The Psychology Behind Referral Codes: Why They Work and How to Use Them Effectively

The psychology behind referral codes: why they work and how to use them effectively

A referral code is a commercial incentive attached to a personal recommendation. It may be genuinely useful: it can give a new customer a discount, credit, points, a fee waiver or another benefit, while rewarding the existing customer who shared it. It can also make an unfamiliar product feel safer, more popular or more urgent than the available evidence warrants. The sensible approach is therefore simple: choose the product first, then decide whether a correctly understood referral reward improves an already suitable choice.

This UK guide is for people receiving or sharing codes, and businesses designing programmes. It covers trust, social proof, reciprocity, incentives, friction and loss aversion; ethical design; UK consumer-protection, advertising and privacy expectations; reviews; and financial-product cautions. It is general information, not legal, tax, investment or data-protection advice. Terms, eligibility and rewards vary, so read the live offer and product terms before acting.

What a referral code is — and what it is not

A referral programme normally gives an existing customer, the referrer, and/or a prospective customer, the referee, a benefit after stated conditions are met. The code, link or in-app journey lets the business attribute a qualifying sign-up, purchase or other action to the referrer. Rewards can take many forms: cash, account credit, points, a discount, a gift card, a fee waiver or entry into a draw. The form matters. A credit that expires, a discount that requires a minimum spend and a cash payment of the same headline amount do not have the same value.

A referral is not the same thing as an independent recommendation. A friend may sincerely like a service and still stand to gain if you join. The reward does not make the recommendation dishonest, but it creates a relevant interest that should be visible. Nor is a referral code a certificate of quality, safety, regulatory status, suitability or the best price. It is a route into an offer with conditions.

Referral programmes also differ from ordinary word of mouth, affiliate marketing and recruitment-led schemes. An unrewarded private comment from a friend may simply be word of mouth. Once a person is paid or rewarded according to clicks, sign-ups, sales or investments, the communication has a commercial dimension. The ASA notes that affiliate marketers paid according to the interest or sales they generate are effectively secondary advertisers, and responsibility can be shared with the brand.^[8] A public post with a trackable link, a promotional code or a reward can need a clear disclosure even where the writer usually sounds editorially independent.

Finally, do not use “referral” to soften a scheme whose principal attraction is recruiting more participants rather than buying or using a real product. The CMA identifies operating or promoting a pyramid promotional scheme as a banned practice in its unfair-commercial-practices guidance.^[1] A normal referral incentive should follow a genuine customer transaction or qualifying use; it should not pay people mainly for bringing in a chain of recruits.

Why referral codes feel persuasive

Referral offers commonly combine a modest economic benefit with a social relationship and an easy next step. That combination can reduce uncertainty and attention costs. It can also introduce pressure or obscure a conflict of interest. Behavioural science is most helpful here when it describes the forces in play, rather than claiming that people have no agency. A recipient can pause, compare and decline. A responsible business can design for understanding rather than merely for completion.

Trust: a relationship can lower the cost of investigating

People often give more attention to a suggestion from someone they know than to a display advert. That is understandable. The sender may have used the product, may know something about the recipient’s needs, and may be easier to question than an anonymous advert. In this limited sense, the relationship can transfer enough trust to make an unfamiliar option worth investigating.

That is not the same as a guarantee. The referrer may have different priorities, income, location, product knowledge or tolerance for risk. They may have had a lucky or unusually smooth experience. They may be sharing because the reward is attractive. “My friend uses it” is a screening signal, not a substitute for checking the full price, service quality, cancellation rights, data use or risk.

One study of roughly 10,000 customers at a German bank found higher contribution margin, retention and customer value among referred customers in that setting, with at least a 16% average value difference. Its results varied by segment and do not automatically apply to UK retail, apps or investments.^[15]

Practical rule: trust the person enough to investigate, not enough to skip the terms. Ask what they actually use, what it costs after any introductory period, what they dislike and whether they receive a reward if you qualify.

