FTC's $12M case against Humboldt cites sham merchants, ignored warnings and a 2015 BMO consultant report

Run the 2015 review's two shares against its own chargeback rate and the rest of Humboldt's book comes out near 0.79 per cent while the flagged line sat at 4.6 per cent, a portfolio averaging roughly 1.74 per cent with one business running close to six times everything else in it ^[19][20]. That ratio was on paper in the first quarter of 2015, before anyone had to form a view about how supplements and gadgets get sold online ^[5][8].

The structural detail that makes the following eight years legible is in the sponsorship agreement, which dates to December 2009, put the accounts on BMO's card network credentials, and made Humboldt responsible for merchant underwriting and "risk/fraud monitoring" ^[9][10]. A merchant account works like a line of credit, so when a cardholder disputes a charge and the merchant will not repay it, the underwriter eats the loss ^[18]. The sponsor bank held the exposure and the independent sales organisation held the file, which leaves a sponsor's response to an unflattering review fairly coarse: accept it, or exit. What the bank actually did is not in the record, because the complaint neither names the consulting firm nor says how BMO responded ^[11], and the agency has not charged the bank with anything ^[16].

Card issuers, meanwhile, were doing the pricing well before the regulator did. By 2020 cardholders' banks were declining more of the Performance Marketing traffic than Humboldt liked, and the company's president wrote in a September internal document that many issuers had labeled it a "bad BIN" ^[14]. A decline rate is a price. It moved roughly three years before the federal court shut down the operation that supplied many of the shell companies in December 2023 ^[15], and it moved on information the issuers had inferred from their own dispute data rather than from a consultant's report they had paid for.

Set the money against the volume and the settlement reads as a wind-up rather than a fine: $12 million against more than $100 million of sham-merchant payments is under 12 cents on the dollar ^[21], and it arrives with a ban on processing, which is the whole business, plus a seven-day payment clock once the court signs ^[3][1]. Humboldt says it is no longer a registered ISO of BMO ^[17].

The view here, on the evidence supplied, is that the sponsor-bank model separates the party carrying the chargeback loss from the party holding the underwriting file, and that separation is why a quantified 2015 finding can coexist with eight more years of account openings ^[7]. Or rather, the more interesting version: the second reading is equally consistent with the complaint, which is that BMO did act in 2015, and Humboldt routed around whatever it imposed, exactly the behaviour Mastercard described to Humboldt between 2017 and 2019 when merchants spread charges across accounts to stay under network monitoring thresholds ^[12]. The complaint's silence on the bank's response is the fork between those two stories. Fourteen years of sponsorship, from December 2009 to the December 2023 shutdown, has so far produced a $12 million bill for the ISO and none for the bank whose credentials carried the accounts ^[22][3][16].