[Federal Register Volume 89, Number 42 (Friday, March 1, 2024)]
[Rules and Regulations]
[Pages 15017-15031]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2024-04335]
=======================================================================
-----------------------------------------------------------------------
FEDERAL TRADE COMMISSION
16 CFR Part 461
RIN 3084-AB71
Trade Regulation Rule on Impersonation of Government and
Businesses
AGENCY: Federal Trade Commission.
ACTION: Final rule.
-----------------------------------------------------------------------
SUMMARY: This final rule prohibits the impersonation of government,
businesses, and their officials or agents in interstate commerce. This
document contains the text of the final rule and the rule's Statement
of Basis and Purpose (``SBP''), including a Regulatory Analysis.
DATES: This rule is effective April 1, 2024.
FOR FURTHER INFORMATION CONTACT: Christopher E. Brown (202-326-2825),
Attorney, Division of Marketing Practices, Bureau of Consumer
Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW,
Washington, DC 20580.
SUPPLEMENTARY INFORMATION:
I. Background
A. Advance Notice of Proposed Rulemaking
On December 23, 2021, the Federal Trade Commission (``Commission''
or ``FTC'') published an advance notice of proposed rulemaking
(``ANPR'') to address certain deceptive or unfair acts or practices of
impersonation.\1\ As part of the ANPR, the Commission requested comment
on any issues or concerns relevant or appropriate to this rulemaking to
combat impersonation of governments, businesses, or their agents, and
whether and how to proceed with a notice of proposed rulemaking
(``NPRM'').\2\ The Commission took comments for 60 days, and received
164 comments from representatives from a broad spectrum of businesses,
trade associations, government or law-enforcement organizations, and
individual consumers, which are publicly available on this rulemaking's
docket at https://www.regulations.gov/docket/FTC-2021-0077/comments.
Commenters generally expressed support for the Commission's proceeding
with the rulemaking. They also voiced deep concerns about the
prevalence and harmfulness of both government and business
impersonation. No commenter expressed the view that the Commission
should not commence the rulemaking. Commenters also offered suggestions
for the Commission's consideration in drafting the proposed rule and
other recommendations in furtherance of the proposed rulemaking.
B. Notice of Proposed Rulemaking
Based on an extensive review of the comments received in response
to the ANPR, the Commission's own history of enforcement, and other
considerations that occurred after the ANPR's publication,\3\ the
Commission published the NPRM on October 17, 2022.\4\ In the
[[Page 15018]]
NPRM, the Commission stated it has reason to believe impersonation of
government, businesses, and their officials or agents is prevalent.\5\
The Commission identified no disputed issues of material fact based on
the comment record; explained its considerations in developing the
proposed rule; solicited additional public comment thereon, including
posing specific questions designed to assist the public in submitting
comment; and provided interested parties the opportunity to request to
present their position orally at an informal hearing.\6\ Finally, the
NPRM set out the Commission's proposed rule.
In response to the NPRM, the Commission received 78 comments from
entities and individuals interested in the proposed rule, discussed in
Section III.\7\ Although some raised concerns and recommended specific
modifications or additions to the Commission's proposal, the majority
generally supported the rule proposed in the NPRM. Two commenters
timely submitted requests for interested parties to make an oral
statement at an informal hearing.\8\
C. Notice of Informal Public Hearing
On March 30, 2023, the Commission published an Initial Notice of
Informal Hearing (``Notice of Hearing'').\9\ The Notice designated the
Commission's Chief Administrative Law Judge, D. Michael Chappell, to
serve as the presiding officer of the informal hearing and stated that
any member of the public wishing to speak at the informal hearing or
make a documentary submission to be placed on the public rulemaking
record (or both) should submit a comment on or before April 14,
2023.\10\
On May 4, 2023, Chief Judge Chappell presided over the informal
hearing using video conferencing, which enabled the public to watch
live from the Commission's website, https://www.ftc.gov. Because there
were no disputed issues of material fact to resolve, the informal
hearing included no cross examination or rebuttal submissions, and the
presiding officer made no recommended decision. The informal hearing
included oral statements from 14 interested parties.\11\ The majority
of commenters who presented oral statements at the informal hearing or
filed documentary submissions generally expressed strong support for
the Commission's proposed rule.\12\ Several commenters, however, also
expressed concern that the proposed rule language does not explain the
circumstances under which the Commission would apply proposed Sec.
461.4, which would prohibit providing the means and instrumentalities
to commit violations of government and business impersonation. Some
suggested alternative language imposing a scienter requirement to
narrow the scope of this provision, discussed in Section III.D.
In crafting the final rule, the Commission has carefully considered
the comments received in response to the NPRM and on the rulemaking
record, which includes the oral statements and documentary submissions
in response to the Notice of Hearing. The final rule contains some
changes from the proposed rule. These modifications, discussed in
detail in Section III, are based upon input from commenters and careful
consideration of relevant law. Section III also discusses commenters'
recommendations that the Commission declined to adopt, along with the
Commission's reasons for rejecting them. Accordingly, the Commission
adopts the proposed rule with limited modifications as discussed below.
The rule will take effect April 1, 2024.
II. The Legal Standard for Promulgating the Rule
The Commission is promulgating 16 CFR part 461 pursuant to section
18 of the FTC Act, 15 U.S.C. 57a, the Administrative Procedure Act
(``APA''), and Part 1, subpart B of the Commission's Rules of
Practice.\13\ This authority permits the Commission to promulgate,
modify, and repeal trade regulation rules that define with specificity
acts or practices that are unfair or deceptive in or affecting commerce
within the meaning of section 5(a)(1) of the FTC Act, 15 U.S.C.
45(a)(1).
The Commission's Rules of Practice further provide that if the
Commission determines to promulgate a rule, it will adopt a SBP, which
must address three factors: (1) The prevalence of the acts or practices
addressed by the rule; (2) the manner and context in which the acts or
practices are unfair or deceptive; and (3) the economic effect of the
rule, taking into account the effect on small businesses and
consumers.\14\ In this section of the preamble, the Commission
summarizes its findings regarding each of these factors.
A. Prevalence of Acts or Practices Addressed by the Rule
In its ANPR, the Commission cited public data from the Consumer
Sentinel Network database and described its enforcement record,
demonstrating government and business impersonation scams are not only
highly prevalent but increasingly harmful.\15\ In the NPRM, the
Commission also took notice of additional indications of prevalence
that came after the ANPR's publication.\16\ Specifically, the NPRM
cited data from a broad spectrum of commenters (businesses, trade
associations, and government or law-enforcement organizations)
regarding the prevalence of government and business impersonation
scams, which echoed the Commission's findings that these schemes are
among the most common deceptive or unfair practices affecting U.S.
consumers and businesses and continue to be a significant source of
consumer injury.\17\
B. Manner and Context in Which the Acts or Practices Are Deceptive or
Unfair
A representation, omission, or practice is deceptive if it is
material and likely to mislead a consumer acting reasonably under the
circumstances.\18\ The most frequent allegations in the Commission's
enforcement actions involving government and business impersonation
pertain to defendants tricking consumers to pay money or disclose
personal information by making, expressly or by implication, statements
that misrepresent the defendants' identity.\19\ Nearly as frequent are
allegations of misrepresentations concerning defendants' affiliation
with, endorsement or approval by, or other association with a
government or business. The Commission has further found false threats
of severe consequences and promises of benefits are additional
deceptive tactics deployed by government and business impersonators. In
the Commission's experience, such claims regarding identity,
affiliation, or endorsement are material to consumers making their
decision to trust impersonators. The numerous government and business
impersonation complaints consumers submit to the Commission each year,
as well as comments submitted in connection with this rulemaking
proceeding, consistently reference these same concerns. Accordingly,
the specific practices described in the preamble to the proposed rule
reflect the type of conduct most commonly associated with deceptive and
unfair practices pertaining to government and business
impersonation.\20\
C. The Economic Effect of the Rule
As part of the rulemaking proceeding, the Commission solicited
comment and data (both qualitative and quantitative) on the economic
impact of the proposed rule and its costs and benefits.21 In
[[Page 15019]]
issuing the final rule, the Commission has carefully considered the
comments received and the costs and benefits of each provision, as
discussed in more detail below in Section VI. The record demonstrates
the most significant anticipated benefit of the final rule is the
Commission's ability to obtain monetary relief. This is particularly
critical because that ability was curtailed by the U.S. Supreme Court's
decision in AMG Cap. Mgmt., LLC v. FTC, which holds that equitable
monetary relief, including consumer redress, is not available under
section 13(b) of the FTC Act.22 Further, obtaining monetary
relief based on violations of the final rule under section 19(b) of the
FTC Act will be significantly faster than obtaining such relief under
section 19(a)(2) without a rule violation.23 By enabling the
Commission to obtain monetary relief more efficiently, the final rule
would also reduce the expenditure of Commission resources.24
As an additional benefit, the rule enables the Commission to obtain
civil penalties against violators.25 The final rule also
provides a benefit to businesses through increased deterrence of
business impersonators, which reduces businesses' expenditure of
resources associated with monitoring for and addressing
impersonation.26 Moreover, as the record and the
Commission's law enforcement experience demonstrate, the final rule is
unlikely to impose costs on any honest business, and may increase
deterrence of impersonation scams, which would benefit consumers
through a reduction in their total financial losses from these
schemes.27
III. Response to Comments
The Commission received 78 comments in response to the NPRM from a
diverse group of individuals, industry groups and trade associations,
consumer organizations, and government agencies.28 The
Commission received 28 comments in response to the Notice of Hearing,
including oral presentations from 14 commenters.29
Commenters generally supported the proposed rule, recognizing the
Commission's authority to protect consumers from the increasing number
of government and business impersonation frauds targeting consumers.
In the NPRM, the Commission invited comment on any issues or
concerns the public believes are relevant or appropriate to the
Commission's consideration of the proposed rule.30 The NPRM
also posed eight specific questions for the public.31 Some
of these questions relate to the Paperwork Reduction Act (``PRA'') and
Regulatory Flexibility Act (``RFA''), and are addressed in Sections V
and VI, respectively.32 The other questions, along with
common issues or concerns relevant to the Commission's consideration of
the proposed rule outside of the specific questions, are addressed in
this section of the preamble.
A. Finalizing the Proposed Rule as a Final Rule
In Question 1 of the NPRM, the Commission asked whether it should
finalize the proposed rule as a final rule, and how, if at all, it
should change the proposed rule in promulgating the final
rule.33 The majority of commenters did not express a clear
view regarding whether the Commission should adopt the proposed rule as
final. Many of these commenters, however, did share their experience
regarding the prevalence and harmfulness of various kinds of government
and business impersonation frauds.34 Some of these
commenters complained more generally about various non-impersonation
scams.35 The majority of commenters that addressed Question
1 of the NPRM were substantially supportive of the proposed rule, but
stopped short of urging the Commission to finalize the text of the
proposed rule without modification. These commenters typically
recommended either broadening or narrowing the scope or text of the
rule in response to other specific questions asked in the NPRM or
relevant to the Commission's consideration of the proposed
rule.36
Six commenters explicitly addressed the Commission's question
regarding finalizing the proposed rule as a final rule, and without
recommending additional modifications to the text of the proposed rule,
urged the Commission to do so.37 Some of these commenters
stated the proposed rule is in the public interest because it would
allow for civil penalties against government and business
impersonators, provide redress for victims of impersonation scams, and
deter future bad acts.38
Several government agencies and trade associations explained how
the proposed rule would benefit them, their members, or the people they
serve. The United States Patent and Trademark Office (``USPTO'')
described its experience of agency impersonation, and stated that
reliance on the FTC's enforcement capabilities through such a rule
would allow the USPTO to conserve and allocate its resources to
different enforcement efforts that impact the USPTO and its
stakeholders.39 Similarly, the Marine Retailers Association
of the Americas (``MRAA''), a trade association representing marine
retailers, argued the benefits associated with finalizing the proposed
rule would reduce the financial burden on businesses and improve trust
among consumers.40 The United States Copyright Office
(``USCO'') expressed support for finalizing the proposed rule, arguing
that doing so would allow the Commission to move more quickly to put a
stop to impersonation scams.41 The USPTO and the USCO
explained they do not have law enforcement authority to remedy the
harms resulting from bad actors impersonating the agencies, and USCO
argued the proposed rule would foster public trust in the copyright
system.42 The Cellular Telecommunications and internet
Association (``CTIA''), a trade association for wireless service
providers, argued in favor of finalizing the proposed rule because its
scope is ``targeted and judicious,'' and appropriately focused on the
bad actors that harm consumers.43
Somos, Inc., which manages registry databases for the
telecommunications industry, stated it ``strongly supports the
Commission's proposed rules,'' but suggested the Commission explicitly
clarify that spoofing a telephone number of a business or government
entity to aid in that impersonation violates the rule.44 The
Commission is not persuaded that explicitly stating telephone spoofing,
or any specific type of government or business impersonation,
constitutes a violation of the rule is necessary.45
Moreover, the Telemarketing Sales Rule (``TSR'') already bars
telemarketers from ``failing to transmit. . .the telephone number and.
