A gifting link is public on purpose. That is the whole point: you paste it into a DM, the creator opens it on their phone, picks what they want, and a real $0 draft order lands in your Shopify admin without a single back-and-forth about sizes or addresses. But anything you can open without a login, anyone can open without a login. Sooner or later one of your links gets forwarded to a friend, screenshotted into a "free stuff" group chat, or posted under a Reel where four thousand people can tap it.
When that happens, the instinct is to treat it like a security breach. Do not bother hunting for the leaker. You will never find them, and secrecy was never the right defense anyway. The defense is making a leaked link boring: capped, deduped, and scoped tightly enough that even if it ends up in a deals forum, it cannot empty your warehouse.
Why discount codes are the wrong tool
Before getting into the defenses, it is worth naming the most common mistake brands make: running influencer gifting through a public discount code. A code like CREATOR25 is convenient because any creator can type it at checkout without extra setup. It is also a disaster waiting to happen.
Once a discount code exists in the world, it spreads without your knowledge. Coupon aggregator sites index it. Deal groups share it. Your own creators post it in their bio because it is easier than a link. And there is no meaningful way to cap it: you cannot limit how many times a code is redeemed per email address in standard Shopify without additional app logic, you cannot close it automatically at a unit threshold, and you have no record of who submitted what until you pull a full order export and start matching manually.
A branded gifting link solves this structurally. It collects name, email, and shipping address before any order is created, which means you can deduplicate, cap, hold, and review — none of which are possible with a code someone types into a checkout field. There is also no code for anyone to reshare: the link itself is specific to your campaign, and the protections are baked in at the form level.
The four layers that make a leaked link boring
1. A hard order cap that closes the form
The single most important setting on any gifting campaign is the total-order cap: the number of submissions the link will accept before it stops, full stop. Most brands leave this blank because "unlimited" feels generous. Then they find out what unlimited means the week a link goes wide in a deals group.
Set the cap at two to three times the number of creators you actually plan to invite. Inviting 50 creators? Cap the campaign at 100 to 150. That leaves room for legitimate forwards — a creator who genuinely loops in a peer — and for your own margin of error, while drawing a ceiling a leak cannot cross. When the cap is hit, the form closes automatically. No more submissions get through. The worst-case exposure is the number you chose intentionally.
Good tooling does not silently drop the overflow. It holds those submissions for review, which gives you a real alarm bell: a pile of held entries means something happened, and you can decide what to approve. Auto-fulfilling everything up to the cap and silently dropping the rest is not a defense, it is just a slower bleed.
2. Email deduplication per campaign
The second layer is automatic email deduplication: one approved submission per email address per campaign. This removes the casual abuse — the person who submits, gets curious, and tries again an hour later. With dedup on, the second attempt gets flagged rather than approved.
It is not bulletproof on its own, because a determined person has more than one email address. That is fine. Dedup is not the only wall. It removes the easy 80 percent of double-dipping for free, so your order cap only has to handle the motivated few. If you are running gifting at volume, also track creators inside Shopify so the same name showing up across three campaigns is visible rather than buried in separate order exports.
3. An approval queue for double-order attempts
Some gifting platforms auto-create a Shopify draft order the moment a form is submitted. That means every submission — including the leakers, the double-dippers, and the fraud attempts — lands directly in your admin and has to be manually deleted after the fact.
A better model puts flagged submissions into a review queue before touching Shopify at all. Attempts from the same email on the same campaign get held automatically. You see them, decide whether any are worth approving, and discard the rest. The draft order is only created once you explicitly approve — which means the order was intentional, not accidental.
This is the piece most brands do not know to ask for until after their first bad leak. The cap stops the volume. The queue makes the edge cases manageable instead of a manual cleanup job.
4. Per-order item limits, especially on expensive SKUs
A per-order item cap controls how much a single submission can take. For a $6 lip balm, letting a creator pick three is generous. For a $90 serum, one item per order is the only sane setting. Match the cap to the cost of being wrong.
This matters most in combination with the total-order cap. If your campaign cap is 120 orders and your item cap is one, the worst-case exposure is 120 units — a number you chose deliberately. Leave the item cap open and the same leak can clear several times that before the order cap even trips.
