In this article
1. What Are Popunder Ads?
Popunder advertising is a format in which an advertisement opens in a new browser window or tab that loads behind the user's current window — hence "pop-under." Unlike pop-up ads that appear in front of the user's active content and demand immediate attention, popunders remain hidden until the user closes or minimizes the current window, at which point the ad is revealed. This delayed exposure model fundamentally changes how users encounter and engage with the creative.
Popunders emerged in the late 1990s as a less intrusive alternative to pop-ups, which had become so widely blocked by browser toolbars and user hostility that their effectiveness collapsed. The popunder approach retained the full-page takeover advantage while reducing the immediate annoyance that made pop-ups universally despised. Two decades later, popunders remain one of the highest-volume ad formats globally, particularly in performance marketing, affiliate networks, and emerging markets where premium inventory is scarce and user acquisition costs must stay low.
Despite their controversial reputation among brand advertisers, popunders deliver extraordinary scale. Major ad networks serve billions of popunder impressions daily across web properties spanning entertainment, file sharing, gaming, streaming, and utility sites. For the right advertiser verticals, popunders offer unmatched reach at CPMs that are a fraction of display or video alternatives.
2. How Popunders Work Technically
Popunder delivery relies on JavaScript execution that creates a new browser window or tab and positions it behind the current window. The technical implementation has evolved significantly as browsers have tightened their popup-blocking mechanisms.
Classic Implementation
The original approach used window.open() triggered by a user interaction event (click, mouseover, or keypress). The script immediately calls window.blur() on the new window or window.focus() on the parent window to push the ad behind the active content. Early implementations fired on page load without any user interaction, but modern browsers block untrusted popups that lack a user gesture origin.
Modern Delivery Methods
As browser controls tightened, popunder networks developed more sophisticated delivery techniques:
- Click-capture layering: A transparent overlay captures the user's first click anywhere on the page, fires the popunder, and then passes the click through to the intended element. The user perceives normal page interaction while the popunder opens behind.
- Tab-jacking via redirect: Instead of opening a new window, the script replaces the current tab's location with the advertiser URL, then uses the browser's back button or history API to restore the original page. The user sees the ad briefly before the original content loads.
- Push-notification-to-popunder: Some networks deliver popunder-like experiences through web push notifications that open new tabs when clicked, bypassing popup blockers entirely because the notification is a user-initiated permission flow.
- Domain redirect (parking/monetization): Expired or parked domains redirect all traffic to a popunder ad network, monetizing type-in traffic or expired link clicks with full-page ad experiences.
Frequency Capping
Popunder networks implement aggressive frequency capping at the network level. Standard caps range from 1 popunder per user per 4–24 hours per publisher domain. Cookie-based and IP-based tracking enforce these caps across sessions. Without frequency management, popunder inventory rapidly degrades in quality as the same users are repeatedly exposed, destroying engagement metrics and advertiser ROI.
3. Use Cases & Verticals
Popunders are not a universal format — they excel in specific verticals where scale, low acquisition cost, and high-impression volume outweigh brand-safety concerns:
| Vertical | Typical Use | Why Popunder Works |
|---|---|---|
| Software & App Installs | Driving downloads of utilities, VPNs, antivirus | Full landing page load; high conversion at low CPM |
| Finance & Crypto | Exchange sign-ups, trading platforms, wallet installs | High user LTV justifies aggressive acquisition |
| Gaming | Browser game registrations, casino/sportsbook | Volume-driven; popunders deliver scale cheaply |
| E-commerce | Flash sales, discount aggregators, coupon sites | Immediate landing page engagement on discovery |
| Content & Streaming | Subscription services, content platforms | Low-funnel awareness in high-traffic environments |
| Sweepstakes & Lead Gen | Email/phone submit campaigns, prize draws | CPA model aligns with popunder economics |
Brand advertisers rarely use popunders. The format sits at the bottom of the brand-safety hierarchy and is explicitly excluded from most premium media plans. However, for performance marketers operating on CPA or CPL models, popunders remain a core channel for user acquisition at scale.