. .the name of the telemarketer to any caller identification service in
use by a recipient of a telemarketing call.'' 46 By
definition, a spoofed telephone number is not the number of the
telemarketer, and the Commission can rely on this prohibition to bring
an enforcement action for violation of the TSR against a telemarketer
that uses a spoofed number.
The Commission also received several comments that identified the
lack of access to accurate information concerning domain name
registrants (commonly known as ``WHOIS'' data) as a significant
impediment to combatting the use of domain names to impersonate
government and businesses.47 These commenters expressed
support for expanding the text or scope of the final rule to address
this issue.48 In particular, a few commenters urged the
Commission to issue a final rule that requires domain name registrars
to
[[Page 15020]]
collect, verify, maintain, and disclose accurate WHOIS data to the FTC
and third-party victims on request for such information based on
credible evidence of impersonation fraud.49 The Coalition
for Online Accountability (``COA''), a group advocating for online
transparency and accountability, argued ``[t]here is no justification
for the redaction of data of legal person registrants or the
overwhelming denial of reasonable access to personal WHOIS data for
legitimate third-party interests. . ..'' 50 Both the
Messaging Malware Mobile Anti-Abuse Working Group (``M3AAWG'') and the
Anti-Phishing Working Group (``APWG'') also suggested the Commission
encourage Domain Name System (``DNS'') registries and registrars to
engage in DNS mitigation and frequently impersonated entities to
participate as ``trusted notifiers'' to address fraudulently registered
domain names.51
The Commission declines to adopt commenters' suggestion that the
final rule expressly reference in accompanying examples the use of
domain names in impersonation schemes. Rather, the Commission here
repeats what it previously stated in the NPRM and earlier in this SBP,
that the following list of examples of conduct covered by the
prohibition on the impersonation of government and businesses was
intended to be illustrative, not exhaustive: (1) calling, messaging, or
otherwise contacting an individual or entity while posing as a
government or an officer or agent or affiliate or endorsee thereof,
including by identifying a government or officer by name or by
implication; (2) sending physical mail through any carrier using
addresses, government seals or lookalikes, or other identifying
insignia of a government or officer thereof; (3) creating a website or
other electronic service impersonating the name, government seal, or
identifying insignia of a government or officer thereof or using
``.gov'' or any lookalike, such as ``govusa.com''; (4) creating or
spoofing an email address using ``.gov'' or any lookalike; (5) placing
advertisements that pose as a government or officer thereof against
search queries for government services; (6) using a government seal on
a building, letterhead, website, email, vehicle, or other physical or
digital place; (7) calling, messaging, or otherwise contacting an
individual or entity while posing as a business or an officer or agent
or affiliate or endorsee thereof, including by naming a business by
name or by implication, such as ``card member services'' or ``the car
dealership''; (8) sending physical mail through any carrier using
addresses, seals, logos, or other identifying insignia of a business or
officer thereof; (9) creating a website or other electronic service
impersonating the name, logo, insignia, or mark of a business or a
close facsimile or keystroke error, such as ``ntyimes.com,''
``rnicrosoft.com,'' ``microsoft.biz,'' or
``carnegiehall.tixsales.com''; (10) creating or spoofing an email
address that impersonates a business; (11) placing advertisements that
pose as a business or officer thereof against search queries for
business services; and (12) using, without authorization, a business's
mark on a building, letterhead, website, email, vehicle, or other
physical or digital place.52 Accordingly, the Commission
finds the final rule is drafted with sufficient clarity and flexibility
to address the unauthorized use of internet identifiers, including but
not limited to domain names.
Only one commenter suggested in response to Question 1 of the NPRM
that the proposed rule should not be finalized.53 The
Americans for Prosperity Foundation (``AFPF''), a 501(c)(3) nonpartisan
education organization, argued the Commission should ``abandon its
Section 18 rulemaking ambitions, instead refocusing its efforts on
case-by-case enforcement actions in federal court in cases involving
concrete harm to consumers.'' 54
The Commission disagrees with the AFPF's suggestion that the
section 18 rulemaking process is too difficult or unwieldy to address
many of the unfair or deceptive acts or practices prevalent in
commerce. In 1975, Congress passed the Magnuson-Moss Warranty--Federal
Trade Commission Improvement Act laying out specific procedures for the
promulgation of ``Trade Regulation Rules'' to protect consumers in a
dynamic and changing economic landscape.55 The Commission's
regulations at 16 CFR part 1, subpart B, respect the underlying
statutory requirements of section 18, which provide ample transparency
and opportunity for public participation in the promulgation of Trade
Regulation Rules. The Commission intends therefore to fulfill its
mission to protect against unfair or deceptive acts or practices in or
affecting commerce and to provide consumers and businesses with due
process, clarity, and transparency while crafting the rules to do so.
Accordingly, the Commission rightfully responds to Congress's grant of
authority by initiating this rulemaking.
The AFPF also expressed various criticisms specific to the language
of the proposed rule and recommended several suggested revisions
discussed in greater detail in Sections III.C and III.D below.
Following review of all comments and careful consideration of the
relevant law, the final rule issued by the Commission contains some
minor changes from the proposed rule, as discussed in Section III.
B. Relevant Evidence Regarding Provisions of the Proposed Rule,
Prevalence, Impact and Alternative Proposals
In the ANPR, the Commission asked specific questions about the
prevalence of impersonation fraud, and requested the data source
commenters relied upon for formulating their answer(s).56
The ANPR also asked specific questions regarding how to craft a
proposed rule to maximize the benefits to consumers and minimize the
costs to businesses, and what alternatives to regulations the
Commission should consider in addressing impersonation
frauds.57 In Question 2 of the NPRM, the Commission posed
these same or nearly identical specific questions regarding each
different provision of the proposed rule.58 Six commenters
specifically addressed these questions.59 Each of these
commenters described various types of government and business
impersonation scams common to their own experience or industry in
support of their view that such frauds are highly
prevalent.60 For example, the Toy Association noted various
business impersonation scams experienced by its members, including
counterfeit or non-compliant toys, falsified documents regarding
endorsement and affiliation related to counterfeit toys, false
solicitation and phishing schemes collecting customer information, and
domain impersonation.61 Similarly, the USPTO and USCO
described several examples of government impersonation scams involving
the trademark and copyright registration processes, respectively, and
included illustrative examples as attachments with their public
comment.62
Other commenters particularly concerned with online business
impersonation cited data from studies or reports regarding trends in
these kinds of impersonation frauds, and recent examples of phishing
attacks against consumers through the impersonation of recognized
online companies in support of their arguments regarding
prevalence.63 A small number of
[[Page 15021]]
commenters addressed the impact (including any benefits and costs) on
consumers, governments, and businesses, discussed in more detail in
Section VI.
Only one commenter suggested an alternative proposal for the
Commission's consideration.64 Specifically, the M3AAWG
recommended as an alternative to the means and instrumentalities
provision in proposed Sec. 461.4 that the Commission ``identify best
practices or safe harbors to incentivize prompt mitigation efforts and
sound verification techniques'' to address the use of domain names in
business impersonation schemes.65 M3AAWG argued this
alternative to regulation would avoid the risk of inadvertently
imposing ``secondary or intermediary liability against legitimate
businesses, technologies or services'' exploited by
impersonators.66
Upon review of the comments received in response to Question 2 of
the NPRM, the Commission concludes such comments support its own
findings that government and business impersonation schemes are both
prevalent and harmful. The Commission declines at this time to adopt
M3AAWG's alternative proposal for Sec. 461.4. As discussed in Section
III.D, the Commission is continuing to review comments and records
relevant to the means and instrumentalities provision in proposed Sec.
461.4 to determine whether additional action or protections are
warranted and is requesting additional public comment through a SNPRM,
published elsewhere in this issue of the Federal Register.
C. Clarity of Prohibitions Against Impersonation of Government &
Businesses
In Question 5 of the NPRM, the Commission solicited comment
regarding whether the proposed rule's one-sentence prohibitions against
impersonation of government in Sec. 461.2 and against impersonation of
businesses in Sec. 461.3 are clear and unambiguous, and how, if at
all, they should be improved.67 The Commission received
several comments that addressed this question directly 68 or
indirectly.69 Two commenters considered the one-sentence
prohibitions to be clear and unambiguous and/or deferred to the
Commission's construction, but suggested certain additions or
modifications.70 For example, the USCO suggested the
Commission consider whether the definition of ``officer,'' which covers
representatives of both governments and businesses, should be
bifurcated into two separate and more specific terms to define
representatives of governments and businesses,
respectively.71 No other commenter suggested a revision to
the definitions in proposed Sec. 461.1. The USPTO suggested the
Commission broaden the exemplary ``list of matter'' used to impersonate
a government to specifically reference ``logos.'' 72 In
support of this recommendation, the USPTO noted ``the use of logos''
was explicitly identified in the NPRM's examples of unlawful conduct
that would be covered by the prohibition against business impersonation
in proposed Sec. 461.3, but not in the NPRM's examples of unlawful
conduct that would be covered by the prohibition of government
impersonation in proposed Sec. 461.2. The USPTO further asserted
government agencies also ``use logos in addition to official seals and
insignia,'' and provided an illustrative example of impersonators
misusing the USPTO's logo.73
Three commenters indicated the language of proposed Sec. Sec.
461.2 and 461.3 was vague or provided inadequate guidance, and
warranted modification.74 Some commenters raised
constitutional concerns based on the purported overbreadth of the one-
sentence prohibitions.75 These commenters' constitutional
arguments addressed two primary considerations: (1) whether the
proposed rule provides due process notice; 76 and (2)
whether it encroaches upon free speech protected under the First
Amendment.77 The AFPF stated the proposed rule is an ``open-
ended regulation,'' arguing it ``fails to provide constitutionally
adequate notice of required or prohibited conduct'' and otherwise falls
short of section 18's specificity requirements.78 Other
commenters wary of inadvertent intrusions on protected speech asserted
any final prohibition should exempt innocent behavior such as parody
79 and non-commercial or otherwise legitimate
speech.80
In his documentary submission in response to the Notice of Informal
Hearing, William MacLeod echoed concerns he previously expressed in
response to the NPRM that the language in proposed Sec. Sec. 461.2 and
461.3 ``depart[s] from the standards of deception that the Commission
applies under Section 5.'' 81 MacLeod noted that: ``[i]ts
terms do not include `deception' or `fraud' or critical elements of the
FTC's deception policy statement.'' 82 He raised additional
concerns about ``impersonations and affiliations [that] can be false,
but also unbelievable.'' 83 MacLeod argued that the
prohibitions, as written, are too broad and would proscribe non-
deceptive acts or practices, such as ``fictional depictions'' in
television advertisements.84
Raising First Amendment concerns, the AFPF similarly asserted that
the proposed rule's ``falsely pose as'' language, ``read literally,''
would impose civil penalties on ``utterly innocuous conduct'' and
``would appear to make it unlawful for anyone to dress up as an FTC
Commissioner, politicians, or . . . a Microsoft executive and attend a
Halloween party.'' 85 It also expressed concern that the
proposed prohibitions did not require ``materiality,'' ``consumer
harm,'' or ``connection to interstate commerce.'' 86 Several
commenters suggested alternative language to cure what they perceived
to be the overbreadth of the prohibition provisions. For example,
M3AAWG recommended that the final rule adopt a definition of
``impersonation'' that mirrors the definition of ``criminal
impersonation'' in 18 U.S.C. Chapter 43.87 M3AAWG asserted
that such a definition would narrow the scope of the rule to cover only
those bad actors with ``clear intent and specific knowledge'' of
prohibited acts.
