[{"id":3204242,"pubDate":"Thu, 08 Oct 2026 14:08:41 +0200","titre":"Sign of the times? Protecting your company from B2B deception","description":"Sign of the times? Protecting your company from B2B deception lfair December 9, 2019 | 2:09PM Sign of the times? Protecting your company from B2B deception By Lesley Fair They may look like invoices sent to business owners for posters they may need to display in the workplace. But we think of them as un voices – deceptively worded solicitations that tried to sell companies posters that are readily available for free. A law enforcement action just settled by the FTC and Florida Attorney General offers tips on protecting your business from this form of B2B deception. According to the FTC and AG, four defendants with ties to Texas and Florida – Starwood Consulting, Starwood Capital, Corporate Poster Supply, and Thomas Henry Fred, Jr. – sent letters to businesses across the country with the goal of tricking them into paying $84 for posters about labor practices. To perfect their pitch, the letters had the look of invoices from government agencies or other authorities and warned recipients that they had two choices: 1) buy the $84 posters; or 2) face hefty fines. In fact, posters similar to the ones in question were available for free from relevant government agencies. But according to the lawsuit, many businesses forked over $84 under the misimpression that they had to buy them from the defendants. The proposed settlement in the case includes provisions to prevent the defendants from using similar tactics to injure consumers in the future, including a ban on unsolicited direct mail. Based on the defendants’ financial condition, the $6 million judgment will be partially suspended upon the payment of $1.2 million. What can other businesses do to protect themselves from B2B deception? What’s your sign? Investigate first. If you think you may need to post signs, check with the relevant government agency. But don’t use a phone number or URL listed in a solicitation you get in the mail. Do your research and go to the legitimate .gov website for more information. Consider free options. It’s true that certain agencies may require businesses to display signs on the premises about subjects like labor practices. But if a poster is required, most likely it’s available for free from the agency’s website. One helpful resource is the Department of Labor’s FirstStep Poster Advisor , which walks businesses through industry-specific posters required by that agency and provides the signs at no charge to employers. You can order them online, call the agency toll-free for copies, or even download them directly and print them out. Why pay for something your business can get for free? Alert colleagues in the business community . Are you active in a trade association or local business group? Enlist them to educate members about similar solicitations and other forms of B2B deception, including bogus office supply invoices and imposter phone calls that claim your company will be shut down if you don’t pay an immediate fee. Read the FTC brochure Scams and Your Small Business (also available in Spanish ) for tips on spotting B2B","url":"https://www.ftc.gov/business-guidance/blog/2019/12/sign-times-protecting-your-company-b2b-deception","source":"FTC USA Business Blog Posts"},{"description":"i-Dressup and a data security mess-up lfair April 24, 2019 | 3:08PM i-Dressup and a data security mess-up By Lesley Fair Kids love to play dress-up, but parents wouldn’t want them rummaging through the attic or climbing to the top shelf of the wardrobe without permission and proper supervision. The i-Dressup.com website offered users – including children – a virtual way to play dress-up and design clothes without those potential dangers. But according to an FTC complaint, Unixiz, Inc. , the company behind i-Dressup, violated the Children’s Online Privacy Protection Act in ways that created different kinds of risks. COPPA puts two separate sets of protections in place to help keep parents in control of personal information collected from their kids online. First, COPPA-covered companies must clearly disclose their information policies and get parental consent before collecting personal information from children under 13. Second, companies must provide reasonable and appropriate security for the data they collect. According to an FTC settlement, i-Dressup fell short on both COPPA requirements. The complaint alleges i-Dressup failed to provide sufficient notice on its site of the information it collected online from kids, how it used it, its disclosure practices, and other specifics required by the COPPA Rule. The company’s direct notices to parents were deficient, too. Among other things, they didn’t include the COPPA-required statement that if parents don’t provide consent within a reasonable time, i-Dressup will delete their online contact information from its records. Stick with the story because that failure turned out to be particularly troubling. In addition to letting users play online games, i-Dressup featured a community where