4. CPM Ranges & Performance Benchmarks
Popunder CPMs are among the lowest in digital advertising, reflecting the format's controversial nature and lower engagement quality:
| Region | CPM Range | Avg. CTR | Conversion Rate |
|---|---|---|---|
| US / Canada (Tier 1) | $1.50–$5.00 | 0.08–0.25% | 0.5–2.0% |
| Western Europe | $1.00–$4.00 | 0.06–0.20% | 0.4–1.5% |
| Eastern Europe | $0.30–$1.50 | 0.10–0.35% | 0.8–3.0% |
| Latin America | $0.20–$1.00 | 0.12–0.40% | 1.0–3.5% |
| Asia-Pacific | $0.15–$1.20 | 0.08–0.30% | 0.6–2.5% |
| Africa / MENA | $0.10–$0.60 | 0.15–0.50% | 1.2–4.0% |
Tier 1 CPMs are higher because competition for users in those markets is fiercer and the downstream conversion values are greater. Eastern Europe, Latin America, and Africa often show higher CTR and conversion rates because users in those markets are less saturated with advertising, making popunder encounters relatively novel and more likely to generate engagement. Smart performance marketers exploit this geographic arbitrage by running high-volume campaigns in emerging markets where CPMs are low and conversion rates are disproportionately strong.
5. Pros & Cons
Advantages
- Massive scale: Popunder networks access billions of daily impressions across long-tail publishers that premium demand sources ignore.
- Low CPM: Costs are 80–95% lower than standard display, enabling aggressive testing and iteration.
- Full-page landing: The ad loads a complete landing page, not a banner or overlay, giving advertisers their entire conversion funnel to work with.
- Non-interruptive: Because the ad opens behind the current window, it does not immediately disrupt the user's task, reducing bounce-at-first-sight.
- Simple integration: Publishers add a single JavaScript tag; no complex SDK, VAST, or creative rendering pipeline required.
Disadvantages
- Brand safety: Premium advertisers avoid popunders due to association with low-quality publishers, malware distribution, and deceptive landing pages.
- Browser blocking: Chrome, Safari, Firefox, and Edge all include popup blockers that intercept a significant percentage of popunder attempts.
- Low engagement quality: Many popunder impressions are never actually viewed — users close the background tab without looking at it.
- Regulatory risk: GDPR, CCPA, and consumer protection regulations scrutinize popunders for consent violations and deceptive practices.
- Ad blocker impact: Most ad blockers detect and suppress popunder scripts, reducing effective reach by 30–45% in markets with high ad-blocker adoption.
6. OpenRTB Integration
Popunder inventory is traded programmatically through OpenRTB, though it occupies a distinct niche within the protocol. The IAB OpenRTB 2.6 specification does not define a dedicated object for popunders; instead, they are typically represented as standard banner or interstitial impressions with specific attributes that signal the delivery method.
Bid Request Structure
SSPs representing popunder inventory typically set instl: 1 to signal interstitial/full-screen delivery. Some networks use custom extensions (ext.popunder: true) to explicitly declare the format, allowing DSPs to filter or accept it according to their advertiser policies. Smart advertisers configure their DSPs to accept popunder inventory selectively — enabling it for performance campaigns while blocking it for brand campaigns.
Bid Response & Ad Markup
The bid response for a popunder typically returns a redirect URL rather than an HTML snippet. When the user interaction triggers the popunder, the SSP or publisher script opens the winning bid's redirect URL in a new window/tab. This redirect points to the ad server, which resolves the final landing page through a chain of tracking redirects. The entire flow from bid win to landing page load must complete in under 3 seconds to avoid browser timeout and user abandonment.
