Title 15 › CHAPTER 110 — ONLINE SHOPPER PROTECTION › § 8402
It is illegal for a third-party seller to charge a buyer’s credit card, debit card, bank account, or other account after an online purchase unless the seller first clearly shows what is being sold, makes clear they are not the original merchant (for example by using their own name), and shows the price before getting the buyer’s billing information. The seller must also get the buyer’s clear permission to be charged by collecting the full account number, the buyer’s name, address, and a way to contact them, and by requiring an extra clear action from the buyer (like clicking a confirmation button or checking a box). An original merchant may not pass a customer’s account or billing information to a third-party seller for use in an online sale. This does not change rules in the Electronic Funds Transfer Act. Initial merchant: the person who got the customer’s billing info directly when the customer made an online purchase. Post-transaction third-party seller: a seller who offers goods online, contacts that customer through the original merchant after the customer started a transaction, and is not the original merchant, its affiliate, or its successor.
Full Legal Text
Commerce and Trade, Source: USLM XML via OLRC
Legislative History
Reference
Citation
15 U.S.C. § 8402
Title 15, Commerce and Trade
Last Updated
Sep 23, 2026
Release point: 119-110