
Adding a referral program to your app in 2026 typically costs $50 to $500 per month for a hosted SaaS, or $15,000 to $45,000 in one-time engineering for a custom build. Most early-stage teams should start with a SaaS tool (ReferralCandy, Friendbuy, Rewardful, Refersion) and switch to custom only when reward economics or fraud rules outgrow what the vendor supports.
The math is more interesting than the price tag. Reward economics, fraud prevention, attribution windows, and the tax reporting threshold at $600 in annual payouts are what actually determine total cost of ownership. We will walk through all of it.
At minimum, a referral program needs to do six things:
The "tracking" part sounds simple. It is the part that breaks. First-party cookie blocks in Safari, server-side attribution windows, multi-device journeys, and partial refunds all complicate what looks like a cookie-and-coupon problem.
This is why most teams reach for a SaaS first. The vendor has already solved attribution edge cases you have not thought of yet.
Here is what the actual decision looks like for a startup under 50,000 users.
| Approach | Setup cost | Ongoing cost | Timeline | Best for | Watch out for |
|---|---|---|---|---|---|
| ReferralCandy | $0 setup | $59 to $299/mo + 3.5% commission | 1 day | Shopify and DTC ecommerce | Commission on referred sale stacks fast at scale |
| Friendbuy | $0 to $5k onboarding | $249 to $1,500+/mo | 1 to 2 weeks | Mid-market ecommerce and B2C SaaS | Higher tiers gated behind sales call |
| Refersion | $0 setup | $99 to $599/mo | 3 to 7 days | Affiliate-heavy programs with many partners | Built for affiliates more than peer referrals |
| Rewardful | $0 setup | $49 to $199/mo | 1 to 3 days | Stripe-based SaaS | Stripe only; no Paddle, Chargebee, or Lemon Squeezy |
| Tolt or PartnerStack | $0 to $1k | $29 to $1,500+/mo | 1 day to 2 weeks | SaaS with partner programs | PartnerStack is enterprise-priced |
| Custom build (mid-tier engineer) | $15,000 to $45,000 | $0 software + hosting | 4 to 8 weeks | Unusual reward logic, fraud-heavy verticals, owned tracking | You now own all the edge cases forever |
| Cadence (book the build) | $1,000 to $1,500/wk for 3 to 6 weeks | None after launch | 48-hour trial, ship in weeks | Founders who want a SaaS-quality build owned in-house | Less suited to enterprise procurement |
A few things worth noting about this table.
ReferralCandy and Friendbuy take a commission on referred revenue, not just a flat monthly fee. At $100k in monthly referred sales, that 3.5% becomes $3,500 a month on top of the base fee. By the time you hit that scale, custom build pays for itself in 5 to 12 months.
Rewardful is the cleanest fit if you bill on Stripe. The setup is genuinely a one-afternoon job. If you use Paddle (common for international SaaS) you are off the path.
Custom build at $15k to $45k assumes a competent full-stack engineer working with modern primitives (Next.js, Postgres, Stripe webhooks, Resend or Postmark for emails). Lead-tier complexity (multi-currency, multi-region tax, programmatic fraud scoring) pushes the high end.
The reward you offer is the single biggest cost variable. There are four common models.
The referrer earns 10 to 30 percent of the referred customer's MRR for as long as that customer pays. Rewardful, Tolt, and PartnerStack are built around this. At 80% gross margin, a 20% recurring reward eats a quarter of your contribution margin per referred customer. If your payback period is already 12 months, this pushes it to 15.
A fixed dollar amount per qualified referral. $25 to $100 per referred user who hits a defined activation event. Easier to budget; pair it with a strict activation gate or you will pay for accounts that churn in 30 days.
Both referrer and referee get $X in account credit. Dropbox built a company on this. Cost per acquisition is near zero in real dollars because credit only redeems if the user keeps using the product. Highest-margin and safest from a fraud perspective.
T-shirt at 3 referrals, hoodie at 10, AirPods at 25. Notion and Linear run programs like this. Works because marginal cost per unit is low and the social signal (wearing the shirt) is itself a channel.
If your reward is cash or credit at any meaningful dollar value, fraud will find you within weeks. The four patterns we see most often:
Self-referral. A user creates a second account and refers themselves. Block by IP, payment fingerprint (Stripe payment_method.fingerprint), device fingerprint (FingerprintJS), and email domain. Any two of these matching across the referrer and referee is a hard block.
Fake email farms. Bulk-generated Gmail aliases (name+1@gmail.com, name+2@gmail.com). Normalize email addresses before comparing (gmail.com ignores dots and plus-aliases). Many SaaS programs miss this entirely.
Stolen card chains. Fraudster refers themselves with stolen cards, collects the reward, original cardholder disputes. You eat the chargeback AND paid the reward. Solution: hold rewards in escrow for 14 to 30 days (longer than the typical chargeback window for the card brand).
Coordinated referral rings. Real humans refer each other in a loop. Graph analysis catches obvious rings; sophisticated ones need human review on payouts over $X.
