[{"description":"i-Dressup and a data security mess-up lfair April 24, 2019 | 3:08PM i-Dressup and a data security mess-up By Lesley Fair Kids love to play dress-up, but parents wouldn’t want them rummaging through the attic or climbing to the top shelf of the wardrobe without permission and proper supervision. The i-Dressup.com website offered users – including children – a virtual way to play dress-up and design clothes without those potential dangers. But according to an FTC complaint, Unixiz, Inc. , the company behind i-Dressup, violated the Children’s Online Privacy Protection Act in ways that created different kinds of risks. COPPA puts two separate sets of protections in place to help keep parents in control of personal information collected from their kids online. First, COPPA-covered companies must clearly disclose their information policies and get parental consent before collecting personal information from children under 13. Second, companies must provide reasonable and appropriate security for the data they collect. According to an FTC settlement, i-Dressup fell short on both COPPA requirements. The complaint alleges i-Dressup failed to provide sufficient notice on its site of the information it collected online from kids, how it used it, its disclosure practices, and other specifics required by the COPPA Rule. The company’s direct notices to parents were deficient, too. Among other things, they didn’t include the COPPA-required statement that if parents don’t provide consent within a reasonable time, i-Dressup will delete their online contact information from its records. Stick with the story because that failure turned out to be particularly troubling. In addition to letting users play online games, i-Dressup featured a community where they could “explore their creativity and fashion sense with unique personal profiles” and interact with others. To register, i-Dressup required people to submit a user name, password, birthdate, and email address. If the birthdate indicated the person was under 13, the email field changed to “Parent’s Email.” Once the under-13 user filled in the required fields and clicked “Join Now,” i-Dressup collected the personal information and sent a message to the address entered into the Parent’s Email field. The person receiving the email could consent by clicking the “Activate Now!” button. However, if the parent didn’t give consent, i-Dressup retained the personal information it had collected from the child online. The FTC says the company’s failure to delete that information violated Section 312.5(c)(1) of the COPPA Rule. In addition to violating COPPA’s parental consent provisions, i-Dressup allegedly violated the Rule’s data security requirements . According to the FTC, i-Dressup stored and transmitted users’ personal information (including passwords) in plain text. In addition, the company failed to perform network vulnerability testing of its network, even for well-known threats like SQL attacks; it didn’t implement an intrusion detection and prevention system; and it didn’t monitor for potential security incidents. The upshot? The company learned that a hacker had gained entry to its network and accessed information about 2.1 million users, including approximately 245,000 users who indicated they were under 13. To settle the case , i-Dressup and its owners will pay a $35,000 civil penalty. They’re also prohibited from violating COPPA in the future, and can’t sell, share, or collect any personal information until they implement a comprehensive data security program and get independent biennial assessments. In addition, they’ll have to provide the FTC with an annual certification of compliance. The message for sites and operators covered by COPPA is that an effective system of parental consent is only the first step toward compliance. Section 312.8 of the COPPA Rule also requires you to “establish and maintain reasonable","id":3203250,"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2019/04/i-dressup-data-security-mess","titre":"i-Dressup and a data security mess-up","pubDate":"Thu, 08 Oct 2026 08:06:59 +0200"},{"source":"FTC USA Business Blog Posts","description":"FTC consumer protection year in review offers 2020 vision for your business lfair January 8, 2020 | 9:26AM FTC consumer protection year in review offers 2020 vision for your business By Lesley Fair They say hindsight is 20/20, but what about foresight? We’re not ones to prognosticate, but a look at notable FTC cases and initiatives from the past year suggests some topics likely to be top of mind in months to come. Here is a non-exhaustive list of issues in our 2019 rearview mirror and likely visible through the 2020 windshield. Consumer privacy. The FTC’s $5 billion enforcement action against Facebook made history and headlines, but the other notable part of the case is the monumental change the order mandates to Facebook’s privacy ecosystem. The Commission opinion in Cambridge Analytica reaffirms the proposition that like any other claim, a company’s privacy promises are viewed through the lens of established FTC consumer perception principles. A series of cases demonstrates the agency’s continued commitment to challenging false or misleading representations about businesses’ compliance with the EU-U.S. Privacy Shield Framework. Another important development is the FTC’s proposed settlement with Retina-X . It’s our first action against a marketer of stalking apps – software that allowed purchasers to monitor the mobile devices on which they’re installed, without users’ knowledge. COPPA. Congress passed the Children’s Online Privacy Protection Act to ensure that when it comes to the collection of kids’ personal information online, parents are in the driver’s seat. The FTC settlement with YouTube – brought in conjunction with the New York Attorney General – alleges that the company collected kids’ personal data without parental consent, in violation of the COPPA Rule . The $170 million civil penalty broke the record for the largest remedy in an FTC COPPA case, set months before in our $5.7 million settlement with Musical.ly , now known as TikTok. If you’re a YouTube channel owner, read a special Business Blog post for tips on determining if your content is directed to children. Data security. Is your company honoring its data security promises and taking reasonable steps to safeguard the sensitive information in its possession? The FTC, CFPB, and State AG actions against Equifax illustrate how consumers are injured when companies ignore reasonably foreseeable threats. The settlement, which totals between $575 million and $700 million – also reminds businesses that heeding warnings about known risks is more prudent (and cost-effective) than the alternative. Three threads tie together the FTC’s unrelated actions against LightYear Dealer Technologies and InfoTrax Systems . They both sell management software to specific industries. They both allegedly failed to take reasonable steps to secure their networks, resulting in damaging data breaches. And they’re both covered by similar new orders the FTC has introduced in recent data security cases. If you or your clients are players in the Internet of Things, the settlement of the FTC’s litigation against connected device company D-Link sends an unmistakable message: The future of the IoT marketplace depends on secure software development. Endorsements, certifications, and influencers. Why is the FTC concerned about the accuracy of endorsements and certifications? Because they’re material to consumers. The FTC says Truly Organics’ claim that its personal care products were “certified organic” lathered up a double bubble of deception. First, its merchandise contained ingredients that weren’t organic. Second, the company falsely claimed that its products were certified by USDA’s National Organic