they could “explore their creativity and fashion sense with unique personal profiles” and interact with others. To register, i-Dressup required people to submit a user name, password, birthdate, and email address. If the birthdate indicated the person was under 13, the email field changed to “Parent’s Email.” Once the under-13 user filled in the required fields and clicked “Join Now,” i-Dressup collected the personal information and sent a message to the address entered into the Parent’s Email field. The person receiving the email could consent by clicking the “Activate Now!” button. However, if the parent didn’t give consent, i-Dressup retained the personal information it had collected from the child online. The FTC says the company’s failure to delete that information violated Section 312.5(c)(1) of the COPPA Rule. In addition to violating COPPA’s parental consent provisions, i-Dressup allegedly violated the Rule’s data security requirements . According to the FTC, i-Dressup stored and transmitted users’ personal information (including passwords) in plain text. In addition, the company failed to perform network vulnerability testing of its network, even for well-known threats like SQL attacks; it didn’t implement an intrusion detection and prevention system; and it didn’t monitor for potential security incidents. The upshot? The company learned that a hacker had gained entry to its network and accessed information about 2.1 million users, including approximately 245,000 users who indicated they were under 13. To settle the case , i-Dressup and its owners will pay a $35,000 civil penalty. They’re also prohibited from violating COPPA in the future, and can’t sell, share, or collect any personal information until they implement a comprehensive data security program and get independent biennial assessments. In addition, they’ll have to provide the FTC with an annual certification of compliance. The message for sites and operators covered by COPPA is that an effective system of parental consent is only the first step toward compliance. Section 312.8 of the COPPA Rule also requires you to “establish and maintain reasonable","titre":"i-Dressup and a data security mess-up","id":3203250,"pubDate":"Thu, 08 Oct 2026 08:06:59 +0200","source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2019/04/i-dressup-data-security-mess"},{"pubDate":"Wed, 07 Oct 2026 08:05:50 +0200","id":3201052,"titre":"First FTC ROSCA case challenges bogus BOGO and \"free\" claims","description":"First FTC ROSCA case challenges bogus BOGO and \"free\" claims wfg-adm109 October 21, 2014 | 12:02PM First FTC ROSCA case challenges bogus BOGO and \"free\" claims By Lesley Fair It’s called ROSCA – the Restore Online Shoppers’ Confidence Act – and it prohibits marketers from charging consumers for an online transaction unless the marketer has clearly disclosed all material terms of the deal and received the consumer’s express informed consent. Your e-commerce clients will want to know about the FTC’s first ROSCA case , filed recently in Nevada. According to the lawsuit, Health Formulas, LLC and a tangle of related California- and Nevada-based companies and individuals – consumers may know them as Simple Pure Nutrition – pitched a variety of products for weight loss, muscle building, virility, and skin care. The defendants advertised diet supplements like Pure Green Coffee Bean Plus and RKG Extreme as a shortcut to drop the pounds: “Burn fat without diet or exercise,” “Extreme weight loss!” “Shed pounds fast!” “Super concentrated double fat burning,” etc. Among the defendants’ more colorful business names: Weight Loss Dojo, Longhorn Marketing (sorry, Texas fans), Black Bull, and Unleash the Thunder. But unsubstantiated weight loss claims were just the start. The FTC says the defendants lured people in with bogus promises of a “free” trial or deceptive buy-one-get-one (BOGO) offers. Then they tricked consumers into giving their credit or debit card information with the false implication that consumers had to “just pay shipping.”   Digits in hand, the defendants really went to town, allegedly signing consumers up without their authorization for a negative option program that billed their accounts over and over again, to the monthly tune of between $60 and $210. The FTC says the defendants violated ROSCA by using a negative option feature without providing clear and conspicuous disclosures, getting the consumer’s express informed consent, and offering a simple mechanism for stopping the recurring charges. The FTC’s complaint also cites the defendants’ hard-to-find and hard-to-understand fine-print “terms and conditions,” which consumers could reach only by scrolling through the equivalent of two printed pages and clicking on an obscure hyperlink. Assuming they found it – and that’s a big if – the typical “terms and conditions” document was 10 pages long. On some websites, consumers had to scroll down the payment page to see further fine-print disclosures about the cost of the products. The first sentence reiterated what consumers generally understood (“You must pay a shipping