Thursday, October 8, 2026
News For Internet Marketers
Eli Lilly's six retatrutide lawsuits came with a call for card companies and processors to cut off sellers, and a CBS News investigation then found more than 80 businesses promoting the unapproved drug under LegitScript's seal, raising the bar for licensed telehealth and compounding merchants in underwriting.
FDA's August 24, 2026 warning letters to Peak Performance Peptides, Royal Peptides, NuScience Peptides, Peptide Partners, and Tex Peptides set aside research use only disclaimers and list the product pages, study summaries, blog posts, calculators, and bacteriostatic water that FDA treated as evidence of intended human use.
Authorize.Net's production maintenance on Saturday, October 17, 2026, starts at 9:00 PM Pacific (midnight Eastern) and, per its notice, AFDS transactions will process as if fraud filters are not enabled while CIM, ARB, voids, refunds, and hosted checkout CAPTCHA may be intermittently unavailable.
Restricted sellers shut out of Shopify Payments pay a plan-based surcharge on every gateway order, including tax and shipping, with no refund on returns. This analysis models the plan crossovers, the ENDS removal, and when self-hosting pays back.
Developers building firearm checkouts outside template apps often drop transfer-fee transparency and FFL handoff steps. Those gaps drive chargebacks and compliance failures when the buyer reaches the transferring dealer.
Telehealth brands that bill consults and pharmacy fulfillment on separate MIDs can reduce statement confusion and chargebacks when checkout copy, refunds, and descriptors stay aligned. FDA GLP-1 telehealth pressure makes clean money flows part of processor survival too.
After Square's October 15 CBD catalog deadline and November 5 hemp-primary closure pattern, Shopify and WooCommerce stores need underwriting, dual-MID, plugin, ACH, and chargeback criteria before they trust any specialty gateway marketing page.
Mastercard's Scam Merchant Monitoring Program, effective July 24, 2026 under bulletin GLB 12772, compresses scam-signal response into a 72-hour acquirer investigation clock that high-risk card-not-present stores cannot treat as optional ops theater.
After active exploitation of WooCommerce Wholesale Lead Capture CVE-2026-27540, high-risk stores need file integrity monitoring on uploads, checkout templates, and admin users before acquirers ask for forensics.
Authorize.Net Account Updater in the New Merchant Interface (2.0) refreshes Visa and Mastercard cards on ARB and CIM profiles. Misread ACL and CCH responses can suspend subscriptions and spike retries that look like card testing.