Social proof: popularity can inform, but it can also distort

Social proof is the tendency to use other people’s behaviour as one input when making a choice, especially where the product is unfamiliar. A message saying that a colleague has used a service, a referral page displaying a real customer count or a review from a verified purchaser may reduce uncertainty. The Behavioural Insights Team’s EAST framework captures the broad idea: actions can be made Easy, Attractive, Social and Timely.^[14] “Social” does not mean that every popularity claim is meaningful. It means social information can influence attention and choice.

The CMA’s unfair-commercial-practices guidance uses urgency-style sales pop-ups to illustrate why presentation matters. Even a literally true statement about recent sales can be misleading in context if it suggests pressure to buy when stock is not genuinely limited.^[1] Treat popularity as a prompt to learn more, not as proof that you should join.

Reciprocity: a shared reward can feel fair

Many programmes give something to both people. A two-sided offer can feel more like a shared benefit than a bounty paid solely to the sender. This can engage a familiar norm of reciprocity: one person is passing along a possible benefit, and the recipient may feel that using it is a reasonable way to return the favour. The shared format can also make a commercial recommendation feel less like a sales pitch.

Perceived fairness is not the same as economic equivalence. A reward may be unequal in value, paid at different times or subject to different conditions. A referee may have to make a minimum purchase, hold an account, avoid a return or pay a fee, while the referrer receives a reward after a different event. A programme is not made fair simply by using the word “both”. The headline needs to say who gets what, in what form and after which action.

For individuals, the ethical response is straightforward: say that you benefit as well. “I receive a reward if you qualify; you may receive this offer too. Please check the terms and use it only if it suits you” is more respectful than presenting the code as a no-strings gift. For businesses, visibly explaining any asymmetry protects trust better than burying it in a long terms page.

Incentives: they focus attention, but they change the meaning of a recommendation

An incentive makes a referral memorable. It may prompt a customer to share, a recipient to open the link or both people to complete a condition they might otherwise postpone. That is the commercial purpose of the programme. It can be legitimate where the product offers independent value and the terms are clear.

At the same time, an incentive changes how a recommendation should be interpreted. The recipient deserves to know that the sender has an interest in the outcome. Hiding the reward can make a commercially motivated message look like a wholly independent endorsement. The issue is not that people must never earn a reward; it is that the context should be available before the recipient decides how much weight to give the recommendation.

This distinction is particularly important for reviews. Asking a customer to share a referral link is not the same as asking for a five-star review. The CMA’s guidance addresses fake reviews and concealed incentivised reviews, and says businesses publishing reviews or review information should take reasonable and proportionate steps to prevent and remove prohibited or misleading material.^[12] Do not offer a benefit only for positive feedback, write a review on someone else’s behalf or use referral sign-ups as if they were independent satisfaction ratings.

Friction and salience: convenience can be helpful or one-sided

Friction means the effort required to take an action. A referral link can remove helpful friction: it may take a willing person to the correct page, avoid a manual code-entry error and record the attribution. A reminder after a genuinely positive customer experience can be timely. These are ordinary, often useful design choices.

The problem arises when joining is easy but understanding, declining, cancelling, withdrawing consent or getting support is hard. The CMA describes excessive or unjustified friction as “sludge”.^[13] Persuasion is not automatically unlawful; concern grows where design hides material information or impairs meaningful choice.

Look for symmetry. If joining takes one tap, can you find the full price, conditions, cancellation route and contact options just as readily? Can you decline optional marketing without losing the core product?

Loss aversion and urgency: a deadline can focus attention without justifying a rushed decision

People usually dislike losing a possible benefit more sharply than they enjoy gaining the same benefit. Referral marketing often uses this tendency through expiry dates, limited rewards and “do not miss out” language. A real deadline can be useful: it tells someone when to decide and lets a promoter manage a finite campaign. It is not, however, a reason to buy a product that does not fit.

The CMA’s guidance makes the legal boundary clear: falsely stating that a product or particular terms will be available only for a very limited time in order to elicit an immediate decision is a banned practice. It gives a countdown that restarts after reaching zero as an example.^[1] A deadline should therefore be genuine, accurately described, prominent and honoured. Recycled timers, perpetually renewed “today only” messages and pressure that masks recurring costs are not benign uses of behavioural insight.