Program. Other FTC developments focused on the use of endorsements in social media. The FTC’s action against Devumi alleges the company sold fake followers, phony subscribers, and bogus","id":3203247,"titre":"FTC consumer protection year in review offers 2020 vision for your business","url":"https://www.ftc.gov/business-guidance/blog/2020/01/ftc-consumer-protection-year-review-offers-2020-vision-your-business","pubDate":"Thu, 08 Oct 2026 08:06:58 +0200"},{"source":"FTC USA Business Blog Posts","id":3201875,"description":"Setting the debt parking brake lfair November 30, 2020 | 12:14PM Setting the debt parking brake By Lesley Fair What are the biggest risks of parking? A dinged door? A bruised bumper? For consumers victimized by the pernicious practice of debt parking, the impact on their financial health can be devastating. And if you’re a debt collector who engages in debt parking, an FTC settlement with Midwest Recovery Systems suggests you could face law enforcement action for violations of the FTC Act, the Fair Debt Collection Practices Act, and the Fair Credit Reporting Act. Just what is debt parking? It’s the practice of placing purported debts on consumers’ credit reports without first attempting to communicate with the consumer about the debt. Some call it “passive debt collection,” but there’s nothing passive about the injury it can inflict. Consumers often don’t learn about it until a mortgage company, prospective employer, or other decision maker pulls their credit report and spots what appears to be an unpaid debt. With a house, car, or job in the balance, many people feel pressured to pay up – even though they may not actually owe the money. That’s the tactic the FTC says Missouri-based Midwest Recovery Systems and owners Brandon M. Tumber, Kenny W. Conway, and Joseph H. Smith engaged in. According to the lawsuit, since at least 2015, the defendants have reported to credit reporting agencies more than $98 million in bogus or highly questionable debts for payday loans, debts subject to unresolved fraud claims, debts in bankruptcy, debts in the process of being rebilled to consumers’ medical insurance, and even debts people had already paid. The FTC alleges the defendants continued to collect those debts even in the face of billowing red flags about their validity. In fact, when consumers were able to dispute the purported debts, the defendants have regularly concluded that between 80% and 97% of them were either inaccurate or invalid. That’s not surprising, given that many of those debts originated from certain payday lenders and others whom the FTC has sued for their own illegal practices. Here’s an example cited in the complaint of how the defendants used debt parking to help line their pockets with millions in gross revenue. When applying for a mortgage, a consumer was told that an outstanding medical debt of $1,500 had lowered his credit score, which threatened to put the kibosh on buying a house. He contacted the hospital where he supposedly owed the debt, only to be told that he owed just an $80 co-pay. In spite of that, the FTC says the defendants refused to remove the debt and threatened the consumer with a lawsuit if he didn’t pony up. His complaint was one of thousands that Midwest Recovery received. For people who work in the collections field, the pleading in this case merit a careful read. In addition to alleging the defendants made false or unsubstantiated representations in violation of the FTC Act and the Fair Debt Collection Practices Act , the complaint expressly challenges their debt parking tactics as an unfair practice under the FDCPA. The FTC says they also violated the FDCPA by failing to provide validation notices – one of the protections in the statute designed to ensure consumers have the information they need to dispute an invalid debt. Three other counts charge the defendants with violating the Fair Credit Reporting Act by furnishing information to credit reporting agencies they knew or had reasonable cause to believe was inaccurate, by failing to conduct reasonable investigations of disputes, and by failing to report the results of those investigations to consumers. The settlement suggests some takeaway tips for others in the collections ecosystem. Consumers’ credit reports are a NO PARKING zone. This is the first FTC case to address debt parking – and thus the first to challenge the practice as unfair under the FDCPA – but the message couldn’t be clearer. Debt collectors that park fake or","pubDate":"Wed, 07 Oct 2026 14:05:06 +0200","titre":"Setting the debt parking brake","url":"https://www.ftc.gov/business-guidance/blog/2020/11/setting-debt-parking-brake"},{"pubDate":"Tue, 06 Oct 2026 08:06:23 +0200","url":"https://www.ftc.gov/business-guidance/blog/2018/08/first-consumer-review-fairness-case-takes-promoters-big-bucks-amazon-claim","titre":"First Consumer Review Fairness case takes on promoter’s “big bucks on Amazon” claim","source":"FTC USA Business Blog Posts","id":3199075,"description":"First Consumer Review Fairness case takes on promoter’s “big bucks on Amazon” claim lfair August 6, 2018 | 11:11AM First Consumer Review Fairness case takes on promoter’s “big bucks on Amazon” claim By Lesley Fair T he marketers behind a purported money-making promotion called Sellers Playbook appear to have skipped the chapter about complying with federal and state consumer protection laws. That’s the allegation in a complaint filed by the FTC and the Minnesota Attorney General . In addition, it’s the FTC’s first case charg ing violations of the Consumer Review Fairness Act. The roots of the allegations go back to another venture sued by the FTC earlier this year: FBA Stores, also known as Amazing Wealth System and Amazon Wealth Systems. The defendants in that case ran online ads and in-person workshops that claimed to reveal the secret s of making major money on Amazon. But few, if any, of the consumers who forked over thousands of dollars and implemented their “plug-and-play systems” earn ed the kind of cash the defendants claimed. Which brings us to Sellers Playbook, Exposure Marketing, Jessie Conners Tieva, and Matthew Tieva – Minnesota-based defendants charged with pitching the same kind of “secrets” to making big bucks on Amazon . According to the just-filed lawsuit , the striking similarities should come as no surprise. That ’s because defendant Jessie Tieva was a regular speaker at Amazing Wealth Systems’ workshops. How successful was she in getting consumers to sign up? The complaint charges that Ms. Tieva and her team generated more than $3.4 million in sales for Amazing Wealth Systems. And let’s be clear: We’re not talking about $3.4 million in sales by consumers who successfully implemented the system. We mean $3.4 million that consumers shelled out to the operators of Amazing Wealth Systems for which Tieva was paid a handsome commission. The complaint alleges that the new Sellers Playbook venture is, in effect, a copycat of the now-defunct Amazing Wealth Systems operation. The earning claims certainly have a familiar ring to them. Here’s how Sellers Playbook touted their “opportunity”: “Holy cow, guys. That’s when you start seeing the returns of what we want you to have, $20,000 a month,” “Potential Net Profit: $1,287,463.38,” “Starting with $1000...1 year later over $210,000,” and “How many of you would like to learn how to turn a $5- to $10,000 investment into a $25- to a $1.2 million return with your investment? Yeah. And you’re going to learn those strategies before you leave here today. There are a few other things Amazon Wealth Systems and Sellers Playbook have in common: 1) Neither company has any affiliation with Amazon; and 2) Both companies charged consumers hundreds of dollars – or even hefty five-figure fees – to sign up. Of course, few consumers make the kind of earnings the defendants