunds where affected parties were identified.
It's worth noting that the reported timeline of technical fixes doesn't fully answer the harder question raised by the leaked messages: not what Phia did to fix the issue, but how long the leadership team allegedly knew about it before acting.
Why This Matters Beyond Phia
1. Trust Is the Core Product of Affiliate-Based Startups
Shopping tools like Phia only work if users, retailers, and fellow affiliate marketers believe the platform is playing fair. A single credible allegation of commission hijacking can undercut years of brand-building, especially for a startup whose main value proposition is helping consumers get an honest deal.
2. The Optics Problem of Founder Involvement
Cookie stuffing allegations against any startup are damaging. Allegations that the founders themselves were aware of the practice — and discussed it internally — raise a different kind of concern: one about governance, disclosure, and whether public statements to press matched what leadership actually knew internally.
3. A Familiar Pattern in E-Commerce Tech
Phia isn't the first shopping tool to face this kind of scrutiny. Honey's cookie-related controversy shows that affiliate attribution disputes tend to escalate from public criticism to platform suspensions to, eventually, legal action if left unresolved. Whether Phia follows that same trajectory remains to be seen.
How Affiliate Marketers and Creators Are Reacting
Independent creators and affiliate marketers — the group most directly harmed by cookie stuffing, since it diverts commissions that would otherwise go to them — have been especially vocal. Complaints have circulated across creator forums and social platforms, with many arguing that a startup built around "never overpay" messaging for consumers should be held to an equally high standard when it comes to how it treats the publishers whose links and content help drive purchases in the first place.
- Affiliate networks generally require members to certify they will not artificially generate commissions through non-genuine clicks.
- Violating those terms can lead to suspension, clawbacks of paid commissions, and in more serious cases, legal exposure.
- Creators argue that even a temporary period of cookie stuffing can meaningfully distort revenue for smaller publishers who rely on affiliate income.
What Happens Next for Phia
As of this reporting, no lawsuits, regulatory actions, or criminal charges have been filed against Phia in connection with the cookie-stuffing allegations. The most concrete consequence so far has been the suspension from Impact.com while that platform completes its own review. That could change quickly if affected publishers decide to pursue legal remedies, or if regulators take an interest given the scale of Phia's user base and its high media profile.
For now, the company appears to be leaning on a familiar startup playbook: acknowledge the technical issue, promise an internal review, commit to refunds where appropriate, and hope the news cycle moves on. Whether that strategy holds depends heavily on what else surfaces from the internal communications now under scrutiny — and on how affiliate partners, investors, and users respond to the growing gap between Phia's original public explanation and what insiders reportedly knew all along.
Frequently Asked Questions
What is Phia?
Phia is a free browser extension and shopping assistant co-founded by Phoebe Gates and Sophia Kianni that compares prices across hundreds of thousands of retail sites and automatically applies discount codes for users.
What are Phia accused of doing?
Phia has been accused of cookie stuffing — a practice where affiliate tracking cookies are dropped without a genuine user click, allowing the company to claim commissions on sales it did not actually help generate.
Did Phoebe Gates and Sophia Kianni know about the cookie stuffing?
New reporting alleges that both founders were aware of the practice months before it became public, based on leaked internal Slack messages, contradicting the company's earlier statement that it only learned of the issue when journalists reached out.
Has Phia faced legal consequences?
As of this writing, no lawsuits, regulatory actions, or criminal charges have been publicly filed. Phia was suspended from the affiliate platform Impact.com pending review.
Has Phia responded to the allegations?
Yes. Phia has stated that the features causing misattributed commissions were removed, that it is reviewing past transactions, and that it is issuing refunds where warranted, while disputing some specifics of the reporting.
Related Topics: #Phia #PhoebeGates #SophiaKianni #CookieStuffing #AffiliateMarketing #StartupEthics #AIShopping #TechNews #ImpactCom #StartupAccountability