and handling fee of $4.95 for us to send you a full 30 day supply of Garcinia Cambogia Extract”) but it wasn’t until the middle of the paragraph that the defendants mentioned that the trial period lasts only 14 days, that it began when the items were shipped (not delivered), and that consumers would be charged after that. Other websites didn’t even include that information. According to the lawsuit, consumers who attempted to take the defendants up on their money-back guarantee were met with a series of undisclosed roadblocks. In addition to the ROSCA counts, the FTC says the defendants’ practices violated the Electronic Fund Transfer Act by debiting consumers’ accounts on a recurring basis without their prior written authorization. What’s more, the complaint charges that the defendants continued to call people after being told to cut it out, in violation of the Telemarketing Sales Rule’s entity-specific Do Not Call provisions. The FTC says they also violated the TSR through a series of deceptive upsells. A federal judge has entered a temporary restraining order and the FTC is seeking to put a permanent stop to the defendants’ illegal practices. If your clients have ROSCA questions, the","url":"https://www.ftc.gov/business-guidance/blog/2014/10/first-ftc-rosca-case-challenges-bogus-bogo-free-claims","source":"FTC USA Business Blog Posts"},{"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2025/09/first-inform-consumers-act-enforcement-case-filed-against-online-marketplace-temu","titre":"First INFORM Consumers Act enforcement case filed against online marketplace Temu","id":3198178,"pubDate":"Mon, 05 Oct 2026 14:07:45 +0200","description":"First INFORM Consumers Act enforcement case filed against online marketplace Temu kkrown September 5, 2025 | 10:00AM First INFORM Consumers Act enforcement case filed against online marketplace Temu Online marketplaces and third party sellers looking for a refresher on the INFORM Consumers Act should look no further than the recent settlement with Whaleco, Inc., which operates the online marketplace Temu. The complaint alleges the company failed to provide online shoppers with required information and tools. This is the first case brought to enforce the INFORM Act. The INFORM Act, which went into effect in 2023, seeks to make online transactions more transparent. Among other things, the law requires online marketplaces to collect, verify, and disclose certain information about high-volume third party sellers. ( Informing Businesses about the INFORM Consumers Act  has more on how the law defines terms, what’s required of online marketplaces, and the substantial penalties the FTC and state law enforcers may seek if online marketplaces violate the law.) In 2022, Temu launched its online marketplace in the United States, where consumers can view product listings on Temu’s homepage, through search results, and in gamified shopping experiences on the platform. According to the complaint, Temu violated the INFORM Act by failing to offer a mechanism for consumers to report suspicious activity — electronically and by phone — on the gamified product listings of many high-volume third party sellers and by failing to offer a telephonic mechanism on non-gamified product listings. The complaint also alleges that Temu did not post required identifying information about sellers on its gamified product listings or mobile site, and that Temu’s disclosures, when made, were difficult to find. According to the settlement, Temu will pay a $2 million civil penalty, provide a telephonic mechanism for consumers to report suspicious activity on listings, and make other required disclosures. Is your business covered by the INFORM Act? Make sure you:  Review the provisions of the INFORM Act thoroughly . Make sure you fully understand — and have measures in place to comply with — each of its requirements. Make required disclosures easy for consumers to notice . Required disclosures should stand out from any surrounding material and use plain language. Minimize or eliminate steps consumers need to take to reach required disclosures. Ensure required disclosures are available across all iterations of your platform . The INFORM Act mandates disclosures on all interfaces with product listings. And as your platforms evolve, regularly assess and update your compliance efforts. If your business sells through online platforms, check out  What Third Party Sellers Need to Know About the INFORM Consumers Act . This covers what sellers are impacted by the INFORM Act, what you can expect online platforms to require of you, and what information platforms must disclose about you to consumers. It also answers some questions you may have about the law. And if you spot a violation of the INFORM Act, r­eport it to the FTC using this  dedicated link"},{"id":3197409,"pubDate":"Mon, 05 Oct 2026 08:07:08 +0200","titre":"Stick with Security: Require secure passwords and authentication","description":"Stick with Security: Require secure passwords and authentication lfair August 11, 2017 | 10:47AM Stick with Security: Require secure passwords and