MacLeod proposed narrowing the focus of the final rule by adopting
language that specifies particular prohibited practices or the mens rea
of its intended targets.88 The AFPF agreed with MacLeod and
suggested that the Commission revise the proposed rule to ``explicitly
incorporate Section 5's statutory prohibition . . . [and] requirements
set forth in the Commission's Deception Statement.'' 89
After analyzing and considering the comments, the Commission is
persuaded that the language of the final rule should adhere more
closely to the language of section 5 of the FTC Act to avoid any
potential confusion about the scope of the rule. The Commission
believes that these revisions sufficiently address some commenters'
concerns that the language of the proposed rule put it in conflict with
Due Process requirements and the First Amendment.
The Commission emphasizes that it does not intend for the final
rule to regulate non-commercial speech. To adhere more closely to the
language of section 5 of the FTC Act and case law, the Commission has
revised the final regulatory text to incorporate relevant language from
section 5. Specifically, the Commission has replaced ``unlawful'' with
``unfair or deceptive act or practice,'' and added ``materially'' and
``in or affecting commerce'' in Sec. Sec. 461.2 and 461.3. These
changes make it abundantly clear that the scope of the final regulatory
text is coterminous with the scope of the FTC's authority under
[[Page 15022]]
the FTC Act, and they clearly specify the misconduct prohibited by the
final rule. Accordingly, false impersonations or misrepresentations
that are not material to a commercial transaction, such as
impersonation in purely artistic or recreational costumery or
impersonation in connection with political or other non-commercial
speech, are not covered by the final rule.
The Commission concludes that it is unnecessary to divide the
definition of ``officer'' into two separate terms as suggested by the
USCO. Section 461.1 defines ``officer'' to ``include[ ] executives,
officials, employees, and agents,'' which the Commission believes
appropriately describes and covers both government and business
representatives.
As previously stated, the NPRM's list of examples of prohibited
conduct covered by the rule is intended to be illustrative, not
exhaustive, and therefore, the Commission declines to adopt the USPTO's
suggestion that it enlarge that exemplary ``list of matter.'' Rather,
the Commission maintains that not including specific prohibitions in
the regulatory text provides it with sufficient flexibility to address
the many types of ``matter'' (including objects, items, logos,
insignia, etc.) used to impersonate governments and businesses alike,
which are too numerous to list.
The Commission declines to adopt a definition of ``impersonation''
that reflects a criminal regulatory scheme as proposed by M3AAWG. The
FTC Act does not include a mens rea requirement, and there is no
evidence in the record that the imposition of such a requirement is
warranted. Furthermore, while intent is not required under the rule or
the FTC Act, in any action seeking civil penalties for violation of the
rule, the Commission will need to establish ``actual knowledge or
knowledge fairly implied on the basis of objective circumstances that
such act is unfair or deceptive and is prohibited by such rule.''
90
The Commission rejects the recommendation by both MacLeod and AFPF
to incorporate the FTC Deception Policy Statement into the final rule.
Nevertheless, as discussed earlier in this Section III.C, informed by
MacLeod's and AFPF's comments, the Commission has revised the
regulatory text of Sec. Sec. 461.2 and 461.3 to mirror the language of
section 5 of the FTC Act more closely. In particular, the reference to
``unfair or deceptive act or practice,'' and the inclusion of
materiality and interstate commerce requirements should address
commenters' concerns that this rule might be read to cover
impersonation in connection with artistic costumery, parody, or other
non-commercial speech.91 The Commission further notes that,
by the terms of these sections, a court must find that the alleged
defendant made an express or implied misrepresentation regarding
material information for Sec. Sec. 461.2 and 461.3 to be violated. For
an express or implied misrepresentation regarding material information
to be made in violation of the FTC Act and this rule, there must be a
representation that misleads consumers acting reasonably under the
circumstances regarding material information. Thus, while the
Commission rejects the recommendation by both MacLeod and AFPF to
incorporate the FTC Deception Policy Statement into the final rule, by
incorporating the changes above, the Commission has ensured that the
final rule is consistent with the Deception Policy Statement, is
consistent with other relevant Commission rules, and provides further
specificity regarding the prohibited acts and practices under section 5
of the FTC Act.
D. Prohibition Against Providing Means and Instrumentalities
In Question 6 of the NPRM, the Commission asked whether the final
rule should contain the prohibition in proposed Sec. 461.4 against
providing the means and instrumentalities for violations against
government or business impersonation. The Commission received more than
20 comments that expressly addressed this question.92 Many
of the sentiments reflected in these comments were also echoed by
several commenters that presented oral statements in response to the
Notice of Informal Hearing.93A few commenters arguing for
the importance of holding intermediaries accountable for enabling or
promoting impersonation schemes encouraged the Commission to finalize
the text of the proposed provision without modification.94
These commenters specifically argued that finalizing the proposed Sec.
461.4 could help to combat impersonation schemes perpetrated by
foreign-based scammers--beyond U.S. court jurisdiction--that obtain
services from U.S.-based instrumentalities, such as payment processors
and internet service providers.95
Addressing means and instrumentality liability, both the AFPF and
MacLeod reiterated their concerns referenced in Section III.C,
regarding section 18's specificity requirements, due process notice,
free speech, and conformity to the FTC's Deception Policy
Statement.96 Most commenters who addressed Question 6
expressed support for means and instrumentalities liability, but with
some concern or suggested modifications. Some supportive commenters
cautioned that the proposed means and instrumentalities provision could
be read too broadly.97 Others expressed the concern that
without a specific scienter or knowledge requirement, the proposed rule
provision runs the risk of imposing strict liability against innocent
and unwitting third-party providers of services or
products.98 Accordingly, several commenters urged the
Commission to clarify the scope of means and instrumentalities
liability or explicitly include a specific knowledge requirement in the
final rule provision.99
For example, the Consumer Technology Association (``CTA''), a trade
association representing the U.S. consumer technology industry, stated
that the Commission's explanation and examples of the ``means and
instrumentalities'' provision in the NPRM seem to limit its
applicability, but such limitation ``is not squarely reflected in the
text of the proposed rule.'' 100 The CTA therefore urged the
FTC to clarify that ``means and instrumentalities'' liability applies
only ``to entities that have knowledge or consciously avoid knowing
that they are making representations being used to commit impersonation
fraud.'' USTelecom, a trade association representing the broadband
technology industry, argued that a discrepancy exists between the case
law, the NPRM's discussion of means and instrumentality liability, and
the proposed rule provision. It urged the Commission to ``adjust the
proposed language in Sec. 461.4 to codify the requirement that the
person has knowledge or reason to expect it is providing the means and
instrumentalities . . .'' (emphasis in original).101
Similarly, the American Bar Association Section of Intellectual
Property Law suggested that the Commission ``explicitly include [in
Sec. 461.4] the language referenced in the [NPRM] from Shell Oil Co.,
128 F.T.C. 749 (1999)--acting with `knowledge or reason to expect that
consumers may possibly be deceived as a result.' '' 102
Other commenters argued that inclusion of a scienter requirement is
a necessary but not sufficient modification of the proposed language to
impose means and instrumentalities liability. For example, the internet
& Television Association (``NCTA''), a trade association for the United
States cable television industry, argued that such ``liability requires
both providing deceptive means and instrumentalities, e.g., providing
false or misleading
[[Page 15023]]
claims or counterfeit items, and actual knowledge that the deceptive
representations or goods will be used to commit impersonation
violations'' (emphasis in original).103 Likewise, M3AAWG
advocated that, in addition to a ``knowledge or reason-to-know test,''
primary liability under a revised Sec. 461.4 should also require that
the provision of such means and instrumentalities be done willfully or
in bad faith, and with clear intent and specific
knowledge.104
A few commenters urged the Commission to adopt a final rule that
explicitly recognizes specific or defined ``means and instrumentality''
violations perpetrated in connection with impersonation frauds, such as
the use of legal process documents 105 or manipulated media
technologies (i.e., deepfakes) 106 or failure to disclose
WHOIS data.107
Based upon the comments received on the proposed provision
regarding means and instrumentalities, the Commission has decided that
this specific provision warrants further analysis and consideration;
thus, the Commission has decided not to finalize proposed Sec. 461.4.
The Commission is not aware of any other rule, whether issued pursuant
to section 18 or APA rulemaking authority, that identifies a means and
instrumentalities violation. The Commission notes that it has used
means and instrumentalities allegations as a type of deception to
establish primary liability in the absence of privity between the
defendant and the deceived persons, albeit rarely, in connection with
matters that involve impersonation.108 Pending further
analysis and consideration, the Commission declines to adopt proposed
Sec. 461.4 at this time. The Commission is still considering the
provision regarding means and instrumentalities, as well as issues
related to the impersonation of individuals or entities other than
governments and business in interstate commerce and is requesting
public comment through a Supplemental Notice of Proposed Rulemaking
(``SNPRM''), published elsewhere in this issue of the Federal Register.
E. Inclusion of Prohibition Against Impersonating Nonprofits
In response to the ANPR, the Commission received a number of
comments that urged the Commission to include ``nonprofit'' entities in
the proposed rule's definition of businesses that can be
impersonated.109 The Commission agreed with these comments,
and consequently, defined a ``business'' that may be impersonated to
include nonprofits in Sec. 461.1 of the proposed rule, notwithstanding
the fact that the Commission is authorized to sue a corporation only
when the corporation is ``organized to carry on business for its own
profit or that of its members.'' 110 As the Commission
explained in the NPRM, the reason for doing so is because for profit
businesses may impersonate nonprofit business.111 In
Question 7 of the NPRM, the Commission solicited comment regarding
whether any final rule should keep the prohibition against
impersonating nonprofit organizations.112 The Commission
received more than a dozen comments that specifically addressed this
question, and each of them expressed support for a final rule keeping
the prohibition against impersonating nonprofits.113 None of
the comments responding to the NPRM or Notice of Hearing opposed doing
so. The vast majority of commenters who addressed this question were
themselves nonprofit organizations operating as trade associations, and
referenced their own experience with impersonation frauds in support of
a final rule keeping the prohibition against impersonating
nonprofits.114 Several commenters expressed the view that
nonprofits are often the subject of impersonation scams in the same way
as for profit businesses and government agencies.115 Other
commenters asserted that impersonation of nonprofits could be uniquely
harmful because bad actors ``prey[ ] on the goodwill of individuals
attempting to make donations, and misappropriate[ ] those donations to
corrupt private actions.'' 116 Some commenters noted that
nonprofits are particularly susceptible to being impersonated in scams
involving affiliation or endorsement claims because nonprofits often
offer awards or seals of approval.117
Finally, two commenters cited trademark law in support of keeping
nonprofits in the definition of business and a final rule that includes
the prohibition against impersonating nonprofits. Specifically, both
INTA and the Toy Association stated that trademark law has ``long
recognized that the misuse of names of non-profit organizations can
lead to harmful consumer confusion.'' 118 In INTA's and the
Toy Association's view, the same applies with respect to impersonation
schemes; thus, the final rule should also make no distinction between
for profit and nonprofit businesses.
Based upon the record, including public comments in response to
Question 7 of the NPRM, the Commission has determined that the final
rule will retain the definition of ``business'' in Sec. 461.1 that
includes nonprofits and the prohibition against impersonating nonprofit
organizations in Sec. 461.3.
