Surely there has to be another way?
As I said, you can play around:
- geo targeting, find out what is the main office or location or even city of that cpa company and exclude that city or region, make it to show regular page to them.
- make sempling of data, like, to show content locker just to some percent of visitors, like 25 % to 35 % to see locked content.
- make them decoy, make some different website (preferably new and without previous visits) with some offer and ask them for manual review, like, "please check is it everything ready and by your standards, before I start campaign, I don't want problems later" and from the moment that you send email start to collect all visits to site - ip's, hosts, user agent strings, javascript to detect their browser plugins, screen size and all what js can figure out from them, and put them into filters...
- there is a few things more that will not say in public but even with that nothing helps when they are really eager to catch you. You can trigger their filters on many ways, starting from amount of money made in a month to quality of leads - if you are sending 1000 visits a day and make 3 or nothing of conversions, they know that something can be wrong. And when they decide to check it, for real, you probably don't have a chance. Depend of their size and ability to protect their assets, of course. Some smaller companies and aff managers will just visit the site, see that everything is good and that's it. Some of them will go to extend to check your site few times, in various time of a day, from various timezones and places, cities, continents, with various browsers, with or without javascript enabled, from various PC configurations, operative systems, devices, referrers and no referrers... That setup can be done easily (with their resources) to visit your site in same time or short time frame, and of course they can take a snapshot of your site form each of those configurations, all cashed files/saved page/screenshot/crc size/md5 hash value of visited page, and automatically compare all pages to see differences, to see how the page is acting for 8 or 10 different visitors from various locations and all what I just mentioned. Imagine that! So, even if you are working something, and they see some results of your work, leads, conversions, whatever, don't just assume that they are stupid and they don't know how you are making sales. They are just giving you some free space, to take at least something from you, to shave leads, to kick you out 2 days before payment day, etc.