The Federal Trade Commission has sued Humboldt Merchant Services, alleging the payment processor knowingly enabled scam operators and shell merchants to access the payments system for unauthorized billing and deceptive consumer charges. The agency’s theory is notable: rather than focusing only on the merchants that allegedly carried out the scams, the FTC is aiming at the infrastructure provider it says made those schemes possible.
According to the FTC, Humboldt processed payments for entities tied to sham businesses and billing operations that allegedly lacked legitimate merchant activity. In the Commission’s view, the processor ignored warning signs that its services were being used to facilitate unlawful charges. That framing places the case squarely within a broader enforcement trend in which regulators pursue “gatekeepers” — banks, processors, platforms, and service providers — when they allegedly help fraud move at scale.
For legal professionals, the case is important because it tests how far consumer-protection liability can extend beyond the primary bad actors. Plaintiffs and regulators have long tried to impose responsibility on parties that sit one step removed from the consumer transaction. This complaint reinforces that payment processors may face scrutiny not just for what they directly do, but for what they allegedly allow others to do through their systems.
That has immediate implications for in-house counsel and compliance teams in payments, fintech, and merchant acquiring. Merchant onboarding, beneficial ownership checks, chargeback monitoring, transaction pattern review, and escalation procedures are likely to become central issues in any defense. Internal documents showing what the processor knew, when it knew it, and how it responded to suspicious activity will likely be critical. Companies that rely on third-party sales channels or high-risk merchant portfolios should view this as a reminder that monitoring controls must be operational, not merely written into policy manuals.
For litigators, the case is a useful marker for pleading and proof theories in FTC enforcement. Expect disputes over knowledge, red flags, causation, and the extent of any duty to investigate customers. Discovery will likely focus on underwriting files, complaint volumes, reserve practices, processor communications, and whether suspicious merchants were allowed to continue after elevated risk indicators emerged.
More broadly, the action signals an aggressive enforcement posture toward payment intermediaries. If the FTC succeeds, the case could further normalize claims against service providers whose platforms allegedly support deceptive commerce. That possibility raises the stakes for any company in the payment chain: consumer-protection exposure may no longer stop with the merchant at the point of sale.