Affiliate Marketing on WordPress: Disclosures, Compliance, and Best Practices

In April 2024, a client of mine watched her flagship affiliate site lose roughly 80% of its organic traffic in three weeks. The site had ranked comfortably for four years on a simple formula: monthly “best of” lists with affiliate links to ten products per category, light commentary, and aggressive interlinking. The March 2024 helpful content update arrived, and Google decided her content was indistinguishable from dozens of nearly identical lists ranking next to it. None of the products had been tested. The photos were stock images licensed from the manufacturers. The “reviews” were rewordings of the marketing copy on each product page.

Affiliate marketing is not dead. Lazy affiliate marketing is dead, and good riddance. The sites that survived that update — and the ones still launching profitably in 2026 — share a common pattern: real testing, real disclosure, real opinions, and a clean compliance posture that protects both the reader and the publisher. This guide walks through what that looks like on WordPress, starting with the legal layer that most affiliate site owners get wrong, then moving through networks, content patterns, and the operational details that separate durable affiliate sites from the ones one algorithm change away from extinction.

Start with the legal layer, not the plugins

Most guides to affiliate marketing on WordPress open with a list of plugins. That is the wrong place to begin. The biggest source of avoidable risk for affiliate publishers is non-compliance with disclosure law, and unlike SEO, this is not a place where you can iterate your way out of trouble. A consent decree from the Federal Trade Commission is materially worse than a deindexed page.

The governing rule in the United States is 16 CFR 255 — the FTC’s Guides Concerning the Use of Endorsements and Testimonials in Advertising. The 2023 revision tightened the language around what counts as a “clear and conspicuous” disclosure of a material connection. If you receive any compensation, free product, commission, or other benefit in exchange for an endorsement — and an affiliate commission absolutely qualifies — you must disclose that connection in a way the reader cannot miss.

The standard the FTC actually applies has three elements that affiliate publishers consistently underestimate:

• Above the fold and near the recommendation. A disclosure at the bottom of a 3,000-word post is not adjacent to the recommendation in any meaningful sense. The 2023 guidance specifically calls out the inadequacy of footer-only and end-of-post disclosures.
• Plain language a reasonable reader will understand. “This post contains affiliate links” is fine. “Material connection per 16 CFR 255” is not.
• Same form as the surrounding content. A disclosure in 8-point gray text fails because it is visually subordinate. Use the same body font and color as the rest of the post.

Penalties have ranged from $0 (most warning letters) to $50,000 per violation in extreme cases involving systemic non-disclosure. The realistic risk for a small publisher is not a $50,000 fine; it is a warning letter that becomes a public record and a brand problem. Either way, fixing your disclosures is a one-time job that takes a weekend, and skipping it is irrational.

EU, UK, and Germany: similar in spirit, stricter in practice

If your audience extends beyond the US, the rules tighten rather than loosen. The UK’s CAP Code, enforced by the Advertising Standards Authority, imposes similar “clear identification” requirements. The EU’s Unfair Commercial Practices Directive is harmonized across member states and uses the same general standard.

Germany is the outlier worth flagging. German courts and the Wettbewerbszentrale enforce a stricter line where commercial content frequently must be tagged with Werbung or Anzeige at the top of the post. If your site reaches a German audience meaningfully, talk to a German lawyer; the consensus best practice is to label affiliate posts as Werbung at the top regardless.

Disclosure structures that actually pass review

There are three places to put disclosures on a WordPress site, and the answer to which to use is “all three.” The combination is what FTC reviewers look for.

Per-post disclosure (the load-bearing one)

A clear, plainly worded disclosure at the start of every post that contains affiliate links. This is the only one of the three the FTC has explicitly accepted as satisfying the “clear and conspicuous” standard on its own. Place it after the headline and directly after the lead paragraph. Use your normal body text styling. Do not collapse it into a tooltip or hide it behind a click.

Sitewide footer notice

A persistent line in the footer like “Some links on this site are affiliate links. Read our full disclosure.” Useful for the small percentage of pages that aren’t individual posts. On its own it is not sufficient, but it is a fine belt-and-suspenders addition.

Dedicated /disclosures page

A standalone page explaining the affiliate relationships you maintain, which networks you use, and how you decide what to recommend. This serves as the link target for the per-post and footer disclosures, documents your editorial standards for legal review, and signals integrity to a reader who wants to dig in. Link to it from the footer and from your About page.

A sample disclosure template

That language clears all three of the FTC’s elements: it identifies the relationship, it is in plain English, and when placed at the top of a post in body text it is visually equivalent to the rest of the content. Adapt the brand name and the linked page; otherwise leave it alone.

Affiliate, sponsored, and editorial: three things, three different rules

The most common mistake I see on otherwise serious sites is treating affiliate, sponsored, and editorial coverage as the same thing. They are not, and the distinctions matter legally and for SEO.

