Search ads impersonating billers just cost Doxo $2.1m — and handed brands a prohibition list worth citing

The FTC on 17 August 2026 filed a stipulated order in FTC v. Doxo, Inc., No. 2:24-cv-00569 (W.D. Wash.), settling its April 2024 case against the bill-payment platform and co-founders Steve Shivers and Roger Parks. Doxo pays $2.1 million, earmarked for consumer redress; the Commission approved the settlement 2–0, and the order takes the force of law once the district judge signs it. The court had already ruled on 21 May 2026: Judge Thomas S. Zilly granted partial summary judgment holding Doxo liable under the Restore Online Shoppers’ Confidence Act for its subscription sign-up flow, sent the FTC Act § 5 deception counts toward trial, and ordered the parties into mediation by 30 June. The settlement is what came out of that room.

Why it matters

The complaint describes a clean impersonation mechanic: Doxo bought search ads against biller-name queries — utilities, lenders, telecoms — dressed the ads and landing pages as the official payment channel, featured the billers’ names and sometimes logos, and added “delivery fees” and a subscription along the way. Per the FTC, the overwhelming majority of companies Doxo listed had no relationship with it at all. The stipulated order converts that pattern into an itemised prohibition list: no claimed affiliation with billers, no biller web addresses in any search advertisement, no biller names or logos used in a way that implies official status, no misrepresented fees, no obtaining financial data by false pretences, no charges without express informed consent. The Bureau of Consumer Protection framed the action as a commitment to “stopping deceptive search text ads so that consumers can connect confidently with legitimate businesses”.

Counsel’s note

Run the arithmetic before treating a regulator as your remedy. Complaint April 2024, partial summary judgment on liability only in May 2026 — on two counts of five, with the founders’ personal liability never adjudicated — order in August 2026. Twenty-eight months, $2.1m of redress against fees the complaint pegs in the millions, and a private class action (Mundle v. Doxo, No. 2:24-cv-00893, same district) still running alongside. The billers whose customers were intercepted are not parties and collect nothing. Regulators prosecute consumer harm on regulators’ timelines; the brand whose payment flow is being skimmed today needs a faster layer.

What the order is genuinely good for is language. A federal agency and a federal docket have now written down, element by element, what search-ad impersonation of a payment channel looks like: the affiliation claim, the brand’s URL inside ad copy, the name and logo on the landing page, the fee that surfaces only after commitment. That list transfers almost verbatim into a Google Ads trademark complaint, a demand letter to an “alternative payment portal”, or an abuse report to its host — now with a case number attached.

The same slot exists in every vertical we work. For casinos it is the fake cashier and the “official mirror” ad; for brokers, the clone that FCA clone-firm warnings describe; for games and apps, the top-up site that is nobody’s partner. None of them require 28 months: ad-platform trademark enforcement, a takedown against the landing page’s host, and de-indexation of the residue run in weeks.

What this means for you

Search your brand plus “pay”, “deposit”, “cashier” and “login” monthly, from a clean profile, and screenshot the paid slots — ads rotate faster than regulators file. When an intermediary shows up wearing your name, run the ad-platform complaint and the hosting takedown in parallel, and cite FTC v. Doxo when it argues it is merely a convenient middleman. Our guide on stopping brand bidding covers the ad layer; the operators page sets out the full impersonation-defence stack.