Back to overview
Lesson 3 of 6

Tracking and Attribution Without Full KYC

7 min read

The KYC Spectrum in Crypto Platforms

Traditional affiliate tracking assumes a known user. A player registers with an email, verifies their identity, and their activity is tied to a stable account ID that flows through the tracking system. Crypto platforms often operate on a different model -- players may register with only a wallet address, or complete KYC only when hitting withdrawal thresholds.

This creates a tracking challenge. If a player deposits via a wallet address, plays for two weeks, and only completes KYC when withdrawing, the affiliate tracking system must attribute that activity to the referring partner from the moment of first interaction -- not from the moment identity is confirmed.

KYC LevelWhat Is CollectedTracking Implications
No KYCWallet address onlyAttribution must rely on session + wallet correlation
KYC-lightEmail + wallet addressEmail serves as stable identifier, wallet as deposit tracker
Progressive KYCEmail at signup, ID at withdrawal thresholdTwo-phase attribution -- session-based then ID-confirmed
Full KYCID verification at registrationStandard tracking works -- account ID as primary key

Wallet-Based Attribution

When a player connects a wallet to a crypto casino, that wallet address becomes a tracking identifier. The affiliate system records which partner referred the session where the wallet was first connected. Subsequent deposits from that wallet are attributed to the same affiliate, even across sessions.

The limitation is that players can use multiple wallets. A single player might connect a MetaMask wallet on desktop and a Trust Wallet on mobile. Without additional correlation signals (device fingerprint, IP clustering, behavioral patterns), these appear as two separate players -- potentially attributed to different affiliates.

Wallet-based attribution alone is not sufficient for accurate tracking. Combine wallet addresses with device fingerprinting, session identifiers, and behavioral signals to build a composite player identity. This reduces duplicate attribution and multi-account fraud.

S2S Postback Architecture for Crypto

Server-to-server postback tracking is essential for crypto platforms, even more than for traditional operators. Cookie-based tracking breaks when players switch between wallet apps, browser extensions, and platform interfaces. S2S postbacks fire directly from the operator server to the affiliate platform when a qualifying event occurs -- registration, first deposit, or revenue milestone.

  • Registration postback: Fires when wallet is connected or account is created -- includes click ID and affiliate reference
  • First deposit postback: Fires when first crypto deposit is confirmed on-chain -- includes deposit amount in both crypto and fiat equivalent
  • Revenue postback: Fires at configurable intervals with accumulated NGR -- denominated in the agreed calculation currency
  • Withdrawal postback (optional): Fires when player withdraws -- useful for RevShare models that deduct withdrawals from NGR

Handling On-Chain Confirmation Delays

Crypto deposits are not instant. A BTC transaction requires 3-6 confirmations before most platforms credit the player account. An ETH deposit might take 2-5 minutes. This delay affects when the FTD postback fires and when the affiliate sees the conversion in their dashboard.

Operators should fire the deposit postback only after sufficient on-chain confirmations, not at broadcast time. Premature postbacks create phantom conversions if a transaction fails or is reversed. Document the confirmation threshold in your affiliate agreement so partners understand the reporting delay.

Set your deposit postback to fire after the platform credits the player account (post-confirmation), not when the transaction is first detected in the mempool. This prevents phantom conversions and aligns affiliate reporting with actual funded accounts.

Key Takeaways

  • Crypto platforms operate on a KYC spectrum -- your tracking architecture must handle wallet-only users through to fully verified players
  • Wallet addresses serve as tracking identifiers but must be combined with device fingerprinting and behavioral signals to prevent duplicate attribution
  • S2S postback tracking is non-negotiable for crypto -- cookie-based tracking breaks across wallet apps and browser extensions
  • Fire deposit postbacks only after on-chain confirmation, not at broadcast time, to prevent phantom conversions