Saturday, October 10, 2026
News For Internet Marketers
DEA filed a notice on October 9 that would schedule 7-OH and mitragynine pseudoindoxyl above 1 milligram per gram or a set ratio to mitragynine, replacing its July 0.050 percent proposal, while MGM-15 and MGM-16 stay in Schedule I and Tennessee, Massachusetts, Rhode Island, and Pennsylvania draw different state lines for kratom sellers.
Stripe, Checkout.com, and Worldpay documentation puts Mastercard's requirement that recurring and other merchant-initiated charges carry the original Transaction Link Identifier on October 23, 2026. The December 1, 2026 and January 31, 2027 dates now circulating match Worldpay's schedule for lifecycle linking, and Authorize.Net and NMI have not published TLID guidance.
Shopify opened market-driven shipping to existing merchants on October 1, 2026, with every store moved by July 1, 2027. The upgrade replaces shipping profiles, which some hemp, nicotine, knife, and tactical sellers use to keep restricted products out of certain states, and changes several defaults those blocks depended on.
Gambit Security's September 22 interim report says an operator using open-source AI agents built a target list of custom-coded online stores, took more than 600,000 card records from two companies, and hid skimmer loaders in library files, Google tag blocks, and, at a U.S. firearms marketplace, product description fields.
Eli Lilly's six retatrutide lawsuits came with a call for card companies and processors to cut off sellers, and a CBS News investigation then found more than 80 businesses promoting the unapproved drug under LegitScript's seal, raising the bar for licensed telehealth and compounding merchants in underwriting.
FDA's August 24, 2026 warning letters to Peak Performance Peptides, Royal Peptides, NuScience Peptides, Peptide Partners, and Tex Peptides set aside research use only disclaimers and list the product pages, study summaries, blog posts, calculators, and bacteriostatic water that FDA treated as evidence of intended human use.
The FTC, Nevada, and Utah sued Lens.com on October 2, 2026, alleging a mandatory Taxes & fees charge sat below a red Continue button at checkout and that AutoRefill cancellation terms were kept outside the purchase flow, in a case built on the FTC Act, ROSCA, and a Gramm-Leach-Bliley pretexting count rather than a fee rule.
Authorize.Net's production maintenance on Saturday, October 17, 2026, starts at 9:00 PM Pacific (midnight Eastern) and, per its notice, AFDS transactions will process as if fraud filters are not enabled while CIM, ARB, voids, refunds, and hosted checkout CAPTCHA may be intermittently unavailable.
Chapters 1021 and 1044 of Virginia's 2026 Acts of Assembly repealed the licensed delivery-sale section for liquid nicotine and nicotine vapor products and left Code 18.2-246.8(B) limiting delivery of internet vape orders to retail dealers. A proposed Virginia ABC internet permit rule has not said how it treats vapor products.
Restricted sellers shut out of Shopify Payments pay a plan-based surcharge on every gateway order, including tax and shipping, with no refund on returns. This analysis models the plan crossovers, the ENDS removal, and when self-hosting pays back.
