What are you talking about? If a double meta refresh is done properly, there's no way for the CPA company to track where the click came from as the method will only send through leads that have a blank referrer. The rest either get a 404, or you can set it up that they get a different page, or to keep refreshing them until the referrer is dropped.
Other than double meta, you can use the .htaccess method, or get the power link generator.