A payment company that markets itself as a trusted e-commerce partner processed card charges for tech support scammers — the same people who call your elderly parents, manufacture fake virus warnings on their screens, and drain their bank accounts — and the federal government just made them pay for it.

The Non-Financial Ledger: What a Stolen Card Charge Actually Costs

Tech support scams follow a script designed to weaponize fear. A pop-up erupts on a screen warning that a virus has compromised the computer and that the user must call a toll-free number immediately to prevent data loss or financial ruin. The person on the other end of that call is not a technician. They are a fraudster whose entire business model depends on someone processing the payment once the target, often an older adult, surrenders their card number in panic.

That is exactly where Paddle.com entered the picture. Paddle provides what the FTC order calls “Covered Services”: the credit card processing, the subscription billing management, the payment infrastructure that turns a scam pitch into cash. Without a payment processor willing to run those transactions, the scammer has no revenue. Paddle was, functionally, the cash register at the counter of a crime.

The damage to targets of tech support scams goes well past the dollar amount charged. Victims describe the specific psychological wreckage of having been conned by someone who sounded authoritative and professional. They feel shame. They feel stupid. Many are afraid to tell their children what happened. That shame is a feature of the scam, engineered deliberately, and it is what prevents victims from reporting, disputing, or recovering what was taken from them.

The FTC’s own framework in this case acknowledges that ordinary consumers, including the elderly and the terminally ill, are explicit targets of the deceptive practices Paddle facilitated. The order’s definition of “clearly and conspicuously” specifically notes that when a “representation or sales practice targets a specific audience, such as children, the elderly, or the terminally ill, ‘ordinary consumers’ includes members of that group.” That language exists because these are not random victims. They are chosen because they are more likely to trust, less likely to dispute, and more likely to pay without question.

The order also describes a specific category of harm that never shows up in settlement figures: the “Negative Option Feature.” This is the industry euphemism for a subscription that starts charging you automatically unless you actively cancel it. Tech support scam operators used these features aggressively. A panicked consumer pays once to make the terrifying pop-up stop; weeks later, their card is billed again, and again, often for months before they notice. Paddle, as a payment facilitator managing these subscription flows, held the switch that could have stopped those recurring charges. The FTC found they did not throw it when they should have.

Legal Receipts: The Receipts They Couldn’t Shred

These are direct citations from the FTC’s court order. They are the government’s official record of what Paddle did and what Paddle must now answer for.

The Complaint charges that Defendants participated in deceptive or unfair acts or practices in violation of Section 5 of the FTC Act, 15 U.S.C. § 45, the TSR, 16 C.F.R. part 310, and Section 4 of ROSCA, 15 U.S.C. § 8403, by assisting deceptive tech support schemes.

FTC Complaint Findings, Section 2 — Stipulated Order, p. 2

Defendants are permanently restrained and enjoined from providing substantial assistance or support to any Person that they know, or have reason to know, is engaged in: Using Defendants’ Covered Services to deceive consumers; Misrepresenting, or assisting others in misrepresenting, expressly or by implication, any material aspect of the performance, efficacy, nature, or central characteristics of any good or service; [and] The unauthorized debiting or charging of consumer bank or credit card accounts.

Order Section III — Prohibition Against Assisting and Facilitating, p. 10–11

Defendants are permanently restrained and enjoined from providing Covered Services, and from assisting others in providing Covered Services, whether directly or through an intermediary, for any Person: Offering to sell, selling, promoting, or marketing a Technical Support Product or Service by (1) Telemarketing or (2) pop-up messages relating to security or performance issues on a particular Electronic Device.

Order Section I — Ban on Providing Covered Services for Certain Merchant Categories, p. 9

For a Client who offers or seeks to offer a Technical Support Product or Service through Defendants, testing the Client’s products or services on a clean computer or device to ensure that there are no false or misleading representations that the computer or device has malware, virus, or security threats.

Order Section V.B — Enhanced Screening of High-Risk Clients, p. 14 (requirement now imposed on Paddle going forward, implying prior absence of this practice)

Judgment in the amount of Five Million Dollars ($5,000,000) is entered in favor of the Commission against the Defendants, jointly and severally, as monetary relief. Defendants are ordered to pay to the Commission Five Million Dollars ($5,000,000), which, as Defendants stipulate, their undersigned counsel holds in escrow for no purpose other than payment to the Commission.

