Pretty much what the competition does: https://www.postaffiliatepro.com/features/direct-link-tracking/ - so measuring the HTTP_REFERER header and then matching it with a whitelisted domain that is your affiliate.