Title 15 › Chapter 110— ONLINE SHOPPER PROTECTION › § 8402
Bans post-transaction third-party sellers from charging a customer’s credit card, debit card, bank account, or other payment account after an online purchase unless they follow specific steps. Before asking for billing details, the seller must clearly say what is being sold, that they are not the original merchant (and show their own name clearly), and the cost. The seller must get the customer’s clear permission by collecting the full account number, the customer’s name, address, and a way to contact them, and by making the customer take one more affirmative step (for example, clicking a confirmation button or checking a box). The original online merchant may not give a customer’s payment or billing information to a post-transaction third-party seller. This does not change the Electronic Funds Transfer Act. Definitions: initial merchant — the business that got the customer’s billing information in the online sale; post-transaction third-party seller — a separate online seller who offers goods or asks the customer to buy through the initial merchant after the customer began the original transaction and is not an affiliate or successor.
Full Legal Text
Commerce and Trade — Source: USLM XML via OLRC
Legislative History
Reference
Citation
15 U.S.C. § 8402
Title 15 — Commerce and Trade
Last Updated
Apr 3, 2026
Release point: 119-73not60