F. Inclusion of Individuals or Entities Other Than Government and
Business Impersonators
In the NPRM, the Commission asked whether the proposed rule should
be expanded to address the impersonation of individuals or entities
other than governments and business in interstate
commerce.119 The NPRM identified romance and grandparent
impersonation scams as illustrative, but non-exhaustive, examples of
other types of impersonation fraud, and solicited further comment
regarding their prevalence and impact, and alternative proposals to
regulation. Six commenters specifically addressed these questions, and
each of them stated that the Commission should expand the reach of the
proposed rule to extend beyond government and business
impersonators.120 Some commenters asserted that fraudsters
often impersonate individuals in similar ways they impersonate
government and businesses.121 In support of expanding the
rule, several commenters argued that romance and grandparent
impersonation scams were harmful and prevalent, citing to data from the
FTC and other sources showing a steady increase in the number of
consumer reports and median individual losses for such
scams.122 A comment submitted by a group of students at
Rutgers Law School asserted that older consumers are susceptible to
``interpersonal confidence fraud and romance scams'' and provided
relevant data demonstrating that older consumers may be more likely to
fall victim to these kinds of impersonation than to government
impersonation.123 Several commenters also stated that while
the number of reports of these two types of impersonation scams are not
as high as government and business impersonation, they are likely
underreported, and that median individual losses are often
higher.124 The AARP stated that, ``[o]f all fraud activity,
romance scams and scams impersonating a family member in trouble are
the most insidious, given the emotional devastation that combines with
often significant financial losses.'' 125 A joint comment
submitted by several consumer and privacy advocacy organizations argued
that such evidence ``should be sufficient justification'' for the
Commission to ``add a subsection to proposed Section 461 to cover
`Impersonation of Individuals.' '' 126
[[Page 15024]]
A few commenters discussed the prevalence and harmfulness of other
kinds of impersonation scams as support for expanding the rule beyond
government and businesses to include individuals. For example, the NCTA
stated that its member companies had observed an increase in
sophisticated residential IP address scams that impersonate online
subscribers for illegal purposes such as piracy and
fraud.127 NCTA encouraged the Commission to consider a new
rule to prohibit impersonation of individuals through ``unauthorized
use of an individual's online credentials, accounts, IP addresses, and
digital networks.'' 128 The Recording Industry Association
of America (``RIAA'') described impersonation scams involving offers of
NFTs and mobile apps suggesting affiliation with sound recording
artists and phishing scams where third parties claimed to be a music
artist's manager or producer.129 RIAA recommended that the
Commission expand the rule to include the following: ``[I]t [is]
unlawful to falsely pose as or to misrepresent, directly or by
implication, affiliation with, including endorsement or sponsorship by,
an individual, for financial gain.'' 130
The Rutgers Law Students noted the prevalence of social media, and
profiles of celebrities and influencers in current modes of online
communication, arguing that it would be a ``grave oversight'' to omit
persons with such notable identities from a rule prohibiting
impersonation.131 The students also argued that individuals
are more likely than government agencies or businesses to suffer direct
harm to their identities from impersonation scams and less likely to be
able to repair the reputational injuries.132 Accordingly,
they proposed that the Commission add another section to the rule with
language prohibiting the impersonation of ``any person'' that parallels
the language in Sec. Sec. 461.2 and 461.3 prohibiting the
impersonation of government and businesses, respectively.133
The students further stated that this additional provision ``closes a
loophole'' that proposed Sec. Sec. 461.2 and 461.3 leave open
regarding the impersonation of former government and business
officials.134 Finally, the students concluded that adding
such a narrowly drafted provision would not burden honest businesses or
individuals, and would benefit consumers because the median individual
losses for other kinds of impersonation frauds are often greater than
for government and business impersonation.135 Both the
students and the NCTA agreed that expanding the proposed rule to
prohibit impersonation of individuals would not impact recreational or
comedic impersonations of individuals in television or
film.136
Upon consideration of the comments received in response to Question
8 of the NPRM and all relevant records and data, the Commission is
seeking additional public comment about potentially expanding part 461
to cover impersonation of individuals or entities other than
governments and businesses in interstate commerce in a SNPRM published
elsewhere in this issue of the Federal Register.137
G. Requiring Domain Name Registrars To Collect, Verify, Maintain, and
Disclose Accurate WHOIS Data
The Commission received several comments that identified the lack
of access to accurate information concerning domain name registrants
(commonly known as ``WHOIS'' data) as a significant impediment to
combatting the use of domain names to impersonate government and
businesses.138 These commenters expressed support for
expanding the text or scope of the final rule to protect consumers from
this increasingly prevalent impersonation scheme.139 In
particular, a few commenters urged the Commission to issue a final rule
that requires domain name registrars to collect, verify, maintain, and
disclose accurate WHOIS data to the FTC and third-party victims on
request for such information based on credible evidence of
impersonation fraud.140 As previously noted, the COA argued
that the redaction or denial of reasonable access to WHOIS data is
unjustified.141 Both M3AAWG and APWG also suggested that the
Commission encourage DNS registries or registrars to engage in DNS
mitigation and frequently impersonated entities to participate as
``trusted notifiers'' to address fraudulently registered domain
names.142
Because the deceptive use of internet domain names is already
covered under the rule, the Commission declines to adopt commenters'
suggestion that the final rule expressly reference in the text or
accompanying examples the use of domain names in impersonation schemes.
As previously noted in Section III.A, the NPRM's preamble contained a
list of examples of conduct covered by the prohibition on the
impersonation of government and businesses that was intended to be
illustrative, not exhaustive.143 Such a comprehensive list
would be both impossible and would not provide the trade regulation
rule with the flexibility to accommodate changes in the marketplace and
scammers' behavior. The Commission finds therefore that the final rule
is drafted with sufficient clarity and flexibility to address the
unauthorized use of internet identifiers, including but not limited to,
domain names. Furthermore, the Commission declines to issue a final
rule that imposes affirmative requirements upon domain name registrars
which is beyond the purview of this rulemaking and doing so arguably
would place an impracticable burden upon consumers to know about and
verify the trustworthiness of such WHOIS data.
H. Comments Regarding Limitation of Remedies
A small number of commenters urged the Commission to clarify that
any final rule regarding impersonation would not limit any rights and
remedies already available to businesses and consumers that have been
the subject of impersonation.144 For example,
notwithstanding its support of the Commission's rulemaking to address
impersonation, the American Bar Association Section of Intellectual
Property Law asserted that many government impersonation scams should
be referred to the Department of Justice for criminal prosecution, and
therefore, cautioned that any regulatory approach ``not dilute the
impetus for a criminal law solution.'' 145 Other commenters
suggested that the Commission clarify that any final rule is not
intended to limit any existing private right of action or civil
remedies.146 Specifically, the Toy Association and INTA both
advocated that any final rule on impersonation not be interpreted as
limiting the rights and remedies available to trademark owners under
the Lanham Act and the Anti-Cybersquatting Consumer Protection Act.
INTA further proposed that the Commission issue a clarification that
any final rule is intended only to complement--not expand or contract--
the legal protections available to private parties under the entire
body of federal or state trademark and unfair competition
law.147
By issuing the final rule regarding government and business
impersonation, the Commission does not preempt or intend to preempt
action in the same area, which is not inconsistent with this final
rule, by any federal, state, municipal, or other local government. This
final rule does not annul or diminish any rights or remedies provided
to consumers or businesses by any federal, state law, municipal
ordinance, or other local regulation, insofar as those rights or
[[Page 15025]]
remedies are equal to or greater than those provided by this final
rule.
IV. Final Rule
For the reasons described above, the Commission has determined to
adopt the provisions of proposed Sec. 461.1 as initially proposed, and
the provisions of Sec. Sec. 461.2 and 461.3 with clarifying
modifications. The Commission declines to finalize proposed Sec. 461.4
at this time.
Specifically, the Commission concludes that the proposed definition
of ``officer'' is sufficient to cover both government and business
representatives, and therefore, need not be divided into two separate
terms. Further, the final rule includes a definition of
``materially''--which has been used in other section 18 rules--to avoid
potential confusion or potential perceived conflict with non-commercial
speech. For these same reasons, the final rule replaces ``unlawful''
with ``unfair or deceptive act or practice'' and adds ``materially''
and ``in or affecting commerce'' in Sec. Sec. 461.2 and 461.3. Such
revised language further clarifies that the rule conforms to the well-
established standards for deception and unfairness under the FTC Act.
Finally, the Commission declines to finalize the proposed Sec. 461.4
provision regarding means and instrumentalities at this time because
further analysis and consideration is warranted based on the record,
including comments. The Commission is requesting additional public
comment on this provision, and on issues related to the impersonation
of individuals or entities other than governments and business in
interstate commerce, through a SNPRM, published elsewhere in this issue
of the Federal Register.
V. Paperwork Reduction Act
The Paperwork Reduction Act (``PRA''), 44 U.S.C. 3501 et seq.,
requires federal agencies to seek and obtain Office of Management and
Budget (``OMB'') approval before undertaking a collection of
information directed to ten or more persons. In Question 3 of the NPRM,
the Commission asked commenters whether the proposed rule contained a
collection of information.148 No comments responding to the
NPRM or Notice of Hearing addressed this question. While the Commission
has revised the rule based on the comments it received, it has not
added any new requirements that would collect information from the
public. Accordingly, the Commission has determined that there are no
new requirements for information collection associated with this final
rule.
VI. Regulatory Analysis and Regulatory Flexibility Act Requirements
Under section 22 of the FTC Act, the Commission, when it
promulgates a final rule, must issue a ``final regulatory analysis.''
149 The required contents of this final regulatory analysis
are: (1) ``a concise statement of the need for, and the objectives of,
the final rule''; (2) ``a description of any alternatives to the final
rule which were considered by the Commission''; (3) ``an analysis of
the projected benefits and any adverse economic effects and any other
effects of the final rule''; (4) ``an explanation of the reasons for
the determination of the Commission that the final rule will attain its
objectives in a manner consistent with applicable law and the reasons
the particular alternative was chosen''; and (5) ``a summary of any
significant issues raised by the comments submitted during the public
comment period in response to the preliminary regulatory analysis, and
a summary of the assessment by the Commission of such issues.''
150 Additionally, the Regulatory Flexibility Act (``RFA''),
5 U.S.C. 601-612, requires an agency to provide a Final Regulatory
Flexibility Analysis (``FRFA'') with the final rule, if any, unless the
agency certifies that the rule will not have a significant economic
impact on a substantial number of small entities.151
The NPRM included an Initial Regulatory Flexibility Analysis
(``IRFA'') even though the Commission did not expect that the proposed
rule would have a significant economic impact on a substantial number
of small entities.152 The Commission invited public comment
on the proposed rule's effect on small entities to ensure that no
significant impact would be overlooked.153
The FTC does not expect that the final rule will have a significant
economic impact on a substantial number of small entities, and this SBP
serves as notice to the Small Business Administration of the agency's
certification of no significant impact. The final rule imposes no
disclosure or recordkeeping requirements. As such, both the burdens
imposed on small entities and the economic impact of the final rule are
likely to be minimal, if any. Furthermore, as noted in the IRFA, the
rule does not change the law regarding the legality of government and
business impersonation, which are already prohibited by section 5 of
the FTC Act.154 Although the Commission certifies the final
rule would not, if promulgated, have a significant impact on a
substantial number of small entities, the Commission has determined,
nonetheless, it is appropriate to conduct the following
FRFA,155 which incorporates the Commission's initial
findings, as set forth in the NPRM,156 addresses the
required contents of the final regulatory analysis, and describes the
steps the Commission has taken in the final rule to minimize its impact
on small entities.
A. Concise Statement of the Need for, and Objectives of, the Final Rule
Based upon the record, including public comments, the Commission is
implementing the rule to expand the remedies available to it to combat
government and business impersonation deception. Throughout this
rulemaking proceeding, the Commission has described how the U.S.
Supreme Court decision in AMG Cap. Mgmt., LLC v. FTC, 141 S. Ct. 1341,
1352 (2021) overturned how section 13(b) of the FTC Act had
historically been understood for 40 years to provide equitable monetary
relief, and made it significantly more difficult for the Commission to
obtain money for injured consumers.157 The objective of this
final rule is to make available a shorter, faster and more efficient
path for recovery of money for injured consumers directly through
federal court action in Commission enforcement actions involving
impersonation of government or business.158 Further, the
rule would deter illegal impersonation and allow for the imposition of
civil penalties, where appropriate.159
B. Discussion of Significant Alternatives the Commission Considered
That Would Accomplish the Stated Objectives of the Final Rule and That
Would Minimize Any Significant Economic Impact of the Final Rule on
Small Entities
Through the NPRM, the Commission requested public comment on what
impact (including costs) will be incurred by existing and future
businesses to comply with the proposed rule, and whether the Commission
should consider alternative proposals to the proposed
rule.160 This information was requested by the Commission to
minimize the final rule's burden on all businesses, including small
entities. As explained throughout this SBP, the Commission has
considered the comments and alternatives proposed by commenters and
finds the final rule will not create a significant economic impact on
small entities.161 Indeed, the type of deception that will
be unlawful under the final rule is already unlawful under the FTC Act,
but the final rule would allow the Commission to obtain monetary relief
more efficiently than it could solely under section 19(a)(2) of
[[Page 15026]]
the FTC Act (i.e., without a rule violation). Accordingly, the
Commission does not propose any specific small entity exemption or
other significant alternatives.