claimed. According to the complaint, many of the webpages promoting Sellers Playbook contained an inconspicuous earnings disclaimer in grey near the bottom of the page. What’s more, at a live event, the defendants briefly displayed this slide, which one of the presenters downplayed with this statement: “That’s why they have us do this again. It makes the lawyers happy, disclaimers. But you got to do your part. Money’s not going to fall from the sky. But as long as you do a part, it’s going to happen.” T he complaint challenges the defendants’ earning claims as false or unsubstantiated under FTC law and the Minnesota Prevention of Consumer Fraud Act. What’s more, the lawsuit alleges multiple violations of the FTC’s Business Opportunity Rule . The FTC and the AG also charge that provisions in the defendants’ form contracts try to restrict consumers’ ability to post reviews of their products, services, or conduct , in violation of the Consumer Review Fairness"},{"id":3198178,"description":"First INFORM Consumers Act enforcement case filed against online marketplace Temu kkrown September 5, 2025 | 10:00AM First INFORM Consumers Act enforcement case filed against online marketplace Temu Online marketplaces and third party sellers looking for a refresher on the INFORM Consumers Act should look no further than the recent settlement with Whaleco, Inc., which operates the online marketplace Temu. The complaint alleges the company failed to provide online shoppers with required information and tools. This is the first case brought to enforce the INFORM Act. The INFORM Act, which went into effect in 2023, seeks to make online transactions more transparent. Among other things, the law requires online marketplaces to collect, verify, and disclose certain information about high-volume third party sellers. ( Informing Businesses about the INFORM Consumers Act  has more on how the law defines terms, what’s required of online marketplaces, and the substantial penalties the FTC and state law enforcers may seek if online marketplaces violate the law.) In 2022, Temu launched its online marketplace in the United States, where consumers can view product listings on Temu’s homepage, through search results, and in gamified shopping experiences on the platform. According to the complaint, Temu violated the INFORM Act by failing to offer a mechanism for consumers to report suspicious activity — electronically and by phone — on the gamified product listings of many high-volume third party sellers and by failing to offer a telephonic mechanism on non-gamified product listings. The complaint also alleges that Temu did not post required identifying information about sellers on its gamified product listings or mobile site, and that Temu’s disclosures, when made, were difficult to find. According to the settlement, Temu will pay a $2 million civil penalty, provide a telephonic mechanism for consumers to report suspicious activity on listings, and make other required disclosures. Is your business covered by the INFORM Act? Make sure you:  Review the provisions of the INFORM Act thoroughly . Make sure you fully understand — and have measures in place to comply with — each of its requirements. Make required disclosures easy for consumers to notice . Required disclosures should stand out from any surrounding material and use plain language. Minimize or eliminate steps consumers need to take to reach required disclosures. Ensure required disclosures are available across all iterations of your platform . The INFORM Act mandates disclosures on all interfaces with product listings. And as your platforms evolve, regularly assess and update your compliance efforts. If your business sells through online platforms, check out  What Third Party Sellers Need to Know About the INFORM Consumers Act . This covers what sellers are impacted by the INFORM Act, what you can expect online platforms to require of you, and what information platforms must disclose about you to consumers. It also answers some questions you may have about the law. And if you spot a violation of the INFORM Act, r­eport it to the FTC using this  dedicated link","source":"FTC USA Business Blog Posts","pubDate":"Mon, 05 Oct 2026 14:07:45 +0200","titre":"First INFORM Consumers Act enforcement case filed against online marketplace Temu","url":"https://www.ftc.gov/business-guidance/blog/2025/09/first-inform-consumers-act-enforcement-case-filed-against-online-marketplace-temu"},{"pubDate":"Mon, 05 Oct 2026 08:07:09 +0200","url":"https://www.ftc.gov/business-guidance/blog/2020/02/ftc-challenges-online-trading-academys-money-making-claims","titre":"FTC challenges Online Trading Academy’s money-making claims","id":3197414,"description":"FTC challenges Online Trading Academy’s money-making claims lfair February 12, 2020 | 4:35PM FTC challenges Online Trading Academy’s money-making claims By Lesley Fair Ads for health products often target Boomer Consumers, but those aren’t the only claims pitched to people looking toward retirement. An FTC action alleges a company called Online Trading Academy has taken in more than $370 million by gearing its deceptive representations to that demographic. In addition, the complaint alleges violations of the Consumer Review Fairness Act. According to the FTC, the California-based operation, related companies, and three individual defendants advertise a “patented strategy” that consumers can apply “to any asset class including stocks, options, futures and currencies” to rake in big money. They claim their “training programs” – with price tags as high as $50,000 – will teach consumers how to “invest like the pros on Wall Street.” ”No matter your experience and goals,” people were told the defendants’ “proven” strategy was “designed to make money in any market, whether it’s going up or down.” The complaint recounts the process the defendants use to attract consumers through TV and radio ads, online promotions, and direct mail. First comes an in-person “preview” seminar. Next, people pay $299 for a three-day “orientation.” That’s where the defendants urge attendees to sign up for seminars costing thousands more. The defendants assign each attendee an “Education Counselor” – a/k/a salesperson working on commission – who follows up by phone or email. According to the complaint, the defendants train their Education Counselors not to “look like, act like or sound like, a traditional salesperson,” but instead to take on a “role” and lead consumers through “The Pain Funnel,” Q&A designed to overcome consumer qualms. To get people to sign up for more seminars, the defendants routinely offer to finance all or part of the cost with loans at 18%, with the promise to forgive the interest if the consumer pays the total off within six months. The FTC says that in some instances, the defendants lead buyers to believe they’ll be able to repay the loan quickly with money they’ll make using that “patented strategy.” So how much does Online Trading Academy say consumers will earn? A central theme of their pitch is “You don’t have to work on Wall Street to make money like Wall Street.” Infomercials feature purchasers claiming that “in three hours I made $12,000” or “I made $32,000 in less than seven trading days.” In a YouTube video, a retiree says he made “$40,000 in a single trade.” In addition, a speaker at a live event claimed consumers “could potentially make $50,000 of annual income with an account size as low as $5,000” because Online Trading Academy has “a patent on the fact that you can time the markets,” which “gives us the ability to know when to get in and when to get out, long-term and short-term.” Other speakers – including some of the named defendants – paint a picture of lavish lifestyles filled with international travel, a “super luxury car” every year, and homes in areas where kids have “live-in