7. Browser Restrictions & Platform Policies
Browser vendors have systematically restricted popup and popunder behavior over the past decade. Understanding these restrictions is essential for anyone operating in the popunder ecosystem:
| Browser | Policy | Impact on Popunders |
|---|---|---|
| Chrome | Popup blocker blocks window.open() without user gesture; abusive site warnings | Requires click-capture or user-initiated trigger; Chrome Safe Browsing flags aggressive popunder domains |
| Safari / iOS | Strict popup blocking; Intelligent Tracking Prevention blocks cross-site tracking | Very limited popunder delivery on iOS; Safari's pop-up blocker intercepts 90%+ of attempts |
| Firefox | Popup blocker enabled by default; Enhanced Tracking Protection | Similar to Chrome; user gesture required |
| Edge | Chromium-based; inherits Chrome popup policies plus Microsoft Defender SmartScreen | SmartScreen adds additional domain reputation layer that blocks known popunder domains |
Google's Chrome Safe Browsing program and Microsoft's SmartScreen actively classify domains associated with aggressive popunder behavior as "deceptive" or "potentially harmful." Once flagged, these domains trigger interstitial warnings that deter users from proceeding. Popunder networks must rotate landing domains frequently and maintain domain reputation hygiene to avoid these blocklists.
Mobile browsers present an additional challenge. iOS Safari's popup blocker is nearly impenetrable for traditional popunder techniques. Android Chrome is somewhat more permissive but still requires user gestures and increasingly flags popunder-heavy sites. As a result, popunder volume skews heavily toward desktop, with mobile representing only 25–35% of total popunder impressions in most networks.
8. Compliance Considerations
Popunder advertising operates in a heightened compliance environment. Multiple regulatory frameworks impose specific requirements:
GDPR (EU/EEA)
Popunder delivery requires prior consent under GDPR because it involves setting cookies, device fingerprinting, and behavioral tracking. The user must provide affirmative consent before the popunder script can execute. Publishers running popunder networks must implement compliant consent management platforms (CMPs) and ensure that consent signals are propagated to all downstream ad tech vendors. Failure to do so exposes both publisher and advertiser to enforcement actions carrying fines up to 4% of global annual revenue.
CCPA / CPRA (California)
California's Consumer Privacy Act and its amendment, the California Privacy Rights Act, require that users be informed about data collection and have the right to opt out of the sale of their personal information. Popunder scripts that collect IP addresses, device identifiers, or behavioral data for targeting purposes must honor "Do Not Sell" signals and provide a clear privacy disclosure.
FTC & Consumer Protection
The U.S. Federal Trade Commission has taken enforcement actions against popunder networks that distribute deceptive ads, malware, or fraudulent landing pages. The FTC's position is that popunders that misrepresent their source, mimic system alerts, or deliver harmful software constitute unfair and deceptive practices. Advertisers using popunders must ensure their landing pages are truthful, non-deceptive, and clearly identify the advertiser.
9. Best Practices
For advertisers and publishers who determine that popunders are appropriate for their strategy, these practices maximize performance while minimizing risk:
- Aggressive frequency capping. Limit popunders to 1 per user per 24 hours per publisher. Over-exposure destroys engagement and invites browser blacklist inclusion.
- Landing page quality. Invest in fast-loading, mobile-responsive landing pages. Popunder landing pages must load in under 2 seconds and present a clear value proposition above the fold.
- Domain rotation and reputation management. Maintain a portfolio of landing domains and rotate them before they accumulate enough traffic to trigger browser blacklist thresholds.
- Geo-targeting precision. Target campaigns to regions where popunder effectiveness is highest and regulatory risk is manageable. Tier 1 markets require stricter compliance; emerging markets offer better raw performance.
- Post-click verification. Track not just clicks but downstream engagement — time on site, scroll depth, conversion events. Many popunder clicks are accidental; optimizing for post-click behavior separates real signal from noise.
- Creative honesty. Never mimic system alerts, browser notifications, or OS dialogs. These tactics may inflate short-term CTR but trigger regulatory enforcement and domain blacklisting.
- Supply chain transparency. Vet popunder supply sources. Demand verified sellers.json entries, app-ads.txt where applicable, and independent fraud scanning through IAS or DoubleVerify.
- A/B test everything. Popunder creative testing should include landing page variants, load-time optimization, CTA placement, and offer structures. The low CPM makes rapid iteration affordable.