C. Summary of Significant Issues Raised by the Public Comments in
Response to the Preliminary Regulatory Analysis and IRFA
None of the comments received during the public comment period
raised any significant issues in response to the preliminary regulatory
analysis required pursuant to section 22 of the FTC Act.162
In the IRFA, however, the Commission sought comment regarding the
impact of the proposed rule and any alternatives the Commission should
consider, with a specific focus on the effect of the rule on small
entities. In the NPRM, the Commission reiterated this request for
comment in Question 4, asking whether the proposed rule, if
promulgated, would have a significant impact on a substantial number of
small entities. Two commenters that specifically addressed the impact
of the proposed rule on small entities stated it would have a
beneficial economic impact by reducing the time and financial burden
small entities expend on fighting impersonation frauds.163
One commenter urged the Commission not to implement a final rule that
would require third-party providers of government filing services to
include extensive disclosures in their marketing materials, arguing
such disclosure requirements could lead to small businesses declining
the offered services and falling out of compliance with government
filing obligations.164 This commenter, however, did not
identify any proposed disclosure requirements that were the subject of
his concern, nor does the Commission impose any such disclosure
requirements in connection with the final rule. None of the comments
responding to the NPRM or Notice of Hearing disputed the analysis in
the IRFA. Finally, the Small Business Administration did not submit
comments.
After reviewing the public comments on the proposed rule, as
discussed throughout this SBP, the Commission concludes the final rule
will not unduly burden small entities. The Commission's explanation in
the IRFA regarding the proposed rule is true of the final rule--it only
constitutes a significant economic impact for small entities violating
existing law, which are not entitled to procedural protections when
agencies consider rulemaking.165
D. Analysis of Projected Benefits and Adverse Effects of the Final Rule
In the NPRM, the Commission invited public comment and data on any
benefits and costs of proceeding with the rulemaking to inform a final
regulatory analysis.166 In issuing the final rule, the
Commission has carefully considered the comments received and the costs
and benefits of each provision. As discussed throughout this SBP, the
Commission believes, and the record demonstrates, the final rule would
provide several benefits to consumers, businesses, and competition, and
help preserve agency resources, without imposing any significant
adverse effects.
The Commission's explanation in the IRFA regarding the proposed
rule is true of the final rule--it is difficult to quantify with
precision what all its benefits may be, but it is helpful to begin with
the scope of the problem the final rule would address, and then
describe the benefits qualitatively. As discussed in the NPRM, reported
consumer losses due to government impersonation topped $445 million in
2021; 167 and as anticipated, remained large, and even
increased substantially, with total consumer losses of $513 million
reported in 2022 and more than $483 million for the first ten months of
2023.168 Similarly, the annual consumer loss reported due to
business impersonation has increased from $453 million in 2021 to $670
million in 2022.169 Accordingly, the most significant
anticipated benefit of the final rule is that it will allow the
Commission to provide monetary relief to victims of rule violations and
seek civil penalties against violators.170 Furthermore, the
final rule should reduce economic harm resulting from impersonation
because its potential deterrent effects make it less likely
impersonators get to keep their ill-gotten gains and more likely they
must pay civil penalties.
The final rule also would provide the benefit of a shorter path to
obtaining consumer redress because the Commission could directly pursue
in federal court section 19 remedies in government and business
impersonation enforcement actions that do not implicate an existing
rule. The availability of more immediate consumer redress in federal
court under section 19 would allow the Commission to reduce the expense
of litigating and minimize the litigation fora and scope. The
Commission could then apply the savings of these enforcement resources
to investigating and, where the facts warrant, bringing enforcement
actions in additional impersonation matters.
The final rule also would benefit businesses whose brands are
harmed by impersonators.171 As several commenters have
mentioned, a final rule that would allow the Commission to bring
enforcement actions more efficiently against impersonators would save
businesses the time and other resources dedicated to monitoring and
combatting these kinds of deception.
The record is devoid of any evidence suggesting the final rule
would cause harm or adversely impact economic conditions.
E. Description and an Estimate of the Number of Small Entities to Which
the Final Rule Will Apply, or Explanation Why No Estimate Is Available
Small entities engaging in the impersonation of government and
business potentially may be found across a variety of industries and
economic sectors, but industry and sector data do not identify entities
by such conduct. Accordingly, it is not possible to estimate the number
of small entities to which the final rule will apply. However, because
the Commission finds the final rule will not impose any recordkeeping
or other compliance costs on covered entities, the Commission concludes
the final rule will not have a significant impact on a substantial
number of small entities, notwithstanding the lack of data on how many
small entities will be covered by the final rule.
F. Description of the Projected Reporting, Recordkeeping, and Other
Compliance Requirements of the Final Rule, Including an Estimate of the
Classes of Small Entities That Will Be Subject to the Requirements of
the Final Rule and the Type of Professional Skills That Will Be
Necessary To Implement the Final Rule
The final rule does not have any reporting or recordkeeping
requirements.172 As explained previously, the final rule
would apply to no small entities other than small entities violating
existing law, and therefore, no classes of small entities will be
subject to the requirements of the final rule. Finally, no professional
skills are necessary for compliance with the final rule other than
honesty and integrity.
G. An Explanation of the Reasons for the Determination of the
Commission That the Final Rule Will Attain Its Objectives in a Manner
Consistent With Applicable Law and the Reasons the Particular
Alternative Was Chosen
The Commission's primary objective in commencing this rulemaking
was to
[[Page 15027]]
expand the remedies available to it in combatting two prevalent
categories of impersonation scams most frequently reported by
consumers--government impersonators and business impersonators. As
explained throughout this SBP, based upon the record, including public
comments, the Commission finds the final rule will attain this
objective in a manner consistent with applicable law.
The final rule is straightforward and defines with specificity acts
or practices that are unfair or deceptive in or affecting commerce
within the meaning of section 5(a)(1) of the FTC Act, 15 U.S.C.
45(a)(1). It also avoids novelty by borrowing from existing rules and
statutory definitions.173 At the same time, the final rule
is drafted with sufficient flexibility to address the various types of
conduct covered by the prohibition on the impersonation of government
and businesses. Furthermore, this rulemaking has provided ample
transparency and opportunity for public participation in accordance
with the underlying statutory requirements of section 18 of the FTC
Act, 15 U.S.C. 57a, the Administrative Procedure Act, and Part 1,
subpart B of the Commission's Rules of Practice.174
VII. Congressional Review Act
Pursuant to the Congressional Review Act (5 U.S.C. 801 et seq.),
the Office of Information and Regulatory Affairs has designated this
rule as not a ``major rule,'' as defined by 5 U.S.C. 804(2).
Endnotes
\1\ Fed. Trade Comm'n, Advance Notice of Proposed Rulemaking:
Trade Regulation Rule on Impersonation of Government and Businesses,
86 FR 72901 (Dec. 23, 2021), https://www.federalregister.gov/documents/2021/12/23/2021-27731/trade-regulation-rule-on-impersonation-of-government-and-businesses.
\2\ See id. at 72904.
\3\ Those included, among others, numerous reports of government
impersonation scams reported to federal agencies as reflected in the
following public announcements. On March 7, 2022, the Federal Bureau
of Investigation issued a Public Service Announcement ``warning the
public of ongoing widespread fraud schemes in which scammers
impersonate law enforcement or government officials in attempts to
extort money or steal personally identifiable information.''
Similarly, on May 20, 2022, multiple federal law enforcement
agencies issued a scam alert spearheaded by the Social Security
Administration's Office of the Inspector General warning the public
of government impersonation scams involving the reproduction of
federal law enforcement credentials and badges. On June 3, 2022, the
Commission issued a press release noting that in some impersonation
scams, fraudsters have instructed consumers to convert cash into
cryptocurrency under false threats of government investigations or
fraud. See Fed. Trade Comm'n, Notice of Proposed Rulemaking: Trade
Regulation Rule on Impersonation of Government and Businesses, 87 FR
62741, 62742 (Oct. 17, 2022), https://www.federalregister.gov/documents/2022/10/17/2022-21289/trade-regulation-rule-onimpersonation-of-government-and-businesses.
\4\ See id. at 62741-51.
\5\ See id. at 62741-42.
\6\ Id. at 62750.
\7\ See Fed. Trade Comm'n, Trade Regulation Rule on
Impersonation of Government and Businesses, https://www.regulations.gov/docket/FTC-2022-0064/comments.
\8\ Cindy L. Brown and Raye Mitchell, Cmt. on NPRM at 9 (Dec.
19, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0077
(``Brown Cmt.''); William MacLeod, Cmt. on NPRM at 2 (Dec. 16,
2022), https://www.regulations.gov/comment/FTC-2022-0064-0078
(``MacLeod Cmt.'').
\9\ Fed. Trade Comm'n, Initial Notice of Informal Hearing: Trade
Regulation Rule on Impersonation of Government and Businesses, 88 FR
19024 (Mar. 30, 2023), https://www.federalregister.gov/documents/2023/03/30/2023-06537/trade-regulation-rule-on-impersonation-of-government-and-businesses. This Initial Notice of Informal Hearing
also served as the Final Notice of Informal Hearing. The Commission
determined William MacLeod's comment in response to the NPRM
represented an ``adequate request'' for such an informal hearing.
The comment from Cindy Brown explicitly requesting to make a
presentation at an informal hearing also represented an ``adequate
request'' triggering the Commission's obligation to hold an informal
hearing but was inadvertently omitted from inclusion in the Initial
Notice of Informal Hearing.
\10\ Because this informal hearing was the first held in several
decades, the Commission allowed interested parties to request the
opportunity to make an oral comment in response to the Notice of
Informal Hearing as well as the NPRM. However, the Commission noted
that in the future it may limit oral statements to those who
requested to make an oral statement in response to the NPRM, as
provided for in the Rules of Practice. Id. at 19025 n.24.
\11\ Although Cindy Brown did not submit a request to make an
oral statement in response to the Notice of Hearing, she was
permitted to make an oral statement at the hearing based upon her
prior comment in response to the NPRM in which she explicitly stated
her interest ``in making a presentation at an informal hearing.''
\12\ The Notice of Informal Public Hearing comments addressing
specific provisions of the rule or questions in the NPRM soliciting
public comment are discussed in Section III within the substantive
discussions on the relevant provisions.
\13\ 5 U.S.C. 551 et seq.; 16 CFR 1.7-1.20.
\14\ Rules of Practice, 16 CFR 1.14(a)(1)(i)-(iii). In addition,
in accordance with 16 CFR 1.14(a)(2), the regulatory analysis is
provided in Section VI of this SBP.
\15\ ANPR, 86 FR at 72901; see also Fed. Trade Comm'n, Explore
Government Imposter Scams, TABLEAU PUBLIC, https://public.tableau.com/app/profile/federal.trade.commission/viz/GovernmentImposter/Infographic.
\16\ NPRM, 87 FR at 62742.
\17\ Id. at 62742-46.
\18\ In re Cliffdale Assocs., Inc., 103 F.T.C. 110, 174 (1984);
see also In re POM Wonderful LLC, No. 9344, 2013 WL 268926, at *18
(Jan. 16, 2013).
\19\ ANPR, 86 FR at 72901.
\20\ NPRM, 87 FR at 62746-47.
\21\ ANPR, 86 FR at 72903-04; see also NPRM, 87 FR at 62748-49.
\22\ See AMG Cap. Mgmt., LLC v. FTC, 141 S. Ct. 1341, 1352
(2021).
\23\ See 15 U.S.C. 57b(a) and (b); see also NPRM, 87 FR at 62746
(discussing AMG Cap. Mgmt.).