Consumer rule: an expiring reward is a reason to check the terms promptly, not a reason to abandon your own criteria. Business rule: use time limits to communicate a real administrative constraint, not to prevent informed comparison.

The ethical line: helpful prompt or dark pattern?

Not all persuasion is manipulation. A clear link, a truthful explanation and a timely reminder can help someone act on a decision they already want to make. A dark pattern, or harmful online choice architecture, generally works in the other direction: it exploits attention, emotion or confusion to steer a person away from an informed and freely made choice. The CMA’s work on online choice architecture is a useful analytical framework, while the DMCC Act and the CMA’s unfair-commercial-practices guidance set out the relevant consumer-protection standards.^{[1] [13]}

The practical test is whether an average person can identify the commercial interest, understand material conditions and make an unpressured choice. The DMCC framework prohibits unfair practices including misleading actions and omissions; CMA guidance says information can be obscured or supplied too late, and an overall presentation can mislead even where individual statements are true.^[1]

How to use a referral code without being pushed into a bad deal

The aim is not to maximise the number of codes used. It is to preserve the modest upside of a reward while avoiding an unsuitable product, unnecessary spending, awkward social pressure or careless data sharing. Use this pause-and-check routine whenever an invitation arrives.

1. Choose the product before the code

Start with the underlying need. Would you still consider this account, shop, subscription, service or app if there were no referral reward? Compare the features that matter to you: full price, recurring fees, quality, customer support, delivery, cancellation, accessibility, data practices and alternatives. A referral reward is a marginal benefit. It cannot repair poor value, poor service or a product you do not need.

This question is especially useful when the message comes from someone you trust. Trust can make the invitation feel personally relevant; it should not turn the sender’s priorities into yours. A friend who likes a premium subscription may use it heavily, while you may use it once. A relative who is comfortable with an app-only service may have different support needs. The correct response can be “thank you, but not for me”.

2. Read the qualifying conditions before you open, buy or transfer anything

Do not assume that entering a code is enough. Read the live terms and make a short list of what must happen for each party to qualify. Check the definition of “new customer”; whether the code must be applied before account creation; any required verification; a minimum spend, deposit, order, subscription period or holding period; the permitted payment method; excluded products or transactions; reward timing; caps; expiry; whether another promotion can be combined; and what happens if you cancel, return goods or close the account.

There is no universal rule that a code can be added later. Some programmes may allow a correction; others may not. Do not rely on a customer-service exception that is not in the terms. Save a screenshot of the offer summary, the relevant terms version, the code or link and the confirmation screen. A calendar reminder for the stated qualifying deadline and the stated reward window can prevent avoidable disappointment.

3. Value the reward in its real form

Translate the headline into what you actually receive and what it costs to unlock. Cash is not identical to store credit. Points may have a restricted redemption value. A discount may encourage a purchase that would otherwise not happen. A fee waiver can leave other charges in place. Entry into a prize draw is not a promised reward. If you need to spend more, subscribe longer, incur a fee, use credit, make a deposit you would not otherwise make or take investment risk to qualify, treat those costs and risks as part of the decision.

Never borrow, overspend or take a product risk merely to trigger a referral benefit. A seemingly small qualification threshold can be costly if it produces interest, charges, unwanted goods or a commitment you later regret. If the reward needs a calculation to understand, do the calculation before you act. If the calculation depends on assumptions that the provider has not made clear, step back or ask for clarification in writing.

4. Disclose your interest when you share

If you are the referrer, say plainly whether you receive a reward when the other person qualifies. Do this at the point of sharing, not in a vague note at the bottom of a long message. A simple, human formulation is enough: “This is my referral link. If you sign up and meet the terms, I receive a reward and you may receive the stated offer. Please use it only if the product suits you.” Adjust the description so it is accurate; do not state an amount, deadline or condition from memory.

For a public post with an affiliate-like link or commercial relationship, more may be required than a casual disclosure. CAP Code rule 2.1 says marketing communications must be obviously identifiable as such, while rule 2.3 says commercial intent must be clear where it is not apparent from the context.^[5] The ASA advises that a promotional code or trackable link can form part of affiliate advertising and that an additional clear disclosure may be necessary, particularly when the author normally appears independent.^[8] Where a post is advertising, a clear upfront label such as “Ad” may be appropriate. A vague “affiliate” label or a conditional “I may receive something” may not communicate the actual incentive clearly enough.