• Affiliate link. A link where you earn a commission if the reader purchases. The brand has no editorial input. Disclosure: required.
• Sponsored content. A brand has paid you for placement, mention, or a positive review. Disclosure: required, with explicit “Ad,” “Sponsored,” or “Paid partnership” labeling, and links must use rel="sponsored".
• Editorial review. Independent coverage with no payment relationship. Disclosure: still required if affiliate links are present, even if added after the fact.

Mixing these without distinction is the fastest way to lose reader trust and to draw an FTC inquiry. Sponsored content presented as editorial review is the exact pattern the FTC’s 2023 guidance was designed to address.

Networks worth considering, with honest assessments

The affiliate network landscape has consolidated since 2020, and the rate environment has gotten worse. Here is how I would rank the main options for a publisher building today:

Amazon Associates

The default, but a worse default than it used to be. Amazon cut commission rates significantly in April 2020, and follow-on adjustments through 2024 left most categories at 1–4%. The 24-hour cookie window is short and getting shorter in practice as mobile-app conversions don’t always pass cleanly. Useful when your traffic skews toward high-volume, lower-priced items, less useful when you’re recommending a $2,000 mattress and getting paid 3% on a 24-hour cookie.

Impact

Enterprise-grade infrastructure with the cleanest tracking and reporting in the space. Major brands run their programs on Impact, and onboarding is professional. Worth signing up even if you only end up using one or two programs.

ShareASale (now Awin)

Awin acquired ShareASale and operates them as a combined platform. Strong mid-market network with deep representation in WordPress-adjacent niches: hosting, themes, plugins, software tools. Approval is reasonable, payouts are reliable. A solid second-tier choice after a brand-direct program.

Commission Junction (CJ)

Large enterprise advertisers, often the same brands that run on Impact. Higher payouts in some categories, slower onboarding, more bureaucratic. Worth applying to if a specific advertiser only runs there.

Brand-direct programs

Frequently the highest-paying option and almost always undervalued by new affiliates. B2B SaaS programs commonly pay 20–40% recurring commission — an order of magnitude better than Amazon’s 1–4% one-shot. Hosting brands, project management tools, design SaaS, accounting software: rates are good, cookie windows are long, and the brands often want a relationship rather than a transaction. The downside is you have to negotiate and manage each one separately.

The SEO layer: rel attributes and what Google actually wants

Google introduced rel="sponsored" in 2019 and updated its link-attribute guidance to support a more granular taxonomy:

• rel="sponsored" — for paid relationships, including affiliate links. Officially the most accurate attribute.
• rel="nofollow" — the long-standing attribute for untrusted links. Still works for affiliate as a fallback; Google explicitly accepts it.
• rel="ugc" — for user-generated content links. Use it on comment sections.

For affiliate links, rel="sponsored" is technically correct and rel="nofollow" is acceptable. What Google does not accept — and treats as a violation of its spam policies — is do-follow affiliate links that pass PageRank to the merchant. This has caused manual actions in the past and continues to be a documented risk. If you run a link-cloaking plugin, make sure the redirect is also marked correctly; some plugins forget the rel attribute on the outbound side.

Review post integrity: the only durable competitive moat

The 2024 helpful content update made one thing clear: Google can tell the difference between someone who has used a product and someone who has lifted the manufacturer’s feature list. Sites that rebounded share a set of properties that are legitimately hard to fake.

• You actually used the product, ideally for at least 30 days. If you didn’t, you say so plainly — “based on hands-off research and customer interviews” is a defensible position; pretending you did is not.
• You have original photographs, screenshots, or video. Stock photos are correlated with thin content for a reason.
• You compare against alternatives, including ones you don’t earn from.
• You list pros and cons honestly, including cons that might cost you the sale. This increases conversion because it builds trust.
• If you use Product or Review structured data, the reviews are real and the rating reflects your actual judgment, not a number you picked to win the rich snippet.

Cloaking and link management plugins

Two plugins dominate this category and both are reasonable choices. Pretty Links covers the basics in its free version: /go/product redirects, click tracking, basic reporting. The pro version adds A/B testing and richer reporting. ThirstyAffiliates has a similar feature set with more emphasis on link organization and a Geolocation add-on for routing to regional Amazon storefronts. Pick whichever interface you prefer; both are well-maintained.

One critical clarification: link cloaking does not change your disclosure obligations. The FTC’s standard is about the user’s experience — whether a reasonable reader would understand the relationship — not about the URL structure. Hiding amazon.com behind yoursite.com/go/product does not exempt you from disclosure. It just makes your links easier to manage and lets you change destinations later without breaking inbound traffic.

Content patterns that don’t work anymore

The casualties of the helpful content updates are not random. They cluster around a recognizable set of patterns that Google has been steadily training itself to identify.

• Thin “Best X of 2026” lists with no real testing, three sentences per product, and the same affiliate-friendly enthusiasm for every entry.
• AI-generated comparison tables assembled from manufacturer specs without any hands-on perspective. The tables themselves are fine; the absence of original judgment around them is the problem.
• Listicles where every product is “great” and the differentiation is artificial — “best for beginners,” “best for professionals,” “best on a budget,” with the same product family rotating through each slot.
• Reviews lifted from the manufacturer’s site with light rewording, no photos of the actual unit, and no negatives. These are the easiest pattern for an algorithm to catch.