\24\ The Commission can recover money for consumers directly
through a federal court action or obtain civil penalties directly
from a federal court when the Rule has been violated. Without the
Rule, the path to monetary relief is longer, and requires the
Commission to first issue a final cease-and-desist order--which
might not become final until after the resolution of any resulting
appeal. Then, to recover money for consumers, the Commission must
prove that the violator engaged in fraudulent or dishonest conduct
in a second action in federal court. See 15 U.S.C. 57b(a) and (b).
\25\ See section 5(m)(1)(A) of the FTC Act, 15 U.S.C.
45(m)(1)(A) (providing that violators of a trade regulation rule
``with actual knowledge or knowledge fairly implied on the basis of
objective circumstances that such act is unfair or deceptive and is
prohibited by such rule'' are liable for civil penalties for each
violation). In addition, any entity or person who violates such a
rule (irrespective of the state of knowledge) is liable for injury
caused to consumers by the rule violation. The Commission may pursue
such recovery in a suit for consumer redress under section 19 of the
FTC Act, 15 U.S.C. 57b.
\26\ NPRM, 87 FR at 62749.
\27\ Id.
\28\ https://www.regulations.gov/document/FTC-2021-0077-0001/comment.
\29\ https://www.regulations.gov/docket/FTC-2023-0030/comments.
\30\ NPRM, 87 FR at 62750.
\31\ Id.
\32\ Id., Question 3 (Does the proposed rule contain a
collection of information?) and Question 4 (Would the proposed rule,
if promulgated, have a significant economic impact on a substantial
number of small entities? If so, how could it be modified to avoid a
significant economic impact on a substantial number of small
entities?)
\33\ NPRM, 87 FR at 62750.
\34\ See, e.g., Anonymous, Cmt. on NPRM (Nov. 3, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0011 (describing
impersonation of accounts payable in medical device industry);
Bernadette Padilla, Cmt. on NPRM (Nov. 8, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0014 (describing police
impersonation scam involving stolen PII); Anonymous Meeting Planner,
Cmt. on NPRM (Dec. 6,
[[Page 15028]]
2022), https://www.regulations.gov/comment/FTC-2022-0064-0030
(describing attendee list and hotel reservation impersonation
scams); California IT in Education, Cmt. on NPRM (Nov. 9, 2022),
https://www.regulations.gov/comment/FTC-2022-0064-0034 (describing
attendee list impersonation scam); Illinois Landscape Contractors
Association, Cmt. on NPRM (Dec. 12, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0038 (describing attendee
list and hotel reservation impersonation scams).
\35\ See e.g., Salina Maddox, Cmt. on NPRM (Oct. 22, 2022),
https://www.regulations.gov/comment/FTC-2022-0064-0003 (spam calls);
Tatiana Alvarez, Cmt. on NPRM (Nov. 22, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0008 (Romanian mob scam);
Tinee Carraker, Cmt. on NPRM (Nov. 4, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0012 (foreclosure scam);
Susan Rounsley, Cmt. on NPRM (Nov. 6, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0013 (violations of Do Not
Call requirements).
\36\ See, e.g., Suhkvir Singh/Rutgers Law School Students, Cmt.
on NPRM (Nov. 22, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0019 (``Rutgers Law Students/Singh Cmt.''); AIM, the
European Brands Association, Cmt. on NPRM (Dec. 13, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0041 (``AIM Cmt.''); The
Messaging Malware Mobile Anti-Abuse Working Group, Cmt. on NPRM
(Dec. 15, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0051 (``M3AAWG Cmt.''); The International Trademark Association,
Cmt. on NPRM (Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0054 (``INTA Cmt.''); Electronic Privacy Information
Center, National Consumer Law Center, National Consumers League,
Consumer Action, Consumer Federation of America, National
Association of Consumer Advocates, and U.S. PIRG, Cmt. on NPRM (Dec.
16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0070
(``EPIC Cmt.''); Recording Industry Association of America, Cmt. on
NPRM (Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0064 (``RIAA Cmt.'').
\37\ United States Patent and Trademark Office, Cmt. on NPRM at
2-3 (Dec. 2, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0026 (``USPTO Cmt.''); INTA Cmt. on NPRM; United States
Copyright Office, Cmt. on NPRM (Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0067 (``USCO Cmt.''); The
Toy Association, Inc., Cmt. on NPRM at 2 (Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0069 (``Toy Cmt.'');
Cellular Telecommunications and Internet Association, Cmt. on NPRM
(Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0066 (``CTIA Cmt.''); Marine Retailers Association of the Americas,
National Marine Manufacturers Association, National RV Dealers
Association, Cmt. on NPRM (Dec. 19, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0076 (``MRAA Cmt.'').
\38\ See, e.g., USPTO Cmt. on NPRM at 2-3; USCO Cmt. on NPRM at
2; Toy Cmt. on NPRM at 2; CTIA Cmt. on NPRM at 3; MRAA Cmt. on NPRM
at 4. See also supra, note 25.
\39\ USPTO Cmt. on NPRM at 2-3.
\40\ MRAA Cmt. on NPRM at 4.
\41\ USCO Cmt. on NPRM at 2-3.
\42\ Id.; USPTO Cmt. on NPRM at 2.
\43\ CTIA Cmt. on NPRM at 5, 7.
\44\ Somos, Inc., Cmt. on NPRM at 2-3 (Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0068 (``Somos Cmt.'').
\45\ In explaining the scope of the proposed rule, the NPRM
provided an illustrative, but non-exhaustive, list of unlawful
conduct that would be covered by the prohibitions against
impersonating government and businesses. NPRM, 87 FR at 62746-47.
That list merely provides examples as it would be impracticable to
list all possible violative conduct.
\46\ 16 CFR 310.4(a)(8).
\47\ USTelecom Cmt. on NPRM at 2; M3AAWG Cmt. on NPRM at 3-4;
RIAA Cmt. on NPRM at 3; Anti-Phishing Working Group, Cmt. on NPRM at
1-2 (Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0073 (``APWG Cmt.''), https://www.regulations.gov/comment/FTC-2022-0064-0073 (``APWG Cmt.''); Coalition for Online Accountability,
Cmt. on NPRM at 1-3 (Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0074 (``COA Cmt.''); INTA Cmt. on NPRM at 8-
10; Coalition for a Secure & Transparent Internet, Cmt. on NPRM at 1
(Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0065 (``CSTI Cmt.'').
\48\ Id.
\49\ M3AAWG Cmt. on NPRM at 3-4; RIAA Cmt. on NPRM at 3-4; AIM
Cmt. on NPRM at 1; COA Cmt. on NPRM at 1-3; INTA Cmt. on NPRM at 8-
10.
\50\ COA Cmt. on NPRM at 2.
\51\ M3AAWG Cmt. on NPRM at 3-4; APWG Cmt. on NPRM at 1-2; see
also APWG, Cmt. on Informal Hearing at 1-2 (Apr. 14, 2023), https://www.regulations.gov/comment/FTC-2023-0030-0027 (``APWG IH Cmt.'').
\52\ See NPRM, 87 FR at 62746-47. The example of voice cloning--
a relatively new technology--emphasizes the need for an
illustrative, but non-exhaustive, list of unlawful conduct. Audio
deepfakes, including voice cloning, are generated, edited, or
synthesized by artificial intelligence, or ``AI,'' to create fake
audio that seems real. See Khanjani, et. al., How Deep are the
Fakes? Focusing on Audio Deepfake: A Survey, available at https://arxiv.org/ftp/arxiv/papers/2111/2111.14203.pdf.
\53\ Americans for Prosperity Foundation, Cmt. on NPRM at 1-2
(Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0062 (``AFPF Cmt.'').
\54\ Id. at 1.
\55\ Public Law 93-637, 88 Stat. 2183 (1975).
\56\ ANPR, 86 FR at 72904.
\57\ Id.
\58\ NPRM, 87 FR at 62750, Question 2.
\59\ USPTO Cmt. on NPRM at 3-9; M3AAWG Cmt. on NPRM at 6-9; INTA
Cmt. on NPRM at 3-5; Toy Cmt. on NPRM at 3-5; USCO Cmt. on NPRM at
3-7; MRAA Cmt. on NPRM at 2-4.
\60\ USPTO Cmt. on NPRM at 3-9; M3AAWG Cmt. on NPRM at 6-9; INTA
Cmt. on NPRM at 3-5; Toy Cmt. on NPRM at 3-5; USCO Cmt. on NPRM at
3-7; MRAA Cmt. on NPRM at 2-4.
\61\ Toy Cmt. on NPRM at 3-5.
\62\ USPTO Cmt. on NPRM at 3-9; USCO Cmt. on NPRM at 3-4;
\63\ INTA Cmt. on NPRM at 3; M3AAWG Cmt. on NPRM at 7.
\64\ M3AAWG Cmt. on NPRM at 9.
\65\ Id.
\66\ Id.
\67\ NPRM, 87 FR at 62750, Question 5.
\68\ USCO Cmt. on NPRM at 8; USPTO Cmt. on NPRM at 10; INTA Cmt.
on NPRM at 6-7; M3AAWG Cmt. on NPRM at 9; MacLeod Cmt. on NPRM at 1-
2; AFPF Cmt. on NPRM at 3-6.
\69\ NetChoice Cmt. on NPRM at 2; Toy Cmt. on NPRM at 2;
ZoomInfo Technologies LLC, Cmt. on NPRM at 1-2 (Dec. 16, 2022),
https://www.regulations.gov/comment/FTC-2022-0064-0079 (``Zoom NPRM
Cmt.'').
\70\ USCO Cmt. on NPRM at 8; USPTO Cmt. on NPRM at 10.
\71\ USCO Cmt. on NPRM at 8.
\72\ USPTO Cmt. on NPRM at 10.
\73\ Id. at 9-10.
\74\ MacLeod Cmt. on NPRM at 2; AFPF Cmt. on NPRM at 3; M3AAWG
Cmt. on NPRM at 9.
\75\ M3AAWG Cmt. on NPRM at 2; NetChoice Cmt. on NPRM at 2; Toy
Cmt. on NPRM at 2; AFPF Cmt. on NPRM at 2, 4; Zoom Cmt. on NPRM at
1; INTA Cmt. on NPRM at 5-6; William MacLeod, Cmt. on Informal
Hearing at 5-7 (Apr. 14, 2023), https://www.regulations.gov/comment/FTC-2023-0030-0019 (``MacLeod IH Cmt.'').
\76\ AFPF Cmt. on NPRM at 2, 4; see also MacLeod IH Cmt. at 2.
\77\ AFPF Cmt. on NPRM at 3, 4. M3AAWG Cmt. on NPRM at 2;
NetChoice Cmt. on NPRM at 2; INTA Cmt. on NPRM at 5-6; Toy Cmt. on
NPRM at 2; Zoom Cmt. on NPRM at 1; MacLeod IH Cmt. at 5-7.
\78\ AFPF Cmt. on NPRM at 2, 6.
\79\ NetChoice Cmt. on NPRM at 2; M3AAWG Cmt. on NPRM at 3.
\80\ AFPF Cmt. on NPRM at 4; INTA Cmt. on NPRM at 5-6; Toy Cmt.
on NPRM at 2; Zoom Cmt. on NPRM at 1; MacLeod IH Cmt. at 5.
\81\ MacLeod IH Cmt. at 1; see also MacLeod Cmt. on NPRM at 1.
\82\ MacLeod IH Cmt. at 2.
\83\ Id. at 3.
\84\ Id. at 3.
\85\ AFPF Cmt. on NPRM at 3-4.
\86\ Id. at 3, 5-6.
\87\ M3AAWG Cmt. on NPRM at 9.
\88\ Id. at 1, 5.
\89\ AFPF Cmt. on NPRM at 5.
\90\ See 15 U.S.C. 45(m)(1)(A).
\91\ See Cent. Hudson Gas & Elec. Corp. v. Pub. Serv. Comm'n of
N.Y., 447 U.S. 557, 563-64 (1980) (``[T]here can be no
constitutional objection to the suppression of commercial messages
that do not accurately inform the public about lawful activity. The
government may ban forms of communication more likely to deceive the
public than to inform it, or commercial speech related to illegal
activity.'') (citations omitted); see also Zauderer v. Office of
Disciplinary Counsel, 471 U.S. 626, 638 (1985) (holding it is ``well
settled'' that ``[t]he States and the Federal Government are free
[[Page 15029]]
to prevent the dissemination of commercial speech that is false,
deceptive, or misleading'').
