:

FTC TARGETS SUBSCRIPTION SCAM NETWORKS EVADING APP STORES

INDUSTRY DESK1 MIN READ
WED, JUN 17, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

The FTC has filed a lawsuit exposing how subscription app operators use shell companies and payment infrastructure to bypass app store enforcement and continue targeting consumers despite complaints.

The lawsuit details a coordinated strategy where operators obscure their identities through multiple shell entities while maintaining active listings on major app platforms. By fragmenting operations across numerous corporate structures and leveraging complex payment systems, these networks reportedly circumvent detection mechanisms designed to protect consumers. App stores have implemented enforcement policies to remove predatory subscription apps, but the case reveals gaps in oversight. Scammers establish new accounts quickly after removals, using different branding and payment processors to resume operations. The FTC's action highlights the challenge platforms face in monitoring thousands of apps while bad actors exploit loopholes. The agency is pursuing remedies to strengthen enforcement and prevent future violations. The lawsuit underscores growing pressure on Apple, Google, and other platforms to tighten app review processes and implement stronger verification requirements for subscription-based services.

■ SOURCES

TechCrunch

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

A Russian-speaking cybercriminal group is actively compromising Fortinet firewalls and VPNs used by major companies worldwide, exploiting previously known passwords to gain access to corporate networks.

JUST NOWSecurity Desk

A massive credential leak has compromised sensitive network access for thousands of organizations, including Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet. The breach exposes login credentials that could allow unauthorized access to critical infrastructure and enterprise systems.

2H AGOSecurity Desk

A detailed technical breakdown of Internet Information Services (IIS) vulnerabilities reveals how attackers exploit the Microsoft web server—and the serious legal consequences they face. The analysis has sparked discussion about responsible disclosure in the security community.

3H AGOAI Desk

The UK will require users to verify their age with ID uploads or facial scans before creating social media accounts under a new ban on under-16s, set to take effect in spring 2027.

3H AGOIndustry Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.