nannies, cooks, gardeners.” One speaker said the money he made using Online Trading Academy’s strategy allows him to live in an enclave so exclusive that a neighbor, a renowned Olympic gold medalist, taught his daughter to swim. But the facts paint a different picture. The FTC alleges the defendants don’t systematically collect data sufficient to substantiate their earnings claims. But even the evidence they do have gave them good reason to know their representations are deceptive. For starters, according to the FTC, the defendants know that few consumers who","source":"FTC USA Business Blog Posts"},{"source":"FTC USA Business Blog Posts","id":3197413,"description":"New FTC warning letters cite unsupported Coronavirus-related health and earnings claims sgressin April 24, 2020 | 12:44PM New FTC warning letters cite unsupported Coronavirus-related health and earnings claims By Seena Gressin The FTC is not the pen pal you want if you operate a multi-level marketing company but aren’t closely monitoring your distributors. In its latest round of warning letters, the FTC warns ten MLM companies that they are responsible for the claims made by their participants. The letters direct the companies to report within 48 hours what actions they’ve taken to stop their distributors from claiming their products can treat or prevent Coronavirus disease, that MLM business opportunity participants are likely to earn substantial income, or both. The FTC says that the health and earnings claims are unsubstantiated and therefore violate truth-in-advertising laws. The products at issue are not scientifically proven to treat or prevent COVID-19, the disease that Coronavirus causes. The FTC previously has sent warning letters to companies about their Coronavirus-related health claims, but the new letters are the first to also target claims about potential business opportunity earnings. The letters come at a time when millions of people are out of work and facing financial challenges as a result of the pandemic. MLM companies rely on a network of independent distributors, sometimes called business opportunity participants, to buy and resell their products, often through direct person-to-person sales or online. MLMs typically offer participants a cut of the sales made by people the participant recruits to invest in the business opportunity. The new recruits then try to sell the products, and try to recruit more people to do the same. Most people who join MLMs make little or no money. According to the FTC, distributors of the MLM companies receiving the letters have posted promotional messages on Facebook, Instagram, and other social media sites. Health claims the FTC letters cite include: “STAY SAFE!! MAKE YOUR IMMUNE SYSTEM STRONG!!!” Standard coronavirus protection kit . #antiseptics and #immunity_support.” “HOW WILL YOU FIGHT OFF CORONA? USE NUTRABURST-CHAGA- .... #coronacure #coronaprevention ... #immunesupport #immunebooster ... #immunesystembooster” “Got the coronavirus heebeegeebees? Boost your immunity with this amazing deal!!!!” “... If interested to learn more or obtain oils or rollers Let me know A little extra protection can help #doterra #NursesCOVID19 #Dialysis #ImmunityBoosters #ImproveRespiratoryFunction” Earnings claims the FTC letters cite include: “...Living in quarantine and where 14 million people applied for unemployment just last week ... I’ll stick with the opportunity to change people’s lives ... turn a small investment into six figures .... #arbonne ... #quarantine #2020” “Need to make extra money? Find it difficult to pay your bills? Were you laid off/ #fired? Be your own Boss w/doTERRA essential oils. Msg me to achieve financial independence #laidoff #unemployed #cantpaymybills #cantpaymyrent #student #sales #sidehustle #makemoney #stayathomemom.” “[E]veryone’s getting stimulus checks right now... There is no better investment you could do... Take that money that you’re about to get back... figure out a way to make this happen tonight.” In the letters alleging unsubstantiated health claims, FTC staff reminds the companies that, under the FTC Act, claims that a product can prevent, treat, or cure a serious disease require the support of well-controlled human clinical studies. Because “no such study is currently known to exist” for the advertised products, the FTC says the companies “must immediately cease making all such claims.” In the letters alleging deceptive earnings claims, FTC staff reminds the companies that under the FTC Act, “claims about the potential to achieve a wealthy lifestyle, career-level income, or significant","pubDate":"Mon, 05 Oct 2026 08:07:08 +0200","url":"https://www.ftc.gov/business-guidance/blog/2020/04/new-ftc-warning-letters-cite-unsupported-coronavirus-related-health-earnings-claims","titre":"New FTC warning letters cite unsupported Coronavirus-related health and earnings claims"},{"id":3195790,"description":"Judge orders $13.4 million in contempt action challenging BlueHippo hype lfair May 2, 2016 | 10:52AM Judge orders $13.4 million in contempt action challenging BlueHippo hype By Lesley Fair Animation fans remember the ballet-dancing pink hippos in Fantasia . In Egyptian mythology, the god of disorder was depicted as a red hippo. And many consumers – especially those already in financial distress – were drawn in by national TV and radio ads for BlueHippo, a company that claimed to finance the purchase of computers and other electronics for people with “less than perfect credit, bad credit, no credit.” A $13.4 million ruling by a United States District Judge in an FTC contempt action sends a message to hippos of all hues (and businesses) about the FTC’s commitment to effective order enforcement. In 2008, the FTC sued BlueHippo Funding and BlueHippo Capital for, among other things, not delivering ordered merchandise, failing to make disclosures required by the Truth in Lending Act and Regulation Z, and illegally conditioning the extension of credit on consumers’ “agreement” to repay by preauthorized electronic debit. One common tactic was that BlueHippo said it would deliver the product once the consumer made 13 weekly payments, but then didn’t make good on that promise. The FTC also alleged that in many instances, BlueHippo debited consumers’ accounts without first disclosing that consumers couldn’t get a refund even if they cancelled before delivery. The defendants settled that case , agreeing to pay up to $5 million in redress and to change how they did business in the future. The FTC went back to court in 2009 , alleging that BlueHippo was flouting the terms of the settlement and continuing to engage in illegal practices. The Court granted the FTC’s contempt motion against the corporate defendants and CEO Joseph Rensin, but entered a remedy of only $609,000. The FTC appealed the financial ruling. Arguing that there should be a presumption that consumers relied on the defendants’ misrepresentations and omissions, the FTC sought a contempt order of $14 million – the gross sales the defendants generated through their illegal conduct. The United States Court of Appeals for the Second Circuit ruled , “We agree with the FTC and join our sister circuits in adopting a presumption of consumer reliance in FTC civil contempt actions.” The appellate court remanded the matter to the trial court to determine “whether the FTC has demonstrated that it is entitled to a presumption of consumer reliance. If so, the court should use defendants’ gross receipts as a baseline for calculating the consumers’ actual loss, and defendants should then be afforded an opportunity to proffer evidence showing that an offset of the baseline is warranted.” What’s the latest development? On remand, the trial court entered a judgment against CEO Rensin for $13.4 million, the financial harm the court determined that consumers suffered as a result of