Headless and custom store owners

Block coupon extensions on your headless or custom store.

Add Benson's script to every page of your headless or custom store, including checkout. It detects coupon extensions, hides their pop-ups by rule and guards your coupon field in extension sessions. A holdout shows what protection saves.

Free forever up to 25,000 sessions a month. Every Pro feature free for your first 14 days. No card. We'll email you about getting started. Unsubscribe any time.

The headline number

13M

Chrome users run PayPal Honey, one of many extensions that try codes in the discount box.

Chrome Web Store, Oct 2026(opens the source)
The story

Here's what happens in your custom checkout.

  1. 1

    A shopper reaches the checkout you built.

    They came from your ad, your email or a creator you sponsor. They fill a basket and find the coupon field.

    35%

    of stores with a promo field show it by default. In Baymard's testing, some shoppers left checkout to hunt for a code.

    Baymard Institute, Jun 2024(opens the source)
  2. 2

    An extension tries its codes.

    Honey, Capital One Shopping and others can pop up on your storefront and checkout, then type collected codes into the discount box.

    5M+

    Microsoft Edge users run Capital One Shopping, before you count Chrome.

    Microsoft Edge Add-ons, Oct 2026(opens the source)
  3. 3

    Codes made for someone else get shared.

    Extensions collect codes as shoppers type them. A December 2025 investigation alleged Honey gathered staff, VIP, influencer and newsletter codes this way and published them for everyone.

    PPC Land, Dec 2025(opens the source)
  4. 4

    The discount and commission cost you.

    The order can look normal while a leaked code takes money off the basket and an extension receives affiliate commission.

    Modern Retail, May 2024(opens the source)

What most teams try

  • You could delete the code. Today's leak stops. The people you made it for find it broken, and the replacement can spread the same way.
  • You could make every code single-use. Each shopper needs their own code, and a creator can't share one code with their audience.

Or control what happens on your checkout.

Benson hides selected extension pop-ups and guards the coupon field in detected extension sessions. Your developers can use its signals in your own checkout. A holdout compares revenue per session with and without protection.

Sound familiar?

Three ways extensions cost a custom store.

  1. The problem

    Pop-ups on the checkout you built.

    A coupon or cashback extension can appear over your custom cart and checkout, then try codes in your discount field.

    The fix

    Hide them by rule.

    Benson runs on every page, including your checkout. Choose where to hide coupon and cashback pop-ups by page type, country or device.

    See the snippet
    Sample store
  2. The problem

    A coupon field built for rapid-fire attempts.

    An extension can submit collected codes in your cart or checkout, including codes you meant for staff, partners or loyal shoppers.

    The fix

    Guard the field in the browser.

    With strict rules on in extension sessions, Benson intercepts coupon submissions, supports custom field selectors and stops rapid-fire attempts while letting allowlisted codes through.

    Sample store
  3. The problem

    Your checkout needs its own response.

    Your team controls the storefront and cart, so you need extension signals you can use in your own code.

    The fix

    Give developers the session state.

    Read Benson.state(), listen for ext_detected, use the data-benson-ext page attribute or receive the benson_state event in Google Tag Manager.

    See the JavaScript API
    Sample store

The coupon guard runs in the browser. A server-side code check needs to be wired up by your developer. Illustrations use sample data.

See which extensions reach your checkout before you change a thing.

  • One script tag
  • Free to watch
  • A holdout behind your rules

Free forever up to 25,000 sessions a month. Every Pro feature free for your first 14 days. No card.

Whatever you find, there's a next step.

Live on your own stack in three steps.

Watching is free, forever; blocking, reports and tests are on Pro.
  1. Add the script to every page.

    Put the script tag in the head of your storefront and checkout, or add it through Google Tag Manager. It's async and about 2.5KB compressed.

  2. Connect your storefront.

    On a single-page app, call Benson.page() after navigation and Benson.setCart() when the cart changes. Observe mode shows extensions and what your rules would hide.

  3. Set your rules and holdout.

    On Pro, choose where to hide pop-ups, configure your coupon field and allowlist, then compare revenue per session with and without protection.

On film

Each fix, on film.

Questions

Benson's script can be added to Hydrogen, Next.js and custom storefronts where you control the checkout page. Put it on every page, checkout included.

Sources

Industry research, checked on 23 October 2026. None of it is Benson data.

  1. 1Chrome Web Store, “PayPal Honey: Automated Coupons & Rewards (listing and user count)”, Oct 2026. chromewebstore.google.com (opens the source)
  2. 2Affiverse (PMA study), “US sales through affiliate hit $113B as investment jumps 49%”, Jun 2025. affiversemedia.com (opens the source)
  3. 3Savings.com, “America's savings shift: 2025 coupon and deal trends”, Dec 2025. savings.com (opens the source)
  4. 4Performance Marketing Association, “Announcing the 2026 Performance Marketing U.S. Brand Survey results”, Jul 2026. thepma.org (opens the source)
  5. 5Baymard Institute, “Checkout optimization: minimize form fields”, Jun 2024. baymard.com (opens the source)
  6. 6Microsoft Edge Add-ons, “Capital One Shopping: Save Now (listing and user count)”, Oct 2026. microsoftedge.microsoft.com (opens the source)
  7. 7PPC Land, “Honey targeted minors in advertising while leaking business codes”, Dec 2025. ppc.land (opens the source)
  8. 8Modern Retail, “How promo code leaks are impacting DTC brands' profit margins”, May 2024. modernretail.co (opens the source)

Keep your checkout and codes under your control.

Free forever up to 25,000 sessions a month. Every Pro feature free for your first 14 days. No card. We'll email you about getting started. Unsubscribe any time.