5. Share respectfully, not indiscriminately

Send a code only to someone likely to welcome it. A one-to-one suggestion after a relevant conversation is different from repeated messages, irrelevant group posts, pressure in a workplace, or a broadcast that turns every social interaction into a sales opportunity. Do not imply that a friend owes you a sign-up. Do not make unsubstantiated claims such as “best”, “risk-free”, “guaranteed savings” or “everyone loves it”. Do not buy advertising, spam forums or publish a code publicly unless the programme’s terms expressly allow that kind of sharing.

Provider rules are not uniform. Some programmes may prohibit public promotion, paid promotion, sharing with strangers or spam; others may impose a referral cap. Check the particular terms rather than assuming a personal code can be posted everywhere. Respecting these limits is not only a way to protect a reward. It protects the people receiving your message and preserves the trust on which referrals depend.

6. Protect your friends’ privacy as well as your own

Do not upload another person’s email address or phone number so that a business can contact them first. The ICO states that organisations must not send electronic-mail marketing, including emails, texts and social-media direct messages, to individuals without specific consent, subject to the limited soft opt-in for their own previous customers and similar products.^[9] It says this applies to viral marketing where an organisation encourages someone else to forward a marketing message, and advises against asking customers for friends’ contact details because the organisation cannot be sure that those friends agreed.^[9]

Ask the friend first, then send a personal link or code yourself if they want it. Do not harvest contacts from group chats, workplace directories, school communities or an address book. Avoid any flow that asks you to grant broad contact access just to share one invitation. A referral link should not reveal your own account credentials, and a legitimate referral should never require you to give someone a password, one-time passcode, card number, identity document or banking login.

7. Be sceptical of referral phishing

Referral language is easy for fraudsters to imitate because it promises a reward and encourages rapid action. Treat an unexpected message with caution, particularly if it asks for money, a code sent by text, identity documents or an urgent “activation” payment. Do not use a link simply because it has a recognisable brand name in the message. Navigate independently to the provider’s official website or app, locate its referral information there and compare the terms.

Warning signs include a reward that seems implausibly generous, a request to pay a fee to receive money, a message from a contact whose writing style is unusual, a web address that differs subtly from the official domain, or a demand for secrecy and speed. A legitimate offer can have conditions; a phishing attempt often tries to prevent you from reading them.

8. Keep evidence and complain methodically if something goes wrong

If you believe a promised reward has not been paid or a term was presented misleadingly, keep the invitation, screenshots, the terms version, confirmation emails, qualifying-activity evidence and dates. Start with a written complaint to the provider. Explain which term you believe you met, attach the evidence and ask for a clear response. A reward is not automatically payable merely because a code was entered; the programme terms and facts matter. Equally, a business should be able to explain a refusal or reversal rather than hiding behind a generic fraud label.

If the issue concerns a potentially unfair business practice, consumer-advice and reporting routes depend on where you are in the UK and the nature of the problem. Citizens Advice explains the route for reporting a business to Trading Standards in England and gives examples such as unclear prices, added costs and pressure selling.^[16] Use current official consumer-advice routes for Scotland, Wales or Northern Ireland rather than assuming the England process applies everywhere. Preserve evidence before an offer page changes, but avoid publishing personal data or accusations on social media while the complaint is being assessed.

Consumer checklist before using a referral code

• Would I want this product without the reward?
• Have I read the live eligibility, qualifying-action, cost, deadline, cap and cancellation terms?
• Do I understand whether the reward is cash, credit, points, a discount or a draw entry?
• Am I avoiding unnecessary spending, borrowing, subscription or investment risk to qualify?
• Does the sender clearly say what they receive if I qualify?
• Can I use a personal link without giving the business a friend’s contact details or unnecessary permissions?
• Have I saved the terms and confirmation evidence?

