FTC Enforcement

State of play.

• The FTC under Chair Ferguson has pivoted enforcement priorities sharply toward consumer-protection fundamentals — subscription fraud, data security, imposter scams, and DEI-as-antitrust — while the structural antitrust docket (Live Nation remedies, algorithmic pricing, Big Tech) continues in parallel .
• Subscription fraud enforcement has escalated to enterprise-scale takedowns. The Genesis Tech action — 15 corporations, 8 individuals, $250M in app revenue, $700M in connected PayPal flows, and a temporary asset freeze — is the largest ROSCA-based action in the current enforcement cycle and signals that the FTC is pursuing offshore corporate structures aggressively .
• The FTC is now framing coordinated DEI hiring standards as antitrust collusion. The Diversity Lab closure following warning letters to 42 law firms is the first instance of the agency treating industry-wide DEI certification programs as potential Sherman Act Section 1 violations — a theory with reach well beyond the legal industry .
• State AG coalitions remain independently consequential. The Live Nation/Ticketmaster verdict and the Nexstar-Tegna post-close injunction confirm that federal clearance or settlement does not terminate antitrust exposure; state coalitions are pursuing structural remedies on their own timelines .
• For counsel advising consumer-facing platforms, subscription businesses, edtech firms, or any company participating in industry-wide hiring or pricing programs, the practical baseline is that the FTC's enforcement perimeter has expanded simultaneously in multiple directions — ROSCA, data minimization, TAKE IT DOWN Act, and DEI-as-collusion are all live exposure vectors right now.

Where things stand.

• ROSCA/subscription enrollment standard is hardening through both enforcement and litigation. The Genesis Tech asset freeze is the most aggressive ROSCA action to date; Judge Tigar's Uber ruling in N.D. Cal. holds that pre-stored payment credentials cannot substitute for fresh affirmative consent at enrollment — a standard that extends to any auto-enrollment business .
• Data minimization and breach-notification obligations are now binding consent-order terms for edtech. The Illuminate Education final order requires data deletion, a public retention schedule, a comprehensive security program, and ongoing FTC monitoring — going well beyond breach response to impose pre-breach data governance obligations .
• TAKE IT DOWN Act enforcement is live. The FTC began enforcing the statute's 48-hour removal obligation for nonconsensual intimate imagery and AI-generated deepfakes; covered platforms must assign request IDs, notify users of removal decisions, and implement hashing tools — but the FTC's specific compliance standards and penalty thresholds remain partially opaque .
• DEI coordination is now an antitrust enforcement vector. The FTC's warning letters to 42 law firms and the resulting Diversity Lab closure frame shared demographic hiring targets and information-sharing calls among competitors as potential Sherman Act Section 1 violations — a theory the agency has signaled it will extend to other sectors .
• Live Nation/Ticketmaster verdict opens structural remedies phase. The 33-state coalition secured a jury finding of unlawful monopolization; DOJ had already settled mid-trial for $280M plus fee caps and divestiture of 13 amphitheater contracts; Judge Subramanian is overseeing remedies that could include forced Ticketmaster divestiture .
• Algorithmic pricing is under simultaneous federal and state scrutiny. The DOJ-RealPage settlement — the first of its type — prohibits use of competitors' nonpublic data for price recommendations and imposes a court monitor; surveillance pricing investigations are expanding into retail, grocery, hotel, and hospitality; 40+ state bills have been introduced .
• FTC is enforcing against deceptive AI advertising claims. The Cox Media Group settlement over "active listening" advertising claims and the FTC's active scrutiny of AI-generated ad creatives — combined with New York's synthetic-performer disclosure law now in effect — create compounding compliance exposure for brands running cross-platform campaigns .
• HSR filing regime has reverted to pre-2025 requirements. The Fifth Circuit vacated the FTC's 2024 HSR overhaul; parties file under the lighter prior form; the size-of-transaction threshold is $133.9M .
• Imposter scam losses signal sustained enforcement focus on fraud prevention. FTC data document $3.5 billion in reported imposter scam losses in 2025 — the highest-volume fraud category — and $15.9 billion in total fraud losses across all categories, confirming that financial services, government, and technology clients face elevated impersonation risk .
• State AGs are blocking transactions that federal regulators cleared. The Nexstar-Tegna injunction — halting a closed $6.2B deal on Clayton Act §7 grounds — establishes that multistate coalitions will act independently when DOJ and FCC step aside .
• Google Play Store antitrust settlement is in final approval with a fee dispute. Judge Hamilton rejected class counsel's $85M fee request as "shockingly huge"; the $700M settlement — $630M to consumers, $70M to 53 state AGs — and required Play Store practice changes are not in dispute, only lawyer compensation .

Latest developments.

