Friday, October 9, 2026
News For Internet Marketers
Gambit Security's September 22 interim report says an operator using open-source AI agents built a target list of custom-coded online stores, took more than 600,000 card records from two companies, and hid skimmer loaders in library files, Google tag blocks, and, at a U.S. firearms marketplace, product description fields.
Eli Lilly's six retatrutide lawsuits came with a call for card companies and processors to cut off sellers, and a CBS News investigation then found more than 80 businesses promoting the unapproved drug under LegitScript's seal, raising the bar for licensed telehealth and compounding merchants in underwriting.
FDA's August 24, 2026 warning letters to Peak Performance Peptides, Royal Peptides, NuScience Peptides, Peptide Partners, and Tex Peptides set aside research use only disclaimers and list the product pages, study summaries, blog posts, calculators, and bacteriostatic water that FDA treated as evidence of intended human use.
The FTC, Nevada, and Utah sued Lens.com on October 2, 2026, alleging a mandatory Taxes & fees charge sat below a red Continue button at checkout and that AutoRefill cancellation terms were kept outside the purchase flow, in a case built on the FTC Act, ROSCA, and a Gramm-Leach-Bliley pretexting count rather than a fee rule.
Chapters 1021 and 1044 of Virginia's 2026 Acts of Assembly repealed the licensed delivery-sale section for liquid nicotine and nicotine vapor products and left Code 18.2-246.8(B) limiting delivery of internet vape orders to retail dealers. A proposed Virginia ABC internet permit rule has not said how it treats vapor products.
Platform payment bans and Shop-channel limits push many firearms accessory merchants off Shopify Payments. This analysis weighs WooCommerce and BigCommerce for SKU control, age gates, and specialty gateway integrations before peak season.
Developers building firearm checkouts outside template apps often drop transfer-fee transparency and FFL handoff steps. Those gaps drive chargebacks and compliance failures when the buyer reaches the transferring dealer.
Telehealth brands that bill consults and pharmacy fulfillment on separate MIDs can reduce statement confusion and chargebacks when checkout copy, refunds, and descriptors stay aligned. FDA GLP-1 telehealth pressure makes clean money flows part of processor survival too.
After Square's October 15 CBD catalog deadline and November 5 hemp-primary closure pattern, Shopify and WooCommerce stores need underwriting, dual-MID, plugin, ACH, and chargeback criteria before they trust any specialty gateway marketing page.
FDA's September 18, 2026 warning letter to Empower Pharmacy ties high-volume compounded GLP-1 combinations to telehealth-style menus that preselect significant-difference language under section 503A.