the scheme. The case is another illustration of the FTC’s interest in effective order enforcement. To settle cases and then not follow through to see that defendants live up to their promises would be, well, hippo-critical.","source":"FTC USA Business Blog Posts","pubDate":"Sat, 03 Oct 2026 14:06:14 +0200","titre":"Judge orders $13.4 million in contempt action challenging BlueHippo hype","url":"https://www.ftc.gov/business-guidance/blog/2016/05/judge-orders-134-million-contempt-action-challenging-bluehippo-hype"},{"pubDate":"Sat, 03 Oct 2026 08:09:37 +0200","titre":"Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free","url":"https://www.ftc.gov/business-guidance/blog/2014/11/company-pay-22-million-offering-free-credit-scores-turned-out-be-not-so-free","id":3194913,"description":"Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free wfg-adm109 November 19, 2014 | 11:12AM Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free By Lesley Fair We’ve brought law enforcement actions – dozens of ‘em. We’ve held workshops, issued reports, and sent warning letters. If it takes sky writing, tap dancing, and a float in a Thanksgiving Day parade, we’ll do that, too. But here’s what’s not going to happen. The FTC is not giving up until businesses get the message that: 1) Free means free; and 2) Key terms and conditions have to be clearly and conspicuously disclosed. A $22 million settlement announced by the FTC and the AGs of Illinois and Ohio with a national credit monitoring service advertising so-called “free” credit scores emphasizes that point. Another note for practitioners: It's the FTC's third case alleging violations of ROSCA . One Technologies and related outfits marketed their credit monitoring programs, MyCreditHealth and ScoreSense, through at least 50 sites, including FreeScore360.com, FreeScoreOnline.com and ScoreSense.com. Their strategy was simple. Buy advertising on search engines so their ads show up near the top when people look for phrases like “free credit report\" and then follow up with a persuasive pitch: “View your latest Credit Scores from All 3 Bureaus in 60 seconds for $0!” According to the lawsuit , the defendants failed to clearly tell consumers that if they availed themselves of those “free” services and didn’t cancel within seven days, the defendants would ding their credit cards for $29.95 a month over and over and over again. The complaint includes screen shots of the defendants’ sites, but before looking at them, take out your reading glasses because they’ll come in handy in trying to locate where the defendants chose to tell people about that $29.95 monthly fee. One line of fine print added in late 2012 said “Free 7-Day trial when you order your 3 Free Credit Scores. Membership is then just $29.95 per month until you call to cancel.” The first problem: The type was tiny – a fraction of the size of the defendants’ multiple use of the word “free.” The second problem: Why should consumers even have to be on the look-out for the cost, given that the defendants so prominently advertised it as “free”? A second purported disclosure appeared as an obscure hyperlink on the page where people typed in their Social Security number and birthdate.  Sandwiched between the logos of various security firms and a large color button that said CONTINUE was this less-than-crystal-clear statement: By clicking on the ‘Continue’ button, you agree to the Offer Details, to the Terms and Conditions, acknowledge receipt of our Privacy Policy and agree to its terms . . . The “Offer Details” link triggered a small pop-up that said, among other things, “At the end of the 7-day trial period, your credit/debit card will be charged $29.95 on a monthly basis until you call to cancel.” Another place the defendants put the information was on a side panel of the Payment Form in white letters on a grey background – a color combination one of the defendants’ own employees described as “known to cause seizures in lab rats.” According to the complaint, once people spotted the unauthorized charges on their accounts, the defendants didn’t make it easy to stop the billing.  And even when people asked for their money back because they hadn’t approved of the charges, the defendants denied refunds to many of them. The lawsuit alleges violations of the FTC Act, as well as the Illinois Consumer Fraud Act, the Ohio Consumer Sales Practices Act, and related state rules. In addition, the complaint is the third FTC action to charge violations of ROSCA, the Restore Online Shoppers’","source":"FTC USA Business Blog Posts"},{"url":"https://www.ftc.gov/news-events/news/press-releases/2026/09/ftc-seeks-public-comment-whether-update-rule-impersonation-government-businesses-address-platforms","titre":"FTC Seeks Public Comment on Whether to Update Rule on Impersonation of Government and Businesses to Address Platforms’ Role in Promoting Impersonation Scams","pubDate":"Fri, 25 Sep 2026 08:10:48 +0200","source":"Federal Trade Commission - Protecting America's Consumers","description":"The Federal Trade Commission announced today that is considering whether to update its Rule on Impersonation of Government and Businesses or take other action to prevent online platforms from engaging in ad-optimization practices that may be furthering impersonation scams. In an Advance Notice of Proposed Rulemaking (ANPRM) to be published in the Federal Register , the FTC is seeking comment on the extent to which ad-optimization tools and services offered by social media, search engines and other digital marketplace platforms further efforts by scammers to impersonate legitimate businesses and government agencies using online ads.  “Free markets depend on trust, transparency and consumers’ ability to make informed choices. Impersonation scams—especially when amplified by digital platforms that profit from them—do more than rob Americans of their hard-earned money,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “They erode the very foundation that allows competitive markets to function. Today’s impersonation scams are no longer the work of isolated con artists; they are sophisticated, highly engineered operations powered by the same advertising and targeting tools that platforms sell to legitimate businesses. Consumers reported nearly $3.5 billion in losses to impersonation fraud last year, and the true cost is likely far higher. “The Commission’s mission has always been to safeguard the conditions under which competitive markets can thrive. Increasingly, consumers rely on a small number of dominant digital platforms for everyday transactions—from shopping, banking and travel bookings to accessing government services. Yet these platforms are the very places fraudsters seek out consumers, exploiting their trust while platforms profit from optimizing and disseminating scam ads. “Today’s advance notice of proposed rulemaking asks whether the Commission should require platforms to take concrete steps to prevent impersonation ads from ever reaching consumers. By exploring potential new obligations platforms would have to follow, the rulemaking aims to ensure that Americans participate in an online economy where truthful information guides consumer choice.”  