\92\ USPTO Cmt. on NPRM; Anonymous, Cmt. on NPRM (Dec. 9, 2022),
https://www.regulations.gov/comment/FTC-2022-0064-0033 (``0033
Cmt.''); AIM Cmt. on NPRM; Erik M. Pelton & Associates, PLLC, Cmt.
on NPRM (Dec. 14, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0045; NetChoice Cmt. on NPRM; M3AAWG Cmt. on NPRM;
Consumer Technology Association, Cmt. on NPRM (Dec. 16, 2022),
https://www.regulations.gov/comment/FTC-2022-0064-0073 (``CTA
Cmt.''); NCTA--The internet and Television Association, Cmt. on NPRM
(Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0071 (``NCTA Cmt.''); ASAE Cmt. on NPRM; INTA Cmt. on NPRM; Somos
Cmt. on NPRM; CTIA Cmt. on NPRM; USCO Cmt. on NPRM; USTelecom Cmt.
on NPRM; American Society of Association Executives, Center for
Exhibition Industry Research Destinations International, Exhibition
Services & Contractors Association, Exhibitions & Conferences
Alliance, Experiential Designers + Producers Association,
International Association of Exhibitions & Events, International
Association of Venue Managers, PCMA, Society of Independent Show
Organizers, UFI, Cmt. on NPRM (Dec 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0060 (``ECA Cmt.''); RIAA
Cmt. on NPRM; American Bar Association Section of Intellectual
Property Law, Cmt. on NPRM at 3 (Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0061 (``ABA-IPL Cmt.'');
AFPF Cmt. on NPRM; Zoom Cmt. on NPRM; American Bankers Association,
ACA International, American Association of Healthcare Administrative
Management, Credit Union National Association, Mortgage Bankers
Association National Association of Federally-Insured Credit Unions
(the Associations), Cmt. on NPRM (Dec. 16, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0080 (``Assocns. Cmt.'');
COA Cmt. on NPRM; MacLeod Cmt. on NPRM; Brown Cmt. on NPRM.
\93\ A copy of the transcript of the May 4, 2023 Informal
Hearing is available at https://www.ftc.gov/system/files/ftc_gov/pdf/impersonationruleinformalhearingtranscript.pdf. References to
the transcript from the May 4, 2023 Informal Hearing are cited
herein as: Name of commenter, May 2023 Tr at page no. (e.g., Doe,
May 2023 Tr at #); see CTA, May 2023 Tr at 16; MacLeod, May 2023 Tr
at 27; USTelecom, May 2023 Tr at 30; Chilson, May 2023 Tr at 34;
VON, May 2023 Tr at 36; American Bankers Association (ABA), May 2023
Tr at 39-40; INCOMPAS, May 2023 Tr at 42, 44; NCTA, May 2023 Tr at
51-52.
\94\ USPTO Cmt. on NPRM at 10; USCO Cmt. on NPRM at 8; RIAA Cmt.
on NPRM at 3; ABA, May 2023 Tr at 39-40.
\95\ USPTO Cmt. on NPRM at 10; USCO Cmt. on NPRM at 8; RIAA Cmt.
on NPRM at 3; ABA, May 2023 Tr at 39-40.
\96\ AFPF Cmt. on NPRM at 3-5; MacLeod IH Cmt. at 6-7; McLeod,
May 2023 Tr at 27.
\97\ 0033 Cmt. on NPRM; ABA-IPL Cmt. on NPRM at 2; Zoom Cmt. on
NPRM at 1.
\98\ ABA-IPL Cmt. on NPRM at 1-2; NetChoice Cmt. on NPRM at 2;
USTelecom Cmt. on NPRM at 2; see also CTA, May 2023 Tr at 16; VON,
May 2023 Tr at 36; ABA, May 2023 Tr at 39-40; INCOMPAS, May 2023 Tr
at 42.
\99\ NetChoice Cmt. on NPRM at 2; CTA Cmt. on NPRM; American
Society of Association Executives, Cmt. on NPRM at 1 (Dec. 16,
2022), https://www.regulations.gov/comment/FTC-2022-0064-0057
(``ASAE Cmt.''); INTA Cmt. on NPRM; Somos Cmt. on NPRM; CTIA Cmt. on
NPRM at 7; USTelecom Cmt. on NPRM at 2; ECA Cmt. on NPRM at 3; ABA-
IPL Cmt. on NPRM at 3; Zoom Cmt. on NPRM at 2; Cmt. on NPRM at 3;
see also CTA, May 2023 Tr at 16; MacLeod, May 2023 Tr at 27;
USTelecom, May 2023 Tr at 30; Chilson, May 2023 Tr at 34; VON, May
2023 Tr at 36; INCOMPAS, May 2023 Tr at 42, 44; NCTA, May 2023 Tr at
51-52.
\100\ CTA Cmt. on NPRM at 7.
\101\ USTelecom Cmt. on NPRM at 2.
\102\ ABA-IPL Cmt. on NPRM at 3.
\103\ NCTA Cmt. on NPRM at 2.
\104\ M3AAWG Cmt. on NPRM at 10.
\105\ Brown Cmt. on NPRM at 8.
\106\ M3AAWG Cmt. on NPRM at 3.
\107\ COA Cmt. on NPRM at 3; M3AAWG Cmt. on NPRM at 4-5. ``WHOIS
data'' is a commonly used internet record listing that identifies
who owns a domain and how to get in contact with them.
\108\ See, e.g., Compl. at 3-5 & Ex. H, FTC v. Moore, No. 5:18-
cv-01960 (C.D. Cal. filed Sept. 13, 2018) (alleging that a seller of
variety of fake but genuine-looking financial documents provided to
others the means and instrumentalities with which to make
misrepresentations regarding a person's identity).
\109\ NPRM, 87 FR at 62746.
\110\ Id. at 62751; see also 15 U.S.C. 44.
\111\ NPRM, 87 FR at 62747.
\112\ Id. at 62750.
\113\ Minnesota Nursery & Landscape Association, Cmt. on NPRM at
2 (Dec. 2, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0027; Louise Nemmers, Cmt. on NPRM (Dec. 5, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0028; California Landscape
Contractors Association, Cmt. on NPRM (Dec. 6, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0029; Outdoor Power
Equipment Institute, Cmt. on NPRM at 2 (Dec. 7, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0032; AIM Cmt. on NPRM at
2; AARP, Cmt. on NPRM (Dec. 14, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0043 (``AARP Cmt.''); Minnesota Municipal
Utilities Association, Cmt. on NPRM (Dec. 14, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0048; M3AAWG Cmt. on NPRM
at 10; CTA Cmt. on NPRM; ASAE Cmt. on NPRM; INTA Cmt. on NPRM; Toy
Cmt. on NPRM at 6; RIAA Cmt. on NPRM at 2; National Association of
Broadcasters, Cmt. on NPRM (Dec. 19, 2022), https://www.regulations.gov/comment/FTC-2022-0064-0075; MRAA Cmt. on NPRM at
4.
\114\ See, e.g., Toy Cmt. on NPRM at 6; MRAA Cmt. on NPRM at 4;
AARP Cmt. at 2; CTA Cmt. on NPRM at 1; ASAE Cmt. on NPRM; RIAA Cmt.
on NPRM at 1; INTA Cmt. on NPRM at 2.
\115\ AIM Cmt. on NPRM at 2; M3AAWG Cmt. on NPRM at 10; CTA Cmt.
on NPRM at 1.
\116\ Toy Cmt. on NPRM at 6; INTA Cmt. on NPRM at 6.
\117\ Toy Cmt. on NPRM at 6; RIAA Cmt. on NPRM at 3.
\118\ INTA Cmt. on NPRM at 6; Toy Cmt. on NPRM at 6.
\119\ NPRM, 87 FR at 62750.
\120\ Rutgers Law Students/Singh Cmt. on NPRM; AIM Cmt. on NPRM;
AARP Cmt. on NPRM; NCTA Cmt. on NPRM; EPIC Cmt. on NPRM; RIAA Cmt.
on NPRM.
\121\ AIM Cmt. on NPRM at 2; Rutgers Law Students/Singh Cmt. on
NPRM at 1.
\122\ Rutgers Law Students/Singh Cmt. on NPRM at 1-2; AARP Cmt.
on NPRM at 2; EPIC Cmt. on NPRM at 5.
\123\ Rutgers Law Students/Singh Cmt. on NPRM at 1-2.
\124\ Rutgers Law Students/Singh Cmt. on NPRM at 2-4; AARP Cmt.
on NPRM at 1-2; EPIC Cmt. on NPRM at 4-5.
\125\ AARP Cmt. on NPRM at 2.
\126\ EPIC Cmt. on NPRM at 5.
\127\ NCTA Cmt. on NPRM at 3, 8.
\128\ Id.
\129\ RIAA Cmt. on NPRM at 3.
\130\ Id. at 2.
\131\ Rutgers Law Students/Singh Cmt. on NPRM at 2.
\132\ Id.
\133\ Id. at 3.
\134\ Id.
\135\ Id. at 3-4.
\136\ Id.; NCTA Cmt. on NPRM at 8, n. 16.
\137\ The Commission also is exploring other tools to address
the fake endorsement concerns raised by the RIAA and Rutgers Law
School Students. Specifically, in the Commission's proposed Rule on
the Use of Consumer Reviews and Testimonials, Sec. 465.2 would
prohibit businesses from purchasing a consumer review, or from
disseminating or causing the dissemination of a consumer testimonial
or celebrity testimonial when the business knew or should have known
it was false or fake. See Fed. Trade Comm'n, Notice of Proposed
Rulemaking: Trade Regulation Rule on the Use of Consumer Reviews and
Testimonials, 88 FR 49364, 49391 (Jul. 31, 2023), https://www.federalregister.gov/documents/2023/07/31/2023-15581/trade-regulation-rule-on-the-use-of-consumer-reviews-and-testimonials#sectno-reference-465.2.
\138\ USTelecom Cmt. on NPRM at 2; M3AAWG Cmt. on NPRM at 3-4;
RIAA Cmt. on NPRM at 3; APWG Cmt. on NPRM; COA Cmt. on NPRM at 1-3;
INTA Cmt. on NPRM at 8-10; CSTI Cmt. on NPRM at 1.
\139\ Id.
\140\ M3AAWG Cmt. on NPRM at 3-4; RIAA Cmt. on NPRM at 3-4; AIM
Cmt. on NPRM at 1; COA Cmt. on NPRM at 1-3; INTA Cmt. on NPRM at 8-
10.
\141\ COA Cmt. on NPRM at 2.
\142\ M3AAWG Cmt. on NPRM at 3-4; APWG Cmt. on NPRM at 1-2; see
also APWG, Cmt. on Informal Hearing at 1-2 (Apr. 14, 2023), https://www.regulations.gov/comment/FTC-2023-0030-0027 (``APWG IH Cmt.'').
\143\ See also supra, note 52.
[[Page 15030]]
\144\ Toy Cmt. on NPRM at 2; M3AAWG Cmt. on NPRM at 2; ABA-IPL
Cmt. on NPRM at 3; INTA Cmt. on NPRM at 2.
\145\ ABA-IPL Cmt. on NPRM at 3.
\146\ Toy Cmt. on NPRM at 2; M3AAWG Cmt. on NPRM at 2; INTA Cmt.
on NPRM at 2.
\147\ INTA Cmt. on NPRM at 6-7.
\148\ NPRM, 87 FR at 62750.
\149\ See 15 U.S.C. 57b-3(b)(2).
\150\ 15 U.S.C. 57b-3(b)(2)(A).
\151\ See 5 U.S.C. 603-605; see also section 22(b) of the FTC
Act, 15 U.S.C. 57b-3(b).
\152\ NPRM, 87 FR at 62749-50; see also 5 U.S.C. 603.
\153\ NPRM, 87 FR at 62750.
\154\ NPRM, 87 FR at 62749.
\155\ See 15 U.S.C. 57b-3(b)(3)(A)(ii) (``In order to avoid
duplication or waste, the Commission is authorized to . . . whenever
appropriate, incorporate any data or analysis contained in a
regulatory analysis issued under this subsection in the statement of
basis and purpose.'').
\156\ NPRM, 87 FR at 62749-50.