Use a fresh link for every batch
Here is the operational habit that prevents most of the pain: one campaign link per outreach batch, not one link you reuse all quarter. Spinning up a new campaign takes about ninety seconds in Seed and buys you two concrete things.
First, you can cap each batch independently. A 20-person micro-creator push and a 200-person seasonal push should not share a ceiling. Second, when submissions spike unexpectedly, you know exactly which list leaked, because each list had its own link. A brand running one evergreen link for six months has no way to know where the leak came from and no way to stop it without cutting off everyone. A brand running per-batch links just pauses the one campaign and moves on.
Before sending any batch, it also helps to have a signed agreement in place. The free influencer contract generator takes about two minutes and gives you something to reference if a creator goes off-script after receiving product.
When a link has already leaked
If you are reading this because submissions are climbing from people who are clearly not on your list, do this in order.
Pause or archive the affected campaign first. That stops new submissions immediately, leaves your real creators' existing orders untouched, and parks anything over the cap in a held state rather than auto-fulfilling it. Then review the held and recent submissions. Some will be legitimate forwards worth honoring; most will be obvious. Approve what you want, ignore the rest, and start your next batch on a brand-new link.
Do not try to fix a leaked link by editing it. The link is burned. A new campaign is cleaner and takes a minute. If you keep getting hit, the leak may not be the real problem — a link that spreads is also a signal your product is in demand, which is useful information on its own.
Leaks and fraud are often conflated, but they are different threats. A leak is your real link going further than you intended. Fraud is fake people gaming the form with invented identities. The caps and dedup handle the first; a vetting checklist handles the second. Read the separate guide on the five gifting fraud patterns if you are seeing the latter.
How Seed handles this by default
Most gifting platforms were built for enterprise budgets where a few hundred leaked orders is a rounding error. For a DTC brand doing five to fifty gifting campaigns a year, that math is different.
Seed bakes all four layers into every campaign link by default: a hard order cap that closes the form automatically, email deduplication per campaign, an approval queue that holds flagged submissions before any Shopify draft order is created, and a per-cart item limit you set at the campaign level. There is no public discount code to leak. The link collects the submission, applies the rules, and only creates a real $0 draft order in your Shopify admin once you approve it.
If you are comparing platforms, the comparison page breaks down how Seed stacks up against the alternatives on cap enforcement, dedup, and approval flow. Or if you want to see the full feature set, install Seed from the Shopify App Store and run your first campaign in under ten minutes.
None of this requires a contract, a login wall, or a security review. It requires treating every gifting submission as what it is: a $0 order with a real fulfillment cost, and setting the form up to enforce limits you already have in your head.
FAQ
How many total orders should I cap a gifting campaign at?
Set the cap at two to three times the number of creators you plan to invite. If you are inviting 50, cap it around 100 to 150. That covers everyone you meant to reach plus a margin for legitimate forwards, while drawing a hard ceiling a leak cannot cross.
Can the same person claim a gift twice with one link?
Not if your form dedupes by email per campaign. One email gets one approved submission on that campaign. They can try a second address, which is why the per-order item cap and total-order cap matter as the second and third layers.
Why is a branded gifting link safer than a public discount code?
A discount code works at checkout for anyone, stacks silently, and is impossible to cap per-person once it leaks. A gifting link collects name, email, and address before creating any order, so you can deduplicate, hold double-order attempts for review, and close the form the moment the order cap is hit.
Should I use one gifting link for everyone or one per batch?
One per batch. A separate campaign link for each outreach push lets you cap each one independently and identify exactly which list leaked when submissions spike. One shared link for a whole quarter is the single most common way brands lose product.
A link clearly leaked. What do I do right now?
Pause or archive the campaign. The link stops accepting submissions immediately, existing orders are untouched, and anything over the cap is held for review rather than auto-fulfilled. Start your next batch on a fresh link.
Is a leaked link the same problem as gifting fraud?
Related but different. Fraud is bad actors faking accounts or submitting under multiple identities. A leak is your real link spreading to people you did not invite. Caps and per-batch links stop leaks; a creator vetting checklist stops fraud. You want both.