authentication By Thomas B. Pahl, Acting Director, FTC Bureau of Consumer Protection To make it harder for hackers to bluff their way onto a computer network, careful companies follow the advice of Start with Security and require strong authentication practices . We’ve considered FTC settlements, closed investigations, and the questions we get from businesses about implementing good authentication “hygiene.” Here are some tips on using effective authentication procedures to help safeguard your network. Insist on long, complex, and unique passwords. A password’s very reason for being is to be easy for a user to remember, but hard for a fraudster to figure out. Obvious choices like ABCABC, 121212, or qwerty are the digital equivalent of a “hack me” sign. Furthermore, experts have determined that passphrases or longer passwords are generally harder to crack. The smarter strategy is for companies to think through their standards, implement minimum requirements, and educate users about how to create stronger passwords. Also, when you install software, applications, or hardware on your network, computers, or devices, change the default password immediately. And if you design products that require consumers to use a password, configure the initial set-up so they have to change the default password. Example: A staff member attempts to select payroll as the password for the database that includes employee payroll information. The company sets up its system to reject an obvious choice like that. Example: To access the corporate network, a business allows employees to type in their username and a shared password common to everyone who works there. Employees are also allowed to use that shared password to access other services on the system, some of which contain sensitive personal information. The more prudent policy would be to require strong, unique passwords for each employee and to insist that they use different passwords to access different applications. Example: At a staff meeting, a company’s IT manager offers tips for employees about good password hygiene. She explains that passphrases or longer passwords are better than short passwords based on standard dictionary words or well-known information (for example, a child’s name, a pet, a birthday, or a favorite sports team). By establishing a more secure corporate password standard and educating employees about implementing it, the IT manager is taking a step to help her company reduce the risk of unauthorized access. Store passwords securely. A company’s first line of defense against data thieves is a workforce trained to keep passwords secret. But even the strongest password is ineffective if an employee writes it on a sticky note on her desk or shares it with someone else. Train your staff not to disclose passwords in response to phone calls or emails, including ones that may appear to be coming from a colleague. Con artists have been known to impersonate corporate officials by spoofing phone numbers or email addresses. A compromised password poses a particular risk if it can be used to open the door to even more sensitive information – for example, a database of other user credentials maintained on the network in plain, readable text. Make it difficult for data thieves to turn a lucky password guess into a catastrophic breach of your company’s most sensitive data by implementing policies and procedures to store credentials securely. Example: A new employee gets a call from someone who claims to be the company’s system administrator. The caller asks him to verify his network password. Because the new staffer learned about impersonation scams at an in-house security orientation, he refuses to disclose his password and instead reports the incident to the appropriate person in the company. Example: A company keeps user credentials and other passwords in plain","url":"https://www.ftc.gov/business-guidance/blog/2017/08/stick-security-require-secure-passwords-authentication","source":"FTC USA Business Blog Posts"},{"url":"https://www.ftc.gov/business-guidance/blog/2016/07/ftc-challenges-influencer-campaign-warner-bros-shadow-mordor-game","source":"FTC USA Business Blog Posts","pubDate":"Thu, 01 Oct 2026 08:11:55 +0200","id":3189423,"titre":"FTC challenges influencer campaign for Warner Bros.’ Shadow of Mordor game","description":"FTC challenges influencer campaign for Warner Bros.’ Shadow of Mordor game lfair July 11, 2016 | 11:17AM FTC challenges influencer campaign for Warner Bros.’ Shadow of Mordor game By Lesley Fair In the popular video game Shadow of Mordor , players don’t just randomly slash, hack, and pillage. They battle specific opponents through a feature known as the Nemesis System. In the FTC’s lawsuit against Warner Bros. Home Entertainment , truth in advertising had a nemesis: paid pitches for Shadow of Mordor that Warner Bros. deceptively claimed were independent reviews. And read on for a startlingly candid statement by one of those influencers. To help launch Shadow of Mordor , Warner Bros. brought a social media company on board to coordinate a YouTube influencer campaign. One strategy was to hire influential gamers to post videos promoting Shadow of Mordor – videos that ultimately yielded more than 5.5 million YouTube views. In addition to free game access, Warner Bros. paid the influencers cash – ranging from hundreds of dollars to five figures. Influencers’ videos were subject to pre-approval and, according to the terms of the agreement, Warner Bros. “will be deemed the author and exclusive owner.” Warner Bros. was quite exacting in what else it required of influencers: “Video will feature gameplay” of the Shadow of Mordor game. “Video will have a strong verbal call-to-action to click the link in the description box for the viewer to go to the [game’s] website to learn more about the [game], to learn how they can register, and to learn how to play the game.” “Video will promote positive sentiment” about the game. “Video will not show bugs or glitches that may exist.” “Video will not communicate negative sentiment” about Warner Bros. Home Entertainment, its affiliates or the game. Warner Bros. also required “One Facebook post or one Tweet by Influencer in support of Video.” “Positive sentiment” posted for cash? That sounds like the kind of material connection between an advertiser and endorser the FTC says should be clearly and conspicuously disclosed. And for FTC watchers, that’s where the story gets almost as interesting as Shadow of Mordor . According to the complaint , influencers were directed to place sponsorship information in the text of the description box – that’s the collapsed box just below a YouTube video – not in the video itself. Furthermore, they were told to put “information about [the game] above the fold” in the description box and that the “description box will include FTC disclaimer disclosing that the post is sponsored.” But as the first example shows, only the top few lines of the description box are immediately visible. Without clicking the “Show More” button and possibly scrolling down, consumers wouldn’t see the sponsorship disclosure – especially since Warner Bros. mandated that game information had to come first. The second screenshot shows an example of the sponsorship information at the end of the expanded “Show More” box and illustrates – inadvertently perhaps – the FTC’s concern with the placement of the disclosure. In this example, the gamer wrote “This video sponsored by Warner Bros.” and followed with this telling statement: “No one reads this far into the description ... what are you doing snooping around.” Our sentiments exactly, Dude. In other instances, influencers’ videos included a half-hearted sponsorship disclosure – for example, “This has been one of my favorite sponsored games, so thanks that I could play it for free!!” – that failed to mention that in addition to free play, Warner Bros. was paying them thousands of dollars. The complaint charges that Warner Bros. falsely represented that the Shadow of Mordor gameplay videos reflected the independent opinions or experiences of impartial"},{"pubDate":"Thu, 12 Jun 2025 09:51:56 +0200","id":2174951,"titre":"FTC and DOJ to Host Listening Sessions on Lowering Americans’ Drug Prices Through Competition","description":"As part of implementing President Trump’s Executive Order No. 14273, Lowering Drug Prices by Once Again Putting Americans First , the Federal Trade Commission and the Justice Department’s Antitrust Division, along with the Department of Commerce and the Department of Health and Human Services, will jointly host listening sessions to discuss ways to make prescription drugs more affordable for Americans by promoting competition. The three listening sessions will occur under the direction of FTC Chairman Andrew N. Ferguson and Assistant Attorney General Gail Slater of the DOJ Antitrust Division. The listening sessions will focus on improving the affordability of pharmaceuticals by increasing generic and biosimilar availability and promoting competition through drug formularies and benefits. The sessions, which will feature remarks by practitioners and scholars, will cover anticompetitive practices as well as eliminating regulatory barriers and rent seeking . The listening sessions will inform the FTC and DOJ’s joint report on combatting anticompetitive practices in pharmaceutical markets, as mandated by President Trump’s Executive Order. The dates for the sessions are as follows: Monday, June 30 at 2 pm ET – Anticompetitive Conduct by Pharmaceutical Companies Impeding Generic or Biosimilar Competition Thursday, July 24 at 2 pm ET – Formulary and Benefit Practices and Regulatory Abuse Impacting Drug Competition Monday, August 4 at 2 pm ET – Turning Insights into Action to Reduce Drug Prices The listening sessions will be streamed on the FTC and DOJ websites, with videos and transcripts posted after the events. Additional information will be posted to the event page   prior to each session","url":"https://www.ftc.gov/news-events/news/press-releases/2025/06/ftc-doj-host-listening-sessions-lowering-americans-drug-prices-through-competition","source":"Federal Trade Commission Concurrence communiqués"}]