Impersonation scams have topped the list of fraud complaints reported to the FTC by consumers in recent years. In 2025, the FTC received more than 1 million reports about imposter scams from consumers, who reported losing nearly $3.5 billion to such scams. In addition, online platforms play an important role in many scams. For example, nearly 30% of consumers who reported losing money to scammers in 2025 said they were first contacted on social media platforms, with reported losses reaching $2.1 billion. The ANPRM notes that impersonation scams have been amplified by search engines, social media and other digital marketplace platforms that profit from optimizing online ads for third parties, regardless of whether the third parties are legitimate. The ANPRM seeks comment on a wide range of topics related to the use of these ad-optimization tools and services and the proliferation of ads that impersonate businesses and government agencies including:  The financial incentives driving these platforms to offer ad-optimization tools and services, details on how each tool and service optimizes the content and delivery of the ad, and the steps platforms currently take to prevent the use of such tools and services for deceptive advertising The extent to which these platform ad-optimization tools and services constitute unfair or deceptive acts or practices by furthering impersonation scams Whether these unfair or deceptive acts or practices are prevalent in the marketplace and whether the Commission should address these acts or practices by amending the existing Impersonation Rule, proposing a new separate rule or implementing non-regulatory Measures Measures the Commission could consider in crafting any new regulations, including vetting","id":3176041},{"pubDate":"Fri, 18 Sep 2026 08:08:58 +0200","titre":"FleetCor Agrees to Pay $100 Million to Resolve Administrative Action After Federal Court Finds that It Violated the FTC Act by Charging Unauthorized Fees","url":"https://www.ftc.gov/news-events/news/press-releases/2026/09/fleetcor-agrees-pay-100-million-resolve-administrative-action-after-federal-court-finds-it-violated","source":"Federal Trade Commission - Protecting America's Consumers","id":3160549,"description":"FleetCor and its CEO will pay $100 million to settle a Federal Trade Commission administrative action alleging that the company charged its customers, who overwhelmingly are small businesses, undisclosed fees in connection with their use of fuel cards that FleetCor falsely promised businesses would save them money. In a complaint first filed in federal court in 2019 , the FTC alleged that FleetCor Technologies Inc., now known as Corpay Inc., and its CEO Ronald Clarke imposed a broad array of unauthorized fees that its customers never knew about and did not agree to pay, totaling hundreds of millions of dollars and harming tens of thousands of customers.  In addition, FleetCor charged late fees to customers who had either paid on time or were prevented by FleetCor from paying on time. FleetCor also misrepresented the gas savings, fraud-control features, and fees associated with its fuel cards. “FleetCor deceived its small business customers by promising fuel savings that never materialized, while unfairly charging them hidden and unauthorized fees,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “In addition to the relief the FTC has obtained in federal court, this order will help return money to the customers the company took advantage of.” According to the complaint, FleetCor often waited to begin charging many fees until several billing cycles passed, making the fees less noticeable to consumers. The complaint also alleged that FleetCor’s invoices did not disclose that any fees were being charged, requiring customers to proactively view other account management reports. Even on those documents, many fees were obscured among other information or not listed at all. In 2023, a federal district court entered summary judgment for the FTC on all counts, finding that FleetCor had charged its customers hidden or otherwise unauthorized fees and misrepresented the gas savings and fees associated with FleetCor’s fuel cards. The court-imposed order permanently prohibits FleetCor from: billing a customer for any charge unless FleetCor has obtained the customer’s express informed consent and provided clear and unavoidable information about the charge; hiding material information about a charge behind a hyperlink; and making deceptive claims about its fuel cards. In 2026, a federal appeals court upheld the summary judgment against FleetCor on all counts and affirmed the permanent injunction against it.  The court affirmed the judgment against Clarke on all but one count and vacated the injunction as to Clarke.  As part of the settlement order with the FTC, FleetCor and Clarke will pay $100 million, which will be used to provide redress to the company’s business customers harmed by its practices. FleetCor and Clarke have also agreed not to oppose reimposition of a federal court injunction against Clarke.  The Commission vote to accept the consent agreement was 1-0-1. FTC Chairman Andrew N. Ferguson is recused. The FTC will publish a description of the consent agreement in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE: When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to"},{"description":"Alexander Mashinsky, the former CEO of cryptocurrency platform Celsius Network Inc. (Celsius), and his business partners, Shlomi Daniel Leon and Hanoch “Nuke” Goldstein, will pay a total of $16.5 million to resolve the Federal Trade Commission’s charges that they deceived users by falsely promising that deposits made to their cryptocurrency platform would be safe and always available. Mashinsky and Leon have also agreed to a ban on marketing or selling products or services that can be used to deposit, exchange, invest or withdraw assets. Similarly, Goldstein has agreed to a ban on marketing or selling retail products or services that can be used to buy, sell, deposit, withdraw, distribute or trade cryptocurrency. In its  July 2023 complaint , the FTC alleged that Celsius and its co-founders promised consumers that Celsius was “safer” than a bank or other traditional financial institutions and misrepresented that their deposits were safe because Celsius earned profits at “no risk” to consumers by making secured loans to other exchanges. The FTC says the company and its top executives deceived users by falsely promising them that they could withdraw their deposits at any time, that the company maintained a $750 million insurance policy for deposits, that it had sufficient reserves to meet customer obligations and that those in its Earn program could earn rewards as high as 18% annual percentage yield on deposits. They also repeatedly claimed that the company did not make any unsecured loans. The FTC, however, alleged that the promises were false and that its top executives continued to claim that customers’ deposits were safe days before the company filed for bankruptcy. The settlement orders with the FTC require Mashinsky to pay $10 million, Leon to pay $4.1 million and Goldstein to pay $2.4 million. In addition,  the order with Mashinsky ,  the order with Leon ,   and the proposed order with Goldstein   will also prohibit the Celsius co-founders from: Marketing or selling products or services that can be used to deposit or withdraw certain assets, as Mashinsky, Leon and Goldstein’s deceptive conduct led to enormous consumer injury; Making misrepresentations regarding the benefits of any product or service or any other material fact about any other product or service; and Violating the Gramm-Leach-Bliley Act, including by obtaining or attempting to obtain customer financial information by making false, fictitious or fraudulent representations; and Finally, the orders with Mashinsky and Leon prohibit them from disclosing nonpublic personal information about consumers unless the consumer first provides express informed consent. The Commission vote approving the stipulated final order with Mashinsky was 3–0 and was approved prior to the departure of former Commissioner Melissa Holyoak. The Commission votes approving the stipulated final orders with Leon and Goldstein were both 2–0. The FTC filed the proposed orders in the U.S. District Court for the Southern District of New York. Stipulated final orders have the force of law when approved and signed by the District Court Judge. The staff