Magento store owners

Coupon extensions are typing your codes into your Magento checkout.

Coupon and cashback extensions pop up on your product pages, cart and checkout, try the codes they've collected in your coupon form and take the affiliate commission. Benson hides their pop-ups by rule across your Magento store, checkout included, and guards the coupon form in their sessions.

Free forever up to 25,000 sessions a month. Every Pro feature free for your first 14 days. No card. We'll email you about getting started. Unsubscribe any time.

The headline number

13M

Chrome users run PayPal Honey, one of many extensions that try codes in the discount box.

Chrome Web Store, Oct 2026(opens the source)
The story

Here's what happens on your Magento checkout.

  1. 1

    A shopper reaches the coupon form.

    A shopper arrives with a coupon extension running and reaches the checkout coupon form. A pop-up can interrupt the purchase and encourage code attempts.

    35%

    of stores with a promo field show it by default. In Baymard's testing, some shoppers left checkout to hunt for a code.

    Baymard Institute, Jun 2024(opens the source)
  2. 2

    An extension tries its codes.

    Honey, Capital One Shopping and others pop up while shoppers browse and buy, then type collected codes into the discount box.

    5M+

    Microsoft Edge users run Capital One Shopping, before you count Chrome.

    Microsoft Edge Add-ons, Oct 2026(opens the source)
  3. 3

    Codes made for someone else get shared.

    Extensions collect codes as shoppers type them. A December 2025 investigation alleged Honey gathered staff, VIP, influencer and newsletter codes this way and published them for everyone.

    PPC Land, Dec 2025(opens the source)
  4. 4

    The discount and commission cost you.

    The order can look normal while a leaked code takes money off the basket and an extension receives affiliate commission.

    Modern Retail, May 2024(opens the source)

What most teams try

  • You could delete the code. Today's leak stops. The people you made it for find it broken, and the replacement can spread the same way.
  • You could make every code single-use. Each shopper needs their own code, and a creator can't share one code with their audience.

Control what happens at checkout.

On checkout, Benson hides extension pop-ups and guards the coupon form in extension sessions, using your rules and the codes you allow.

Sound familiar?

Three ways extensions cost a Magento store.

  1. The problem

    Pop-ups interrupt the purchase.

    A coupon or cashback extension can appear over your product pages, cart and checkout, offer codes it has collected and take the affiliate commission for the sale.

    The fix

    Choose where pop-ups stay hidden.

    Set rules by page type, country and device. Benson hides extension pop-ups where your rules apply, including checkout once its hosts are allowed.

    See the Magento install
    Sample store

  2. The problem

    Codes reach the coupon form.

    An extension session can bring code attempts to the checkout coupon form. Store owners need a way to decide which codes are allowed through.

    The fix

    Apply checkout code rules.

    With checkout configured, Benson guards the coupon form in extension sessions. For a server-side check, call the policy check API from your coupon validation.

    Sample store

  3. The problem

    The result is hard to judge.

    Knowing which extensions visit does not show what happens to revenue when their pop-ups are hidden. A comparison helps you assess your rules.

    The fix

    Measure against a holdout.

    Benson compares revenue per session with and without protection, giving you a way to assess the effect of your rules on your own store.

    Sample store

Magento 2.4.7 and later require Benson's hosts to be allowed in a module's csp_whitelist.xml for checkout coverage; without this, Benson runs on the storefront and cart only. Pop-up hiding, checkout code rules and holdouts require Pro. Illustrations use sample data.

See which extensions reach your checkout before you change a thing.

  • Luma and Hyvä
  • Free to watch
  • A holdout behind your rules

Free forever up to 25,000 sessions a month. Every Pro feature free for your first 14 days. No card.

Start free

Whatever you find, there's a next step.

Live on Magento in three steps.

Watching is free, forever; blocking, reports and tests are on Pro.
See pricingMagento install guide

  1. Add the script.

    In Content → Design → Configuration, edit the store view and paste the snippet into HTML Head → Scripts and Style Sheets. Save and flush the page cache.

  2. Observe extension visits.

    Use free observe mode to see which extensions visit and what your rules would hide. On Magento 2.4.7 and later, allow Benson's hosts in your checkout's content security policy; the install guide shows how.

  3. Set rules and measure.

    On Pro, choose your pop-up and checkout code rules, then use a holdout to compare revenue per session with and without protection.

On film

Each fix, on film.

Questions

Benson works with Magento Open Source and Adobe Commerce, including Luma and Hyvä themes.

Sources

Industry research, checked on 23 October 2026. None of it is Benson data.

  1. 1Chrome Web Store, “PayPal Honey: Automated Coupons & Rewards (listing and user count)”, Oct 2026. chromewebstore.google.com (opens the source)
  2. 2Affiverse (PMA study), “US sales through affiliate hit $113B as investment jumps 49%”, Jun 2025. affiversemedia.com (opens the source)
  3. 3Savings.com, “America's savings shift: 2025 coupon and deal trends”, Dec 2025. savings.com (opens the source)
  4. 4Performance Marketing Association, “Announcing the 2026 Performance Marketing U.S. Brand Survey results”, Jul 2026. thepma.org (opens the source)
  5. 5Baymard Institute, “Checkout optimization: minimize form fields”, Jun 2024. baymard.com (opens the source)
  6. 6Microsoft Edge Add-ons, “Capital One Shopping: Save Now (listing and user count)”, Oct 2026. microsoftedge.microsoft.com (opens the source)
  7. 7PPC Land, “Honey targeted minors in advertising while leaking business codes”, Dec 2025. ppc.land (opens the source)
  8. 8Modern Retail, “How promo code leaks are impacting DTC brands' profit margins”, May 2024. modernretail.co (opens the source)

See what extensions do on your store.

Free forever up to 25,000 sessions a month. Every Pro feature free for your first 14 days. No card. We'll email you about getting started. Unsubscribe any time.