Content patterns that still work

The flip side is encouraging. The patterns that survived the update — and that continue to convert well in 2026 — reward exactly the kind of work that AI cannot easily replicate.

• Deep single-product reviews with original photos and at least 30 days of use. These outrank thin listicles routinely now.
• Head-to-head comparisons with explicit testing methodology. “Here is the bench setup; here are the metrics; here are my notes after six weeks” is hard to fake and easy to trust.
• Buyer’s guides written from the perspective of having helped real buyers. If you have answered the same five questions over and over, you have a buyer’s guide. It will read like one.
• “What I’d buy if I were starting over” personal-experience pieces. These convert disproportionately well because they bypass the listicle frame entirely.

The do/don’t table

Do	Don’t
Show your testing process explicitly	Hide affiliate relationships behind “independent review” framing
Use real, original photos of the actual product	Use the manufacturer’s stock images and call it a review
List honest cons, including ones that might lose the sale	Sugarcoat or omit downsides to protect conversion
Update rankings annually with fresh testing	“Set and forget” lists from three years ago
Use rel="sponsored" on affiliate links	Pass PageRank with do-follow affiliate links
Disclose at the top of every post with a link	Bury disclosure in the footer or About page
Compare against alternatives you don’t earn from	Stack only against worse paid options

Common mistakes

The patterns below show up over and over on otherwise competent sites. Each is a self-inflicted wound.

Footer-only disclosure

Still the most common compliance gap. The FTC has explicitly said this fails the “clear and conspicuous” standard, yet the majority of mid-sized affiliate sites I audit still rely on it alone. Add the per-post disclosure described above; this fix takes a few hours and protects you from the only category of risk that cannot be cured by traffic.

Do-follow affiliate links

Sometimes deliberate, more often the result of an outdated theme or a plugin that forgot to set the rel attribute. Audit your top 50 affiliate links and confirm each has rel="sponsored" or rel="nofollow". Google’s spam team has historically issued manual actions for consistent do-follow affiliate patterns.

Stuffing every post with affiliate links

If 90% of your internal links go to affiliate destinations, your posts read as commercial copy regardless of how well-written they are. Mix in legitimate non-monetized references. The goal is a post that would still be useful with the affiliate links removed.

Outdated reviews with broken links and stale prices

Affiliate reviews decay. Products get discontinued, prices change, links 404. Every six months, run a link-checker and flag the dead ones. Either update them with current information or remove them.

Mixing affiliate and sponsored content without distinction

If a brand pays you for placement, that’s sponsored — the disclosure language and rel attribute differ from a plain affiliate link. Mixing the two is the FTC’s favorite pattern to enforce against.

What not to monetize

Some categories are not worth the effort, and a few are actively trust-eroding:

• Cheap dropshipping in a quality-focused niche. The commission is fine; the trust damage is permanent.
• Broad finance and broad health if you have no edge. The affiliate competition is brutal, the YMYL ranking bar is high, and the regulatory exposure is non-trivial.
• Products you wouldn’t recommend to a friend. The single best filter. If you wouldn’t put your name on it in person, don’t put it on your site for a 4% commission.

The best affiliate income comes from posts you’d write even if there was no commission. The worst comes from posts written specifically because there is one.

Accounting and tax basics

In the United States, networks must issue a 1099-NEC when they pay you $600 or more in a calendar year. Track payments yourself; relying on the network to send forms is unreliable. Internationally, most jurisdictions have similar reporting thresholds for self-employment income — the UK’s self-assessment regime, Canada’s T2125, and EU equivalents all expect you to report affiliate income as business or self-employed income. Sales tax and VAT are generally not your problem; the merchant handles them. Consult an accountant if your affiliate income is meaningful.

What to do this week

A short list of concrete actions to ship in the next seven days. None require new tooling.

1. Audit your top ten affiliate posts for disclosure compliance. Pull top revenue posts from your network dashboard, open each one, and confirm there is a clear disclosure above the fold. If not, add one today.
2. Add a per-post disclosure block as a reusable Gutenberg block or theme snippet so new posts default to compliant.
3. Convert any do-follow affiliate links to rel="sponsored". A one-time fix.
4. Update at least one outdated review with fresh testing, a current price, and a working link. Pick the one with the highest historical revenue; the ROI on revising a top-decile post is the best content work you can do.
5. Set a recurring six-month reminder to run a link-check and price-staleness pass across your top 50 posts. Most affiliate revenue erosion is a slow drip of dead links and stale information, not a sudden algorithm hit.

Affiliate marketing in 2026 looks different than it did five years ago. The arbitrage of thin content has closed. The rate environment is worse on commodity platforms and better on direct programs. The compliance bar is higher, and the algorithmic bar is much higher. For the publishers actually doing the work — testing products, taking original photos, writing honest reviews, keeping disclosures clean — the competitive landscape has gotten dramatically friendlier. The lazy operators have left. Lean into that.