attorneys on this matter are Stephanie Liebner, Carlton Mosley and Sally Tieu of the FTC’s Bureau of Consumer","id":3042974,"source":"Federal Trade Commission - Protecting America's Consumers","titre":"Founders of Celsius Network Ordered to Pay $16.5 Million to Resolve FTC Charges","url":"https://www.ftc.gov/news-events/news/press-releases/2026/07/founders-celsius-network-ordered-pay-165-million-resolve-ftc-charges","pubDate":"Tue, 21 Jul 2026 08:04:33 +0200"},{"pubDate":"Wed, 01 Jul 2026 08:09:43 +0200","titre":"FTC Requires Amazon to Pay $2.25 Million to Resolve Charges It Knowingly Violated the Fair Credit Reporting Act","url":"https://www.ftc.gov/news-events/news/press-releases/2026/06/ftc-requires-amazon-pay-225-million-resolve-charges-it-knowingly-violated-fair-credit-reporting-act","id":2997627,"description":"Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to consumers whose personal information was used by identity thieves to commit fraud. The complaint , filed by the Department of Justice upon notification and referral from the FTC, alleged that in numerous instances, Amazon.com Inc. failed to comply with Section 609(e) of the FCRA, which requires companies to, within 30 days of a consumer’s request, provide victims of identity theft with application and business transaction records about fraudulent transactions made in their names. According to the complaint, Amazon had no written policy to respond to Section 609(e) requests until early 2025, after it learned of the FTC’s investigation, despite prior outreach from FTC staff advising the company to review its compliance with Section 609(e). “Amazon often put identity theft victims through a Kafkaesque ordeal by demanding they identify the thief who stole their information before Amazon would release the records the law entitles them to—records that could help victims protect themselves and recover from the fraudulent conduct,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “The FTC will not allow companies to simply ignore their legal obligations, especially those designed to support and protect identity theft victims.” Many consumers who contacted Amazon to report fraud were told by its customer service agents that they could not provide the requested records for “security” or “privacy” reasons, the complaint alleged. For example, one consumer reported that when they contacted Amazon seeking business records related to unauthorized charges stemming from a fraudulent account, a company representative said they could not share details about the other account that had used the consumer’s credit card for “security reasons” unless the consumer guessed the name on the account (the name used by the identity thief), which the consumer was unable to do after making 30 attempts. The complaint alleged that in other instances, Amazon agents told consumers they were not able to access the requested records. Amazon even refused to provide application and business transaction records to law enforcement agencies who had been authorized to, and who did, submit requests to Amazon on behalf of consumers who were victims of identity theft. Some frustrated consumers resorted to sending copies of the FCRA and FTC guidance to Amazon in hopes of receiving the requested records, but Amazon still failed to comply with the law. The complaint also alleged that in some cases where Amazon ultimately provided requested records, it failed to respond to consumers within the 30-day timeframe required by the FCRA. In addition to the $2.25 million civil penalty—a record for a Section 609(e) violation—the proposed order will prohibit Amazon from failing to comply with Section 609(e) of the FCRA, requiring the company to provide the records lawfully requested by identity theft victims and law enforcement agencies acting on their behalf. The order also requires Amazon to provide notice to consumers about how identity theft victims can request records under the FCRA. The company must also contact consumers who had requested records since April 2024 from Amazon but did not receive them to inform these consumers that it may have additional records and that the consumers may request those records from Amazon. This is the second case the FTC has brought using its authority under Section 609(e) of the FCRA. The FTC announced its first case involving a violation of Section 609(e) of the FCRA in 2020 against Kohl’s Department Stores Inc . The Commission voted 2-0 to authorize the staff to refer the complaint to the DOJ and to approve the proposed stipulated order. The DOJ filed the complaint and final","source":"Federal Trade Commission - Protecting America's Consumers"},{"pubDate":"Wed, 15 Apr 2026 08:10:57 +0200","titre":"FTC Seeks Public Comment on Unfair and Deceptive Fee Practices in Online Food and Grocery Delivery Services","url":"https://www.ftc.gov/news-events/news/press-releases/2026/04/ftc-seeks-public-comment-unfair-deceptive-fee-practices-online-food-grocery-delivery-services","source":"Federal Trade Commission - Protecting America's Consumers","id":2826725,"description":"The Federal Trade Commission today announced it is seeking public comment on whether a rule is needed to address unfair or deceptive fee practices in connection with the services provided by online food and grocery delivery platforms nationwide. As detailed in an Advance Notice of Proposed Rulemaking (ANPRM) to be published shortly in the Federal Register, the FTC is seeking written comments, including data, evidence, analyses, and arguments, to help determine how best to prevent unfair or deceptive acts or practices and to ensure that the agency addresses concerns from both consumers and industry. “Online grocery fees that are unclear, inconsistently disclosed, or revealed only at the last moment before consumers make a purchase distort competition and harm consumers,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “Clear and truthful pricing is essential to competitive markets. The Commission’s enforcement track record suggests that consumers continue to face a suite of fees that prevent them from making informed comparisons. The Trump-Vance FTC is committed to addressing unlawful grocery delivery pricing that obscures the true cost of groceries.” Unfair or deceptive fee practices violate the FTC Act. The Commission recently brought several actions against online food delivery platforms for unfair or deceptive practices that violated the FTC Act. For example, in December 2025, the FTC announced a $60 million settlement with  Instacart over allegations it falsely advertised “free delivery” on consumers’ first three orders on the platform and then charged them service fees that were not disclosed until checkout. And, in December 2024, the FTC obtained a $25 million settlement with  GrubHub over allegations it misled consumers about the cost of delivery on its platform. These cases illustrate that hidden and misleading fees and charges are a recurring problem related to online delivery platforms, despite enforcement actions to protect consumers’ interests. Also, while numerous states have recently adopted laws requiring food and grocery delivery platforms to more clearly disclose fees and include all mandatory fees in advertised prices, they have not adopted uniform rules that apply to all food delivery platforms across the country. The ANPRM asks the public to comment on whether a rule is needed to prevent unfair or deceptive fee practices in connection with online food delivery services including: Total Price. Do food delivery platforms clearly and conspicuously disclose the total price for food or grocery items ordered for local delivery or pickup? Fees and Charges. Do online food delivery platforms clearly and conspicuously disclose the existence, nature, purpose, refundability, or recipient of any fees, charges, or other costs for a delivery or pickup order? Variable or Contingent Fees . Do online food delivery platforms clearly and conspicuously disclose factors used to determine any fees, charges, or other costs that are variable or contingent on consumer selections, such as number or type of items bought or delivery location? Material Restrictions. Do online food delivery platforms clearly and conspicuously disclose whether fees, charges, or other costs are mandatory or optional, or any material restrictions, limitations, or restrictions that may result in additional charges or that may diminish the consumer’s use of the good or service? Price Differentials. Do online food delivery platforms clearly and conspicuously disclose whether the prices of items ordered are the same as, or different from, the prices of the same items offered in the store or restaurant? Personalized Pricing.  