\157\ See ANPR, 86 FR at 72901 & n.24 (discussing AMG Cap.
Mgmt.); NPRM, 87 FR at 62746 (same).
\158\ See ANPR, 86 FR at 72901 & n.24; NPRM, 87 FR at 62746; see
also 15 U.S.C. 57b(a) and (b).
\159\ See 15 U.S.C. 45(m)(1)(A).
\160\ NPRM, 87 FR at 62750.
\161\ Only one commenter suggested an alternative to regulation,
which the Commission declines to adopt for the reasons previously
stated in Section III.B.
\162\ See supra note 161.
\163\ Toy Cmt. on NPRM at 5-6; MRAA Cmt. on NPRM at 4.
\164\ Robert Kamerschen, Cmt. on NPRM at 2 (Nov. 30, 2022),
https://www.regulations.gov/comment/FTC-2022-0064-0023.
\165\ See NPRM, 87 FR at 62750.
\166\ NPRM, 87 FR at 62748.
\167\ Id.
\168\ See Fed. Trade Comm'n, Explore Government Imposter Scams,
TABLEAU PUBLIC, https://public.tableau.com/app/profile/federal.trade.commission/viz/FraudReports/SubcategoriesOverTime
(last visited December 21, 2023).
\169\ Id.
\170\ See 15 U.S.C. Secs. 45(m)(1)(A) and 57b.
\171\ See Toy Cmt. on NPRM at 5-6; MRAA Cmt. on NPRM at 4; see
also NPRM, 87 FR at 62749.
\172\ NPRM, 87 FR at 62750.
\173\ See, e.g., TSR, 16 CFR 310.3(a)(2)(vii); R-Value Rule, 16
CFR 460.21; Regulation O (Mortgage Assistance Relief Services), 12
CFR 1015.3(b)(3).
\174\ 5 U.S.C. 551 et seq.; 16 CFR 1.7 through 1.20.
List of Subjects in 16 CFR Part 461
Consumer protection, Impersonation, Trade Practices.
0
For the reasons set forth above, the Federal Trade Commission amends 16
CFR Chapter I by adding part 461 to read as follows:
PART 461--RULE ON IMPERSONATION OF GOVERNMENT AND BUSINESSES
Sec.
461.1 Definitions.
461.2 Impersonation of Government Prohibited.
461.3 Impersonation of Businesses Prohibited.
Authority: 15 U.S.C. 41 through 58.
Sec. 461.1 Definitions.
As used in this part:
Business means a corporation, partnership, association, or any
other entity that provides goods or services, including not-for-profit
entities.
Government includes federal, state, local, and tribal governments
as well as agencies and departments thereof.
Materially means likely to affect a person's choice of, or conduct
regarding, goods or services.
Officer includes executives, officials, employees, and agents.
Sec. 461.2 Impersonation of Government Prohibited.
It is a violation of this part, and an unfair or deceptive act or
practice to:
(a) materially and falsely pose as, directly or by implication, a
government entity or officer thereof, in or affecting commerce as
commerce is defined in the Federal Trade Commission Act (15 U.S.C. 44);
or
(b) materially misrepresent, directly or by implication,
affiliation with, including endorsement or sponsorship by, a government
entity or officer thereof, in or affecting commerce as commerce is
defined in the Federal Trade Commission Act (15 U.S.C. 44).
Sec. 461.3 Impersonation of Businesses Prohibited.
It is a violation of this part, and an unfair or deceptive act or
practice to:
(a) materially and falsely pose as, directly or by implication, a
business or officer thereof, in or affecting commerce as commerce is
defined in the Federal Trade Commission Act (15 U.S.C. 44); or
(b) materially misrepresent, directly or by implication,
affiliation with, including endorsement or sponsorship by, a business
or officer thereof, in or affecting commerce as commerce is defined in
the Federal Trade Commission Act (15 U.S.C. 44).
By direction of the Commission.
April J. Tabor,
Secretary.
Note: The following statement will not appear in the Code of
Federal Regulations.
Statement of Chair Lina M. Khan Joined by Commissioner Rebecca Kelly
Slaughter and Commissioner Alvaro M. Bedoya
Today the Federal Trade Commission finalizes its rule prohibiting
government and business impersonation schemes and issues a supplemental
notice of proposed rulemaking to extend this prohibition to
impersonation of individuals. This final rule marks the first time
since 1980 that the Commission has finalized a brand-new trade
regulation rule prohibiting an unfair or deceptive practice.
Impersonation schemes cheat Americans out of billions of dollars
every year. Fraudsters pretending to represent government agencies--
like the Social Security Administration or the IRS--tell targets that
if they do not hand over money or their sensitive personal information,
then they could lose a government benefit, face a tax liability, or
even be arrested. Scammers also commonly claim false affiliations with
household brand names to bilk consumers for bogus services. This
category of fraud skyrocketed during the coronavirus pandemic--with
imposters scamming Americans out of reported $2 billion between October
2020 and September 2021, an 85 percent increase year-over-year.\1\
Losses remain high: FTC data show that in 2023 consumers reported
losing $2.7 billion to reported imposter scams.\2\ Impersonation fraud
has remained one of the largest sources of total reported consumer
financial losses for several years.\3\
---------------------------------------------------------------------------
\1\ Fed. Trade Comm'n, Fraud Reports: Trends Over Time (2021),
https://public.tableau.com/app/profile/federal.trade.commission/viz/FraudReports/FraudFacts.
\2\ Fed. Trade Comm'n, Consumer Sentinel Network Data Book 2023
(2024), https://www.ftc.gov/reports/consumer-sentinel-network-data-book-2023.
\3\ Fed. Trade Comm'n, Fraud Reports: Top Reports, Tableau
Public (last accessed Feb. 8, 2024), https://public.tableau.com/app/profile/federal.trade.commission/viz/FraudReports/TopReports; see
also Fed. Trade Comm'n, Consumer Sentinel Network Data Book 2020
(2021) at 4-8, https://www.ftc.gov/system/files/documents/reports/consumer-sentinel-network-databook-2020/csn_annual_data_book_2020.pdf; see also, Consumer Sentinel Network
Data Book 2023, supra note 2.
---------------------------------------------------------------------------
Public comments submitted to the Commission provide a snapshot of
how impersonation frauds can devastate:
One commenter reported on how a friend was scammed by
someone claiming that they were with Publisher's Clearing House and
that she had won a sweepstakes. Her friend was scammed out of a total
of $367,000: ``She used all of her savings . . . to help her
grandchildren go to college and wiped out her IRA and now is left to
pay the
[[Page 15031]]
penalties for depleting it. This woman is now, at age 70, in a position
of living only on her social security and has to try to find work. . .
.'' \4\
---------------------------------------------------------------------------
\4\ Comment Submitted by Anonymous, FTC Seek Comments on
Advanced Notice of Proposed Rule; Impersonation ANPR,
Regulations.gov (Feb. 22, 2022), https://www.regulations.gov/comment/FTC-2021-0077-0131.
---------------------------------------------------------------------------
Another commenter received a call from someone claiming to
be with the U.S. Treasury Department, who asserted that her social
security number had been compromised. This person lost all her money:
``That money is from my mother's life insurance policy who passed in
2019. My father needs that money to survive. I am devastated.'' \5\
---------------------------------------------------------------------------
\5\ Comment Submitted by Jamila Sherman, FTC Seek Comments on
Advanced Notice of Proposed Rule; Impersonation ANPR,
Regulations.gov (Feb. 22, 2022), https://www.regulations.gov/comment/FTC-2021-0077-0127.
---------------------------------------------------------------------------
A third commenter spoke of her mother being scammed by
someone pretending to be with a government agency: ``Before we, her
family, realized the extent to which the imposters preyed upon her, she
had divulged identity and banking information.'' \6\
---------------------------------------------------------------------------
\6\ Comment Submitted by Susan Frost, FTC Seek Comments on
Advanced Notice of Proposed Rule; Impersonation ANPR,
Regulations.gov (Feb. 16, 2022), https://www.regulations.gov/comment/FTC-2021-0077-0031.
---------------------------------------------------------------------------
The rise of generative AI technologies risks making these problems
worse by turbocharging scammers' ability to defraud the public in new,
more personalized ways. For example, the proliferation of AI chatbots
gives scammers the ability to generate spear-phishing emails using
individuals' social media posts and to instruct bots to use words and
phrases targeted at specific groups and communities.\7\ AI-enabled
voice cloning fraud is also on the rise, where scammers use voice-
cloning tools to impersonate the voice of a loved one seeking money in
distress or a celebrity peddling fake goods.\8\ Scammers can use these
technologies to disseminate fraud more cheaply, more precisely, and on
a much wider scale than ever before.
---------------------------------------------------------------------------
\7\ Bob Violino, AI Tools Such As ChatGPT Are Generating A
Mammoth Increase In Malicious Phishing Emails, CNBC (Nov. 28, 2023),
https://www.cnbc.com/2023/11/28/ai-like-chatgpt-is-creating-huge-increase-in-malicious-phishing-email.html.
\8\ Eric Revell, AI Voice Cloning Scams On The Rise, Expert
Warns, Fox Business (Sept. 23, 2023), https://www.foxbusiness.com/technology/ai-voice-cloning-scams-on-rise-expert-warns.
---------------------------------------------------------------------------
In its supplemental NPRM, the Commission proposes to expand the
rule's prohibitions to also cover impersonation of individuals. If
adopted, this additional protection will equip enforcers to seek civil
penalties and redress when fraudsters impersonate individual people,
not just government or business entities. Given the proliferation of
AI-enabled fraud, this additional protection seems especially critical.
Notably, the supplemental proposal also recommends extending liability
to any actor that provides the ``means and instrumentalities'' to
commit an impersonation scam. Under this approach, liability would
apply, for example, to a developer who knew or should have known that
their AI software tool designed to generate deepfakes of IRS officials
would be used by scammers to deceive people about whether they paid
their taxes. Ensuring that the upstream actors best positioned to halt
unlawful use of their tools are not shielded from liability will help
align responsibility with capability and control.
By unlocking civil penalties and redress, the final rule, along
with the proposed supplemental provisions, will promote both more
efficient enforcement and greater deterrence. In 2020, the Supreme
Court held that the Commission cannot rely on Section 13(b) of the FTC
Act to get money back to defrauded consumers,\9\ so rulemakings--while
not a substitute for a legislative fix--can help ensure that
lawbreakers do not profit from their lawbreaking and that wronged
consumers can be made whole.
---------------------------------------------------------------------------
\9\ AMG Cap. Mgmt., LLC v. FTC, 593 U.S. (2021).
---------------------------------------------------------------------------
This rule marks the agency's first brand-new Section 18 rulemaking
since 1980. Although the authority to issue rules is clearly laid out
in the FTC Act, bureaucratic red tape presented an obstacle to the
agency's exercise of this important statutory authority. Thanks to
efforts initiated under Commissioner Slaughter's leadership to align
the procedural requirements for Section 18 rulemaking with the FTC
Act's statutory text, Section 18 rulemakings can now proceed more
efficiently.\10\ This effort took two years from proposal to final
rule, finally putting lie to the old idea that this must be an
impossibly long process.
---------------------------------------------------------------------------
\10\ Press Release, Fed. Trade Comm'n, FTC Votes to Update
Rulemaking Procedures, Sets Stage for Stronger Deterrence of
Corporate Misconduct (July 1, 2021), https://www.ftc.gov/news-events/news/press-releases/2021/07/ftc-votes-update-rulemaking-procedures-sets-stage-stronger-deterrence-corporate-misconduct.
---------------------------------------------------------------------------
Many thanks to the FTC team for their swift work and dedication.
This rule banning government and business impersonation will allow us
to more vigorously and effectively protect Americans from fraudsters.
And we are eager for public input on the supplemental NPRM that would
extend this rule to cover impersonation of individuals. With the rapid
rise of voice cloning fraud and other AI-based scams, additional
protection for consumers seems especially critical. As these
technologies enable more sophisticated and innovative forms of fraud,
we will continue to ensure the Commission is activating all the tools
Congress has given us and faithfully executing on our statutory
mandate.
[FR Doc. 2024-04335 Filed 2-29-24; 8:45 am]
BILLING CODE 6750-01-P