Thursday, October 29, 2026
News For Internet Marketers
USA Today's October 21 guide sends GLP-1 patients to state pharmacy license lookups, PCAB or CCE accreditation checks, and FDA's compounding actions list. An analysis of what telehealth sellers can disclose about the dispensing pharmacy to build trust and limit disputes.
Sansec documented a Magecart skimmer that loads from real Google Tag Manager containers and stores Magento checkout data as fake Stripe customers. Why a CSP allowlist misses it, what PCI DSS 6.4.3 and 11.6.1 expect, and what to check.
When an acquirer moves a firearm or nicotine account to MCC 5723, 5993, or a new location record, Visa's April 2026 data rules and October 2026 dispute guide make the statement descriptor part of the change, with VAMP's 1.5% merchant line leaving little room for unrecognized charges.
Firearm and other regulated merchants that authorize at checkout and capture after FFL transfer or backorder release need Authorize.Net's 30-day unsettled ceiling, NMI's processor-dependent auth windows, and tested reauth plus customer notices before holiday volume.
Visa Compelling Evidence 3.0 under Dispute Condition 10.4 expands on October 24, 2026 to prior purchases on the same card or associated tokens, including across merchants an acquirer processed, when qualifying data elements match.
WooCommerce 11.2.0, released October 7, 2026, fixes CVE-2026-106608, which let shop managers take over multi-role accounts including some administrators, and adds four other security changes. 11.2.1 followed on October 9 with checkout fixes.
Gambit Security's September 22 interim report says an operator using open-source AI agents built a target list of custom-coded online stores, took more than 600,000 card records from two companies, and hid skimmer loaders in library files, Google tag blocks, and, at a U.S. firearms marketplace, product description fields.
Authorize.Net's production maintenance on Saturday, October 17, 2026, starts at 9:00 PM Pacific (midnight Eastern) and, per its notice, AFDS transactions will process as if fraud filters are not enabled while CIM, ARB, voids, refunds, and hosted checkout CAPTCHA may be intermittently unavailable.
Developers building firearm checkouts outside template apps often drop transfer-fee transparency and FFL handoff steps. Those gaps drive chargebacks and compliance failures when the buyer reaches the transferring dealer.
Telehealth brands that bill consults and pharmacy fulfillment on separate MIDs can reduce statement confusion and chargebacks when checkout copy, refunds, and descriptors stay aligned. FDA GLP-1 telehealth pressure makes clean money flows part of processor survival too.