• FTC obtains temporary asset freeze against Genesis Tech subscription-fraud network — 15 corporations, 8 individuals, apps including MadMuscles, Nebula, and PDF Guru, $250M in global revenue, $700M in connected PayPal flows — alleging ROSCA and FTC Act violations through concealed offshore corporate structure
• FTC reports $3.5 billion in imposter scam losses in 2025, with $15.9 billion in total fraud losses across 3 million reports — confirming sustained regulatory focus on fraud prevention across financial services, government, and technology sectors
• FTC and California DFPI distribute $2.8 million in refunds to 1,821 homeowners victimized by the Golden Home Services / Home Matters USA mortgage relief scheme; operators banned from telemarketing and debt relief industries
• FTC finalizes consent order against Illuminate Education for 2021 breach exposing 10 million student records — binding obligations include data deletion, public retention schedule, and comprehensive security program; signals pre-breach data governance enforcement for edtech
• Diversity Lab closes following FTC warning letters to 42 law firms alleging Mansfield Certification's shared demographic hiring targets and information-sharing calls constitute Sherman Act Section 1 and FTC Act Section 5 violations
• AI-generated advertising compliance pressure intensifies as FTC enforces against deceptive AI ad claims and New York's synthetic-performer disclosure law takes effect June 9, 2026 — requiring conspicuous notice for AI-generated human likenesses in visual ads
• FTC settles with Cox Media Group over deceptive "active listening" advertising claims; TAKE IT DOWN Act enforcement is live with 48-hour removal obligation for nonconsensual intimate imagery and deepfakes
• FTC begins TAKE IT DOWN Act enforcement — covered platforms must establish notice-and-removal systems, assign request IDs, notify users, and implement hashing tools; specific penalty thresholds not yet published
• French Competition Authority fines Doctolib €4.665M for below-threshold acquisition under abuse-of-dominance theory — first such sanction — as France simultaneously raises merger notification thresholds for the first time in over two decades
• Judge Hamilton rejects $85M fee request in Google Play Store $700M antitrust settlement as "shockingly huge" — fee dispute is the remaining obstacle to final approval

Active questions and open splits.

• DEI coordination as antitrust collusion — how far does the theory travel? The FTC's Mansfield Certification theory — that shared demographic hiring targets and competitor information-sharing calls constitute Section 1 coordination — has no appellate precedent. Whether it survives challenge, and whether the agency extends it to healthcare, finance, and tech DEI consortia, is the most consequential open question in the current enforcement cycle .
• ROSCA offshore-entity enforcement and asset recovery. The Genesis Tech preliminary injunction froze assets held through shell companies and offshore entities. Whether the court's order reaches those assets, and whether individual liability attaches to the eight named defendants, will define the practical limits of ROSCA enforcement against internationally structured operations .
• TAKE IT DOWN Act compliance standards remain partially opaque. The FTC has not fully detailed what compliance looks like — specific removal mechanics, the threshold for triggering enforcement, and the penalty structure are all unclear. Platforms are building infrastructure against an enforcement framework that has not been fully published .
• Structural remedies for Live Nation. The remedies phase before Judge Subramanian is the live question — whether the state coalition pursues divestiture of Ticketmaster, forced venue divestitures, or accepts behavioral remedies. The answer defines the vertical-integration risk template for other concentrated industries .
• Trade-association price-benchmarking as a coordination mechanism. The DOJ egg-producer theory — that using a shared industry benchmarking service to set prices constitutes Sherman Act coordination — is untested at trial. If sustained, it creates exposure for any industry where competitors share pricing data through a common intermediary .
• Surveillance pricing: where is the line between lawful dynamic pricing and unlawful personalized pricing? The FTC's Section 6(b) study and the House investigation have not yet produced a clear standard; California's AB 2564 would draw the line at individual consumer data, but federal preemption of state rules is unresolved .
• Below-threshold merger exposure in cross-border deals. The French Doctolib decision — sanctioning a sub-threshold acquisition under abuse-of-dominance theory after raising notification thresholds — signals that deals structured to avoid mandatory filing remain vulnerable to ex post challenge. Whether US enforcers adopt analogous theories for sub-HSR-threshold acquisitions by dominant platforms is an open question .

What to watch.

• FTC enforcement actions against law firms that received Mansfield Certification warning letters — whether the agency pursues settlements with conduct restrictions or files complaints will clarify the operational scope of the DEI-as-collusion theory.
• DOJ egg-producer complaint when filed: the specific coordination theory and whether the benchmarking service is named as a co-defendant will determine how broadly the theory travels to hospitality, healthcare, and agriculture.
• Live Nation remedies phase: whether the state coalition moves for structural relief (Ticketmaster divestiture) or accepts behavioral remedies, and Judge Subramanian's response.
• FTC publication of detailed TAKE IT DOWN Act compliance guidance — platforms are operating against an enforcement framework with gaps; any published standards will immediately reset compliance baselines.
• Genesis Tech preliminary injunction proceedings: whether the asset freeze holds against challenge from offshore-entity defendants, and whether the FTC pursues individual liability against the eight named individuals.
• Surveillance pricing: whether the FTC moves from Section 6(b) study to formal rulemaking, and whether California AB 2564 advances — either would force a federal preemption confrontation.