Order Section XII — Judgment for Monetary Relief, p. 24

Providing Covered Services to any Persons unless Defendants have a contract with an Acquirer to provide Covered Services; Making, or assisting others in making, directly or by implication, any false or misleading statement in order to obtain Covered Services; or Engaging in any tactics to avoid fraud or risk monitoring programs established by any Financial Institution, Acquirer, or the operators of any payment system, including, but not limited to: balancing or distributing sales transaction volume or sales transaction activity among multiple Merchant Accounts or multiple merchant billing descriptors where the purpose of such balancing is to avoid fraud and risk management programs; using shell companies to apply for additional Merchant Accounts.

Order Section II — Prohibitions Related to Covered Services, p. 10

Societal Impact Mapping

Public Health: The Scam Victim Nobody Talks About

Tech support scams do not end when the call disconnects. The FTC’s framework in this case explicitly acknowledges that the elderly and the terminally ill are among the targeted populations for these deceptive schemes. The order’s definitions of “clearly and conspicuously” include a specific carve-out requiring that disclosures be evaluated through the lens of whoever the scheme was designed to victimize — including those whose cognitive vulnerability or health anxiety makes them easier to manipulate.

The psychological consequence of being scammed by a fake tech expert is well-documented outside this case: victims report depression, anxiety, social withdrawal, and a persistent erosion of trust in technology that isolates them further from family and support systems. For older adults living alone, that isolation can be medically dangerous. The scammers that Paddle’s payment rails served were not taking money from abstract accounts. They were taking money from people who could not easily earn it back, whose fixed incomes meant a $500 fraudulent charge represented groceries, medication, or utilities.

The FTC’s order acknowledges the use of “pop-up messages relating to security or performance issues on a particular Electronic Device” as a key delivery mechanism for these scams. That pop-up is an engineered medical-grade stressor: it appears without warning, it mimics a system emergency, and it demands immediate action. For someone with a heart condition or anxiety disorder, the physiological response to that manufactured crisis is real and measurable. Paddle ran the payment infrastructure for that system.

Economic Inequality: Who Pays When a Payment Processor Looks the Other Way

The FTC’s settlement of $5 million (roughly the annual salary of 100 median U.S. workers, or enough to pay one year of utility bills for approximately 1,500 low-income households) lands entirely on Paddle as a corporate entity. The individual consumers who were defrauded through Paddle-processed transactions may receive some portion of that money as redress — but the order notes that the FTC retains discretion over how those funds are allocated, and the money may be used for “consumer information remedies” or deposited to the U.S. Treasury if direct redress proves impractical.

Meanwhile, the structural enabler is still in business. Paddle agreed to new compliance obligations and paid a fine, but the order explicitly notes: “Defendants neither admit nor deny any of the allegations in the Complaint.” No admission of wrongdoing. No accountability for any specific victim. The company writes a check and operates under tighter rules going forward. The scam victims who were charged unauthorized fees, billed in recurring cycles they never agreed to, and manipulated through fake virus warnings get to wait and see if the FTC decides their situation qualifies for a refund check.

That asymmetry is a structural feature of how financial fraud enforcement works in the United States. Payment processors sit at a uniquely powerful position in any fraud scheme — without them, no money moves. But enforcement against them arrives late, results in no admission of guilt, and produces settlements that, while sounding large in a press release, are calibrated to corporate revenue rather than to total consumer harm. The $5 million fine (less than the cost of a luxury apartment building in any major U.S. city) does not represent any known calculation of total harm to victims; the source document does not specify that figure at all.

What Now: Who to Watch and What You Can Do

The Corporate Structure Still Standing

The two entities named in this case are Paddle.com Market Limited and Paddle.com, Inc. Both remain in operation. The order binds their “officers, agents, employees, and attorneys, and all other persons in active concert or participation with any of them.” Individual executives are not named in this source document.

Regulatory Bodies on the Watchlist

If You Were Targeted by a Tech Support Scam

File a report with the FTC at ReportFraud.ftc.gov. The money collected in this settlement may be used for consumer redress, and your report creates the paper trail that makes that redress possible. Contact your bank or card issuer immediately to dispute unauthorized charges; card networks are required to investigate chargebacks and you have rights under the Truth in Lending Act and the Electronic Fund Transfer Act, both cited in this very order.

Do not rely on individual enforcement alone. The scam infrastructure that Paddle served did not emerge in a vacuum: it runs on deregulated payment processing markets, weak pre-screening requirements, and a legal environment where a company can avoid admitting any wrongdoing by writing a check. The most durable resistance to this system is collective: mutual aid networks for older adults, community tech literacy programs that teach people to recognize fake pop-ups and cold-call scams, and sustained pressure on elected officials to raise the financial penalty ceiling for payment processors who look the other way. A $5 million fine on a global payment company is a line item, not a deterrent. Push for penalties scaled to total consumer harm, not corporate convenience.