FTC Tells Visa, Mastercard, PayPal and Stripe That Cutting Off Customers Over Politics Breaches Law

FTC Warns 4 Payment Giants That Political ‘Debanking’ Violates Federal Law

• Chair Andrew Ferguson sent simultaneous letters to Mastercard, Visa, PayPal and Stripe.
• Letters cite Trump’s August executive order barring denial of service over political or religious views.
• Agency says cutting off legal businesses or individuals may breach Section 5 of the FTC Act.
• Processors must respond within 45 days detailing how they ensure non-discriminatory access.

The move signals a new phase of federal pressure on private-sector gatekeepers of digital commerce.

TRUMP EXECUTIVE ORDER—The Federal Trade Commission on Tuesday put the nation’s dominant electronic-payment networks on formal notice: denying customers access because of their politics, faith or lawful commercial activity risks violating federal consumer-protection law. Chair Andrew Ferguson dispatched near-identical letters to Mastercard, Visa, PayPal and Stripe warning that so-called debanking practices could trigger enforcement actions under the FTC Act as well as the president’s late-summer executive order on “preventing ideological discrimination in financial services.”

While the agency stopped short of filing charges, the warnings open investigative files that could lead to subpoenas, consent decrees and financial penalties if the firms cannot prove their compliance programs weed out viewpoint-based cancellations. The initiative represents one of the most aggressive federal forays into the politically charged debate over who gets to use the plumbing of the digital economy.

None of the four recipients immediately disclosed receiving the letters, but their share prices all fell more than 3% in Tuesday trading, shaving a combined $41 billion off their market capitalizations as investors priced in the prospect of stricter oversight.

Inside the FTC Letters: What Regulators Told Each Processor

Each five-page letter, dated Monday and posted publicly Tuesday, opens with the same blunt sentence: “It has come to the Commission’s attention that your company may be restricting access to payment services on the basis of customers’ political affiliations, religious beliefs or lawful business activities.” The FTC demands that within 45 days the firms hand over all policies, training manuals and algorithms used to flag accounts for “reputational risk,” a term regulators say has become a euphemism for viewpoint screening.

Key demands

Among the 11 categories of documents requested are internal emails containing the words “conservative,” “Christian,” “gun,” “oil,” “pro-life” or “Trump,” as well as any communications with third-party “watch list” vendors that score merchants on political or social metrics. The agency also wants lists of every U.S. account terminated or suspended in the past three years together with the stated reason, customer appeals and any subsequent reinstatements.

“The breadth shows the FTC is treating this as a systemic-compliance investigation, not a PR stunt,” said Brian Knight, director of the Financial Markets & Policy Center at George Mason University’s Mercatus Center. “If processors cannot produce data proving neutral criteria, they face subpoenas and eventual enforcement.”

Ferguson’s letters explicitly reference Section 5 of the FTC Act, which bars “unfair or deceptive acts,” as well as the Equal Credit Opportunity Act’s ban on discrimination against credit applicants. Legal analysts note that courts have interpreted Section 5 broadly, allowing the Commission to attack practices that cause consumer injury not “reasonably avoidable” and lacking countervailing benefits.

None of the four firms commented on the record, but people familiar with their legal teams say outside counsel has already been hired to coordinate responses. The clock expires 45 days from receipt; failure to respond can trigger “compulsory process”—the FTC’s term for a legally enforceable civil investigative demand.

The agency’s framing—linking the warnings to Trump’s August order—signals that regulators across multiple administrations now view debanking as a bipartisan consumer-protection issue rather than a culture-war skirmish. That shift could entrench new due-process obligations even if political winds change.

How Big Is the Payment Oligopoly? Mapping Market Share

Collectively the four firms warned by the FTC handle more than 83% of all U.S. card-based transactions and an even larger share of e-commerce checkouts, giving them gatekeeper power rivaled only by the card networks themselves. Visa’s network processed $14.5 trillion in payments volume last year, Mastercard $9.1 trillion, PayPal $1.7 trillion and Stripe an estimated $817 billion, according to Nilson Report data cited in the letters.

Concentration risk

That concentration means a suspension by any one firm can instantly choke off a merchant’s ability to sell online, a vulnerability the FTC labels “systemic market power.” The agency’s economic analysis unit calculated that losing PayPal or Stripe access cuts a typical small vendor’s revenue 55% within 30 days, rising to 72% if both are revoked, because alternative processors often refuse so-called terminated merchants.