Business checklist before launch

• Does the product offer real value without recruitment?
• Are reward, conditions, price or fees, eligibility, timing, caps, expiry and reversals prominent?
• Is commercial intent clear, with accurate disclosure copy and channel rules?
• Are reviews independent, with no reward for positive sentiment?
• Is a copy-link flow available without contact harvesting, and is marketing consent separate?
• Can users decline, cancel, complain and obtain support as easily as they can join?
• Have capacity, fraud rules, claims evidence, privacy controls and sector-specific approvals been tested?

Reviews and social proof: how to read them and how not to manufacture them

Reviews can be useful evidence, but they are not a referendum on whether you should buy. Look for detail that relates to your own use case: what the reviewer bought, how long they used it, what went wrong, what support was like and whether their circumstances resemble yours. One enthusiastic referral recipient tells you less than a pattern of specific, balanced feedback across independent sources.

Ask whether an incentive is visible. An incentive does not automatically make a review useless; it gives you context. A review provided in exchange for cash, credit, a free product or entry into a draw should not masquerade as an entirely independent opinion. A business must not make positive sentiment the price of receiving a reward. It should not suppress legitimate negative feedback, seed reviews itself, or use a “verified referral” label to imply a quality endorsement.

The CMA’s short guide on consumer reviews says that businesses publishing reviews or review information must take reasonable and proportionate steps to prevent and remove fake reviews, concealed incentivised reviews and false or misleading review information.^[12] Sensible governance includes a published policy, a risk assessment of review channels, clear labelling of incentives, procedures to detect and investigate suspicious content, and proportionate action when content breaches the rules. The exact processes will depend on the size and risks of the business, but doing nothing is not a credible approach where reviews influence purchases.

Ask: is this reviewer real, were they rewarded, and is their experience relevant to me? Businesses should separate referral attribution from review collection; a reward must not become a demand for praise.

Privacy, data protection and respectful referral sharing

Referral schemes often process data that feels socially sensitive: which person introduced whom, whether a qualifying event occurred, and sometimes whether a reward was earned. The fact that an app can track this data does not mean every data flow is necessary or appropriate. The ICO’s guidance on data protection by design and by default says organisations should build data protection into processing from the design stage through its lifecycle and, by default, limit personal data to what is necessary for a specific purpose.^[11]

What consumers should expect

A well-designed programme should let you share a personal link or code without handing over your friends’ contact list. It should explain what happens after the recipient uses the link, what the referrer will be told, how long referral data are kept, and how to exercise relevant privacy choices. Some schemes may tell the referrer that a referee has qualified. That possibility should be clear before the referee joins; the referrer should not receive unnecessary details about the referee’s transactions, balance, personal circumstances or account activity.

Use only official channels. Before granting app permissions, consider whether the requested access is needed for the service or merely convenient for marketing. Do not assume that joining a referral programme means you must agree to unrelated promotional emails, texts or tracking. If marketing consent is optional, it should be separate from product access and should be easy to withdraw. The ICO explains that consent must be freely given, specific, informed and unambiguous; pre-ticked boxes and default settings do not demonstrate valid consent.^[10]

What businesses should build in

Start with a data map, not a contact-importer. Identify the referral identifier, attribution event, fraud checks, vendors, access controls, lawful basis, retention period, international transfers where applicable, and the information given to each participant. A pseudonymous referral ID is usually preferable to passing full personal data between people. Limit staff and supplier access to what is needed. Keep a plain-language privacy notice that explains the purpose of referral processing, the categories of recipient, retention, relevant rights and any meaningful automated decision-making.

Keep referral attribution separate from direct marketing consent. A copy-link flow is generally less intrusive than asking for friends’ emails or mobile numbers. Do not auto-send messages, auto-post to social accounts or make contact upload the route of least resistance. If a third-party referral platform is involved, the business still needs clarity about roles, instructions, security, transparency and accountability. Outsourcing a technical component does not outsource the responsibility to respect people’s data.

Extra care is needed where children may access the service or where vulnerability is foreseeable. The ICO points businesses to the Age Appropriate Design Code and child-focused data-protection guidance for online services likely to be accessed by children.^[19] Avoid referral copy that exploits social exclusion, encourages a child to disclose a friend’s details or conceals the commercial purpose. Enforce any genuine age restriction before enabling sharing. A reward should never be used to work around safeguards for age-restricted or unsuitable products.

