A commission chain is the linked payment structure that pays multiple actors for a referral, lead, conversion, or sale. Each participant may receive a cut: the first caller, a broker, an outsourced sales team, an affiliate, or the final operator. The chain can be simple or deeply layered, but its purpose is the same: distribute incentives and obscure who really drives the activity.
In cyber security, commission chains matter because many scams and abuse campaigns are organized around money flow rather than technology. Phishing-as-a-service, fraudulent lead generation, illegal telemarketing, and affiliate fraud often rely on commissions to keep the operation running. For defenders and investigators, mapping the chain can reveal hidden controllers, payment endpoints, and partner accounts. Tracking referrals, call records, invoices, and payout data helps attribute the scheme and disrupt it at the point where profits are collected.