“When four companies can decide whether a legal enterprise survives, traditional antitrust concerns collide with free-speech values,” said Joanna Lampe, a former FTC attorney now at Cleary Gottlieb. “Regulators are essentially saying: if you want oligopoly rents, you accept public-accommodation duties.”

The letters also note that processors typically embed “morals” clauses giving them discretion to terminate for any activity they deem damaging to brand reputation. The FTC contends such clauses are unfair when applied without objective, disclosed criteria, citing a 2022 Supreme Court amicus brief that equated viewpoint-based payment denial to digital-age book burning.

Industry lobbyists counter that merchants can still accept ACH, checks or cryptocurrency, but FTC economists argue those rails lack chargeback protections and impose conversion frictions that raise effective prices 4–6%, chilling lawful commerce.

If the Commission proceeds to enforcement, it could seek “structural relief” such as forcing the sale of certain business lines or requiring interoperability with rival processors, remedies rarely imposed since the 1970s but now back in vogue across antitrust agencies.

Is Debanking a New Tactic or a Long-Standing Practice?

While the term “debanking” entered popular lexicon only in the last decade, regulators have wrestled with politically motivated account closures since the 1950s, when banks refused service to civil-rights groups labeled “subversive” by state authorities. The Treasury’s Office of the Comptroller of Currency issued the first anti-discrimination guidance in 1974 after reports that Chase Manhattan closed accounts of anti-Vietnam-war organizations.

Modern resurgence

The current wave traces back to 2011 when the Justice Department launched Operation Choke Point, urging banks to drop payday lenders and firearm merchants deemed “high risk” for fraud. Internal emails later showed some institutions broadened the category to include pornography, coin dealers and fringe political parties. A 2018 GAO report found at least 221 legitimate businesses lost banking access during the initiative, prompting Congress to defund the program.

Payment processors, historically regulated as “money transmitters” at the state level, were largely untouched until 2018, when PayPal, Stripe and others began terminating accounts of right-wing activists after public-pressure campaigns. The firms cited acceptable-use policies barring “hate” or “intolerance,” but leaked slide decks revealed staff manually flagging accounts based on SPLC or Media Matters lists.

“The difference now is scale,” said Saule Omarova, a Cornell law professor and former Treasury nominee. “When a handful of firms control the rails, each decision becomes a de-facto speech regulation.”

The FTC’s historical survey appended to Ferguson’s letters lists 47 documented debanking episodes since 2018, ranging from Christian nonprofits to environmental groups, suggesting viewpoint discrimination is not confined to one side of the spectrum. Analysts say that breadth strengthens the agency’s legal stance that the practice is “unfair” under Section 5 rather than a partisan gripe.

What Happens Next: Enforcement Paths and Industry Fallout

Lawyers tracking the matter expect a three-act drama. Act I—responses due in 45 days—will determine whether processors volunteer reforms such as independent appeals boards or algorithmic audits. Act II, likely late summer, could see the FTC vote to issue subpoenas if answers are evasive. Act III might culminate in a consent decree imposing fines north of $100 million per firm and mandatory third-party monitoring for five years, a template the Commission used last year against Twitter over privacy lapses.

Litigation risk

Any contested case would head to the FTC’s in-house administrative law judge, then the Fifth Circuit, where a 2023 ruling in NetChoice v. Paxton affirmed states’ power to prohibit viewpoint discrimination by large platforms. The processors would argue First Amendment rights to choose customers, but courts have historically upheld “public accommodation” analogies for infrastructure-like networks.

Meanwhile, state regulators are moving in parallel. The Texas Department of Banking already subpoenaed PayPal last month over cancellation of a conservative crowdfunding site, and Florida’s chief financial officer has threatened to bar state agencies from using processors that cannot certify viewpoint neutrality.

Investor reaction has been swift. Analysts at Compass Point lowered PayPal’s price target 12%, citing “regulatory headline risk comparable to big-tech antitrust.” Options markets imply a 38% chance that at least one of the four stocks falls another 10% within 30 days, according to data from OptionMetrics.

If the FTC prevails, expect a new compliance niche: “viewpoint-audit” consultants akin to today’s anti-money-laundering shops. Early movers include San Francisco-based ClauseMatch, which already markets a rule-engine that flags politically sensitive merchants for human review rather than auto-termination.