UK compliance expectations for businesses: a practical framework

Compliance is not achieved by adding a long terms link after a campaign has been designed. The programme, interface, copy, creator guidance, review process, data flow, fraud controls and customer-support process all contribute to the overall consumer experience. The following framework is a practical starting point. It does not replace legal or sector-specific review.

1. Start with a real product benefit, not recruitment

The product should have a credible customer benefit without referral activity. Do not structure a programme so that recruitment is the principal economic attraction. Avoid rewards that reasonably encourage excessive spending, unnecessary borrowing, unsuitable investing or activity that is otherwise against the customer’s interests. Do not market ordinary statutory rights as a special referral perk; the CMA’s guidance identifies presenting consumers’ legal rights as a distinctive feature of an offer as a banned practice.^[1]

2. Put the material conditions next to the headline

The DMCC framework is concerned with the overall impression and with material information that is omitted, obscured, unclear or untimely.^[1] The CAP Code similarly requires material promotional conditions where their omission is likely to mislead.^[6] A prominent offer summary should identify: the reward for each party; its form and value or calculation; who is eligible; the main qualifying actions; meaningful spend, deposit, fee or subscription conditions; payment timing; caps; expiry or end date; exclusions; whether offers can be combined; availability limits; and key reward-reversal or anti-abuse rules.

Write the headline so that it matches the conditions. A large reward claim followed by a tiny note about a substantial threshold is not a transparent summary. If a short format cannot hold every detail, give the essential conditions clearly and signpost the rest in a way that consumers are likely to see before committing. A link is not a licence to hide the qualification event that determines whether the headline reward has any real value.

3. Make marketing recognisable and supply usable disclosure copy

CAP Code rules require marketing communications to be obviously identifiable and commercial intent to be clear where it is not apparent.^[5] Businesses should provide referrers, creators and affiliates with short, accurate disclosure language rather than leaving them to improvise. For example: “Referral link — I receive a reward if you qualify; you receive the offer described here. Terms apply.” The exact wording must reflect the programme rather than pretending both people receive the same thing when they do not.

Public sharing creates higher risk than a private message to a known friend. Give clear rules on permitted channels, paid promotion, claims, use of brand assets, spam and targeting. Monitor material breaches rather than relying on a statement that referrers act independently. Under the ASA’s affiliate guidance, brands and affiliates can both bear responsibility for advertising that falls within the CAP Code.^[8]

4. Design for comprehension, not just conversion

The EAST framework is useful when applied with restraint. Make sharing easy with a copyable link; make the product attractive by describing real benefits and limits; use authentic social information; and make reminders timely after a positive completed experience.^[14] Do not use forced contact upload, pre-ticked marketing, fake popularity, misleading scarcity, opaque defaults, loss-framed harassment or asymmetric friction.

Test the journey with ordinary users before launch. Can they explain the reward, qualification threshold, price or ongoing cost, deadline, cancellation route, privacy effect and whether the referrer benefits? Can they find the full terms without already having joined? Can they decline optional marketing without penalty? A high click-through rate is not evidence of understanding. A short comprehension test can reveal where a design is producing confusion rather than informed demand.

5. Keep reviews independent of referral rewards

Do not make a review a condition of receiving a referral reward. Do not reward only positive reviews. Do not generate copy for customers to post as if it were their own view. Establish an incentivised-review policy, assess the risk of each review channel, label incentives where applicable, investigate suspicious content and act proportionately. The CMA’s review guidance is especially relevant where a business displays ratings, testimonials or aggregate claims that affect customer decisions.^[12]

6. Minimise data and do not build viral marketing around friends’ details

Do not ask a customer to provide friends’ details so the business can contact them with an invitation. The ICO explicitly advises against this form of viral marketing because compliance with electronic-marketing rules is difficult where the business cannot be sure that friends agreed to provide their details.^[9] Offer a link or code that the customer can decide whether to share. Maintain an effective opt-out process for any marketing the business itself sends, and do not disguise its identity.

