Title 15 › Chapter CHAPTER 110— - ONLINE SHOPPER PROTECTION › § 8402
Post-transaction third-party sellers may not charge a consumer’s credit card, debit card, bank account, or other payment account after an online purchase unless two things happen first. Before they ask for billing details, they must clearly tell the buyer what is being sold, that they are not the original seller (and give a name that makes that clear), and how much it costs. They must also get the buyer’s express, informed consent by collecting the full account number, the buyer’s name, address, and a way to contact them, and by making the buyer take one more clear action (for example, clicking a confirmation button or checking a box) to agree to the charge. The original online seller may not give a customer’s payment number or billing info to a post-transaction third-party seller for use in an internet sale. These rules do not change the Electronic Funds Transfer Act (15 U.S.C. 1693 et seq.) or its rules. Definitions: initial merchant = the seller who got billing info directly from the buyer during the online transaction; post-transaction third-party seller = an online seller who offers goods through the original merchant after the buyer started a transaction and is not the original seller or its affiliate or successor.
Full Legal Text
Commerce and Trade — Source: USLM XML via OLRC
Legislative History
Reference
Citation
15 U.S.C. § 8402
Title 15 — Commerce and Trade
Last Updated
Apr 6, 2026
Release point: 119-73