If you build custom, all of this is on you. If you buy, ReferralCandy and Friendbuy ship with built-in fraud rules, but you still configure the thresholds.
Attribution window is the time between a click on a referral link and the qualifying event (signup, paid conversion). Set it too short and you under-credit referrers; too long and you over-pay.
Industry defaults:
Server-side tracking (Stripe webhooks, your own database) beats client-side cookies for any window over 30 days. Safari ITP wipes first-party cookies after 7 days for sites the user has not visited recently. If you rely on cookies alone, you lose attribution on the majority of mobile Safari traffic.
The fix is to capture the referral code at click time, persist it server-side against the visitor's email or user ID as soon as you have one, and reconcile at the conversion event. This is similar to building any admin dashboard with proper event tracking: the database schema is the actual product, and the UI is the easy part.
In the US, paying any individual $600 or more in a calendar year triggers a 1099-NEC reporting requirement. Your referral program is, from the IRS's perspective, an independent contractor payment scheme.
That means:
For programs paying recurring revenue share to influencers and creators, the $600 threshold gets hit fast. A single referrer driving $300/mo in payouts crosses it in month two.
The boring but correct answer is to plug into Stripe Connect, Trolley, or Tipalti for payouts. They handle W-9 collection, 1099 issuance, and cross-border tax. Adds $0.50 to $2 per payout but removes a real liability.
If you self-build payouts via ACH, you are now a tax-reporting business. Budget another $3,000 to $8,000 in engineering for the compliance plumbing alone. Same dynamic comes up when you build Stripe-based subscription billing for a Shopify app: the payment integration is one week; the tax compliance is three.
If you do build custom, here is how engineering hours shake out at mid-tier ($1,000/week) Cadence rates.
| Feature | Time | Cost at mid-tier |
|---|---|---|
| Referral link generation and tracking | 3 to 5 days | $600 to $1,000 |
| Server-side attribution + cookie fallback | 5 to 7 days | $1,000 to $1,400 |
| Reward calculation engine | 4 to 6 days | $800 to $1,200 |
| Fraud detection rules | 5 to 10 days | $1,000 to $2,000 |
| Payout integration (Stripe Connect or Trolley) | 3 to 5 days | $600 to $1,000 |
| Referrer dashboard | 4 to 7 days | $800 to $1,400 |
| Admin panel for approvals and overrides | 3 to 5 days | $600 to $1,000 |
| Email, analytics, testing | 10 to 15 days | $2,000 to $3,000 |
Total: roughly $7,400 to $12,000 at mid-tier for a clean build. Add a senior at $1,500/week for architecture and fraud layers to land in the $15,000 to $25,000 range. Stretch goals (multi-currency, regional tax, advanced fraud scoring) push toward $45,000.
A few rules we apply with founders:
If you do choose custom, the work splits cleanly: a mid-tier engineer can ship the user-facing flow in 2 to 3 weeks, and a senior can handle the fraud and tax layer in another 2 weeks. This is how we typically scope it on Cadence when founders book the build directly. The pattern is similar to scoping cost when adding image generation to your app: commodity plumbing is fast, the differentiator work is where the senior time goes.
If you are early (under 5,000 users, no clear referral data yet):
If you are mid-stage (10k+ users, you already know you want this):
You can book a mid or senior engineer on Cadence to start the build this week if you want to skip the recruiter loop.
Most founders we see end up in the $10,000 to $18,000 total spend range for a custom referral program shipped in 6 to 8 weeks (mid-tier for the build, senior or lead fractional for the architecture). That compares favorably with the $30,000 to $45,000 typical for an equivalent agency build.
If you want a Build / Buy / Book recommendation tailored to your stack and stage, run it through our decision tool or book a 48-hour free trial with a vetted engineer to scope the build with you live.
Hosted SaaS (Rewardful, ReferralCandy, Friendbuy) takes 1 to 3 days from signup to live. A custom build runs 4 to 8 weeks at one full-time engineer, depending on the complexity of reward logic and fraud rules.
Recurring percent (10 to 30%) is the standard for SaaS with strong retention and high gross margin. Flat one-time payouts ($25 to $100) work better for B2C apps with shorter user lifetimes. Account credit beats both on margin if your product justifies it.
Block on any two of: IP address, payment method fingerprint, device fingerprint (FingerprintJS), or normalized email (strip Gmail dots and plus-aliases). Hold rewards in escrow for 14 to 30 days to cover the chargeback window. This stops the majority of fraud.
Yes, if you pay any US individual $600 or more in a calendar year. You will need to collect W-9s and issue 1099-NECs by January 31 of the following year. Use Stripe Connect, Trolley, or Tipalti to automate this rather than building it yourself.
Partially. Tally or Typeform for signup, Zapier for payouts via Wise or Stripe, Airtable as the database. Works under 100 referrers. Past that, manual workload and fraud risk push you to proper SaaS or custom.
Roughly when your monthly SaaS bill (base fee plus commission on referred revenue) exceeds $1,500 to $2,000 for more than 6 consecutive months. At that run rate, a $15,000 custom build amortizes in 8 to 18 months and you stop paying commission forever.