Build data protection into the default flow: collect only what is needed for attribution and fraud prevention, avoid disclosing a referee’s personal or transactional data to a referrer, explain notification practices, and set retention limits. Conduct the appropriate privacy and security assessment for the risk. Be especially cautious with vulnerable users, children and products whose use could expose sensitive personal information.

7. Plan capacity, availability and fair administration

A promotion should be capable of being administered fairly. CAP Code section 8 says that “subject to availability” does not remove the obligation to do everything reasonable to avoid disappointing participants. Promoters should make a reasonable estimate of likely response and either be capable of meeting it or provide clear, timely information that lets people assess whether participation is worthwhile.^[6] If a reward is limited, say how and where the limitation applies. Do not encourage a chain of qualifying purchases while hiding that the reward pool may run out.

Set eligibility, anti-fraud and reversal rules before launch. State them in accessible language. Ensure support staff can explain a decision and provide a reasonable route to query a withheld or reversed reward. Fraud prevention is legitimate; opaque and inconsistent decisions undermine the relationship that a referral programme is supposed to build. Monitor complaints, failed qualifications, contact-upload rates, unsubscribe rates and any evidence that particular groups are being disadvantaged.

8. Keep records and substantiate claims

Before publishing a claim such as “most popular”, “fastest-growing”, “save”, “free” or “limited”, decide what it means and retain evidence capable of supporting it. CAP Code section 3 requires marketing communications not to materially mislead and requires objective claims to be supported by documentary evidence.^[7] Evidence should match the claim’s scope, time period and audience. A referral count is not automatically a measure of customer satisfaction. A historical campaign result is not automatically a current benefit.

Keep version-controlled terms, screenshots of campaign creative, approval records, evidence for claims, partner instructions, complaint records and operational decisions. These records help the business answer customer queries consistently and reassess a campaign when conditions change. They also discourage a common failure: making a bold promise in an acquisition ad and discovering later that the fulfilment, privacy or support process cannot meet it.

9. Use specialist review for regulated or sensitive sectors

Escalate referral campaigns for financial services, credit, investments, insurance, cryptoassets, gambling, health, alcohol, children’s products and other regulated or age-restricted areas to the relevant compliance and legal specialists before launch. The greater the potential harm from a rushed or misunderstood decision, the less appropriate it is to let a reward dominate the communication.

For financial promotions on social media, the FCA expects communications to support retail customer understanding, be standalone compliant and balance benefits with risks. Firms remain responsible for promotions they make or cause affiliates to make.^[20]

Special caution: banks, credit, investments, insurance and cryptoassets

A referral reward should never be treated as a reason to borrow, invest, buy insurance, open a complex account or acquire cryptoassets. Financial decisions can involve charges, credit consequences, loss of capital, restrictions on access, tax effects, changes in interest or value, and protections that vary by product. A small reward cannot compensate for a product that is unsuitable or for losses that may exceed it many times over.

The FCA’s social-media financial-promotion guidance says that promotions should provide a balanced view of benefits and risks and give consumers information that helps them make effective, well-informed decisions. It expects each promotion to be compliant when considered on its own, not only after a person clicks through to more information.^[20] The FCA’s consumer guidance encourages people to take time, understand what they are investing in and consider whether they can afford to lose money.^[21]

Scope can be technical. Not every private mention of a bank account is automatically a regulated financial promotion, and the applicable rules depend on the product, content, communicator and context. The prudent practical rule is broader: do not make return claims, safety claims or suitability claims because you have a referral incentive. Do not say an investment is “risk-free”, “guaranteed” or suitable for a friend. Do not let a gift card, fee waiver or introductory benefit eclipse ongoing charges, capital risk, credit cost, exclusions or lock-in.

Assess the product independently. For investing, ask what can be lost, what it costs, whether you understand the asset and whether you need regulated advice. For credit, ask whether you need to borrow and what the total cost is. For insurance, compare cover and exclusions; for cryptoassets and other high-risk products, be especially alert to social pressure and urgency.