Do online food delivery platforms clearly and conspicuously disclose whether the prices of items ordered are the same as, or different from, the prices of the same items offered to other consumers on the platform? Discounts or Promotions. Do online food delivery platforms clearly and conspicuously disclose material"},{"titre":"StubHub Refunding $10 Million in Fees to Consumers After Deceptive Ticket Pricing","url":"https://www.ftc.gov/news-events/news/press-releases/2026/04/stubhub-refunding-10-million-fees-consumers-after-deceptive-ticket-pricing","pubDate":"Fri, 10 Apr 2026 08:08:44 +0200","description":"StubHub, the nation’s largest ticket exchange and resale ticket provider, will pay $10 million to settle Federal Trade Commission charges that the company violated the FTC Act and the agency’s Rule on Unfair or Deceptive Fees by deceptively advertising ticket prices on its website without clearly and conspicuously disclosing up-front how much consumers actually would pay, including all mandatory fees. “The Commission’s Fees Rule makes it very clear that the total price of live-event tickets must be disclosed up-front to enable consumers to make fully informed purchasing decisions,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “Price transparency is essential to a free and competitive marketplace. Today’s settlement underscores the Commission’s commitment to ensuring that consumers pay the price they are promised.” The FTC’s action against StubHub Holdings, Inc., follows a  warning letter the agency sent the online ticket platform in May 2025 stating that multiple prices displayed on its website appeared to be in violation of the Fees Rule. Under the Rule, which took effect on May 12, 2025 , it is an unfair and deceptive practice for any business to offer, display, or advertise the price of a live-event ticket without clearly, conspicuously, and most prominently disclosing the total price, which the Rule defines as “the maximum total of all fees or charges a consumer must pay for any good(s) or service(s) and any mandatory ancillary good or service.” Misrepresenting prices also violates the FTC Act. Today’s action also follows the Administration’s recent Executive Order on Ticketing , which includes a directive for the FTC to “take appropriate action . . . to ensure price transparency at all stages of the ticket-purchase process, including the secondary ticketing market.” According to the Commission’s complaint , in mid-May 2025—after the Rule went into effect—StubHub advertised its ticket prices without disclosing the full price consumers would actually pay by failing to include mandatory fees and to disclose the total price everywhere it displayed prices. Specifically, the FTC alleges StubHub failed to provide the total price for tickets—including high-demand National Football League tickets in the lead-up to when the NFL schedule was announced on May 14, 2025—in the first three pricing displays on its website. On the initial two pricing displays, in numerous instances, the advertised price did not include all mandatory fees, and StubHub did not disclose the total price. On the third pricing display, StubHub listed multiple fees and charges but did not disclose the total price. The proposed order settling StubHub’s alleged violations of the FTC Act and the Fees Rule requires the company to pay $10 million, which the company will use to provide monetary relief to eligible consumers through a settlement and consumer redress distribution program. The order also prohibits StubHub from misrepresenting the total price of any good or service; any fee or charge, including its nature, purpose, amount, or refundability, as well as why the fee or charge is being imposed; the final payment amount for any transaction; and any other material fact including those related to refunds or cancellations. The proposed order also prohibits StubHub from: Offering, displaying, or advertising any price of a good or service without clearly and conspicuously disclosing the total price; Failing to disclose the total price more prominently than any other pricing information; Failing to clearly and conspicuously disclose the amount of any fees or charges that have been excluded from the total price and what they are for, as well as the final payment amount—before the consumer agrees to pay for a product or service; and Violating the Commission’s Fees Rule. Within 90 days of the date of the order StubHub must provide redress to two groups of eligible","id":2818173,"source":"Federal Trade Commission - Protecting America's Consumers"},{"description":"The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for receiving and addressing vulnerability reports and responding to security incidents; and utilize widely known technologies that might have helped mitigate consumer losses. According to the complaint, in June 2022, Nomad introduced inadequately tested code that included a significant vulnerability. Just over a month later, hackers began exploiting the vulnerability. The FTC alleged that Nomad failed to respond to the attack in time because of its inadequate security and incident response measures, which led to the loss of $186 million. The company was able to recover some money, but consumers lost approximately $100 million. Nomad was warned about the dangers of inadequate testing as well as the need to ensure it had adequate staff and security in place. The company, however, failed to implement basic safety measures that would mitigate consumer losses, the FTC alleged. Under the proposed order , Nomad will be prohibited from making misrepresentations about its security practices. In addition, the company will also be required to: Implement a comprehensive information security program that is designed to protect consumers from theft or other unauthorized access and address the security issues outlined in the FTC’s complaint; Obtain biennial assessments of its information security program by an independent third party and cooperate with the third-party assessor; and Return to consumers money recovered following the security breach that was not already returned to customers. The Commission voted 2-0 to accept the proposed complaint and order for public comment. The FTC will publish a description of the consent agreement package in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE:  The Commission issues an administrative complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to $51,744. The lead staff attorneys on this matter are M. Hasan Aijaz and Julia Horwitz with the FTC’s Bureau of Consumer","id":2577895,"source":"Federal Trade Commission - Protecting America's Consumers","titre":"FTC Will Require Illusory Systems to Return Money Stolen by Hackers and Implement an Information Security Program","url":"https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-will-require-illusory-systems-return-money-stolen-hackers-implement-information-security-program","pubDate":"Wed, 17 Dec 2025 09:50:37 +0100"}]