As a business or creator, do not rely on generic referral copy for regulated products. Ensure required risk information and disclosures are prominent, accurate and accessible in the individual communication. Seek sector-specific approval before public sharing, paid promotion or affiliate activity. The fact that a link is personal does not remove the potential for serious consumer harm.

Common questions

Can I share a referral code publicly?

Only if the provider’s current programme terms permit it and the way you share it complies with applicable advertising and sector rules. Some programmes restrict public, paid or spam-like promotion. A private code does not automatically become a general advertising right. If there is a reward or commercial relationship, disclose it clearly; if the product is regulated, obtain appropriate guidance before posting public promotional content.

Do I have to tell a friend that I get a reward?

Clear disclosure is the ethical default and may be necessary where a communication is marketing or affiliate advertising. Tell the person before they act, in ordinary language, what you receive and what they may receive if the conditions are met. This gives them the context to assess your recommendation and protects the relationship more effectively than a hidden incentive.

Can a company ask me for my friends’ email addresses?

A company can build many kinds of product flow, but that does not make contact harvesting a good or low-risk referral design. The ICO advises against asking customers for friends’ contact details for viral marketing because the business may not be able to show that those friends agreed to receive its marketing.^[9] Prefer a personal link or code that you share yourself with someone who has said they are interested.

Can I add a code after I have opened an account?

It depends entirely on the programme terms and the provider’s process. Some programmes may permit it; others require the link or code to be used at a particular stage. Check before opening the account or completing the purchase, and keep confirmation evidence. Do not assume that a customer-service team can retrospectively apply an offer.

Is a referral code proof that a service is trustworthy?

No. A referral can make a service worth researching because someone you know has used it, but it does not independently verify quality, value, security, regulation or suitability for you. Read product information and terms, compare alternatives and examine reviews critically. For financial products, the distinction is particularly important: a reward is not investment advice or a measure of risk.

What if the reward does not arrive?

Check the qualifying conditions, payment window, exclusions and whether a return, cancellation, missing verification or other event affected eligibility. Gather the offer and activity evidence, then make a written complaint to the provider. Ask for a specific explanation. If you think the presentation or conduct was unfair, use the appropriate current consumer-advice or reporting route for your UK nation and retain your evidence.

Bottom line

Referral codes work because they combine social trust, a visible incentive and a low-effort route to act. Those features can make a useful offer easier to find. They can also make it easier to overlook a conflict of interest, material condition, recurring cost, privacy consequence or product risk. The best protection is a calm sequence: decide whether you want the product without the reward; read the live conditions; value the benefit in its actual form; disclose your own incentive; share only with consent and respect; and keep evidence.

For businesses, the same principle is durable: use behavioural insight to help customers understand and act on genuine value, not to trap them into a decision. Prominent conditions, honest disclosure, authentic reviews, minimal data collection, symmetric friction, fair operations and specialist review where risks are high are not obstacles to good referral marketing. They are the conditions under which a referral can remain worthy of the trust that makes it effective.

References

1. Competition and Markets Authority, Unfair commercial practices.
2. Advertising Standards Authority / Committee of Advertising Practice, CAP Code: Recognition of marketing communications.
3. Advertising Standards Authority / Committee of Advertising Practice, CAP Code: Promotional marketing.
4. Advertising Standards Authority / Committee of Advertising Practice, CAP Code: Misleading advertising.
5. Advertising Standards Authority, Online affiliate marketing.
6. Information Commissioner’s Office, Electronic mail marketing.
7. Information Commissioner’s Office, Plan direct marketing.
8. Information Commissioner’s Office, Data protection by design and by default.
9. Competition and Markets Authority, Short guide for businesses: publishing consumer reviews and complying with consumer protection law.
10. Competition and Markets Authority, Online choice architecture: how digital design can harm competition and consumers.
11. Behavioural Insights Team, EAST framework: four simple ways to apply behavioural insights.
12. Schmitt, P., Skiera, B. and Van den Bulte, C., Referral Programs and Customer Value.
13. Citizens Advice, Reporting to Trading Standards.
14. Information Commissioner’s Office, Children’s information.
15. Financial Conduct Authority, FG24/1: Financial promotions on social media.
16. Financial Conduct Authority, Five questions to ask before you invest.